last executing test programs: 3.946398096s ago: executing program 2 (id=5919): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000100)) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) connect$unix(r2, &(0x7f00000019c0)=@abs, 0x6e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)}, 0x0) 3.776392586s ago: executing program 2 (id=5926): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r2, r1, 0x0, 0xe25) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x6}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000810) 3.474879791s ago: executing program 2 (id=5931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000100"/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x1, 0xbf22, 0x110}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, r3}, 0x48) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x27, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0xc5, 0x8, 0x0, 0xf7c, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x4, 0x4d, &(0x7f0000000380)=""/77, 0x41000, 0x40, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000005c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xf, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r2, r3, r4], 0x0, 0x10, 0x3}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000180)={0x9, 0x20, [0x7fffffff, 0x7ff, 0x200, 0x3], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) 3.248255319s ago: executing program 2 (id=5936): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000240)=0x5da2333f, 0x4) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000240), 0x0}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) recvmmsg(r5, &(0x7f0000009e00)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)=""/51, 0x33}], 0x1}, 0x8}], 0x1, 0x20, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000780040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000b40)={0x5d8, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x48}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x1]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfca}, @NL80211_ATTR_FRAME={0x2e0, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_a, @broadcast, @initial, {0xe, 0x6}}, 0x45, 0x4, @device_b, {0x0, 0x10, @random="01466a307856a2c7f1877c64a9570d67"}, @void, @void, [{0xdd, 0xbd, "9d202a7a1bab9b0c5ad0dfa9dc1973c1c6522d027ccb5ba149b187d4b5669cfc49b268fd0ac8e67d2e6cac6a8994948a6f5ec1b90ca39eb9ea311ef14021bb9d4a1bee9728d3ef0cda24a3984af32d3ba1c8338d585f23d27436849aa24a1c397db9727b554ca8ff8635fe11542a9137bc943ad8d3757c55dde18ab1464c829c6e923158996b39d0367be8bca8e134b85e52a305bb2571591c6c807e452a7201754c297c3056e49530e94d4cf8d47ca4371624e5fc1e552a9676e322c7"}, {0xdd, 0xd8, "0d6ab7b437f021415123e66e7af0fcf74585b836a981405286f3e2841e617bb6038d2d0e6cf0ba65868ea00323e151a12f258d5a84e70581234b24447175c6dfb0dd48373c74df4e8238b823e5817e4536d3fe9a421f6b267b7ec61897a8b9b38fd47cdb638e97f0d3cb786ff5c06f0b15db4ebd8708285a688f06325ed91abd6b2c05519cac981ea2132a4e3e57c1e268be662b873c89bdce50489e2a5c9527a1f56971700e905c6988a16c59fa95f8ee304d7e70fad48459545180aab9acb4bb8c6c960d14e269766dea13fa419c562f09e4fff40b0840"}, {0xdd, 0x1c, "e9267a5cfe65c25cfe1dd9034d4882c112cbf398a2ed5f4fb031339f"}, {0xdd, 0x1e, "0a990d62296dd42f84a920751674d4ea8414fa960615f8351421fdbc5627"}, {0xdd, 0xcf, "742aa15681ec6ce97f34b17b77418a01200bc2a39aa36f246c847f98d270f47ea89ffae790634a6992ec53e7cb72cfe0c33fd954391eed9c0e8af28c89ea6bf8ca6408a8fa6cb574355fe3f36142d86e33e9c6ef7b49ac6d8c1c5896896bc9b7c5e3d806438183165004f138a1b00b57f8badb3dc3147894cf54a692bff78f755dbde88b5e02923882d72249e38eadfa25b79e1d5b7acff7e53dccafd90ef15d57d3f6f7deaa572e5846577803f105bedb153f431c127c46783aaccdcd9a945f2b34b6dfe7711da00dd2e417e36434"}]}}, @NL80211_ATTR_FRAME={0x1c6, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x4}, @broadcast, @device_a, @from_mac, {0xc, 0x4}}, 0x1, @random=0xfff9, 0x0, @void, @void, @void, @void, @val={0x6, 0x2, 0xb11d}, @void, @val={0x25, 0x3, {0x1, 0xa1, 0x9}}, @void, @val={0x3c, 0x4, {0x0, 0xff, 0xc, 0x81}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x30, 0xf5, 0x36, 0x10}}, [{0xdd, 0x2d, "eda05db0d04434f515f8b0b25adf3c2ec131012d7ba24249c56154c692cd7051ac2ff7ab5a74d5bd83a4866052"}, {0xdd, 0xad, "0cbaf915b5616fb1e092f8381db42ffcaf4818cde325d3ca6fe1c5e39d83f59847a5d84928495ba1e534add26bb9727b57f3310ac0c4ed9d16002539775ef2e01b46a9de4c9fd25e8c7990c69618705455726ea5156b010640614072970bfed3627e8d2a82b995771d35b5c17358b25ebf77308d8f7fa8f3531aa5d4d53be321b077367e1d8861715ca3c7584ed8a789734e2a3151dbc7b65269c66aec3d3574c497b8f7a09055d3246ee24504"}, {0xdd, 0x9f, "eb5a6aa420ce331877055745694f38001f622de33e5815aa2f1097b56dd58fc5dd81d1a2caee1fd5e62ccc988fa2c2bad9db3d6b3ac3d1bddf81f07b176287369b77a6378d5e95a48b9dd088b058bcec9b599d83c8b30b5f284d5c4c432a1e868390d04919a79a1062ebeaf0f3f9f2f31127dde82289b893c2ff5622a1860e539bdade5b204b933e2f922fd2890ad7cdf527eb17488c73c7ab075d7d0c6d55"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x35, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xf}, @device_a, @broadcast, @from_mac=@device_b, {0x2, 0x9}}, @tdls_setup_resp={0xc, 0x1, 0x5e, 0x3, @void, @void, @void, @val={0x65, 0x12, {@random="a5bb0cb20591"}}}}}, @NL80211_ATTR_FRAME={0xb6, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_a, @device_a, @random="6dde66ed510d", {0xd, 0x41d}}, 0x0, 0x5, @broadcast, {0x0, 0x15, @random="e6f7af6ab15b6336796275b7c062c3ee2e940ff9b0"}, @void, @val={0x2d, 0x1a, {0x8, 0x2, 0x5, 0x0, {0x1, 0x9f9, 0x0, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x400, 0x2, 0x2}}, [{0xdd, 0x5b, "8b1d49f76c3268af944f6f628b85882a639455f86849ca561f0cd30bd5809f9c0cb38ba8b066b95eee9de6328b1ec947e45708b5ad8923e2cd114266a4566287aad86c42209d59af68249e834026ef9e7a4d5647013f68253f8d42"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc50}]}, 0x5d8}, 0x1, 0x0, 0x0, 0x40000}, 0x4) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r10 = socket(0x1, 0x803, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000a00000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_int(r13, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private0, @in=@broadcast}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB="6078485d4ecf2165839122460c1550f664ad5715f41123f651cf1449a1380fea880d833d83d5bf35385aa0f70022c9d0ca55202f8ebbd2da1271fe145e4e7cedc913891450472bd495b8930720f6710d081a5de6f6dd9a709bf9977dd939ab44627244c87eacdab3d5f2f25ccea1d2fda5e453b368c225c4464da807a65be5fdf0820c6979ea9377963748dc5baceca4df388e8f6dab141e9f174a7d0000000000000000ccea87af83544843150df1ab8e4a8f0ca03427ffe78507cef32aba13314c1fac40a2416d86d41b"], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.920526214s ago: executing program 2 (id=5941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xeab032b024aae2a8}, 0x8c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000400007088700"/25], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="d5a2ae536f838a7014d2a8501e0910a0f377f0d63036047292659aaac15ac054a6fea3f343bd8d12c8511072c842464ed45468cba1f6e8e5dd072aa9c9378864eb101b6de7a82a77b4af549a9c802f2e10e65b5669b6f25de4bec9ca551c456956937211915256540a26704cea83ca10a697597e6e2acb0ffd148dcef4708194ded5d8881222826ced47aa230b2ccf78de10e72f1c76e3c371bdee0ab23446ac47e0bd2d93bbcd5da0d760256629d4647648bc93e901c9353fea20e54a2e52b060fb2d50aac27e843940e2f88bc31daf84a2ee9dd6be5dd2123fcaf24ee0a9b92c008e"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec97000f982c00fe8000000000000000000000000000aaff0200000000000000000000000000012b", @ANYRES32], 0xfce) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'veth1_vlan\x00', 0x100}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000300)={'c', ' *:* ', 'w\x00'}, 0x8) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2.724467339s ago: executing program 3 (id=5945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x5a8, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x4d8, 0xffffffff, 0xffffffff, 0x4d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'\x00', {0x4, 0x1, 0x1a, 0x0, 0xdedd, 0x10000000, 0x0, 0x1000, 0x78, 0x20}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x6a, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x608) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e300000000000000000000800080006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) 2.56871715s ago: executing program 3 (id=5946): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b2c25fe80070000000000000000000009ffffffe000"/40, 0x28}], 0x1}, 0x20000810) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000240)={0x0, {{0x2, 0x4e22, @broadcast}}}, 0x90) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x18, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x1}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$kcm(0xa, 0x922000000003, 0x11) (async) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) (async) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b2c25fe80070000000000000000000009ffffffe000"/40, 0x28}], 0x1}, 0x20000810) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000240)={0x0, {{0x2, 0x4e22, @broadcast}}}, 0x90) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x18, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x1}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) (async) socket$inet6_sctp(0xa, 0x0, 0x84) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, 0x0) (async) 2.531757968s ago: executing program 2 (id=5948): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe4, 0x7f, &(0x7f00000001c0)="f73c6bb42b799d6445c84c030d32e4a12f968a1ab3282be474d7e435d46713b6368ff182b1d6991b57ad7198d6b0c1fba593500f6deef547f9c101522aca250a69af025d4930caa6b08b5a4db3185eed7f285c392b8c89d556fe1736811fdbdd34b6d23e05b15a8aea86b56dbedb5fa860fd1af31e6d5f4cec4d0e535d11c2ffbcccb99dbcd8d6390c1dc6d198ca565bc4eb64201abf44e3c3fddeda83231093771bbe3a948e4f74ec4d13ec92130ecf562088e31bd407000885992b8acb9b0b018ed265b314355142b2f893960875a464f00293273b947f5b9c0cc2b8f85110a738899a", &(0x7f00000002c0)=""/127, 0x6, 0x0, 0x6b, 0x3e, &(0x7f0000000340)="c22722147a79aefa3f8cf24166e10e8bf835e2ac21b2b8017efe8530bd70ae6a389ee36ab6775d0b5873a211ed9a8b3e0a048545f5c43f386214e1e6d5b85d5a0acd99723de86ff18a95d7b2e3b6fa090ce763bb787396991ff2d64ca182c7ecdaaaea929b5c92859b6414", &(0x7f0000000040)="60e0af0c1e7fbff42efa46ecb8a3ddd98dda43c6b68d2093c6d56268dbd00e25689d96e6726f1f32747929c671534abd8a495af3c7d6fc6a8c1bf58d9355", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[], 0xfe33) 2.505849896s ago: executing program 0 (id=5949): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000081ac52dfcfe160efbf001811000089ef854b57e6da3aa29e377608027116fb1363bbacb84de62b419043", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8e2ffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x890b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r6, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.36819737s ago: executing program 3 (id=5951): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)='L', 0x1}], 0x1}, 0xc4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}, 0x42) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0xfffffffffffffee2, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="000000140004800500030007000000050003000600000018000c8093a16153b3100900ad44487900b303000034000c8024000b80c808000900acbc421408000900690f013c08000a008e310080f5ff0900c64aae1d0c000b8008000a00405d00000800010000000122163bb84c10810fa1c2ba33ae8e000008000200fbff0000080001000300"/146], 0x8c}, 0x1, 0x0, 0x0, 0x81}, 0x240000d1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYRES64=r4, @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000001c00088004000c8014"], 0x44}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a00)={0xb4, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000814) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xc}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x0, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r13, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000d4}, 0x20000800) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140280", @ANYRES16=r14, @ANYBLOB="10002dbd7000fbdbdf2524000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0xc000) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.080672616s ago: executing program 3 (id=5955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000050000000008000100ac1e0101080002006401010108000300", @ANYRES32=r0], 0x34}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB="7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$inet(0x2, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r4}, 0x20) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="440000001000010400000000e1ffffffffffffff", @ANYRES8=r2, @ANYRESOCT=r2, @ANYRES32=r2, @ANYBLOB="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", @ANYBLOB="5091ab120b5b680db1c1603c6236299cd7212c55e89aa8ee437e204d8cf7157bf2067299ad6e1a6b7b7f635cc2ac54b8f99286b8b40581ff3a0493d3a89ed3cacf562196b31f45567d3b42c64c7be59f25a2d744596f2667c8f8a1272f00597d8f25a6709789d3119d9a5c2ccca04d6cca22ff87d590f7ba8d7dc8fc22efbe3e93ea00dcf019", @ANYRESOCT=r2], 0x44}, 0x1, 0x0, 0x0, 0x240000c4}, 0x40) 1.871899647s ago: executing program 3 (id=5956): getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000080)=0x2c) (async) socket$kcm(0x10, 0x2, 0x4) (async) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000000) 1.701833554s ago: executing program 3 (id=5959): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x1f, 0x24, 0x1}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000bc690e818db358156ca8695a2695663f0000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x6, 0x3, 0x43, @remote, @loopback, 0x80, 0x10, 0x6, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="1d17", 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000080), 0x0}, 0x20) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="20001d00990beccf346f31f21455f26575bda0df833aa11e39274fe129df85e873f597906c0197bff9efb8bbe4aaa8ab52596cd1f79d57385aa981", @ANYRES16=r8, @ANYBLOB="01002bbd7000ffdbdf251b00000007002100616100000400cc00"], 0x20}}, 0xf429b4ff87ac56b5) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r10, 0x1, 0x0, 0x0, {{}, {0x0, 0x400b}, {0x8, 0x11, 0xffffffff}}}, 0x24}}, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055098cf30100000000009500000000000000bf91000000000000b70200000000000085e90f0e22a71a9a1f0000000000000095000000000000000d7556f9d1c5d2fe822b558d0f89323dfce8688c788ff5f0c326d107933067f69e6dfb45e0dae748ae1b5dce686b552fc6ca0e9484029e71c48217fefa91819dbb8dd78b9ef4aec510257f9b6736025adafcc52699941f3094652d1598b37ea78d5e3e3ff7ef21267b5facdd9a6f4cf96160ddb202cb61f560fafd621dad01728d31"], &(0x7f0000000580)='syzkaller\x00', 0x5, 0x20, &(0x7f00000000c0)=""/32, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f0000000400)={0x0, 0x800000}, 0x8}, 0x90) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 1.531910996s ago: executing program 0 (id=5960): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x14, 0x0, &(0x7f0000000180)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x3c, 0x2c, 0xf31, 0x2, 0x2000, {0x0, 0x0, 0x0, r8, {0x1}, {0xfff2, 0xffff}, {0x9, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x7, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1.520603776s ago: executing program 1 (id=5961): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0xd, 0x6, 0x6, 0x5, 0x0, 0xd, 0x25dfdbff, [@sadb_address={0x3, 0x5, 0x3c, 0x80, 0x0, @in={0x2, 0x4e24, @remote}}]}, 0x28}}, 0x10) (async) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) (async) r3 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 1.407380875s ago: executing program 1 (id=5962): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b70500000073c4cb2afd5782fe190000040000000000000095000000000000008d44ef8790d3f73cf8479226d87f69f51078de78be74bfc70648d6f00f2387ef05fcc93b08bdd78cc787821748"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.195700452s ago: executing program 0 (id=5963): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x75}], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffead}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) close(0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async, rerun: 32) socket$kcm(0x29, 0x5, 0x0) (async) socket$inet6(0xa, 0x2, 0x3a) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x40}, 0x1, 0x0, 0x0, 0x54}, 0x4040) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYRES16=0x0], 0x34}}, 0x0) 1.152662586s ago: executing program 1 (id=5964): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x5) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r4, 0x9}, 0x8) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x2b, r5}) (async) r6 = socket(0xa, 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) (async) ioctl(r6, 0x8936, &(0x7f0000000000)) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) 1.073623689s ago: executing program 4 (id=5965): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xff09, 0x0) (async) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000f00)={'team0\x00', @ifru_ivalue=0x6}) 992.68166ms ago: executing program 0 (id=5966): r0 = socket(0x11, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, r1, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300900b41886a98ebb062948327ed63f65311843cba114870a5bf7fad676aeb388cb2af251af2d176882dc2374b8d51ce56e48429feaf15302ad1859823e57743053674312eabead0fb24fb15a224169ccf6ecc52c42930654a9ea74786899a7bbbdead8c400380f558a12ec20618ad2c93952564ea345a79c177d6726ce8dc1780dcd7b8759a3d9fddd12c022108d4d0436452883bc019b2f599ec6609dc1a9eb7246bcbec0e1", @ANYRES16=r4, @ANYBLOB="8b300000000000000000150000000c009900040000000000000010001d800c00008008000d8004000300"], 0x30}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000040)={@local}, &(0x7f0000000080)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@deltaction={0x0, 0x31, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xc}}, {0x0, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'pedit\x00'}}, {0x0, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x4}}, {0x0, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x401}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x400}}, {0x0, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x200}}, {0x0, 0x12, 0x0, 0x0, @TCA_ACT_INDEX}, {0x0, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbmod\x00'}}]}]}, 0x1b}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 991.507847ms ago: executing program 1 (id=5967): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'ip6gre0\x00', {0x3}, 0xa}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x40, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_DATA={0x2c, 0x4, 0x0, 0x1, [@NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x2f}, @NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_HELPER_NAME={0xe, 0x1, 'snmp_trap\x00'}]}}, @NFT_MSG_DELSETELEM={0x268, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x248, 0x3, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x73, 0x6, 0x1, 0x0, "6b21ae65d2d5d2f0f12b198c6af957a2777651aaddb29b53a43402df4fb3436d379f09722034f042f0ed6842da80c0b102d6d9c233ac6f213df3f2cd596f0b39917408b45d55307b2448e24c6e8bec12f547ed11b5a8fe0d9b719179639d1f2686a534e1aad287a9b748341b8be051"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}]}, {0x1a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x158, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1f, 0x1, "63c6493dc4587c7163e4951537c2848166279323e724664e8bdfbb"}, @NFTA_DATA_VALUE={0x7, 0x1, "a06380"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x10, 0x1, "aeed3f6c30b41e866917016d"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x5e, 0x1, "b52c6d1de6b59ded493c72452ffaa00f25f72f4cb03f6618b255d5964948fc468834dbdb4dd22f80f7723d23327b24d8597b00b17bafa3e4905da259f591963cff95c6db23995bb835c1a8ffe516e301fb5699dfbea9ec161756"}]}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x2fc}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x24000810}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb8, r3, 0x500, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4001}, 0x4000800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2468000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000880), &(0x7f00000008c0)=0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000009c0)={0x0, 0x84, &(0x7f0000000900)=[@in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x3a5, @private0={0xfc, 0x0, '\x00', 0x33}, 0xf}, @in6={0xa, 0x4e20, 0x8, @mcast2, 0xfffffff9}, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x2f}}]}, &(0x7f0000000a00)=0x10) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c000}, 0x40000c0) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}}, 0x40008c6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000c80)={r8, 0xfffffff7}, 0x8) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000cc0)=@req={0x6, 0x1, 0x0, 0x9}, 0x10) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000d00)={0xe, 0x9, 0x6, 0xd2d}, 0x8) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r4) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, r9, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x977c760a9709b4d3) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r4) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, r10, 0x27, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x10}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001000)={'bond_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000001180)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001140)={&(0x7f0000001040)={0xec, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8001}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb3}]}, 0xec}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4044040) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x40, r10, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x48091}, 0x4048001) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x40, r9, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000110}, 0x4000000) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f00000014c0)=0x7) 988.358593ms ago: executing program 4 (id=5968): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x5c}}, 0x0) 851.02501ms ago: executing program 4 (id=5969): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x4, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_CHAIN_ID={0x11}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x68}}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') poll(&(0x7f0000000040), 0x55, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @fd=r0}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 792.994341ms ago: executing program 0 (id=5970): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x3}], 0x1, 0x10002, 0x0) (async) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x3}], 0x1, 0x10002, 0x0) 719.570362ms ago: executing program 1 (id=5971): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x10000, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000dcd8231f14f7f305ff225e6e06be56e5504dd9021b6c4fc9883b7fddfac3dcbf663eaae70d37099e5fa13b973e794affa8a2b952e144d5f6e9939a3e811b5f2772374f6b2c84383a705b55b51ec304af003bed0991980eb85d658dcb4ddbc58b88dda8bc684537a5a17d8ae0e6790b6c3abd173bdbd5b3454ba757d1cf519eb962b18e7e759fcc7e7f1299f934129272e6a07d026cfa2aba0180d3708c64aa3f4b26f0e219a2b6b0fdee9620a67bea2fb5d1422254ed1e1d85acc31940a79f552f42e157cb", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@setneightbl={0x14, 0x43, 0x1}, 0x14}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000040), 0x12) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000080), 0x12) close(r7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r5, @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r5, 0x7, 0x104, 0xfffffffe}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4004}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000b80)=0x0) sendmmsg(r5, &(0x7f0000003040)=[{{&(0x7f0000000540)=@sco, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000680)="bdd660ba385767562f3db81586a30d2658388d7b467b71513a642b80013500540a0a23bafe3aa431761c84e2378f04527ebf9a227ca2c1310d50f21b20d19e9a36e3e312da550e5ab15b6bc4bbd027cb2d512b3f5f1d25146cb7f5cb4e260d042458d6d04b2b9eeb0b1e1dc5d2c4bafe2343cc00b5d761c470e6452a136e250851dec1264dda8b249db78b5d19aa28607704b1ffdc5a3ca570c6533ce9ebfefb09fc2ea54ca9704228164f2b1e1d94fe0f97ef716b6116baab7fb44627f5e9941d9f0f0fe7b5e77e9aa94fa25fcec8f7b9391926", 0xd4}, {&(0x7f00000005c0)="b6caf4493919", 0x6}, {&(0x7f0000000780)="793e5afe02e1d4b20934a84d3e23d051b75220077165220b39b07a5054f25b146d00250905fe26772a20ba18e455b92a2191424c27e96942e879f0e28d78bfb673ebecca7374a8610619272745d76d96425fc4641f9ffc6414b2085c50cf2af8cccd43c282239734b9fd584d280f23562bd4e9c262bb18627174d057a28f282c17c956b26015c56bbb4e29149f0cc3d532afb350e4a845a10e21d7e2203d2d0c75c69056bb1949", 0xa7}, {&(0x7f0000000840)="b5446f1cd09817ba5910f7fc88876975d616e103f9ad603e93a9f88c54016e146336b267bcba9e099c31abca546be78aabefdaeaa3dc3f4bef8bb8f3b0286947b506af5cff12c8e5f7e9db9c4066bc835bed57fdbde5a9c13652166053b1addaff9d993b3f33aa6e85bc06633c665afcc32af8f4bf2ba8d04b3fcddd", 0x7c}, {&(0x7f0000000600)="3055082720ff4d90aacf65e53ce071c74d55a9a19171bd4609c2b643a67f1fdf6f3f1a6bb49974fa134f50d4f22b051830a286", 0x33}, {&(0x7f00000008c0)="62ee5ca81e10ff40b886870d7b1092318d4e1085f0afda6eef2456f17ca0cae4e02d8b8f221ac91247a02a8a56fbb0b68165a4459c2dd26600d0e7ce2a49a061cddf5569b28a88d9bbbe", 0x4a}, {&(0x7f0000000940)="72258faccc10e80df97c4a560e4198", 0xf}, {&(0x7f0000000980)="b6067bfbcc3465065739e2d43992", 0xe}], 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="c8000000000000000c0000000600000064dfb25cbf6be01274dae85d4ab65f8a044f7db395e8c6200c4ca4621ab7200faf72c875d56551f0890c44c366c0de1e47e075987f5d34e95a8012ad5206c3780117e8899736492fd914d26576a5647daa27e1488df2cec39842b6a1e4970b58e8767dfd11b51ceca0bab61bcdba7b1a16f0b47769882af76030d73d495c4a1428a9580ac95c13b354125232a8a501000000e1a9a61b01b50e641984330a796901d7616e6ba69e8e74198aeed651980fdf6ed6d25af50571"], 0xc8}}, {{&(0x7f0000000bc0)=@nfc_llcp={0x27, r9, 0xffffffffffffffff, 0x4, 0x1, 0xe2, "6b3090b00453678fc0e53965e1db65bd2ef07d68c8aeb22cdc210f35e6ef543dde098c895c0fe1797ebf1f949d90c6c5be91a2ebc48162e770bbe1a15e8db1", 0x9}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c40)="466d7c0b4a9a03404ced2a53f55dc279912cbd727d04b99e015475d7db37c94f4551d453cc0bc09db9e28cef289902ccec6a3219b223fbaa520d01530def25dafd237d02e38995535b3376fe760347b1344e32eb2db2463890fa0a2413c642934afc0681391018b56e0f0031fdeb77d568d1c4d2004e32f7e40b3eaabe0afe826db937495ed9ffc6ce4718e66488106743183c0f34261b5e8ca3eb6900ab78cc682f613dbca243ab3cdc4c9ebc7ee5dd4c192400d4c3ca89923f74757b42fee60f2a6d6cfe0082459e7fd45a44e3308ac91a926d6b87d7f802c509f33909288cd8919a8b", 0xe4}, {&(0x7f0000000d40)="b06f8c5a43dd0cc21f20ed74f3fa784f476b5eaa56857159954b8d6e6f76be5b830802e648359a09f09b4de877d87f00099886cffe8d8744cb48b82b49f071cad73fc20cd9b68e9489bb2664492db5680a53196c913ea64d97b5b28a3e6556861561721cb1c5d564fb3f4f", 0x6b}], 0x2, &(0x7f0000000e00)=ANY=[@ANYRES16=r2], 0x2b8}}, {{&(0x7f00000010c0)=@generic={0x21, "885c96a7c89bfa2caf52d10702dff40d3c537367b3581ecc8cc73bf7b7047adefbba46bdf40b8ec8642aebaf343e9801fac3c8aa62ae2add2377a168bf1f1c2564ad4b0ddb039a8f6d1ebdc6fbbd30b5e7940018e9ea31b66a69056fc91554bf6436e983e387b5ca733463c78b0e319f0a8faa33bbacfb356d35680b3611"}, 0x80, &(0x7f0000001140), 0x0, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], 0x388}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000e40)="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", 0x19a}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="5fd1b2b03a4150352cdd71f81f2c390a58f63da3222bdae21e2d008bda653c856f6e13ff072a96dc0fdc1a84ad53b2ac451488c1f90665a6d8700496bf59010114d43254ff4330ae9c090bbd33e223b057a6a9498c02adc9593f6ab577dc7cfda20b1eef6835c1dfd31db24b6e4000d7bdf1f21fd0aa0a7729cc5b4a04b9bae3a51094690d5fe042d065a03b8197dd15c0343a012bd2870d61652937c47dc5d8565c67ea024acf595d8c3f3ef380d0dca726143edd0b5e74be3b1465edc7e273a495fb9a8ec72f33fceb66da14fb7bb202328b478ae97863d5be245b77f4087a6a4ba95c5d5348a490e7560dd561922a000000", 0xf3}], 0x3}}, {{&(0x7f0000002680)=@rc={0x1f, @none, 0xfe}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002700)="1a30e7ce4b7444cb2f9d1626d70dd4d4141c9e8bee968a9dc8c69d72360f02a0403a1836962536ca64561450fab248eb081a03e09e6810e839d8a18f2e20d773db6108ed381633f414ad1c072386cd0ec65be9c269bf3b309f17531a86ccf53c75cdfa497b94fad6e6d2bcc0ec03ae496222a4d19ff0072e419cc435f09d50e03088fd0bb80e1e5cd01dd40c2a1692b119506a60743dac7d229879ba85511686e26dcb1c24d5c6e0e1681e229aaaea7e5a", 0xb1}, {&(0x7f00000027c0)="12c6752ef21d109306d92007e0d77f0abbdb861730726e26b060a801a97048003964708de1a2c534ac038baa23f2cdf111770a5bfd0676f47e47b2234f523c8cbf3bfa", 0x43}, {&(0x7f0000002840)="a6c3387de08c87a1de573ed5f472aaad043140a3ecc901d0db4d6db35fb27e9e585a0d0df2086bfa441f78f76f6244d8d719e52c7eb0b8936fcc5c0293e654100b28acb28e37ed3f20a773764447633ebb06ab8aaccd7d2daa67bfeac76e3664e349e5947fed3aff6542b8a7625e5b7af971478757cfa1b25369b88f9301017caecc9c06885b9c15cee9e627b10035a6429ca6f4340f3a5b9211dfeb621ea000cc711535d4c5943d01c1061d8638ffd061d2f9f0078d625e6b6d2843c42e16a348f1eef6f5ee3714423554a62f838dd260e1f8a614a19fbded3f3ef5dcb1e9b880cf8cda98", 0xe5}, {&(0x7f0000002940)="489f5da14f72d86ae2d203056018ea62e54ec1ee1e31703be38153f206ee37b43f046f32e09052a5746df26b7accf261b5d9d3f1d827fef238edaaa479abed5d47d056e71dab5bdafcaca3b19ed95e78cfa5b2a292bd44d6b87e01170dba7cf0619266f28e3dc5941392d1a7eb78", 0x6e}, {&(0x7f00000029c0)="edeaba33db4f147721cbfd3cc6fe64fcf5db03b6f60b4c8abb56b969930ad88a54d842452a25f8ed30814a27970ab9e8e98fee59f85816cda97ee5f19176a0f56d52f610ebd9d73671bd7d6810714249cb2713df76ccbd08eff8e3439a207dff6a81424e264f52eae79fee2c7c5b5ca8e602221aab00d36334f59d3f5710dce5e1255cd4701f5108507f498745299cc8a54d5c52accfbec4abe61e8cb1bce9cfbcdc091e710a512467241a8b4286b67e0a2387cf009a8f5e7e2c3e71604cc7f851cae560d3ae62397a4712735aa4716b71b45908089a6d19e94e52a6221b355d8134c775ff4d210ea8af2f5cc1cb2b69e01dbcfe8fc3", 0xf6}], 0x5, &(0x7f0000002d80)=ANY=[@ANYBLOB="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"], 0x1b8}}, {{&(0x7f0000002d00)=@caif=@dbg={0x25, 0x4, 0x80}, 0x80, &(0x7f0000003000)}}], 0x6, 0x0) bind$bt_hci(r8, &(0x7f0000000180)={0x1f, 0x4}, 0x6) 633.851611ms ago: executing program 4 (id=5972): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x4, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000002000100000e400058"}}}]}, 0x48}}, 0x20008080) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000005c0)=ANY=[@ANYRESHEX], 0x9) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000100)=""/186, &(0x7f00000001c0)=0xba) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x1f, 0x6, 0x498, 0x0, 0x168, 0xd0, 0x0, 0x0, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, &(0x7f0000000280), {[{{@ip={@multicast2, @multicast2, 0x0, 0xff, 'caif0\x00', 'bridge0\x00', {}, {0xff}, 0x29, 0x3, 0x21}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x4, 0x4, 0x3, 0x4, 0x3], 0x0, 0x7}, {0x0, [0x4, 0x3, 0x4, 0x1, 0x2, 0xc65aa8ae1306afed], 0x3, 0x3}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0xfe, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x6, 0x4, 0x6, 0x2, 0x2, 0x7], 0x4, 0x2}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}, {{@ip={@remote, @rand_addr=0x64010102, 0xff, 0xffffffff, 'pimreg1\x00', 'lo\x00', {0xff}, {0xff}, 0xc, 0x0, 0x10}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{0x28}, {0x0, 0x2}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f8a0b3fed1340e25ff3c43e45f92ca5ea311bfc0744957ced87f9db953c8"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0xc090) 565.545735ms ago: executing program 1 (id=5973): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000f824e40e00000000000000000600000095000000000000000812f20d40f1636328c88457f437a82c6a5ea17d257dcbe0a7b59b3f752081e8c63f19d0141582c8a3ea3a23314f9ddfd84f53d5fba24580843d8801000000157f8a161a5dcb37e5fce725889a5aaf3546eb9139e95dee63db08ea592c586d3bafad35e494f7280b8dd149a9ed525b6f4c5d6f050000005ed68de9be06f087ea0ba2"], &(0x7f0000000200)='GPL\x00', 0xe}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES64=r0], 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000040)=[{r0, 0x4}, {r1, 0x60}, {r0}], 0x3, 0xfffffffc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl(r3, 0x8b29, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800200010076786c616e"], 0x50}}, 0x0) 491.738924ms ago: executing program 0 (id=5974): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f4070009040080fffffffe280000000000000800040001000000", 0x24) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000006c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb3", 0x601}], 0x1}, 0x9fc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r8, 0x58, &(0x7f0000000600)}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0) 472.22203ms ago: executing program 4 (id=5975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x25, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) socket$inet_mptcp(0x2, 0x1, 0x106) 0s ago: executing program 4 (id=5976): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x2, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xa, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x95}, @call={0x85, 0x0, 0x0, 0x2c}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) kernel console output (not intermixed with test programs): upper threshold [ 429.998698][T15964] IPVS: starting estimator thread 0... [ 430.019108][T19324] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 430.025152][T19323] syzkaller1: entered promiscuous mode [ 430.088280][T19323] syzkaller1: entered allmulticast mode [ 430.104405][T19321] IPVS: using max 41 ests per chain, 98400 per kthread [ 430.234584][T19338] sctp: [Deprecated]: syz.3.3633 (pid 19338) Use of int in max_burst socket option. [ 430.234584][T19338] Use struct sctp_assoc_value instead [ 430.545752][T19357] team1: entered promiscuous mode [ 430.551528][T19357] team1: entered allmulticast mode [ 430.711317][T19372] bond4 (unregistering): Released all slaves [ 430.981432][ T5870] tipc: Node number set to 2886997007 [ 431.081212][T19402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.310825][T19420] bond1: (slave vlan0): Enslaving as a backup interface with an up link [ 431.322908][T19419] syzkaller0: entered promiscuous mode [ 431.329338][T19419] syzkaller0: entered allmulticast mode [ 431.368093][T19422] __nla_validate_parse: 24 callbacks suppressed [ 431.368104][T19422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3658'. [ 432.269123][T19478] syzkaller1: entered promiscuous mode [ 432.313801][T19478] syzkaller1: entered allmulticast mode [ 432.443978][T19499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3686'. [ 432.756315][T19529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3693'. [ 432.836969][T19531] validate_nla: 3 callbacks suppressed [ 432.836988][T19531] netlink: 'syz.2.3694': attribute type 1 has an invalid length. [ 432.879019][T19534] netlink: 'syz.4.3695': attribute type 1 has an invalid length. [ 432.905173][T19534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3695'. [ 433.186031][T19563] xt_hashlimit: size too large, truncated to 1048576 [ 433.375598][T19574] syzkaller0: entered promiscuous mode [ 433.402038][T19574] syzkaller0: entered allmulticast mode [ 433.629790][T19589] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 433.689332][T19592] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001 [ 433.746979][T19596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3710'. [ 435.810738][T19536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.095573][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3717'. [ 436.390656][T19639] netlink: 'syz.0.3720': attribute type 102 has an invalid length. [ 436.467370][T19635] tipc: Started in network mode [ 436.472864][T19635] tipc: Node identity 5abb1962086c, cluster identity 4711 [ 436.480233][T19635] tipc: Enabled bearer , priority 0 [ 436.515458][T19635] syzkaller0: entered promiscuous mode [ 436.521126][T19635] syzkaller0: entered allmulticast mode [ 436.527511][T19635] tipc: Resetting bearer [ 436.624429][T19644] netlink: 556 bytes leftover after parsing attributes in process `syz.2.3722'. [ 436.641409][ T49] nci: nci_ntf_packet: unknown ntf opcode 0x804 [ 437.283826][ T6190] tipc: Resetting bearer [ 437.303054][T19634] tipc: Resetting bearer [ 438.776347][T19634] tipc: Disabling bearer [ 438.785171][T19662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3725'. [ 438.794940][T19662] bridge: RTM_NEWNEIGH with invalid ether address [ 438.807013][T15966] tipc: Node number set to 1389828450 [ 438.812894][T19668] veth1: entered promiscuous mode [ 438.818141][T19669] veth1: left promiscuous mode [ 438.841258][T19635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.894407][T19673] syzkaller0: entered promiscuous mode [ 438.910028][T19673] syzkaller0: entered allmulticast mode [ 439.028839][T19681] xt_nfacct: accounting object `syz1' does not exist [ 439.258668][T19702] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3736'. [ 439.357241][T19706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3737'. [ 439.378354][T19706] : entered promiscuous mode [ 439.384159][T19708] ip6t_REJECT: ECHOREPLY is not supported [ 439.392491][ T5870] IPVS: starting estimator thread 0... [ 439.491880][T19712] IPVS: using max 32 ests per chain, 76800 per kthread [ 439.506521][T19716] lo speed is unknown, defaulting to 1000 [ 439.515530][T19719] netlink: 'syz.0.3740': attribute type 1 has an invalid length. [ 439.576468][T19719] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 439.775904][T19735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3742'. [ 439.797046][ T29] audit: type=1800 audit(1773771134.215:3): pid=19737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3743" name="memory.events" dev="tmpfs" ino=851 res=0 errno=0 [ 439.866531][ T29] audit: type=1804 audit(1773771134.215:4): pid=19737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3743" name="/newroot/164/memory.events" dev="tmpfs" ino=851 res=1 errno=0 [ 439.896022][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.238654][T19766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3746'. [ 440.327976][T19768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.414452][T19774] netlink: 'syz.3.3753': attribute type 1 has an invalid length. [ 440.424715][T19774] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3753'. [ 440.468075][T19774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3753'. [ 440.474219][T19779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.503240][T19781] xt_TCPMSS: Only works on TCP SYN packets [ 440.583397][T19784] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 440.612447][T19784] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 440.993172][T19811] geneve1: entered allmulticast mode [ 440.997820][T19817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3766'. [ 441.055535][T19818] bridge2: port 1(veth3) entered blocking state [ 441.064455][T19818] bridge2: port 1(veth3) entered disabled state [ 441.083145][T19822] netlink: 'syz.1.3767': attribute type 11 has an invalid length. [ 441.085436][T19818] veth3: entered allmulticast mode [ 441.091022][T19822] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.3767'. [ 441.109447][T19818] veth3: entered promiscuous mode [ 441.139530][T19819] bridge2: port 2(veth0_to_bond) entered blocking state [ 441.164148][T19819] bridge2: port 2(veth0_to_bond) entered disabled state [ 441.174507][T19819] veth0_to_bond: entered allmulticast mode [ 441.184979][T19819] veth0_to_bond: entered promiscuous mode [ 441.214229][T19827] tipc: Enabled bearer , priority 0 [ 441.292433][T19810] tipc: Disabling bearer [ 441.317224][T19835] x_tables: duplicate underflow at hook 1 [ 442.169449][T19865] 8021q: VLANs not supported on gre0 [ 442.452491][T19883] __nla_validate_parse: 5 callbacks suppressed [ 442.452509][T19883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3788'. [ 442.539854][T19883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3788'. [ 443.073585][T19916] veth1_macvtap: left allmulticast mode [ 443.079795][T19916] veth1_macvtap: left promiscuous mode [ 443.238880][T19925] netlink: 'syz.4.3798': attribute type 1 has an invalid length. [ 443.257571][T19930] netlink: 276 bytes leftover after parsing attributes in process `syz.3.3799'. [ 443.267555][T19930] openvswitch: netlink: Flow key attr not present in new flow. [ 443.297798][T19927] bond2: option all_slaves_active: invalid value (222) [ 443.328459][T19932] netlink: 'syz.3.3800': attribute type 1 has an invalid length. [ 443.332792][T19927] bond2 (unregistering): Released all slaves [ 443.446541][T19934] bond4: (slave ip6gretap1): making interface the new active one [ 443.458246][T19934] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 443.467841][T19934] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 443.478255][T19934] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 443.524928][T19936] Cannot find add_set index 65532 as target [ 443.598317][T19927] bond2: option all_slaves_active: invalid value (222) [ 443.783766][T19927] bond2 (unregistering): Released all slaves [ 443.834359][T19947] tipc: Started in network mode [ 443.839492][T19947] tipc: Node identity ee876c9097f3, cluster identity 4711 [ 443.847200][T19947] tipc: Enabled bearer , priority 0 [ 443.870465][T19950] netlink: 'syz.3.3804': attribute type 4 has an invalid length. [ 443.957316][T19927] bond2: option all_slaves_active: invalid value (222) [ 443.967563][T19927] bond2 (unregistering): Released all slaves [ 444.023752][T19947] tipc: Disabling bearer [ 444.115774][T19956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3805'. [ 444.229463][T19958] netlink: 'syz.4.3806': attribute type 39 has an invalid length. [ 444.245130][T19960] tipc: Enabling of bearer rejected, failed to enable media [ 444.336885][T19967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3808'. [ 444.506742][T19971] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3809'. [ 444.636058][ T51] Bluetooth: hci0: link tx timeout [ 444.644984][ T51] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 444.808876][T19987] lo speed is unknown, defaulting to 1000 [ 444.854584][T19992] tipc: Trying to set illegal importance in message [ 444.969989][T19999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.046560][T20006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.219551][T20008] : renamed from bond0 (while UP) [ 445.351390][T20012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3823'. [ 445.417333][T20012] netlink: 'syz.2.3823': attribute type 1 has an invalid length. [ 445.432689][T20012] netlink: 'syz.2.3823': attribute type 2 has an invalid length. [ 445.615690][T20030] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3829'. [ 445.820548][T20046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3831'. [ 445.842768][T20051] netlink: 'syz.2.3834': attribute type 1 has an invalid length. [ 446.045016][T20063] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 446.074734][T20071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3840'. [ 446.193226][T20079] syzkaller0: entered promiscuous mode [ 446.217697][T20079] syzkaller0: entered allmulticast mode [ 446.694506][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 446.812079][T20127] netlink: 'syz.4.3853': attribute type 2 has an invalid length. [ 446.819852][T20127] netlink: 'syz.4.3853': attribute type 2 has an invalid length. [ 446.907217][T20131] netlink: 'syz.3.3854': attribute type 12 has an invalid length. [ 447.224812][T20154] block nbd0: NBD_DISCONNECT [ 447.233193][T20154] block nbd0: Send disconnect failed -32 [ 447.239315][T20154] block nbd0: shutting down sockets [ 447.660818][ T585] erspan0 (unregistering): left promiscuous mode [ 447.682135][T20166] openvswitch: netlink: Flow key attribute not present in set flow. [ 447.692551][ T585] gretap0 (unregistering): left promiscuous mode [ 447.728602][ T585] bond10 (unregistering): (slave gretap3): Releasing backup interface [ 447.779919][T20174] __nla_validate_parse: 7 callbacks suppressed [ 447.779939][T20174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3866'. [ 447.804188][T20174] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3866'. [ 447.829648][ T585] bond3 (unregistering): (slave geneve2): Releasing active interface [ 447.926857][T20180] netlink: 'syz.4.3868': attribute type 21 has an invalid length. [ 448.305295][ T585] bond1 (unregistering): (slave bridge12): Releasing backup interface [ 448.665706][ T585] bond0 (unregistering): left promiscuous mode [ 448.672264][ T585] bond_slave_0: left promiscuous mode [ 448.679173][ T585] bond_slave_1: left promiscuous mode [ 448.685000][ T585] bridge_slave_1: left promiscuous mode [ 448.696652][ T585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.708826][ T585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.719601][ T585] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 448.730351][ T585] bond0 (unregistering): Released all slaves [ 448.740601][ T585] bond1 (unregistering): Released all slaves [ 448.753977][ T585] bond2 (unregistering): Released all slaves [ 448.769387][ T585] bond3 (unregistering): Released all slaves [ 448.782573][ T585] bond4 (unregistering): Released all slaves [ 448.795957][ T585] bond5 (unregistering): (slave veth1): Releasing active interface [ 448.806806][ T585] bond5 (unregistering): Released all slaves [ 448.820552][ T585] bond6 (unregistering): Released all slaves [ 448.834579][ T585] bond7 (unregistering): Released all slaves [ 448.847288][ T585] bond8 (unregistering): Released all slaves [ 448.860600][ T585] bond9 (unregistering): Released all slaves [ 448.876464][ T585] bond10 (unregistering): (slave bond11): Releasing backup interface [ 448.885452][ T585] bond10 (unregistering): Released all slaves [ 448.904897][ T585] bond11 (unregistering): Released all slaves [ 448.929999][T20174] veth3: entered promiscuous mode [ 448.973494][T20180] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3868'. [ 448.995906][T20187] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3867'. [ 449.042068][T20189] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3869'. [ 449.210899][ T585] tipc: Disabling bearer [ 449.221421][ T585] tipc: Left network mode [ 449.333860][T20212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3876'. [ 449.381904][T20213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3872'. [ 449.393625][T20212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3876'. [ 449.526924][T20215] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3878'. [ 449.539380][T20215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3878'. [ 450.300063][T20253] netlink: 'syz.4.3889': attribute type 13 has an invalid length. [ 450.575043][T20267] bond5 (unregistering): Released all slaves [ 450.817368][T20292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.847084][ T585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.867663][ T585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.902453][ T585] batman_adv: batadv0: Removing interface: dummy0 [ 450.978247][ T585] pim6reg (unregistering): left allmulticast mode [ 451.196980][T20322] netlink: 'syz.1.3905': attribute type 1 has an invalid length. [ 451.205144][T20322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.275179][T20324] netlink: 'syz.1.3905': attribute type 10 has an invalid length. [ 451.339782][ T585] team0 (unregistering): Port device team_slave_1 removed [ 451.374237][ T585] team0 (unregistering): Port device team_slave_0 removed [ 451.384583][ T585] veth0_to_team (unregistering): left allmulticast mode [ 451.532461][T20321] netlink: 'syz.2.3902': attribute type 5 has an invalid length. [ 451.574620][T20323] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 451.587430][T20323] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 451.652941][T20324] syz_tun: entered promiscuous mode [ 451.668978][T20324] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 451.713006][T20331] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.720625][T20331] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.139485][T20347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.187432][T20349] syzkaller0: entered promiscuous mode [ 452.189133][ T585] IPVS: stop unused estimator thread 0... [ 452.209688][T20349] syzkaller0: entered allmulticast mode [ 452.229401][T20354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.309092][T20357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.398570][T20358] syzkaller0: entered promiscuous mode [ 452.411403][T20358] syzkaller0: entered allmulticast mode [ 452.469492][T20364] netlink: 'syz.4.3917': attribute type 12 has an invalid length. [ 452.706350][T20379] netlink: 'syz.3.3918': attribute type 6 has an invalid length. [ 453.981787][T20379] team0: Cannot enslave team device to itself [ 454.181118][T20396] netlink: 'syz.2.3925': attribute type 11 has an invalid length. [ 454.222293][T20396] __nla_validate_parse: 6 callbacks suppressed [ 454.222313][T20396] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3925'. [ 454.341253][T20413] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3931'. [ 454.375996][T20413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3931'. [ 454.407956][T20416] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3932'. [ 454.434931][T20419] gre1: entered promiscuous mode [ 454.440313][T20419] gre1: entered allmulticast mode [ 455.099670][T20453] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3939'. [ 455.366867][T20463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3944'. [ 455.478263][T20467] ip6t_srh: unknown srh invflags 4000 [ 455.504442][T20470] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3947'. [ 455.519378][T20470] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 455.586461][T20471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3946'. [ 455.662968][T20476] wireguard0: entered allmulticast mode [ 455.712540][T20476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3948'. [ 455.840104][T20489] netlink: 'syz.4.3951': attribute type 4 has an invalid length. [ 456.193382][T20507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3957'. [ 456.204746][T20507] netlink: 'syz.4.3957': attribute type 1 has an invalid length. [ 456.221162][T20507] netlink: 'syz.4.3957': attribute type 1 has an invalid length. [ 456.353650][T20512] syzkaller0: entered promiscuous mode [ 456.366335][T20512] syzkaller0: entered allmulticast mode [ 456.654653][T20526] pimreg: entered allmulticast mode [ 456.916849][T20547] veth0: entered promiscuous mode [ 456.993262][T20549] syzkaller0: entered promiscuous mode [ 457.003626][T20549] syzkaller0: entered allmulticast mode [ 457.012172][T20549] 0: reclassify loop, rule prio 0, protocol 800 [ 457.025414][T20552] wireguard1: entered promiscuous mode [ 457.032204][T20552] wireguard1: entered allmulticast mode [ 457.039863][T20552] team0: Device wireguard1 is of different type [ 457.574551][T20577] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 457.601598][T20577] bond1 (unregistering): Released all slaves [ 457.772902][T20546] veth0: left promiscuous mode [ 457.873055][T20596] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.904528][T20598] netlink: 'syz.1.3984': attribute type 1 has an invalid length. [ 458.077483][T20598] 8021q: adding VLAN 0 to HW filter on device bond5 [ 458.094265][T20600] vlan3: entered allmulticast mode [ 458.099429][T20600] veth0_to_bond: entered allmulticast mode [ 458.108557][T20600] bond5: (slave vlan3): making interface the new active one [ 458.117599][T20600] bond5: (slave vlan3): Enslaving as an active interface with an up link [ 458.253185][T20611] sctp: [Deprecated]: syz.3.3988 (pid 20611) Use of int in max_burst socket option. [ 458.253185][T20611] Use struct sctp_assoc_value instead [ 458.420732][T20622] netlink: 'syz.1.3993': attribute type 6 has an invalid length. [ 458.443254][T20627] netlink: 'syz.4.3994': attribute type 13 has an invalid length. [ 458.486342][ T1092] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.513613][T20622] netlink: 'syz.1.3993': attribute type 6 has an invalid length. [ 458.525791][T20627] gretap0: refused to change device tx_queue_len [ 458.533182][T20627] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 458.552794][ T1092] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.563179][ T1092] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.602739][ T1092] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.765559][T20649] IPVS: length: 141 != 8 [ 458.773811][T20645] bond6: option miimon: invalid value (18446744073709551585) [ 458.782650][T20650] IPVS: length: 141 != 8 [ 458.793596][T20645] bond6: option miimon: allowed values 0 - 2147483647 [ 458.808822][T20645] bond6 (unregistering): Released all slaves [ 459.028706][T20662] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 459.505105][T20699] __nla_validate_parse: 18 callbacks suppressed [ 459.505124][T20699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4018'. [ 459.537259][T20705] mac80211_hwsim hwsim42 wlan1: Caught tx_queue_len zero misconfig [ 459.549936][T20706] netlink: 'syz.3.4020': attribute type 1 has an invalid length. [ 459.660413][T20706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.673314][T20711] bond0: entered allmulticast mode [ 459.705267][T20716] bond0: (slave ip6gretap2): making interface the new active one [ 459.716609][T20716] ip6gretap2: entered allmulticast mode [ 459.726913][T20716] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 459.741220][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 459.835233][T20725] xt_hashlimit: size too large, truncated to 1048576 [ 460.112920][T20745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4031'. [ 460.276375][T20752] ip6tnl0: Caught tx_queue_len zero misconfig [ 460.329806][T20752] netlink: 'syz.4.4032': attribute type 2 has an invalid length. [ 460.596061][T20773] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4038'. [ 460.680458][T20774] pim6reg527: entered allmulticast mode [ 461.079093][T20807] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4048'. [ 461.190824][T20814] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4049'. [ 461.217990][T20817] netlink: 'syz.3.4050': attribute type 4 has an invalid length. [ 461.252820][T20814] netlink: 312 bytes leftover after parsing attributes in process `syz.4.4049'. [ 461.408076][T20821] syzkaller0: entered promiscuous mode [ 461.415156][T20821] syzkaller0: entered allmulticast mode [ 461.426917][T20820] netlink: 'syz.3.4052': attribute type 21 has an invalid length. [ 461.434977][T20820] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4052'. [ 461.462673][T20829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4055'. [ 461.473346][T20829] netlink: 'syz.0.4055': attribute type 30 has an invalid length. [ 461.511238][T20829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4055'. [ 461.693188][T20848] syzkaller0: entered promiscuous mode [ 461.701328][T20848] syzkaller0: entered allmulticast mode [ 461.714522][T20848] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4060'. [ 461.758981][T20852] netlink: 'syz.3.4061': attribute type 2 has an invalid length. [ 461.939054][T20864] syzkaller1: entered promiscuous mode [ 461.952440][T20864] syzkaller1: entered allmulticast mode [ 462.272097][T20889] netlink: 'syz.3.4072': attribute type 1 has an invalid length. [ 462.542413][T20906] netlink: 'syz.3.4078': attribute type 2 has an invalid length. [ 462.560488][T20907] x_tables: unsorted underflow at hook 2 [ 462.720058][T20909] bond1: (slave vlan0): Releasing backup interface [ 463.247734][T20949] openvswitch: netlink: Flow key attr not present in new flow. [ 463.589174][T20964] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 463.622372][T20975] netlink: 'syz.0.4098': attribute type 4 has an invalid length. [ 464.211229][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.720244][T21000] __nla_validate_parse: 11 callbacks suppressed [ 464.720262][T21000] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4104'. [ 465.199127][T20977] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 465.315225][T21009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4106'. [ 465.352783][T21009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4106'. [ 465.364253][T21009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4106'. [ 465.441189][T21016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4108'. [ 465.454667][T21016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4108'. [ 465.499266][T21020] xt_addrtype: ipv6 does not support BROADCAST matching [ 465.499507][T21018] netlink: 'syz.1.4109': attribute type 7 has an invalid length. [ 465.521498][T21018] netlink: 'syz.1.4109': attribute type 8 has an invalid length. [ 465.623984][T21018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4109'. [ 465.867829][T21047] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4116'. [ 465.874524][T21049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4117'. [ 466.020712][T21055] netlink: 'syz.1.4119': attribute type 1 has an invalid length. [ 466.073769][T21057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4120'. [ 466.075590][T21058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.226299][T21061] pimreg: entered allmulticast mode [ 466.396237][T21077] netlink: 'syz.1.4126': attribute type 1 has an invalid length. [ 466.622459][T21090] bond6 (unregistering): Released all slaves [ 466.663515][ T12] syzkaller0: tun_net_xmit 76 [ 466.668877][ T12] syzkaller0: tun_net_xmit 48 [ 466.691601][T15987] syzkaller0: tun_net_xmit 76 [ 466.781728][T21112] syzkaller0: create flow: hash 1507732874 index 1 [ 466.813536][T21115] netlink: 'syz.3.4138': attribute type 21 has an invalid length. [ 466.866411][T21101] team0: Caught tx_queue_len zero misconfig [ 466.927870][T21118] syzkaller0: delete flow: hash 1507732874 index 1 [ 467.464251][T21138] sctp: [Deprecated]: syz.0.4144 (pid 21138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.464251][T21138] Use struct sctp_sack_info instead [ 468.585157][T21160] nbd: device at index 64 is going down [ 468.784145][T16185] udevd[16185]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 469.187213][T21201] veth1_to_bond: entered allmulticast mode [ 469.198905][T21198] veth1_to_bond: left allmulticast mode [ 469.459639][T21224] netlink: 'syz.2.4168': attribute type 1 has an invalid length. [ 469.482742][T21224] netlink: 'syz.2.4168': attribute type 2 has an invalid length. [ 469.791666][T21248] netlink: 'syz.2.4177': attribute type 39 has an invalid length. [ 470.038063][T21259] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 470.095887][T21260] netlink: 'syz.3.4182': attribute type 1 has an invalid length. [ 470.814322][T21298] PKCS7: Unknown OID: [4] (bad) [ 470.819220][T21298] PKCS7: Only support pkcs7_signedData type [ 470.954221][T21300] __nla_validate_parse: 15 callbacks suppressed [ 470.954311][T21300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4195'. [ 471.144087][T21314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4198'. [ 472.418243][T21317] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 472.448104][T21322] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 472.688428][T21333] syzkaller0: entered promiscuous mode [ 472.710618][T21333] syzkaller0: entered allmulticast mode [ 472.754629][T21337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4207'. [ 473.041590][T21349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4210'. [ 473.078508][T21360] netlink: 'syz.1.4212': attribute type 1 has an invalid length. [ 473.219229][T21369] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4214'. [ 473.256990][T21369] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4214'. [ 473.324285][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4216'. [ 473.356166][T21373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4217'. [ 473.779876][T21405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4221'. [ 473.790706][T21405] netlink: zone id is out of range [ 473.796749][T21405] netlink: zone id is out of range [ 473.803222][T21405] netlink: zone id is out of range [ 473.808920][T21402] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20000 [ 473.826254][T21405] netlink: zone id is out of range [ 473.850617][T21405] netlink: zone id is out of range [ 473.874447][T21397] netlink: 'syz.4.4221': attribute type 9 has an invalid length. [ 473.907931][T21405] netlink: zone id is out of range [ 473.937561][T21405] netlink: zone id is out of range [ 473.942886][T21405] netlink: set zone limit has 4 unknown bytes [ 474.556777][T21426] netlink: 'syz.3.4230': attribute type 30 has an invalid length. [ 474.651729][T21434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.671722][T21436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4234'. [ 474.691621][T21439] sctp: [Deprecated]: syz.4.4232 (pid 21439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 474.691621][T21439] Use struct sctp_sack_info instead [ 474.747863][T21434] xt_hashlimit: size too large, truncated to 1048576 [ 474.964042][T21456] netlink: 'syz.1.4239': attribute type 11 has an invalid length. [ 474.991769][T21456] syzkaller1: entered promiscuous mode [ 474.997477][T21456] syzkaller1: entered allmulticast mode [ 475.125133][T21466] IPv6: addrconf: prefix option has invalid lifetime [ 475.132216][T21466] IPv6: addrconf: prefix option has invalid lifetime [ 475.456572][T21485] netlink: 'syz.3.4248': attribute type 1 has an invalid length. [ 475.642710][T21500] IPVS: length: 153 != 24 [ 475.817903][T21509] syzkaller0: entered promiscuous mode [ 475.824116][T21509] syzkaller0: entered allmulticast mode [ 476.020704][T21523] __nla_validate_parse: 5 callbacks suppressed [ 476.020722][T21523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4261'. [ 476.301397][T21545] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 476.666360][T21567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4275'. [ 476.837954][T21572] bond2 (unregistering): Released all slaves [ 476.847114][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4275'. [ 476.889654][T21567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4275'. [ 476.946143][T21583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.957460][T21583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.969334][T21583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 476.982549][T21585] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4278'. [ 476.994203][T21585] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.001556][T21585] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.048394][T21585] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4278'. [ 477.087580][T21583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.106144][T21583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.120725][T21583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 477.142695][T21588] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4279'. [ 477.160252][T21589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4279'. [ 477.181884][T21591] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4280'. [ 477.190450][T21593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4281'. [ 477.218075][T21591] netlink: 'syz.4.4280': attribute type 1 has an invalid length. [ 477.264203][T21583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.277446][T21583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.288367][T21583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 477.394793][T21603] lo: entered promiscuous mode [ 477.405840][T21603] tunl0: entered promiscuous mode [ 477.413503][T21603] gre0: entered promiscuous mode [ 477.446060][T21603] gretap0: entered promiscuous mode [ 477.446298][T21610] netlink: 'syz.3.4284': attribute type 7 has an invalid length. [ 477.460421][T21610] netlink: 'syz.3.4284': attribute type 8 has an invalid length. [ 477.460684][T21603] erspan0: entered promiscuous mode [ 477.479579][T21603] ip_vti0: entered promiscuous mode [ 477.488340][T21604] IPVS: Unknown mcast interface: veth1_vlan [ 477.537131][T21583] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.560588][T21583] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.590031][T21583] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 477.835161][ T49] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.844089][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 477.852735][ T49] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 477.875888][T21627] tipc: Enabled bearer , priority 0 [ 477.905767][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.916423][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 477.925545][ T49] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 477.936444][T21627] syzkaller0: entered promiscuous mode [ 477.943049][T21627] syzkaller0: entered allmulticast mode [ 477.971572][ T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.985935][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 477.999349][T21638] openvswitch: netlink: EtherType 50a is less than min 600 [ 478.014608][T21637] unsupported nla_type 33542 [ 478.017087][ T49] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 478.038365][ T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.069098][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 478.080465][ T49] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 478.092870][T21635] tipc: Resetting bearer [ 478.110486][T21642] gtp0: entered promiscuous mode [ 478.136136][T21642] gtp0: entered allmulticast mode [ 478.148477][T21626] tipc: Resetting bearer [ 478.182669][T21626] tipc: Disabling bearer [ 478.615664][T21664] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 478.666754][T21666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.204771][T21709] netlink: 'syz.4.4310': attribute type 9 has an invalid length. [ 479.419805][T21721] syzkaller0: entered promiscuous mode [ 479.431811][T21721] syzkaller0: entered allmulticast mode [ 479.462576][T21721] xt_hashlimit: size too large, truncated to 1048576 [ 479.778315][T21742] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 479.845469][T21742] syzkaller0: entered promiscuous mode [ 479.861885][T21742] syzkaller0: entered allmulticast mode [ 480.031471][T21760] netlink: 'syz.3.4325': attribute type 4 has an invalid length. [ 480.170483][T21764] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 480.173162][T21775] netlink: 'syz.2.4324': attribute type 16 has an invalid length. [ 480.222622][T21764] bond2 (unregistering): Released all slaves [ 480.540419][T21802] xt_hashlimit: size too large, truncated to 1048576 [ 480.577971][T21804] netlink: zone id is out of range [ 480.583351][T21804] netlink: zone id is out of range [ 480.608105][T21804] netlink: zone id is out of range [ 480.633731][T21804] netlink: zone id is out of range [ 480.646903][T21804] netlink: zone id is out of range [ 480.672493][T21804] netlink: zone id is out of range [ 480.695543][T21804] netlink: zone id is out of range [ 480.732197][T21804] netlink: zone id is out of range [ 480.748310][T21804] netlink: zone id is out of range [ 480.779871][T21804] netlink: zone id is out of range [ 481.433867][T21849] __nla_validate_parse: 95 callbacks suppressed [ 481.433886][T21849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4349'. [ 481.481004][T21849] netlink: 'syz.4.4349': attribute type 1 has an invalid length. [ 481.507340][T21849] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4349'. [ 481.573789][T21856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4353'. [ 481.641481][T21862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4353'. [ 481.727266][T21869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4356'. [ 481.815432][T21874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4358'. [ 482.211588][T21904] syzkaller0: entered promiscuous mode [ 482.214862][T21902] netlink: 'syz.4.4367': attribute type 1 has an invalid length. [ 482.217438][T21904] syzkaller0: entered allmulticast mode [ 482.240090][T21902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4367'. [ 482.317398][T21902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4367'. [ 482.349452][T21910] syzkaller0: entered promiscuous mode [ 482.357479][T21910] syzkaller0: entered allmulticast mode [ 482.409696][T21907] netlink: 576 bytes leftover after parsing attributes in process `syz.3.4370'. [ 482.830229][T21925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4379'. [ 482.879204][T21925] netlink: 'syz.3.4379': attribute type 30 has an invalid length. [ 482.936275][T21875] Bluetooth: hci5: command 0x0405 tx timeout [ 483.045751][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.057927][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.070229][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.122114][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.187800][T21942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.207899][T21942] bond0: (slave rose0): Enslaving as an active interface with an up link [ 483.893222][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 484.566004][T22039] team0: Cannot enslave team device to itself [ 484.712166][T22046] netlink: 'syz.0.4409': attribute type 9 has an invalid length. [ 484.722229][T22046] netlink: 'syz.0.4409': attribute type 11 has an invalid length. [ 484.732653][T22046] netlink: 'syz.0.4409': attribute type 12 has an invalid length. [ 484.750733][T22047] netlink: 'syz.3.4410': attribute type 1 has an invalid length. [ 484.795148][T15964] hid-generic 0005:046D:5500.0002: item fetching failed at offset 0/1 [ 484.829511][T22054] sctp: [Deprecated]: syz.4.4412 (pid 22054) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.829511][T22054] Use struct sctp_sack_info instead [ 484.850466][T15964] hid-generic 0005:046D:5500.0002: probe with driver hid-generic failed with error -22 [ 484.975509][T22065] set match dimension is over the limit! [ 485.067596][T22059] syzkaller0: entered promiscuous mode [ 485.073332][T22059] syzkaller0: entered allmulticast mode [ 486.472169][T22131] __nla_validate_parse: 11 callbacks suppressed [ 486.472189][T22131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4426'. [ 486.497657][T22135] tipc: Enabled bearer , priority 0 [ 486.506222][T22135] syzkaller0: entered promiscuous mode [ 486.512202][T22135] syzkaller0: entered allmulticast mode [ 486.599246][T22141] tipc: Resetting bearer [ 486.622159][T22143] netlink: 'syz.0.4430': attribute type 3 has an invalid length. [ 486.650973][T22134] tipc: Resetting bearer [ 486.708262][T22134] tipc: Disabling bearer [ 486.759691][T22155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4433'. [ 486.809356][ T585] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.823986][ T585] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.842185][T22155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4433'. [ 486.872855][ T585] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.894445][ T585] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.967575][T22163] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4436'. [ 486.973826][T22167] netlink: 'syz.3.4437': attribute type 21 has an invalid length. [ 486.997521][T22167] netlink: 'syz.3.4437': attribute type 22 has an invalid length. [ 487.018976][T22167] netlink: 'syz.3.4437': attribute type 23 has an invalid length. [ 487.036786][T22167] netlink: 'syz.3.4437': attribute type 25 has an invalid length. [ 487.051440][T22167] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4437'. [ 487.084456][T22171] sctp: [Deprecated]: syz.0.4438 (pid 22171) Use of int in max_burst socket option deprecated. [ 487.084456][T22171] Use struct sctp_assoc_value instead [ 487.343538][T22194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4444'. [ 487.350840][T22196] netlink: 'syz.0.4443': attribute type 1 has an invalid length. [ 487.543284][T22210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4447'. [ 487.756828][T22225] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.4453'. [ 487.884933][T22231] team0: Device vxcan1 is of different type [ 488.438737][T22260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4466'. [ 488.534807][T22262] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.620543][T22262] bond2: (slave ip6erspan0): making interface the new active one [ 488.659664][T22262] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 488.678912][T22272] geneve2: entered promiscuous mode [ 488.684623][T22272] geneve2: entered allmulticast mode [ 488.707359][ T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 488.729731][ T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 488.749370][ T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 488.769621][ T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 488.933725][ T51] Bluetooth: hci2: command tx timeout [ 489.223511][T22307] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 489.401905][T22317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4480'. [ 489.550160][T22330] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 489.551261][T22331] net_ratelimit: 44 callbacks suppressed [ 489.551342][T22331] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 489.565230][T22328] pim6reg: entered allmulticast mode [ 489.588950][T22328] pim6reg: left allmulticast mode [ 490.043190][T22361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.172472][T22315] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 490.824089][T22412] unsupported nlmsg_type 40 [ 490.837090][T22407] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 490.853627][T22407] bond3 (unregistering): Released all slaves [ 490.876716][T22411] veth0: entered promiscuous mode [ 490.892144][T22418] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 490.943227][T22419] validate_nla: 4 callbacks suppressed [ 490.943246][T22419] netlink: 'syz.3.4513': attribute type 1 has an invalid length. [ 490.990654][T22422] Bluetooth: MGMT ver 1.23 [ 490.992471][T22410] veth0: left promiscuous mode [ 491.099035][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 491.112093][T22429] netlink: 'syz.3.4517': attribute type 11 has an invalid length. [ 491.156292][T22429] netlink: 'syz.3.4517': attribute type 4 has an invalid length. [ 491.224105][T22435] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 491.310044][T22435] xt_HMARK: proto mask must be zero with L3 mode [ 491.520595][T22453] __nla_validate_parse: 16 callbacks suppressed [ 491.520616][T22453] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4524'. [ 491.553736][T22457] netlink: 'syz.4.4525': attribute type 3 has an invalid length. [ 491.564724][T22453] IPVS: Unknown mcast interface: vcan0 [ 491.667683][T22460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.887163][T22476] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.4529'. [ 492.017197][T22488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4534'. [ 492.134832][T22497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4533'. [ 492.249536][T22508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4537'. [ 492.496216][T22527] netlink: 'syz.1.4542': attribute type 29 has an invalid length. [ 492.541376][T22529] netlink: 'syz.1.4542': attribute type 29 has an invalid length. [ 492.578484][T22529] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4542'. [ 492.609129][T22530] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4543'. [ 492.621545][T22533] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 492.650912][T22533] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 492.721857][T22537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4543'. [ 492.815974][T22530] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4543'. [ 492.825357][T22530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4543'. [ 493.022749][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 493.030127][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 493.170980][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 493.329269][T22572] netlink: 'syz.3.4552': attribute type 4 has an invalid length. [ 493.359228][T22575] netlink: 'syz.3.4552': attribute type 4 has an invalid length. [ 493.510917][T22581] netlink: 'syz.0.4554': attribute type 11 has an invalid length. [ 493.519620][T22581] netlink: 'syz.0.4554': attribute type 10 has an invalid length. [ 493.723628][T22592] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 493.758627][T22595] pim6reg: entered allmulticast mode [ 493.879459][T22602] netlink: 'syz.3.4563': attribute type 6 has an invalid length. [ 494.057717][T22609] pim6reg: entered allmulticast mode [ 494.366501][T22627] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 494.590608][T22629] bond0: entered promiscuous mode [ 494.598303][T22629] bond_slave_0: entered promiscuous mode [ 494.624521][T22629] bond_slave_1: entered promiscuous mode [ 494.638951][T22629] bridge0: entered promiscuous mode [ 494.753551][T22643] pim6reg527: entered allmulticast mode [ 495.552017][T22688] netlink: ct family unspecified [ 495.667095][T22692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.014394][T22709] validate_nla: 2 callbacks suppressed [ 496.014412][T22709] netlink: 'syz.0.4594': attribute type 1 has an invalid length. [ 496.482789][T22734] pim6reg: left allmulticast mode [ 496.637980][T22736] openvswitch: netlink: Duplicate key (type 2). [ 496.723244][T22755] netem: incorrect gi model size [ 496.728810][T22755] netem: change failed [ 497.012574][T22777] __nla_validate_parse: 13 callbacks suppressed [ 497.012594][T22777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4612'. [ 497.154373][T22787] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4615'. [ 497.275627][T22790] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 497.300634][T22790] syzkaller0: entered promiscuous mode [ 497.321778][T22790] syzkaller0: entered allmulticast mode [ 497.509988][T22805] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.4620'. [ 497.576426][T22809] xt_TCPMSS: Only works on TCP SYN packets [ 497.625459][T22814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4623'. [ 497.843675][T22827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4625'. [ 497.861213][T22827] netlink: 'syz.3.4625': attribute type 15 has an invalid length. [ 497.871635][T22827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4625'. [ 497.924830][ T13] netdevsim netdevsim3 : set [0, 1] type 1 family 0 port 2048 - 0 [ 497.934589][ T13] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2048 - 0 [ 497.956592][T22827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4625'. [ 497.982322][ T13] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2048 - 0 [ 498.015494][ T13] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2048 - 0 [ 498.032667][T22827] netlink: 'syz.3.4625': attribute type 15 has an invalid length. [ 498.063608][T22827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4625'. [ 498.236629][T22851] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 498.292429][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 498.513241][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4633'. [ 498.880555][T22885] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 498.889637][T22885] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 498.978773][T22892] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4641'. [ 499.086860][T22897] netlink: 'syz.0.4642': attribute type 7 has an invalid length. [ 499.390110][T22908] veth1_macvtap: left promiscuous mode [ 499.425392][T22910] openvswitch: netlink: IP tunnel dst address not specified [ 499.445937][T22910] openvswitch: netlink: IP tunnel dst address not specified [ 499.827364][T22925] xt_l2tp: invalid flags combination: 8 [ 500.063813][T22938] vlan2: entered allmulticast mode [ 500.069125][T22938] gretap0: entered allmulticast mode [ 500.653223][T22985] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.678254][T22989] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.853116][T23004] netlink: 'syz.2.4675': attribute type 1 has an invalid length. [ 501.000708][T23015] xt_CONNSECMARK: invalid mode: 0 [ 501.159865][T23022] syzkaller0: entered promiscuous mode [ 501.168145][T23016] netlink: 'syz.1.4678': attribute type 1 has an invalid length. [ 501.180188][T23016] netlink: 'syz.1.4678': attribute type 1 has an invalid length. [ 501.189012][T23016] netlink: 'syz.1.4678': attribute type 8 has an invalid length. [ 501.344440][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.699174][T23040] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 502.902020][T23062] syzkaller0: entered promiscuous mode [ 503.003318][T23074] xt_hashlimit: size too large, truncated to 1048576 [ 503.038752][T23068] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 503.311148][T23095] __nla_validate_parse: 20 callbacks suppressed [ 503.311164][T23095] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4703'. [ 503.368431][T23095] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 503.371505][T23098] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4704'. [ 503.534216][T23104] geneve3: entered promiscuous mode [ 503.755895][T23111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4709'. [ 503.776380][T23125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4712'. [ 503.804547][T23117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4710'. [ 504.017803][T23146] bond0: entered promiscuous mode [ 504.030799][T23146] ip6gretap2: entered promiscuous mode [ 504.048587][T23146] batadv0: entered promiscuous mode [ 504.071126][T23146] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 504.088719][T23146] hsr1: entered promiscuous mode [ 504.094563][T23150] siw: device registration error -23 [ 504.100003][T23146] hsr1: entered allmulticast mode [ 504.106643][T23146] batadv0: entered allmulticast mode [ 504.108171][T23153] siw: device registration error -23 [ 504.112993][T23146] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 504.136406][T23146] bond0: left promiscuous mode [ 504.142588][T23146] ip6gretap2: left promiscuous mode [ 504.149155][T23146] batadv0: left promiscuous mode [ 504.192998][T23159] netlink: 'syz.2.4721': attribute type 1 has an invalid length. [ 504.208028][T23159] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4721'. [ 504.241392][T23159] netlink: 'syz.2.4721': attribute type 1 has an invalid length. [ 504.258363][T23159] netlink: 'syz.2.4721': attribute type 8 has an invalid length. [ 504.302730][T23159] netlink: 582 bytes leftover after parsing attributes in process `syz.2.4721'. [ 504.370247][T23168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4724'. [ 504.461561][T23172] tipc: Started in network mode [ 504.470980][T23172] tipc: Node identity 2e2dbaa9d486, cluster identity 4711 [ 504.478713][T23172] tipc: Enabled bearer , priority 0 [ 504.495909][T23177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4726'. [ 504.537369][T23179] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4728'. [ 504.620311][T23172] syzkaller0: entered promiscuous mode [ 504.640455][T23172] syzkaller0: entered allmulticast mode [ 504.649652][T23172] tipc: Resetting bearer [ 504.706993][T23171] tipc: Resetting bearer [ 504.834930][T23199] netlink: 'syz.1.4735': attribute type 11 has an invalid length. [ 506.172395][T23171] tipc: Disabling bearer [ 506.202829][ T9] tipc: Node number set to 4205558441 [ 506.309743][T23225] Cannot find del_set index 0 as target [ 506.389742][T23227] netlink: 'syz.0.4743': attribute type 1 has an invalid length. [ 506.491954][T23227] bond3: entered promiscuous mode [ 506.510544][T23227] 8021q: adding VLAN 0 to HW filter on device bond3 [ 506.571816][T23228] bond3: (slave bridge9): making interface the new active one [ 506.599783][T23228] bridge9: entered promiscuous mode [ 506.612936][T23228] bond3: (slave bridge9): Enslaving as an active interface with an up link [ 507.739264][T23306] netlink: 'syz.4.4761': attribute type 10 has an invalid length. [ 508.092352][T23293] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 508.112539][T23290] bridge_slave_1: left allmulticast mode [ 508.118184][T23290] bridge_slave_1: left promiscuous mode [ 508.125183][T23290] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.135527][T23290] bridge_slave_0: left allmulticast mode [ 508.141543][T23290] bridge_slave_0: left promiscuous mode [ 508.147325][T23290] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.219435][T23295] team0: Device gtp1 is up. Set it down before adding it as a team port [ 508.251278][T23304] vlan2: entered promiscuous mode [ 508.435203][T23327] __nla_validate_parse: 8 callbacks suppressed [ 508.435221][T23327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4766'. [ 508.451139][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 508.586602][T23340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4772'. [ 508.644557][T23344] netlink: 'syz.3.4775': attribute type 13 has an invalid length. [ 508.675657][T23344] netlink: 'syz.3.4775': attribute type 58 has an invalid length. [ 508.702239][T23344] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4775'. [ 508.911017][T23367] netlink: 'syz.1.4781': attribute type 11 has an invalid length. [ 508.931343][T23367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4781'. [ 508.954018][T23367] netlink: 'syz.1.4781': attribute type 11 has an invalid length. [ 508.995043][T23367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4781'. [ 509.045355][T23381] netlink: 'syz.4.4784': attribute type 1 has an invalid length. [ 509.047925][T23379] bridge5: entered promiscuous mode [ 509.068803][T23379] bridge5: entered allmulticast mode [ 509.122185][T23381] bond3: entered promiscuous mode [ 509.127662][T23381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.205057][T23381] bond3: (slave bridge3): making interface the new active one [ 509.213493][T23381] bridge3: entered promiscuous mode [ 509.220186][T23381] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 509.335068][T23395] syzkaller0: entered promiscuous mode [ 509.340581][T23395] syzkaller0: entered allmulticast mode [ 509.435567][T23406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4791'. [ 509.446360][T23406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4791'. [ 509.826917][T23429] netlink: 'syz.2.4798': attribute type 1 has an invalid length. [ 509.884770][T23430] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4797'. [ 510.279150][T23454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.433369][T23464] netlink: 'syz.1.4808': attribute type 5 has an invalid length. [ 510.437965][T23458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4806'. [ 510.573977][T23477] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4811'. [ 510.724402][T23480] xt_NFQUEUE: number of total queues is 0 [ 510.904147][T23501] syzkaller0: entered promiscuous mode [ 510.935688][T23501] syzkaller0: entered allmulticast mode [ 511.329084][T23529] openvswitch: netlink: Flow key attr not present in new flow. [ 511.787434][T23564] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 511.804922][T23564] bond4: (slave lo): Enslaving as an active interface with an up link [ 511.857114][T23564] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 512.154897][T23590] netlink: 'syz.0.4842': attribute type 1 has an invalid length. [ 512.319838][T23604] xt_addrtype: ipv6 does not support BROADCAST matching [ 512.585807][T23615] block nbd0: not configured, cannot reconfigure [ 512.899808][T23636] x_tables: duplicate underflow at hook 1 [ 513.073038][T23648] tipc: Enabling of bearer rejected, failed to enable media [ 513.218422][T23658] netlink: 'syz.3.4866': attribute type 1 has an invalid length. [ 513.589210][T23676] openvswitch: netlink: Message has 181 unknown bytes. [ 513.721765][T23681] __nla_validate_parse: 9 callbacks suppressed [ 513.721782][T23681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4871'. [ 513.783889][T23681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4871'. [ 513.981548][T23692] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4873'. [ 515.738637][T23716] netlink: 'syz.3.4883': attribute type 1 has an invalid length. [ 515.753806][T23714] syzkaller0: entered promiscuous mode [ 515.759460][T23714] syzkaller0: entered allmulticast mode [ 515.761873][T23716] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4883'. [ 515.774494][T23716] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4883'. [ 515.788652][T23716] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4883'. [ 515.794650][T23720] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.4884'. [ 515.895869][T23730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4885'. [ 515.953999][T23730] tipc: Enabled bearer , priority 0 [ 516.025069][T23737] netlink: 332 bytes leftover after parsing attributes in process `syz.3.4888'. [ 516.037344][T23723] tipc: Disabling bearer [ 516.112506][T23746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4889'. [ 516.131105][T23746] netlink: 'syz.3.4889': attribute type 15 has an invalid length. [ 516.171263][ T12] netdevsim netdevsim3 : set [0, 2] type 1 family 0 port 256 - 0 [ 516.184348][ T12] netdevsim netdevsim3 netdevsim1: set [0, 2] type 1 family 0 port 256 - 0 [ 516.199856][ T12] netdevsim netdevsim3 netdevsim2: set [0, 2] type 1 family 0 port 256 - 0 [ 516.217428][ T12] netdevsim netdevsim3 netdevsim3: set [0, 2] type 1 family 0 port 256 - 0 [ 516.245546][T23751] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 516.272852][ T5829] block nbd0: Receive control failed (result -32) [ 516.574816][T23785] syzkaller1: entered promiscuous mode [ 516.580525][T23785] syzkaller1: entered allmulticast mode [ 517.282514][T23830] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 517.425564][T23845] netlink: 'syz.4.4919': attribute type 1 has an invalid length. [ 517.433765][T23845] netlink: 'syz.4.4919': attribute type 1 has an invalid length. [ 517.442492][T23845] netlink: 'syz.4.4919': attribute type 1 has an invalid length. [ 517.450427][T23845] netlink: 'syz.4.4919': attribute type 2 has an invalid length. [ 517.508045][T23845] openvswitch: netlink: Message has 8 unknown bytes. [ 517.517668][T23845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.659441][T23856] netlink: 'syz.3.4923': attribute type 23 has an invalid length. [ 517.893014][T23872] netlink: 'syz.0.4930': attribute type 1 has an invalid length. [ 517.918632][T23872] netlink: 'syz.0.4930': attribute type 2 has an invalid length. [ 517.959479][T23876] netlink: 'syz.0.4930': attribute type 1 has an invalid length. [ 517.980928][T23876] netlink: 'syz.0.4930': attribute type 2 has an invalid length. [ 518.027208][T23887] sctp: [Deprecated]: syz.2.4934 (pid 23887) Use of struct sctp_assoc_value in delayed_ack socket option. [ 518.027208][T23887] Use struct sctp_sack_info instead [ 518.042737][T23871] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.146924][T23884] bond5: entered promiscuous mode [ 518.152574][T23884] bond5: entered allmulticast mode [ 518.159095][T23884] 8021q: adding VLAN 0 to HW filter on device bond5 [ 518.241992][T23900] netlink: 'syz.2.4937': attribute type 13 has an invalid length. [ 518.249569][T23902] nbd: must specify a size in bytes for the device [ 518.324423][T23900] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.331600][T23900] bridge0: port 2(bridge_slave_1) entered listening state [ 518.344891][T23900] 8021q: adding VLAN 0 to HW filter on device  [ 518.354378][T23900] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.364265][T23900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 518.834953][T23944] __nla_validate_parse: 17 callbacks suppressed [ 518.834974][T23944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4951'. [ 518.906422][T23950] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4953'. [ 518.956666][T23961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4955'. [ 521.899643][T23950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.088634][T23980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4962'. [ 522.100594][T23981] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4962'. [ 522.335537][T23993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4966'. [ 522.363877][T23994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4965'. [ 522.393164][T23993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4966'. [ 522.535253][T24002] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 522.787795][T24023] blkio.reset_stats is deprecated [ 522.848638][T24031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4978'. [ 522.870236][T24031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4978'. [ 523.014017][T24035] x_tables: duplicate underflow at hook 1 [ 523.028858][T24035] netlink: 'syz.1.4980': attribute type 1 has an invalid length. [ 523.095676][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 523.292573][T24049] netlink: 'syz.4.4984': attribute type 1 has an invalid length. [ 523.490313][T24063] netlink: 'syz.1.4989': attribute type 1 has an invalid length. [ 523.506241][T24063] netlink: 'syz.1.4989': attribute type 1 has an invalid length. [ 523.517427][T24063] netlink: 'syz.1.4989': attribute type 1 has an invalid length. [ 523.526410][T24063] netlink: 'syz.1.4989': attribute type 2 has an invalid length. [ 523.546033][T24065] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 523.583573][T24065] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 523.755845][T24082] syzkaller0: entered promiscuous mode [ 523.763014][T24082] syzkaller0: entered allmulticast mode [ 524.025981][T24103] __nla_validate_parse: 12 callbacks suppressed [ 524.025998][T24103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5000'. [ 524.125804][T24110] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5002'. [ 524.128461][T24111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5003'. [ 524.205996][T24110] netlink: 'syz.1.5002': attribute type 1 has an invalid length. [ 524.413034][T24134] netlink: zone id is out of range [ 524.419199][T24134] netlink: get zone limit has 8 unknown bytes [ 524.477514][T24132] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5009'. [ 524.520209][T24139] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5012'. [ 524.606657][T24143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5015'. [ 524.781578][T24154] lo: entered promiscuous mode [ 524.786559][T24154] netlink: 'syz.1.5018': attribute type 2 has an invalid length. [ 524.816421][T24154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 524.855318][T24159] syzkaller0: entered promiscuous mode [ 524.860986][T24159] syzkaller0: entered allmulticast mode [ 524.865299][T24156] netlink: 'syz.2.5019': attribute type 10 has an invalid length. [ 524.878016][T24165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5021'. [ 524.887447][T24165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5021'. [ 524.904326][T24165] erspan0: entered promiscuous mode [ 524.912090][T24165] gretap0: entered promiscuous mode [ 524.924532][T24156] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.5019'. [ 524.955067][T24156] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.5019'. [ 525.176577][T24179] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 525.466980][T24197] syzkaller0: entered promiscuous mode [ 525.472924][T24197] syzkaller0: entered allmulticast mode [ 525.513153][T24195] netlink: 'syz.4.5031': attribute type 1 has an invalid length. [ 525.569340][T24203] "syz.3.5033" (24203) uses obsolete ecb(arc4) skcipher [ 525.597875][T24195] 8021q: adding VLAN 0 to HW filter on device bond6 [ 525.637490][T24206] bond6: (slave ip6gretap2): making interface the new active one [ 525.646802][T24209] set match dimension is over the limit! [ 525.659440][T24206] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 525.672438][T24204] bond6: entered allmulticast mode [ 525.677582][T24204] ip6gretap2: entered allmulticast mode [ 526.012227][T24241] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001 [ 526.392809][T24270] pimreg: left allmulticast mode [ 526.639170][T24286] syzkaller0: entered promiscuous mode [ 526.646393][T24291] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 526.748152][T24286] syzkaller0: entered allmulticast mode [ 529.050280][T24328] vlan2: entered allmulticast mode [ 529.074644][T24328] bridge10: entered allmulticast mode [ 529.084044][T24334] validate_nla: 5 callbacks suppressed [ 529.084063][T24334] netlink: 'syz.4.5069': attribute type 21 has an invalid length. [ 529.099312][T24329] bridge10: port 1(erspan0) entered blocking state [ 529.120970][T24329] bridge10: port 1(erspan0) entered disabled state [ 529.127830][T24329] erspan0: entered allmulticast mode [ 529.134459][T24336] netlink: 'syz.4.5069': attribute type 10 has an invalid length. [ 529.151829][T24336] __nla_validate_parse: 73 callbacks suppressed [ 529.151848][T24336] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5069'. [ 529.181339][T24334] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5069'. [ 529.371414][T24352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5073'. [ 529.438904][T24352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5073'. [ 529.448810][T24344] netlink: 'syz.3.5068': attribute type 16 has an invalid length. [ 529.469139][T24344] netlink: 'syz.3.5068': attribute type 17 has an invalid length. [ 529.481746][T24352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5073'. [ 529.494314][T24352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5073'. [ 529.546181][T24356] syzkaller0: entered promiscuous mode [ 529.571491][T24356] syzkaller0: entered allmulticast mode [ 529.594832][T24344] lo: left promiscuous mode [ 529.635140][T24344] tunl0: left promiscuous mode [ 529.654021][T24344] gre0: left promiscuous mode [ 529.732789][T24344] gretap0: left promiscuous mode [ 529.751366][T24344] ip_vti0: left promiscuous mode [ 529.771586][T24344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.788933][T24352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5073'. [ 529.800192][T24352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5073'. [ 529.841474][T24352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5073'. [ 529.861065][T24352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5073'. [ 530.310550][T24397] delete_channel: no stack [ 531.623191][T24399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.793524][T24408] netlink: get zone limit has 4 unknown bytes [ 531.800221][T24407] netlink: 'syz.1.5091': attribute type 7 has an invalid length. [ 531.863386][T24414] openvswitch: netlink: Invalid VLAN frame [ 531.925661][T24415] veth9: entered promiscuous mode [ 531.946030][T24419] nft_compat: unsupported protocol 1 [ 532.130346][T24432] veth0_macvtap: left promiscuous mode [ 532.302015][T24449] tipc: Failed to remove unknown binding: 66,1,1/0:4112497433/4112497435 [ 532.314896][T24449] tipc: Failed to remove unknown binding: 66,1,1/0:4112497433/4112497435 [ 532.341990][T24452] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 532.361462][T24452] nbd: couldn't find a device at index 3 [ 532.372741][T24454] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 532.604763][T24472] lo: Caught tx_queue_len zero misconfig [ 532.892137][T24490] mac80211_hwsim hwsim38 ÿ: renamed from wlan1 (while UP) [ 533.681327][T24526] syzkaller1: entered promiscuous mode [ 533.686838][T24526] syzkaller1: entered allmulticast mode [ 533.736850][T24532] netlink: 'syz.3.5128': attribute type 1 has an invalid length. [ 533.803819][T24536] sock: sock_set_timeout: `syz.4.5129' (pid 24536) tries to set negative timeout [ 533.932548][T24537] bond9: (slave gretap1): making interface the new active one [ 533.943955][T24537] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 534.093528][ T10] IPVS: starting estimator thread 0... [ 534.190896][T24553] IPVS: using max 40 ests per chain, 96000 per kthread [ 534.275320][T24562] xt_CT: You must specify a L4 protocol and not use inversions on it [ 534.412238][T24581] __nla_validate_parse: 137 callbacks suppressed [ 534.412268][T24581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5140'. [ 534.437859][T24581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5140'. [ 534.690646][T24594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5145'. [ 534.701488][T24594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5145'. [ 534.814974][T24598] 8021q: adding VLAN 0 to HW filter on device bond7 [ 534.879287][T24602] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5148'. [ 534.901620][T24602] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5148'. [ 535.137235][T24607] Cannot find add_set index 46338 as target [ 535.594793][T24640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5158'. [ 535.966946][T24655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5165'. [ 535.967184][T24657] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 536.005762][T24657] Bluetooth: MGMT ver 1.23 [ 536.135144][T24668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5168'. [ 536.346165][T24677] netlink: 'syz.3.5171': attribute type 1 has an invalid length. [ 536.464008][T24682] bond10: (slave geneve4): making interface the new active one [ 536.513390][T24682] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 536.527605][ T1159] netdevsim netdevsim3 : set [1, 2] type 2 family 0 port 20004 - 0 [ 536.563451][ T1159] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 536.613955][T24694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5172'. [ 536.631666][T24693] netlink: 'syz.4.5174': attribute type 21 has an invalid length. [ 536.653136][ T1159] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 536.682101][ T1159] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 536.685759][T24695] netlink: 'syz.4.5174': attribute type 21 has an invalid length. [ 536.717540][T24701] netlink: 'syz.3.5175': attribute type 83 has an invalid length. [ 537.176265][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 537.327220][T24732] syzkaller0: entered promiscuous mode [ 537.336596][T24732] syzkaller0: entered allmulticast mode [ 537.389268][T24748] lo: entered promiscuous mode [ 537.408159][T24748] netlink: 'syz.4.5190': attribute type 2 has an invalid length. [ 537.431487][T24748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.458630][T24748] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 537.856943][T24775] x_tables: unsorted underflow at hook 1 [ 538.340245][T24800] bond7 (unregistering): Released all slaves [ 538.684240][T24832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.776545][T24839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.875123][T24846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.970977][T24849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.352498][T24876] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 539.461860][T24877] sctp: [Deprecated]: syz.4.5227 (pid 24877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 539.461860][T24877] Use struct sctp_sack_info instead [ 539.512195][T24877] netlink: 'syz.4.5227': attribute type 1 has an invalid length. [ 539.523287][T24883] __nla_validate_parse: 13 callbacks suppressed [ 539.523305][T24883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5231'. [ 539.568765][T24877] bond7: entered promiscuous mode [ 539.576657][T24877] 8021q: adding VLAN 0 to HW filter on device bond7 [ 539.692657][T24897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5233'. [ 539.748060][T24903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.755366][T24903] IPv6: NLM_F_CREATE should be set when creating new route [ 539.779777][T24905] Cannot find del_set index 4 as target [ 539.860098][T24909] xt_HMARK: spi-set and port-set can't be combined [ 540.126205][T24932] hsr0 speed is unknown, defaulting to 1000 [ 540.141340][T24932] hsr0 speed is unknown, defaulting to 1000 [ 540.182228][T24932] hsr0 speed is unknown, defaulting to 1000 [ 540.271559][T24932] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 540.316993][T24941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5247'. [ 540.349466][T24932] hsr0 speed is unknown, defaulting to 1000 [ 540.364139][T24932] hsr0 speed is unknown, defaulting to 1000 [ 540.376872][T24932] hsr0 speed is unknown, defaulting to 1000 [ 540.403390][T24932] hsr0 speed is unknown, defaulting to 1000 [ 540.418337][T24932] hsr0 speed is unknown, defaulting to 1000 [ 540.434597][T24932] hsr0 speed is unknown, defaulting to 1000 [ 540.449219][T24932] hsr0 speed is unknown, defaulting to 1000 [ 540.468331][T24932] hsr0 speed is unknown, defaulting to 1000 [ 540.819662][T24957] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 540.856958][T24957] bond4: (slave lo): Enslaving as an active interface with an up link [ 540.875666][T24957] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 541.011703][T15964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.123848][T24979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.175270][T24981] smc: net device team0 applied user defined pnetid SYZ2 [ 541.183090][T24982] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5259'. [ 541.212751][T24981] netlink: 516 bytes leftover after parsing attributes in process `syz.3.5258'. [ 541.213680][T24982] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5259'. [ 541.302258][T24982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5259'. [ 541.356500][T24982] netlink: 'syz.4.5259': attribute type 23 has an invalid length. [ 541.426167][T24990] netlink: 'syz.0.5262': attribute type 1 has an invalid length. [ 541.557354][T25002] netlink: 'syz.4.5264': attribute type 12 has an invalid length. [ 541.591526][T25002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5264'. [ 542.118967][T25038] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 542.432558][T25051] team0 (unregistering): Port device team_slave_0 removed [ 542.472141][T25055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5274'. [ 542.478266][T25051] team0 (unregistering): Port device team_slave_1 removed [ 542.649411][T25065] netlink: 'syz.3.5283': attribute type 10 has an invalid length. [ 542.735019][T25076] xt_hashlimit: size too large, truncated to 1048576 [ 542.763596][T25070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5285'. [ 543.413860][T25104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.431869][T25104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.448979][T25104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.468994][T25104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.997315][T25149] netlink: 'syz.4.5312': attribute type 1 has an invalid length. [ 544.105631][T25149] 8021q: adding VLAN 0 to HW filter on device bond8 [ 544.130314][T25150] hsr0 speed is unknown, defaulting to 1000 [ 544.140979][T25158] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 544.168693][T25158] bond8: entered allmulticast mode [ 544.435685][T25180] netlink: 'syz.3.5318': attribute type 3 has an invalid length. [ 544.454518][T25180] netlink: 'syz.3.5318': attribute type 1 has an invalid length. [ 544.472722][T25180] NCSI netlink: No device for ifindex 813332851 [ 544.868782][T25211] tipc: Enabled bearer , priority 0 [ 545.335535][T25225] __nla_validate_parse: 11 callbacks suppressed [ 545.335548][T25225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5330'. [ 545.700386][T25248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5338'. [ 545.717612][T25250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5340'. [ 545.845498][T25261] netlink: 'syz.2.5341': attribute type 3 has an invalid length. [ 545.976660][T25271] netlink: 'syz.3.5346': attribute type 29 has an invalid length. [ 546.002842][T25272] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 546.045464][T25277] netlink: 'syz.3.5346': attribute type 29 has an invalid length. [ 546.072870][T25272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5344'. [ 546.115029][T25286] sctp: [Deprecated]: syz.4.5347 (pid 25286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 546.115029][T25286] Use struct sctp_sack_info instead [ 546.318990][T25294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5348'. [ 546.434168][T25299] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5350'. [ 546.466716][T25303] sctp: [Deprecated]: syz.2.5351 (pid 25303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 546.466716][T25303] Use struct sctp_sack_info instead [ 546.595866][T25310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5353'. [ 546.637932][T25313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5355'. [ 546.819821][T25325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5359'. [ 546.913016][T25332] ip6tnl0: Caught tx_queue_len zero misconfig [ 547.189276][T25348] netlink: 'syz.2.5366': attribute type 4 has an invalid length. [ 547.278771][T25353] netlink: 'syz.4.5369': attribute type 9 has an invalid length. [ 547.448452][T25365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.817486][T25393] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.5381'. [ 547.828202][T25393] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 547.836489][T25393] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 547.844901][T25393] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 547.895412][T25393] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 547.929292][T25393] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 547.950181][T25393] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 547.972520][T25393] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 547.994647][T25393] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 548.009238][T25398] sctp: [Deprecated]: syz.3.5384 (pid 25398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.009238][T25398] Use struct sctp_sack_info instead [ 548.034536][T25393] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 548.130580][T25405] tipc: Enabling of bearer rejected, failed to enable media [ 548.181971][T25418] xt_TPROXY: Can be used only with -p tcp or -p udp [ 548.314628][T25428] netlink: 'syz.3.5395': attribute type 22 has an invalid length. [ 548.432092][T25428] netlink: 'syz.3.5395': attribute type 22 has an invalid length. [ 548.696846][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 548.909152][T25478] netlink: 'syz.4.5409': attribute type 1 has an invalid length. [ 549.022281][T25478] 8021q: adding VLAN 0 to HW filter on device bond9 [ 549.076722][T25483] bond9: (slave veth3): Enslaving as an active interface with a down link [ 549.134164][T25478] vlan0: entered allmulticast mode [ 549.139319][T25478] veth0_to_bond: entered allmulticast mode [ 549.249129][T25500] netlink: 'syz.0.5416': attribute type 6 has an invalid length. [ 549.274026][T25498] netlink: 'syz.3.5414': attribute type 1 has an invalid length. [ 549.340064][T25498] 8021q: adding VLAN 0 to HW filter on device bond11 [ 549.383923][T25504] bond11: (slave gretap2): making interface the new active one [ 549.393409][T25504] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 549.574068][T25520] x_tables: duplicate underflow at hook 2 [ 549.578472][T25519] x_tables: duplicate underflow at hook 2 [ 550.058808][T25564] veth0_virt_wifi: entered promiscuous mode [ 550.182593][T25570] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 550.357017][T25586] __nla_validate_parse: 47 callbacks suppressed [ 550.357035][T25586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5441'. [ 550.518965][T25604] ieee802154 phy0 wpan0: encryption failed: -22 [ 550.546829][T25605] netlink: 'syz.1.5445': attribute type 10 has an invalid length. [ 550.630187][T25613] siw: device registration error -23 [ 550.673085][T25613] netlink: 'syz.2.5448': attribute type 1 has an invalid length. [ 550.711619][T25615] syzkaller1: entered promiscuous mode [ 550.742880][T25615] syzkaller1: entered allmulticast mode [ 550.755332][T25627] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.5450'. [ 550.995294][T25644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5453'. [ 551.436760][T25656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5456'. [ 551.446592][T25656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5456'. [ 551.478548][T25656] veth5: entered allmulticast mode [ 551.511274][T25659] netlink: 'syz.3.5458': attribute type 14 has an invalid length. [ 551.582861][T25661] netlink: 81 bytes leftover after parsing attributes in process `syz.3.5459'. [ 551.594657][T25661] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5459'. [ 551.709369][T25666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5461'. [ 551.732139][T25666] bond12: option coupled_control: invalid value (52) [ 551.740212][T25666] bond12 (unregistering): Released all slaves [ 551.929438][T25675] syzkaller1: entered promiscuous mode [ 551.940913][T25675] syzkaller1: entered allmulticast mode [ 552.194488][T25677] bond12: invalid ARP target 0.0.0.0 specified for addition [ 552.214159][T25677] bond12: option arp_ip_target: invalid value (0) [ 552.223692][T25677] bond12 (unregistering): Released all slaves [ 552.387140][T25680] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.5465'. [ 552.410356][T25680] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.5465'. [ 552.749384][T25703] vcan0: tx address claim with dlc 0 [ 553.588064][T25608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.773013][T25712] validate_nla: 2 callbacks suppressed [ 553.773030][T25712] netlink: 'syz.3.5474': attribute type 4 has an invalid length. [ 554.312799][T25750] hsr0 speed is unknown, defaulting to 1000 [ 555.092417][ T1092] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 555.268947][T25780] netlink: 'syz.3.5493': attribute type 83 has an invalid length. [ 555.692671][T25794] __nla_validate_parse: 7 callbacks suppressed [ 555.692689][T25794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5497'. [ 555.698900][T25805] netlink: 'syz.3.5498': attribute type 9 has an invalid length. [ 555.942131][T25820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5501'. [ 556.011008][T25820] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5501'. [ 556.159242][T25835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5505'. [ 556.212578][T25820] syzkaller0: entered promiscuous mode [ 556.240205][T25820] syzkaller0: entered allmulticast mode [ 558.081409][T25867] x_tables: duplicate underflow at hook 1 [ 558.153953][T25868] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5510'. [ 558.179453][T25876] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5514'. [ 558.210366][T25878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5515'. [ 558.273995][T25866] syzkaller0: entered promiscuous mode [ 558.279501][T25866] syzkaller0: entered allmulticast mode [ 558.325547][T25876] vlan1: entered allmulticast mode [ 558.486379][T25893] netlink: 'syz.3.5519': attribute type 1 has an invalid length. [ 558.495867][T25893] netlink: 'syz.3.5519': attribute type 11 has an invalid length. [ 558.506538][T25893] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5519'. [ 558.517675][T25896] netlink: 'syz.3.5519': attribute type 1 has an invalid length. [ 558.528348][T25896] netlink: 'syz.3.5519': attribute type 11 has an invalid length. [ 558.536673][T25896] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5519'. [ 558.558491][T25900] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 560.168025][T25932] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5526'. [ 560.693024][T25975] tipc: Enabling of bearer rejected, failed to enable media [ 561.143866][T26003] __nla_validate_parse: 6 callbacks suppressed [ 561.143885][T26003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5545'. [ 561.267241][T26010] syzkaller1: entered promiscuous mode [ 561.284307][T26010] syzkaller1: entered allmulticast mode [ 561.295980][T26012] veth0_to_bond: entered allmulticast mode [ 561.315644][T26014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5548'. [ 561.503126][T26023] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5550'. [ 561.672911][T26035] sit0: entered promiscuous mode [ 561.726821][T26040] netlink: 'syz.1.5556': attribute type 3 has an invalid length. [ 561.736705][T26040] netlink: 'syz.1.5556': attribute type 3 has an invalid length. [ 561.745158][T26040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5556'. [ 561.753162][T26035] netlink: 'syz.2.5554': attribute type 1 has an invalid length. [ 561.800775][T26035] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5554'. [ 561.845521][T26032] hsr0 speed is unknown, defaulting to 1000 [ 562.042758][T26056] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5560'. [ 562.113420][T26064] delete_channel: no stack [ 562.186859][T26054] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5559'. [ 562.202354][T26054] net_ratelimit: 25 callbacks suppressed [ 562.202372][T26054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.258371][T26072] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5563'. [ 562.276751][T26072] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5563'. [ 562.288984][T26072] netlink: 'syz.0.5563': attribute type 5 has an invalid length. [ 562.314922][T26075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5564'. [ 562.508542][T26092] netlink: 'syz.4.5567': attribute type 2 has an invalid length. [ 562.566907][T26096] netlink: 'syz.0.5570': attribute type 21 has an invalid length. [ 562.583712][T26097] siw: device registration error -23 [ 562.777644][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.087622][T26129] netlink: 'syz.2.5577': attribute type 8 has an invalid length. [ 563.355055][ T1166] bond1 (unregistering): Released all slaves [ 563.367575][ T1166] bond2 (unregistering): Released all slaves [ 563.381792][ T1166] bond3 (unregistering): Released all slaves [ 563.412884][ T1166] bond4 (unregistering): Released all slaves [ 563.431960][ T1166] bond5 (unregistering): Released all slaves [ 563.449382][ T1166] bond6 (unregistering): Released all slaves [ 563.469151][ T1166] bond7 (unregistering): Released all slaves [ 563.482550][ T1166] bond8 (unregistering): Released all slaves [ 563.495379][ T1166] bond0 (unregistering): Released all slaves [ 563.499290][T26138] netlink: 'syz.1.5579': attribute type 1 has an invalid length. [ 563.515852][ T1166] bond9 (unregistering): Released all slaves [ 563.679903][ T1166] tipc: Left network mode [ 564.466393][ T1166] veth1_macvtap: left promiscuous mode [ 564.476120][ T1166] veth0_macvtap: left promiscuous mode [ 564.486674][ T1166] veth1_vlan: left promiscuous mode [ 564.492123][ T1166] veth0_vlan: left promiscuous mode [ 564.608991][ T1166] pimreg (unregistering): left allmulticast mode [ 564.679847][ T1166] pim6reg (unregistering): left allmulticast mode [ 565.479731][ T1166] IPVS: stop unused estimator thread 0... [ 565.536139][T26260] bridge0: port 3(gretap0) entered blocking state [ 565.544746][T26260] bridge0: port 3(gretap0) entered disabled state [ 565.604189][T26260] gretap0: entered allmulticast mode [ 565.814343][T26277] syzkaller0: entered promiscuous mode [ 566.009354][T26297] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 566.033360][T26299] netlink: 'syz.4.5620': attribute type 16 has an invalid length. [ 566.052244][T26299] netlink: 'syz.4.5620': attribute type 3 has an invalid length. [ 566.338704][T26330] __nla_validate_parse: 19 callbacks suppressed [ 566.338723][T26330] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5628'. [ 566.364748][T26332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5626'. [ 566.544308][T26344] syzkaller0: entered promiscuous mode [ 566.651310][T26351] team0: Cannot enslave team device to itself [ 566.711994][T26355] xt_CT: You must specify a L4 protocol and not use inversions on it [ 566.849857][T26358] macvtap2: entered promiscuous mode [ 566.856519][T26358] macvtap2: entered allmulticast mode [ 566.862324][T26358] veth1_vlan: entered allmulticast mode [ 566.874203][T26372] macvtap3: entered promiscuous mode [ 566.879577][T26372] macvtap3: entered allmulticast mode [ 566.923076][T26357] macvtap3: entered promiscuous mode [ 566.928419][T26357] macvtap3: entered allmulticast mode [ 566.966086][T26358] macvtap3: entered promiscuous mode [ 566.974688][T26358] macvtap3: entered allmulticast mode [ 567.178278][T26379] validate_nla: 2 callbacks suppressed [ 567.178297][T26379] netlink: 'syz.4.5642': attribute type 2 has an invalid length. [ 567.213651][T26379] netlink: 'syz.4.5642': attribute type 8 has an invalid length. [ 567.241819][T26379] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5642'. [ 567.255247][T26377] syzkaller0: entered promiscuous mode [ 567.277038][T26377] syzkaller0: entered allmulticast mode [ 569.112979][T26390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 569.470291][T26437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5657'. [ 569.502799][T26444] sctp: [Deprecated]: syz.3.5658 (pid 26444) Use of int in maxseg socket option. [ 569.502799][T26444] Use struct sctp_assoc_value instead [ 569.531723][T26447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5660'. [ 569.623616][T26449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.652501][T26455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.659800][T26455] IPv6: NLM_F_CREATE should be set when creating new route [ 569.692003][T26455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5663'. [ 570.040092][T26487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5674'. [ 570.134883][T26497] tipc: Enabled bearer , priority 11 [ 570.198180][T26499] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 570.205145][T26499] syzkaller1: Linktype set failed because interface is up [ 570.220182][T26505] x_tables: unsorted entry at hook 1 [ 570.226264][ T10] syzkaller1: tun_net_xmit 90 [ 570.227784][T26505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5679'. [ 570.296492][T26509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5679'. [ 570.325502][T26509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5679'. [ 570.342200][T26509] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 570.355600][T26505] lo: left promiscuous mode [ 570.408094][T26505] syz_tun: left promiscuous mode [ 570.468097][T26517] delete_channel: no stack [ 570.627051][T26505] ip6gre1: left promiscuous mode [ 570.635328][T26505] ip6gre1: left allmulticast mode [ 570.661697][T26505] veth3: left promiscuous mode [ 570.668838][T26505] vlan3: left allmulticast mode [ 570.676828][T26505] veth0_to_bond: left allmulticast mode [ 570.728131][T26505] bridge5: left promiscuous mode [ 570.733804][T26505] bridge5: left allmulticast mode [ 570.742101][T26505] veth9: left promiscuous mode [ 570.780043][ T6190] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.789835][ T5903] hsr0 speed is unknown, defaulting to 1000 [ 570.801154][ T6190] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 570.818490][ T5903] syz2: Port: 1 Link DOWN [ 570.839344][ T6190] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 570.854706][ T6190] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.863833][ T6190] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 570.901324][ T6190] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 570.918436][ T6190] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.943390][ T6190] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 570.956454][ T6190] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 570.983780][ T6190] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.018438][ T6190] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 571.039830][ T6190] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 571.212075][T26548] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 571.228622][T26548] bond9 (unregistering): Released all slaves [ 571.254611][ T10] tipc: Node number set to 2037673104 [ 571.571576][T26576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.638998][T26582] __nla_validate_parse: 6 callbacks suppressed [ 571.639014][T26582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5701'. [ 571.955444][T26617] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5714'. [ 571.970193][T26617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5714'. [ 572.049494][T26605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.083359][ T6190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.098809][ T6190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.296171][T26643] netlink: 'syz.0.5720': attribute type 1 has an invalid length. [ 572.297813][T26644] bridge0: port 3(veth0_to_bridge) entered blocking state [ 572.334216][T26644] bridge0: port 3(veth0_to_bridge) entered disabled state [ 572.352368][T26644] veth0_to_bridge: entered allmulticast mode [ 572.372038][T26644] veth0_to_bridge: entered promiscuous mode [ 572.386913][T26643] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 572.569529][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 572.621608][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 572.630034][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 572.650776][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 572.660415][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 572.805431][T26675] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.834129][T26664] hsr0 speed is unknown, defaulting to 1000 [ 572.924675][T26683] netlink: 'syz.4.5728': attribute type 3 has an invalid length. [ 572.932518][T26683] netlink: 'syz.4.5728': attribute type 1 has an invalid length. [ 572.941380][T26683] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.5728'. [ 572.966444][T26673] hsr0 speed is unknown, defaulting to 1000 [ 573.191895][ T1166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.203126][ T1166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2048 - 0 [ 573.213998][ T1166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 573.226960][ T1166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.238388][ T1166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 54212 - 0 [ 573.250863][ T1166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 573.340264][ T1166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.354939][ T1166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2048 - 0 [ 573.365311][ T1166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 573.376547][ T1166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.388786][ T1166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 54212 - 0 [ 573.399293][ T1166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 573.496990][ T1166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.508807][ T1166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2048 - 0 [ 573.519386][ T1166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 573.529941][ T1166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.545007][ T1166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 54212 - 0 [ 573.556048][ T1166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 573.604401][T26664] chnl_net:caif_netlink_parms(): no params data found [ 573.668059][ T1166] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.678122][ T1166] netdevsim netdevsim3  (unregistering): unset [0, 1] type 1 family 0 port 2048 - 0 [ 573.688409][ T1166] netdevsim netdevsim3  (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 573.699232][ T1166] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.710557][ T1166] netdevsim netdevsim3  (unregistering): unset [1, 1] type 2 family 0 port 54212 - 0 [ 573.741157][ T1166] netdevsim netdevsim3  (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 573.905851][T26722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5743'. [ 573.947935][T26722] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5743'. [ 574.020235][T26664] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.029650][T26718] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5743'. [ 574.062164][T26664] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.069877][T26664] bridge_slave_0: entered allmulticast mode [ 574.077850][T26664] bridge_slave_0: entered promiscuous mode [ 574.087626][T26664] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.094912][T26664] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.103392][T26664] bridge_slave_1: entered allmulticast mode [ 574.111416][T26664] bridge_slave_1: entered promiscuous mode [ 574.268165][T26664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.372464][T26664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.477383][T26752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5750'. [ 574.696422][ T1166] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 574.708360][T26767] netlink: 'syz.0.5751': attribute type 21 has an invalid length. [ 574.722501][ T1166] bond0 (unregistering): (slave ip6gretap2): Releasing active interface [ 574.731379][ T1166] ip6gretap2 (unregistering): left allmulticast mode [ 574.778257][ T5829] Bluetooth: hci1: command tx timeout [ 574.883474][ T1166] bond9 (unregistering): (slave gretap1): Releasing active interface [ 574.916062][ T1166] bond11 (unregistering): (slave gretap2): Releasing active interface [ 574.958588][ T1166] bond10 (unregistering): (slave geneve4): Releasing active interface [ 575.036660][T26775] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5754'. [ 575.312553][ T1166]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.331594][ T1166]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.344540][ T1166]  (unregistering): Released all slaves [ 575.358764][ T1166] bond1 (unregistering): Released all slaves [ 575.376855][ T1166] bond2 (unregistering): Released all slaves [ 575.389824][ T1166] bond3 (unregistering): Released all slaves [ 575.408387][ T1166] bond4 (unregistering): Released all slaves [ 575.428711][ T1166] bond0 (unregistering): Released all slaves [ 575.441720][ T1166] bond5 (unregistering): Released all slaves [ 575.457571][ T1166] bond6 (unregistering): Released all slaves [ 575.476457][ T1166] bond7 (unregistering): Released all slaves [ 575.489347][ T1166] bond8 (unregistering): Released all slaves [ 575.504013][ T1166] bond9 (unregistering): Released all slaves [ 575.517199][ T1166] bond10 (unregistering): Released all slaves [ 575.530261][ T1166] bond11 (unregistering): Released all slaves [ 575.570073][T26767] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5751'. [ 575.593125][T26784] tipc: Enabling of bearer rejected, already enabled [ 575.671881][T26664] team0: Port device team_slave_0 added [ 575.686550][ T1166] tipc: Disabling bearer [ 575.737142][ T1166] tipc: Left network mode [ 575.774313][T26664] team0: Port device team_slave_1 added [ 575.995955][T26664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.017401][T26664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.091765][T26664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.161984][T26664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.168955][T26664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.319475][T26664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.559567][T26664] hsr_slave_0: entered promiscuous mode [ 576.576483][T26664] hsr_slave_1: entered promiscuous mode [ 576.586271][T26664] debugfs: 'hsr0' already exists in 'hsr' [ 576.594154][T26664] Cannot create hsr debugfs directory [ 576.633755][T26806] erspan0: entered promiscuous mode [ 576.647980][T26806] erspan0: entered allmulticast mode [ 576.695779][T26850] netlink: 'syz.2.5769': attribute type 1 has an invalid length. [ 576.733970][T26850] __nla_validate_parse: 2 callbacks suppressed [ 576.733988][T26850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5769'. [ 576.851350][ T5829] Bluetooth: hci1: command tx timeout [ 577.481697][ T1166] hsr_slave_0: left promiscuous mode [ 577.499498][ T1166] 0·: left promiscuous mode [ 577.514480][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.542222][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.574080][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.607975][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.656805][ T1166] veth0_macvtap: left promiscuous mode [ 577.803673][T26898] ip6t_srh: unknown srh match flags 5F28 [ 578.189166][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 578.220410][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 578.255399][T26913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5776'. [ 578.415517][ T1166] smc: removing net device team0 with user defined pnetid SYZ2 [ 578.469866][T26915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5780'. [ 578.499764][T26915] bridge: RTM_NEWNEIGH with invalid ether address [ 578.772805][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.780048][ C1] bridge0: topology change detected, propagating [ 578.882479][T26925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5781'. [ 578.934081][ T5829] Bluetooth: hci1: command tx timeout [ 579.079222][T26950] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 579.079383][T26949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5788'. [ 579.133173][T26953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5789'. [ 579.173739][T26953] netlink: 208 bytes leftover after parsing attributes in process `syz.4.5789'. [ 579.175192][T26954] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5788'. [ 579.251642][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 579.326507][T26954] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5788'. [ 579.476065][ T1166] IPVS: stop unused estimator thread 0... [ 579.580263][T26975] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5794'. [ 579.599418][T26974] SET target dimension over the limit! [ 579.606598][T26974] netlink: 'syz.2.5793': attribute type 1 has an invalid length. [ 579.639703][T26974] netlink: 'syz.2.5793': attribute type 4 has an invalid length. [ 579.664736][T26974] netlink: 'syz.2.5793': attribute type 1 has an invalid length. [ 579.720885][T26974] netlink: 'syz.2.5793': attribute type 4 has an invalid length. [ 579.765260][T26664] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 579.850623][T26664] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 579.884475][T26991] netlink: 'syz.1.5798': attribute type 1 has an invalid length. [ 579.904608][T26664] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 579.999727][T26984] bond6: entered promiscuous mode [ 580.032887][T26664] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 580.369260][T26664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.419151][T26664] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.436541][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.443762][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.500436][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.507824][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.585870][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 580.944142][T26664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.011790][ T5829] Bluetooth: hci1: command tx timeout [ 581.063430][T26664] veth0_vlan: entered promiscuous mode [ 581.109889][T26664] veth1_vlan: entered promiscuous mode [ 581.214895][T26664] veth0_macvtap: entered promiscuous mode [ 581.244069][T26664] veth1_macvtap: entered promiscuous mode [ 581.278809][T27078] netlink: 'syz.1.5814': attribute type 1 has an invalid length. [ 581.284206][T26664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.360576][T27078] bond9: entered promiscuous mode [ 581.396130][T27078] 8021q: adding VLAN 0 to HW filter on device bond9 [ 581.416982][T26664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.477303][T27084] macvtap0: entered allmulticast mode [ 581.528424][T27089] netlink: 'syz.0.5816': attribute type 1 has an invalid length. [ 581.565511][T27078] bond9: (slave bridge8): making interface the new active one [ 581.574640][T27090] netlink: 'syz.0.5816': attribute type 1 has an invalid length. [ 581.587254][T27078] bridge8: entered promiscuous mode [ 581.597504][T27078] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 581.606843][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.651337][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 581.703558][T27089] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 581.704658][T27090] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 581.749701][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.874490][T27104] __nla_validate_parse: 7 callbacks suppressed [ 581.874512][T27104] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5817'. [ 581.955693][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.988164][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.069277][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.080510][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.228362][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.241173][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.444527][T27139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5824'. [ 582.476092][T27147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5826'. [ 582.495332][T27139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5824'. [ 582.580199][T27151] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5827'. [ 582.649808][T27156] netlink: 'syz.3.5829': attribute type 11 has an invalid length. [ 582.671701][T27156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5829'. [ 582.691842][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 582.913296][T27168] hsr0 speed is unknown, defaulting to 1000 [ 582.916189][T27175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5834'. [ 582.940132][T27175] macsec2: entered promiscuous mode [ 582.947063][T27175] macsec2: entered allmulticast mode [ 582.960869][T27175] bridge0: entered allmulticast mode [ 583.004601][T27178] vxcan1: Caught tx_queue_len zero misconfig [ 583.025819][T27176] pim6reg: entered allmulticast mode [ 583.123606][T27183] netlink: 'syz.2.5836': attribute type 10 has an invalid length. [ 583.148425][T27183] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.156177][T27183] bridge_slave_1: left allmulticast mode [ 583.162430][T27183] bridge_slave_1: left promiscuous mode [ 583.175222][T27185] netlink: 'syz.4.5838': attribute type 8 has an invalid length. [ 583.184930][T27183] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.215137][T27183] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 583.240248][T27185] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5838'. [ 583.272880][T27185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.306705][T27185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.327552][T27185] bond0 (unregistering): Released all slaves [ 583.416475][T27192] syzkaller1: entered promiscuous mode [ 583.431229][T27192] syzkaller1: entered allmulticast mode [ 583.537385][T27203] bond0: (slave bond_slave_1): Device is not bonding slave [ 583.544932][T27203] bond0: option active_slave: invalid value (bond_slave_1) [ 583.555730][T27203] bond0 (unregistering): Released all slaves [ 583.593445][T27202] wireguard0: entered promiscuous mode [ 583.598966][T27202] wireguard0: entered allmulticast mode [ 583.636780][T27202] team0: Device wireguard0 is of different type [ 583.699500][T27209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5845'. [ 584.093811][T27236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5851'. [ 584.140468][T27238] syzkaller0: entered promiscuous mode [ 584.157249][T27238] syzkaller0: entered allmulticast mode [ 584.512199][T27267] x_tables: duplicate underflow at hook 2 [ 584.648654][T27280] netlink: 'syz.2.5863': attribute type 3 has an invalid length. [ 584.726941][T27284] xt_hashlimit: invalid rate [ 584.950567][T27301] syzkaller0: entered promiscuous mode [ 584.956627][T27301] syzkaller0: entered allmulticast mode [ 585.088501][T27315] IPVS: set_ctl: invalid protocol: 51 172.20.20.61:20003 [ 585.098948][T27316] IPVS: set_ctl: invalid protocol: 51 172.20.20.61:20003 [ 585.154492][T27320] dvmrp0: entered allmulticast mode [ 585.239627][ T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.261398][ T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.285845][ T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.314266][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.340672][T27334] netlink: 'syz.1.5884': attribute type 64 has an invalid length. [ 585.482162][T27346] netlink: 'syz.4.5887': attribute type 2 has an invalid length. [ 585.482162][T27345] netlink: 'syz.4.5887': attribute type 2 has an invalid length. [ 585.482185][T27346] netlink: 'syz.4.5887': attribute type 11 has an invalid length. [ 585.489906][T27345] netlink: 'syz.4.5887': attribute type 11 has an invalid length. [ 585.669660][T27357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.692926][T27362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.047366][T27396] netlink: 'syz.0.5904': attribute type 83 has an invalid length. [ 586.060394][T27396] syzkaller0: entered promiscuous mode [ 586.066653][T27396] syzkaller0: entered allmulticast mode [ 586.682867][T27433] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 586.893823][T27446] __nla_validate_parse: 13 callbacks suppressed [ 586.893842][T27446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5916'. [ 587.107298][ T1166] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 588.376756][T27468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5922'. [ 588.434083][T27478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 588.464539][T27480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5926'. [ 588.482849][T27480] bridge_slave_0: left promiscuous mode [ 588.488678][T27480] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.539658][T27480] bridge0 (unregistering): left allmulticast mode [ 588.827624][T27505] IPv6: sit1: Disabled Multicast RS [ 588.853866][T27505] sit1: entered allmulticast mode [ 588.866709][T27511] netlink: 'syz.2.5931': attribute type 4 has an invalid length. [ 588.932224][T27516] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5935'. [ 588.975014][T27520] netlink: 'syz.2.5936': attribute type 1 has an invalid length. [ 588.982050][T27517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5934'. [ 589.032998][T27513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5934'. [ 589.071169][T27520] 8021q: adding VLAN 0 to HW filter on device bond5 [ 589.090682][T27517] gretap0: left allmulticast mode [ 589.104115][T27517] bridge0: port 3(gretap0) entered disabled state [ 589.143836][T27517] bridge_slave_1: left promiscuous mode [ 589.152199][T27517] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.174125][T27517] bridge_slave_0: left allmulticast mode [ 589.179872][T27517] bridge_slave_0: left promiscuous mode [ 589.187646][T27517] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.229963][T27517] bond0: (slave bridge0): Releasing backup interface [ 589.262661][T27539] netlink: 'syz.2.5941': attribute type 11 has an invalid length. [ 589.276330][T27539] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5941'. [ 589.462166][T27539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5941'. [ 589.496760][T27539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5941'. [ 589.548130][T27552] pim6reg: left allmulticast mode [ 589.687648][T27558] netlink: 187468 bytes leftover after parsing attributes in process `syz.4.5947'. [ 589.827717][T27572] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 589.877726][T27572] team0: entered promiscuous mode [ 589.891464][T27572] team0: entered allmulticast mode [ 590.223056][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 590.234161][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 590.242239][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 590.250520][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 590.258307][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 590.372879][T27588] hsr0 speed is unknown, defaulting to 1000 [ 590.386474][T27591] netlink: 'syz.1.5957': attribute type 9 has an invalid length. [ 590.877887][T27579] lec:lec_atm_close: lec0: Shut down! [ 591.213139][T27588] chnl_net:caif_netlink_parms(): no params data found [ 591.256354][T27645] 8021q: VLANs not supported on ip6gre0 [ 591.345239][T27600] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 591.353873][T27600] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 591.391413][T27588] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.398886][T27588] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.406362][T27588] bridge_slave_0: entered allmulticast mode [ 591.414260][T27588] bridge_slave_0: entered promiscuous mode [ 591.423112][T27588] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.430293][T27588] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.437687][T27588] bridge_slave_1: entered allmulticast mode [ 591.445816][T27588] bridge_slave_1: entered promiscuous mode [ 591.486792][T27588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.498336][T27600] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 591.500988][T27588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.533361][T27600] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 591.726698][T27588] team0: Port device team_slave_0 added [ 591.782577][T27588] team0: Port device team_slave_1 added [ 591.864877][T27588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.885769][T27588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.914882][T27588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.935436][T27600] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 592.010913][T27600] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 592.094603][T27588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.106035][T27588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.135582][T27588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.215850][T27679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 592.305350][T27600] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 592.362491][T27600] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 592.370787][ C1] ------------[ cut here ]------------ [ 592.376627][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci4 [ 592.383481][ C1] WARNING: kernel/workqueue.c:2271 at __queue_work+0xd53/0x1020, CPU#1: syz.3.5959/27600 [ 592.393431][ C1] Modules linked in: [ 592.397659][ C1] CPU: 1 UID: 0 PID: 27600 Comm: syz.3.5959 Not tainted syzkaller #0 PREEMPT(full) [ 592.407108][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 592.417194][ C1] RIP: 0010:__queue_work+0xd7e/0x1020 [ 592.422657][ C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 e3 76 a2 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 592.442280][ C1] RSP: 0018:ffffc90000a08c10 EFLAGS: 00010086 [ 592.448434][ C1] RAX: 1ffff11012b31951 RBX: 0000000000000008 RCX: ffff88804fb11e80 [ 592.456417][ C1] RDX: ffff888029fe9978 RSI: ffffffff8a9f1150 RDI: ffffffff90148cc0 [ 592.464404][ C1] RBP: 0000000000000100 R08: ffffffff901196b7 R09: 1ffffffff20232d6 [ 592.472381][ C1] R10: dffffc0000000000 R11: ffffffff818d6810 R12: dffffc0000000000 [ 592.480359][ C1] R13: ffff88809598ca88 R14: ffffffff90148cc0 R15: ffff888029fe9978 [ 592.488342][ C1] FS: 00007f3a379d56c0(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 592.497279][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.504056][ C1] CR2: 00007fc429118263 CR3: 000000003336c000 CR4: 00000000003526f0 [ 592.512048][ C1] Call Trace: [ 592.515410][ C1] [ 592.518285][ C1] call_timer_fn+0x192/0x640 [ 592.522925][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 592.528812][ C1] ? call_timer_fn+0xd4/0x640 [ 592.533512][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 592.538653][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 592.543812][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 592.549642][ C1] __run_timer_base+0x67e/0x8b0 [ 592.554505][ C1] ? ktime_get+0x45/0x200 [ 592.558856][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 592.564250][ C1] ? sched_clock_cpu+0x74/0x440 [ 592.569193][ C1] run_timer_softirq+0xb7/0x170 [ 592.574064][ C1] handle_softirqs+0x22a/0x870 [ 592.578944][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 592.583750][ C1] __irq_exit_rcu+0x5f/0x150 [ 592.588446][ C1] irq_exit_rcu+0x9/0x30 [ 592.592706][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 592.598485][ C1] [ 592.601420][ C1] [ 592.604368][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 592.610397][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 592.615709][ C1] Code: e9 30 ff ff ff e8 35 79 0c 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 b1 76 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 16 5f 0f 0a cc 48 8d 3d 6e 60 73 [ 592.635330][ C1] RSP: 0018:ffffc90005d777c8 EFLAGS: 00000282 [ 592.641416][ C1] RAX: 815bc7a3db74c500 RBX: 0000000000000246 RCX: 0000000000000046 [ 592.649440][ C1] RDX: 0000000000000002 RSI: ffffffff8e166561 RDI: ffffffff8c27b580 [ 592.657426][ C1] RBP: 0000000000000000 R08: 0000000000000008 R09: ffffffff964a6448 [ 592.665407][ C1] R10: 00000000b3f5d661 R11: 000000007d188f92 R12: 0000000000000000 [ 592.673391][ C1] R13: ffff888029fe9948 R14: 0000000000000000 R15: 0000000000000001 [ 592.681396][ C1] ? touch_wq_lockdep_map+0xb5/0x180 [ 592.686716][ C1] touch_wq_lockdep_map+0xcb/0x180 [ 592.691855][ C1] ? touch_wq_lockdep_map+0xb5/0x180 [ 592.697153][ C1] __flush_workqueue+0x14b/0x14f0 [ 592.702188][ C1] ? drain_workqueue+0xb1/0x390 [ 592.707044][ C1] ? __pfx___flush_workqueue+0x10/0x10 [ 592.712615][ C1] drain_workqueue+0xd3/0x390 [ 592.717299][ C1] hci_dev_close_sync+0x62f/0x10e0 [ 592.722489][ C1] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 592.728029][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 592.733055][ C1] hci_dev_do_close+0x30/0xc0 [ 592.737775][ C1] hci_rfkill_set_block+0x1f4/0x290 [ 592.742967][ C1] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 592.749140][ C1] rfkill_set_block+0x1d2/0x440 [ 592.754071][ C1] rfkill_fop_write+0x461/0x5a0 [ 592.758960][ C1] ? apparmor_file_permission+0x1f4/0x300 [ 592.764758][ C1] ? __pfx_rfkill_fop_write+0x10/0x10 [ 592.770130][ C1] ? security_kernfs_init_security+0x220/0x270 [ 592.776332][ C1] ? rw_verify_area+0x255/0x4d0 [ 592.781211][ C1] ? __pfx_rfkill_fop_write+0x10/0x10 [ 592.786674][ C1] vfs_write+0x29a/0xb90 [ 592.790921][ C1] ? __pfx_vfs_write+0x10/0x10 [ 592.795677][ C1] ? __fget_files+0x2a/0x420 [ 592.800277][ C1] ? __fget_files+0x2a/0x420 [ 592.804862][ C1] ? __fget_files+0x3a0/0x420 [ 592.809535][ C1] ? __fget_files+0x2a/0x420 [ 592.814128][ C1] ksys_write+0x150/0x270 [ 592.818460][ C1] ? __pfx_ksys_write+0x10/0x10 [ 592.823310][ C1] do_syscall_64+0x14d/0xf80 [ 592.827890][ C1] ? trace_irq_disable+0x3b/0x150 [ 592.832943][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.838998][ C1] ? clear_bhb_loop+0x40/0x90 [ 592.843752][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.849642][ C1] RIP: 0033:0x7f3a3979c799 [ 592.854047][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.873993][ C1] RSP: 002b:00007f3a379d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 592.882400][ C1] RAX: ffffffffffffffda RBX: 00007f3a39a16090 RCX: 00007f3a3979c799 [ 592.890359][ C1] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000008 [ 592.898325][ C1] RBP: 00007f3a39832c99 R08: 0000000000000000 R09: 0000000000000000 [ 592.906288][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.914244][ C1] R13: 00007f3a39a16128 R14: 00007f3a39a16090 R15: 00007fff6651cfa8 [ 592.922267][ C1] [ 592.925294][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 592.932563][ C1] CPU: 1 UID: 0 PID: 27600 Comm: syz.3.5959 Not tainted syzkaller #0 PREEMPT(full) [ 592.941918][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 592.952577][ C1] Call Trace: [ 592.955859][ C1] [ 592.958699][ C1] vpanic+0x56c/0xa60 [ 592.962725][ C1] ? __pfx__printk+0x10/0x10 [ 592.967308][ C1] ? __pfx_vpanic+0x10/0x10 [ 592.971811][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 592.977093][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 592.982295][ C1] panic+0xc5/0xd0 [ 592.986019][ C1] ? __pfx_panic+0x10/0x10 [ 592.990443][ C1] __warn+0x315/0x4f0 [ 592.994420][ C1] ? __queue_work+0xd53/0x1020 [ 592.999181][ C1] ? __queue_work+0xd53/0x1020 [ 593.003940][ C1] __report_bug+0x29a/0x540 [ 593.008550][ C1] ? __queue_work+0xd53/0x1020 [ 593.013316][ C1] ? __pfx___report_bug+0x10/0x10 [ 593.018343][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 593.023625][ C1] ? look_up_lock_class+0x57/0x110 [ 593.028729][ C1] ? register_lock_class+0x31/0x2e0 [ 593.033926][ C1] report_bug_entry+0x19a/0x290 [ 593.038777][ C1] ? __queue_work+0xd7e/0x1020 [ 593.043537][ C1] ? __queue_work+0xd83/0x1020 [ 593.048306][ C1] handle_bug+0xce/0x200 [ 593.052545][ C1] exc_invalid_op+0x1a/0x50 [ 593.057041][ C1] asm_exc_invalid_op+0x1a/0x20 [ 593.061883][ C1] RIP: 0010:__queue_work+0xd7e/0x1020 [ 593.067250][ C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 e3 76 a2 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 593.086848][ C1] RSP: 0018:ffffc90000a08c10 EFLAGS: 00010086 [ 593.092915][ C1] RAX: 1ffff11012b31951 RBX: 0000000000000008 RCX: ffff88804fb11e80 [ 593.100883][ C1] RDX: ffff888029fe9978 RSI: ffffffff8a9f1150 RDI: ffffffff90148cc0 [ 593.108855][ C1] RBP: 0000000000000100 R08: ffffffff901196b7 R09: 1ffffffff20232d6 [ 593.116817][ C1] R10: dffffc0000000000 R11: ffffffff818d6810 R12: dffffc0000000000 [ 593.124791][ C1] R13: ffff88809598ca88 R14: ffffffff90148cc0 R15: ffff888029fe9978 [ 593.132777][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 593.138602][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 593.143896][ C1] call_timer_fn+0x192/0x640 [ 593.148492][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 593.154297][ C1] ? call_timer_fn+0xd4/0x640 [ 593.158973][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 593.164094][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 593.169198][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 593.175029][ C1] __run_timer_base+0x67e/0x8b0 [ 593.179877][ C1] ? ktime_get+0x45/0x200 [ 593.184206][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 593.189580][ C1] ? sched_clock_cpu+0x74/0x440 [ 593.194437][ C1] run_timer_softirq+0xb7/0x170 [ 593.199376][ C1] handle_softirqs+0x22a/0x870 [ 593.204144][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 593.208908][ C1] __irq_exit_rcu+0x5f/0x150 [ 593.213492][ C1] irq_exit_rcu+0x9/0x30 [ 593.217728][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 593.223376][ C1] [ 593.226294][ C1] [ 593.229214][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 593.235186][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 593.240558][ C1] Code: e9 30 ff ff ff e8 35 79 0c 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 b1 76 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 16 5f 0f 0a cc 48 8d 3d 6e 60 73 [ 593.260157][ C1] RSP: 0018:ffffc90005d777c8 EFLAGS: 00000282 [ 593.266223][ C1] RAX: 815bc7a3db74c500 RBX: 0000000000000246 RCX: 0000000000000046 [ 593.274184][ C1] RDX: 0000000000000002 RSI: ffffffff8e166561 RDI: ffffffff8c27b580 [ 593.282142][ C1] RBP: 0000000000000000 R08: 0000000000000008 R09: ffffffff964a6448 [ 593.290103][ C1] R10: 00000000b3f5d661 R11: 000000007d188f92 R12: 0000000000000000 [ 593.298064][ C1] R13: ffff888029fe9948 R14: 0000000000000000 R15: 0000000000000001 [ 593.306044][ C1] ? touch_wq_lockdep_map+0xb5/0x180 [ 593.311343][ C1] touch_wq_lockdep_map+0xcb/0x180 [ 593.316470][ C1] ? touch_wq_lockdep_map+0xb5/0x180 [ 593.321763][ C1] __flush_workqueue+0x14b/0x14f0 [ 593.326799][ C1] ? drain_workqueue+0xb1/0x390 [ 593.331700][ C1] ? __pfx___flush_workqueue+0x10/0x10 [ 593.337181][ C1] drain_workqueue+0xd3/0x390 [ 593.341874][ C1] hci_dev_close_sync+0x62f/0x10e0 [ 593.347425][ C1] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 593.352964][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 593.357986][ C1] hci_dev_do_close+0x30/0xc0 [ 593.362657][ C1] hci_rfkill_set_block+0x1f4/0x290 [ 593.367848][ C1] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 593.373562][ C1] rfkill_set_block+0x1d2/0x440 [ 593.378415][ C1] rfkill_fop_write+0x461/0x5a0 [ 593.383271][ C1] ? apparmor_file_permission+0x1f4/0x300 [ 593.388982][ C1] ? __pfx_rfkill_fop_write+0x10/0x10 [ 593.394352][ C1] ? security_kernfs_init_security+0x220/0x270 [ 593.400498][ C1] ? rw_verify_area+0x255/0x4d0 [ 593.405344][ C1] ? __pfx_rfkill_fop_write+0x10/0x10 [ 593.410741][ C1] vfs_write+0x29a/0xb90 [ 593.414990][ C1] ? __pfx_vfs_write+0x10/0x10 [ 593.419745][ C1] ? __fget_files+0x2a/0x420 [ 593.424336][ C1] ? __fget_files+0x2a/0x420 [ 593.428926][ C1] ? __fget_files+0x3a0/0x420 [ 593.433602][ C1] ? __fget_files+0x2a/0x420 [ 593.438198][ C1] ksys_write+0x150/0x270 [ 593.442520][ C1] ? __pfx_ksys_write+0x10/0x10 [ 593.447377][ C1] do_syscall_64+0x14d/0xf80 [ 593.451958][ C1] ? trace_irq_disable+0x3b/0x150 [ 593.456978][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.463051][ C1] ? clear_bhb_loop+0x40/0x90 [ 593.467728][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.473613][ C1] RIP: 0033:0x7f3a3979c799 [ 593.478109][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.497709][ C1] RSP: 002b:00007f3a379d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 593.506120][ C1] RAX: ffffffffffffffda RBX: 00007f3a39a16090 RCX: 00007f3a3979c799 [ 593.514085][ C1] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000008 [ 593.522048][ C1] RBP: 00007f3a39832c99 R08: 0000000000000000 R09: 0000000000000000 [ 593.530011][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.537976][ C1] R13: 00007f3a39a16128 R14: 00007f3a39a16090 R15: 00007fff6651cfa8 [ 593.546124][ C1] [ 593.549438][ C1] Kernel Offset: disabled [ 593.553744][ C1] Rebooting in 86400 seconds..