last executing test programs: 4m31.231823611s ago: executing program 3 (id=2820): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250400000006000a006b983800080001"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x9}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040010}, 0x408c0) 4m28.117473968s ago: executing program 3 (id=2828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x1007, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) r2 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb9", 0x3a) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0xffc5) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={r5, 0x10001}, 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x38, r7, 0x671, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xff40}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x20040880) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r8], 0x14bc}, 0x1, 0x0, 0x0, 0x42804}, 0x2000c090) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x1007, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) (async) socket(0x10, 0x80002, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb9", 0x3a) (async) socket$inet6(0xa, 0x5, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0xffc5) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={r5, 0x10001}, 0x8) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x38, r7, 0x671, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xff40}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe"], 0x48}}, 0x0) (async) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x20040880) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r8], 0x14bc}, 0x1, 0x0, 0x0, 0x42804}, 0x2000c090) (async) 4m27.780719854s ago: executing program 3 (id=2835): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r2, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r2, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xcf, 0x8, 0x4eb}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={r4, 0xfffffff0}, 0xc) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={r4, 0xfffffff0}, 0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) 4m27.723204586s ago: executing program 3 (id=2836): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) close(r0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xe, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x5, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x2}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x2000000026fe, 0x0, 0x1}}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r8, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r8, 0x0, 0x0}, 0x10) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) socket$rds(0x15, 0x5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close(r9) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000180)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 4m26.86445539s ago: executing program 3 (id=2849): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6ad2, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, 0x0, 0x0, 0xe8469dacf6017451}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x0, 0xd, 0x2, 0x7, 0xffffffffffffffff}, @generic={0xe9, 0x3, 0x7, 0x6, 0x6}, @ldst={0x2, 0x3, 0x1, 0x6, 0x5, 0x32, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x81}, 0x94) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 4m26.753357152s ago: executing program 3 (id=2850): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x1, 0xffff}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000002c0)={0x2, 0xf1cd, 0x209, 0x2a70, 0x8000, 0x0, 0x7, 0x6, r5}, &(0x7f00000003c0)=0x20) (async) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 4m11.403904164s ago: executing program 32 (id=2850): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x1, 0xffff}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000002c0)={0x2, 0xf1cd, 0x209, 0x2a70, 0x8000, 0x0, 0x7, 0x6, r5}, &(0x7f00000003c0)=0x20) (async) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 2m24.568249706s ago: executing program 1 (id=3487): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x73}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @broadcast}, &(0x7f00000001c0)=0xc) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa2, 0xa2, 0x5, [@datasec={0x1, 0x1, 0x0, 0xf, 0x2, [{0x3, 0x1, 0xea71}], '*W'}, @enum={0xc, 0x2, 0x0, 0x6, 0x4, [{0xa, 0x8}, {0xc, 0x400}]}, @enum64={0x2, 0x8, 0x0, 0x13, 0x0, 0x2, [{0x4, 0x9, 0x8001}, {0xb, 0x80000000, 0x2}, {0xe, 0x8, 0x2}, {0xb, 0x2, 0xffff}, {0x5, 0xff, 0x80000000}, {0xb, 0x7, 0xc0}, {0x5, 0xfffffffa, 0xffff}, {0x2, 0x7, 0xbe}]}]}, {0x0, [0x2e, 0x2e, 0x30]}}, &(0x7f0000000300)=""/11, 0xc1, 0xb, 0x1, 0x1, 0x10000}, 0x28) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="34000000090000000c0700000600000000800000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000080ec010000000100"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r4, r5, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) (async, rerun: 64) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (rerun: 64) close(r7) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r7, 0x24, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0], 0x3ffffe17, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000001818200000", @ANYRES32=r9, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x90) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@alu={0x4, 0x1, 0x3, 0x1, 0xa, 0x40, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @alu={0x4, 0x1, 0x3, 0x2, 0x6, 0x18, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x481, 0x69, &(0x7f0000000100)=""/105, 0x41100, 0x4c, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000380)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[r3, r5, r6, r7, r9, r10], &(0x7f0000000640)=[{0x4, 0x5, 0x3, 0x8}, {0x3, 0x1, 0x10, 0x4}, {0x3, 0x4, 0x7, 0x2}], 0x10, 0xfffff801}, 0x94) (async) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000780), r8) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x164, r11, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r1}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc, 0x2a, 0xf, 0x4}, {0x5, 0x81, 0x91}, {0x100, 0xfc, 0x1, 0xe}, {0x9, 0x8, 0xb, 0xd6c2}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0x404c005}, 0x800) 2m24.564843403s ago: executing program 1 (id=3492): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1b, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x40000000, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000005f00000000000000180000001800000000000000000000009500000000000000640300000000000095"], &(0x7f0000001300)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) 2m24.536209356s ago: executing program 1 (id=3495): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000d00)=ANY=[], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=r1, 0x1, 0x1, 0x400, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f00000003c0), &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f40)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB='0\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="e8f11366db90767de08a1633d1aad492f1e10dbbb1310a70dd1fbdac0e56d6b1e8ecf891ef2513e9888e835f4ba0efc5856bb7c9b3a82b06b613956cc4241fedf9215984cd5de211b60a2053562e3a3e544c5f677e6a529620faf92d40ca2e3b4a59d33164b59dcf53b1fd5cbf691773cd2d0b1354b1a747c23b8f2dfbadf90783764a4d017ce7a5305d7d6e5eb9666ed3d525d69a6b6e8b6ce18f28cac9dae44654722ec27624887946a1a8ff6ae5d159cd1421c17478bda3b22358c1399bdde33d2e8a80d786d9ae8556def070c8ec2755cf15c51540e299b95baa", @ANYRES64=r4], 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000}, 0x18) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="050000000c00000000000000", @ANYRES32=r6, @ANYBLOB="940b5f7d80f384157600374485bd260802acf8d591d8e2d39e3c860f0bb24f12ca86cf3dbb32d39242a844faee6f87b3930b82dcad9182143191d2f556c9b94444eac54e93a410191018a99b96d391cf9ffba93715508d1226967da1e1f0512d7c8848a03b00f6cde424920cc68f7b7600ca8e91a2277d980e66448cb6c541842b3f89e65676c4c432ce402e10239ce57db0979d1a9c4f894c59c2bba0943776cff401ca558d9b3fcff01777eeb40376caa3a8", @ANYRES64=r4], 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0xb, 0x0, 0x0, 0x9, 0x4}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0xb, 0x0, 0x0, 0x9, 0x4}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r9, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x6, 0xd, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x100}, @ldst={0x2, 0x1, 0x3, 0x7, 0x2, 0xfffffffffffffffe, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x2, 0x8, 0x8, 0xcc0eada9560ff706, 0x14}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0xab}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}]}, &(0x7f0000001180)='GPL\x00', 0xf16a, 0xe4, &(0x7f00000012c0)=""/228, 0x41100, 0x42, '\x00', r7, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001440)={0x2, 0x1, 0x5, 0x2}, 0x10, r9, r6, 0x0, &(0x7f0000001480)=[r3, r5, r5], 0x0, 0x10, 0x7fffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r6}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0xce, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xf9, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b80), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={r1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xb, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, [@jmp={0x5, 0x1, 0x5, 0x2, 0x3, 0x8, 0xfffffffffffffff0}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe30}, @jmp={0x5, 0x0, 0x8, 0x9, 0x5, 0x30, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}]}, &(0x7f0000000740)='syzkaller\x00', 0xfffffff8, 0xcf, &(0x7f0000000780)=""/207, 0x41100, 0x4, '\x00', r12, 0x0, r13, 0x8, &(0x7f0000000bc0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x2, 0x10, 0x10, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000c80)=[r3, r14, r11, r11], &(0x7f0000000cc0)=[{0x4, 0x1, 0x8, 0xb}, {0x3, 0x5, 0xb, 0x8}], 0x10, 0x5e96}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={r3, &(0x7f0000001040)="056fc724cde897d4cdae2ec9f136581c6d6d792a134f1235d685f9093cc4a7124d64570070a33d2749a8cd996298daa519cb2ae8fcf0ef13aca24a4190be9f85796d2232a49864649e9a13827ec9ea010b0d98b0bfa4e2c118acbe99a7f164bb2cfe07d1354ad7c316804af48cbaecce2b4f8b7d188643e30198fab0cd051165e5f4ca64c84cf92d68cc29e34e72ce6ccec9a646d88b59e2a2497bae9ce473894b3b4142f7895a27c18492803b957742", &(0x7f00000002c0)=""/58, 0x4}, 0xfe8c) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={r3, &(0x7f0000001040)="056fc724cde897d4cdae2ec9f136581c6d6d792a134f1235d685f9093cc4a7124d64570070a33d2749a8cd996298daa519cb2ae8fcf0ef13aca24a4190be9f85796d2232a49864649e9a13827ec9ea010b0d98b0bfa4e2c118acbe99a7f164bb2cfe07d1354ad7c316804af48cbaecce2b4f8b7d188643e30198fab0cd051165e5f4ca64c84cf92d68cc29e34e72ce6ccec9a646d88b59e2a2497bae9ce473894b3b4142f7895a27c18492803b957742", &(0x7f00000002c0)=""/58, 0x4}, 0xfe8c) r15 = socket$can_j1939(0x1d, 0x2, 0x7) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r17 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r18 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r17, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r19, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r17, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r19, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r19, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x10000b9}]}}]}, 0x3c}}, 0x20000000) (async) sendmsg$nl_route_sched(r17, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r19, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x10000b9}]}}]}, 0x3c}}, 0x20000000) ioctl$sock_SIOCGIFCONF(r15, 0x8912, &(0x7f0000000580)=@buf={0x31, &(0x7f0000000540)="28c4a90dc59997c338b5b3affc6a7ade74792e87e49049138ee8ce684de92340e2207333b5d4429f216d4f1af56b1f1440"}) 2m24.253429825s ago: executing program 1 (id=3500): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000003ac0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xfffffffd, 'ip6_vti0\x00'}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x60}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) (async) sendmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f0000000200)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0}}, {{&(0x7f0000000a00)=@in6={0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x80, 0x0}}], 0x2, 0x4000040) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000003fc0)={&(0x7f0000003f40)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x50, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev}}}]}]}, 0x50}}, 0x0) (async) recvmmsg(r5, &(0x7f0000000500)=[{{&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, &(0x7f00000004c0)=""/45, 0x2d}, 0x2}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x16) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0xb0, &(0x7f0000000600)=[@in6={0xa, 0x4e23, 0x7f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x60}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x5, @remote, 0x9}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e21, 0x6f, @remote, 0x3}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e20, 0x3, @mcast1, 0x9}]}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000580)={r6, 0x6, 0x30}, &(0x7f00000005c0)=0xc) 2m24.065036346s ago: executing program 1 (id=3503): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000000300000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x28040) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r1, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x100, 0x0, 0x4}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x130, 0x40, 0x1, 0x70bd2c, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@nested={0x94, 0x2c, 0x0, 0x1, [@nested={0x8d, 0xf2, 0x0, 0x1, [@nested={0x4, 0x68}, @typed={0x8, 0xe, 0x0, 0x0, @pid}, @generic="3a40eb90f8d593d0f9b6183c04fe56fece862becddd7291d64d29bf64f1101744fcf890506a8e28f636ccf9b97b0ff7243f250eca135bee8efab4f05308fd75b90dfc2988243dd0161e3e4bc603b7aae01dda98b2f06ab0c6af6b36d082ac01f60ba1725c03f871e4be5c6f81c2bcf4a23728c6432e17590e8", @nested={0x4, 0x52}]}]}, @typed={0x4, 0x8d}, @nested={0x65, 0x150, 0x0, 0x1, [@generic="39586fcfbe8e9552ff2c622523d5424e53bab9ea3bdee36661409e6a91c0744bd70fb7d368bce6480981533258caecbd7cd7952c2b16594d82b4dcb298925ddd3f07aa1f3b52ed852da19e2d2feaddf2d938d8e7c72c2ac318df7e7c88ec42bc0c"]}]}]}]}, @typed={0xc, 0x22, 0x0, 0x0, @u64=0x8}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r6, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m23.68411683s ago: executing program 1 (id=3511): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, r1, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "76a647aed9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b9dc615afa5e9d443346faa573"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b852b444a4"}, @NL80211_KEY_SEQ={0x12, 0x4, "010f9797c63ffb2e0d127778ee55"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f167811025ab917c9a2fca373"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "c914bedb8af419c9b12ca5c16b"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4b8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, r1, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "76a647aed9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b9dc615afa5e9d443346faa573"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b852b444a4"}, @NL80211_KEY_SEQ={0x12, 0x4, "010f9797c63ffb2e0d127778ee55"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f167811025ab917c9a2fca373"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "c914bedb8af419c9b12ca5c16b"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8041}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ec0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4b8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r2, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) (async) 1m29.439317001s ago: executing program 33 (id=3511): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, r1, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "76a647aed9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b9dc615afa5e9d443346faa573"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b852b444a4"}, @NL80211_KEY_SEQ={0x12, 0x4, "010f9797c63ffb2e0d127778ee55"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f167811025ab917c9a2fca373"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "c914bedb8af419c9b12ca5c16b"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4b8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, r1, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "76a647aed9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b9dc615afa5e9d443346faa573"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b852b444a4"}, @NL80211_KEY_SEQ={0x12, 0x4, "010f9797c63ffb2e0d127778ee55"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f167811025ab917c9a2fca373"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "c914bedb8af419c9b12ca5c16b"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8041}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ec0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4b8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r2, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) (async) 25.995699554s ago: executing program 6 (id=4235): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="a3", 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0xfffffff9}, 0x2, 0xa, 0x40, 0x4, 0x1, 'syz0\x00', "a8ade9db18a9e1d93ee4ab381d1f2d57bf24d5a049b3e40ba20d8b981ce6931f", "af7af1d3b3c3ad33171d5f3ebe5ecc5d874c3a06e44c3142a7af088e33b5cb39", [{0x5, 0xb, {0x0, 0x4d}}, {0x7, 0x5, {0x3, 0x8}}, {0x3, 0x6, {0x3, 0x7ff}}, {0x3, 0x1fa0, {0x0, 0xff}}, {0x401, 0x5, {0x0, 0x5}}, {0x2, 0xfffc, {0x0, 0x1}}, {0x4, 0x9dc, {0x2, 0x7}}, {0x5, 0x400, {0x2, 0xfffffff9}}, {0xfffc, 0x1, {0x0, 0x800}}, {0xfff7, 0x10, {0x3, 0x6}}, {0x7df, 0x7, {0x0, 0x2d}}, {0x6, 0x9, {0x0, 0xffffffff}}, {0x4, 0x0, {0x3, 0xfffff000}}, {0x400, 0x1, {0x3}}, {0x0, 0x9, {0x3, 0xe}}, {0x0, 0xf, {0x1, 0x565}}, {0x81c, 0x1, {0x1, 0x2c}}, {0x6072, 0x7fff, {0x1, 0x3}}, {0x5, 0x3, {0x2, 0x3}}, {0x5, 0x9, {0x2, 0x4}}, {0xb9, 0xfffb, {0x1, 0x7}}, {0x0, 0x5, {0x3, 0x81}}, {0x5, 0x5, {0x0, 0xd65}}, {0x9, 0x6c01, {0x0, 0x5}}, {0x7, 0xa, {0x1, 0x7bd6}}, {0x6, 0x2, {0x1, 0xc600000}}, {0xfffa, 0x2, {0x0, 0x8}}, {0x2, 0xbe}, {0x6, 0x8c, {0x4, 0x5}}, {0x5, 0x5, {0x3, 0x3}}, {0x3, 0x1, {0x3, 0x3}}, {0xd29e, 0x3, {0x3, 0x1ff}}, {0x1e70, 0x5, {0x3, 0xfffffbff}}, {0x7, 0x6, {0x2, 0xff}}, {0x3, 0xc6b, {0x0, 0xf}}, {0xc, 0x5, {0x3, 0x3}}, {0x2, 0x1, {0x1, 0x9}}, {0x3, 0x0, {0x1, 0x9}}, {0x0, 0x7a8, {0x0, 0x6}}, {0x0, 0xfffa, {0x3, 0xa8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x20004c00) 23.414993823s ago: executing program 6 (id=4240): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@loopback, @multicast1, 0x0}, &(0x7f0000000040)=0xc) r2 = getuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x5, 0x4e22, 0xf9f9, 0x0, 0x80, 0x80, 0x5c, r1, r2}, {0x7, 0x7, 0x3, 0x3ff, 0x2, 0xffffffffffffeb2a, 0x7fffffffffffffff, 0x9}, {0x1419, 0x8000, 0x1fe0, 0x66e2}, 0x6, 0x0, 0x0, 0x1, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x3502, 0x4, 0x1, 0x6, 0x2, 0x8, 0xfffffff1}}, 0xe8) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000180)='macsec0\x00') r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000005c0)={&(0x7f0000000240), 0x6e, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000300)=""/8, 0x8}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/136, 0x88}], 0x4, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x2040) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000002240)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002200)={&(0x7f0000000680)={0x1b44, r8, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x645, 0x6}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x2}, @NL80211_ATTR_CSA_IES={0x39c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x4, 0x3, 0x0, 0x2, 0x7, 0x6, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0xf801, 0x3, 0x4, 0x7, 0x81]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x2cae, 0x4, 0x3, 0x7f, 0x4, 0x0]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x220, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd7, 0x2, "8ece44926ea183195ab26eefef1be1d6e50e3e195fb02a1fcd8290eda536667da65330960f90aede430b3a77717fccccbc204a60414da66ff23aa95fa469c03bfc9f73ffdc8555e483741fde6e2653d69f9e1024eaf32164fceb51d8969898e61d72d51dbae4b10add2c19b60a7f1685de5d3b5b05b6eccf713101556a768c97d3ab0c56302531477a0936ec2de30b20359d20b579a1f8754660b0854c1fcca6775111a6e188db3e8bf137c2ad783fba961c6e3359d37153f768972a1481c8d4679452e4f351385c35619545525bc8f2fe5811"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x92, 0x3, "a3af4490547e0e2391a2dc8dc173ba1d2e39e6531065762f5cc7fc3c60ac4e9986a32b44bea17689533813c6440e065e9de7d24e02885a76593045c1a20c3e396c3bff093996578d506cdf6bc715c6bdba4f6ab222da2939ad138ad16e63889ca7b54afcc872b3373c30ec2ec9f19efaded161cf22e5231b19dc83cdbfda9b4aef74d0fc03cb82397320fc54de76"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa1, 0x3, "8a26acf121ce675ab5782242dea6c66bd68ddc27fe31076813c6c87642bec390c439a5c791b353c5ff1ea6584cb695b9d2b0993e95bce1797f657b0561d6f54057f8aaf42e8bc79cf96f16ccefa00d430f979a6d10e2c2f231bc7843f4ce0c177b9807ca5783fd582085b619e4ae9837d67af75c400a10dfa4715328a5445c048ae7e1ab93bb53e948138b0436cd3ef3569540fc97a6afe18b75c90733"}]}, @NL80211_ATTR_IE={0xff, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x28}}, @fast_bss_trans={0x37, 0xf3, {0x1, 0x6, "1910a93a89d6551281f96db858dd4ced", "3a74dfdba4d43b67b50886c60a757e9d6b74b754914050be3dc6f900271b9d2c", "177104bea23a3200e0c75093646f24faccdd2ede0e0af378ae4118c89b031e92", [{0x4, 0x26, "a50744991cadf9b6dea2ffea8c7b6630c477aff2400a5537076d4f6a487f5b0792fe34631785"}, {0x4, 0x21, "22a2b05be53e21a262ae85233241bcef192356edc0befd04f8445ea42800f4a3b2"}, {0x4, 0x1b, "f5479ed3921bb6c12c4c92b3977b1fb102269c41af2987421b84de"}, {0x4, 0x2, "2bf8"}, {0x3, 0x22, "63cc7149125701de970e17e679e751a7c7a1ecc08d955042d8c0e406a1bff3696ea3"}, {0x2, 0xf, "915fe4e8b5a5492af0ece8d3fa8206"}]}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x37d0, 0x8, 0xfffd, 0xff, 0x691, 0x2, 0x3, 0xffff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xffff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0x8, 0x200, 0xfffa, 0x80, 0x6fca, 0x1, 0x40, 0x2d, 0x4, 0xecc7]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0xf, 0x40]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1778, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x316, 0x91, "0c9b1b3c31ae68a9d7d3185bf65527084c23f658e7737f09e27300a2456ff8261e29504c20a2f44aac3a32b9ceba4f6ea233ddb8f77bbdb01d5062490308abfca03107a36a7d04410a2ba7d414015e406d11ee0f688d854e2fbd27a0e07f5c542ab565b5f00723d665922db751305c22d5db1f1fa85ba3cbb57aeec431bcf568f75c07c6a06c83628bd789664370be86d1db52320182f2ca30fd091115908e1b79adc29f047a6b1cbb7dcea14a3e94bd8f6ada6c9ae88cbfab443f4d1b07cc73872af3560654a183e3d6456bd28484f0ebc0df994ab9c7a8273a84c67076721601817fba572853dc2b9cb93da2d0c00950699cfc98c6e65d248db4be658c669fca699511827002ea634c9b179c8fe4ecb340fe32c1143d585623aa288ac9e1ed2befd3523e2694226c90f924d5862be73f41803e0ddea0f942f199d6e1cfaff32174f55be457bf1bcda046a9e7d79ac7b3615d54351e158060bb2ecd7156b188c8b02c72ee642ce9b7389586b544ab54e8ff9113db2d9ce26f17969083c27a6f7ad6bab62ec0411db20621b5651e7d82fe479fdf86857225217e40f80931f58861553fa9ea11be585c8fe1f1c7badab80b6595969a878154af995b0dfd091865771b0da37f390f6b02845ef46d454db53130969dc8fd6b1cc138d00dee3e45b70894eb0c7994ef57f8e072c867fcb0859d2da61e80a0a868f6c35f32c7ebe08d77484c2ff717226c5eabafba63be7663231cb4d241009637f59c1f3fd33ce8415c2891eb1c3b5d69d3291a72598802c769c6b4c68cca2b219c5c1ba64639cf50ea1f2c4d6d8c602ec274dbbf0dbc226996f2ec1025c74dbc4c9cbd7a86418ca662ce9e8e029ec8ec5379172523985efeacbe0914e66d6e0e5db7dbdbf5ae6ac97e394cb2b6d077481da1d0654bd2311ca2578fb131eb705f6d155025bd111a1eb305eb095d8ac67c51c85355f9687262994f64a8377060ee15842fc271230e056e711b869dbe5de6e6dc50ac3d592bed40963bb6ff2204c4e5f0488fb063ae451238f736094c5ff7f34b9e147eacc416925ac7ed8f6b5f205502f18758f51829325fccaa99ebbc63e5c464aa705ba86ff852"}, @NL80211_ATTR_IE={0x9f, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @challenge={0x10, 0x1, 0x7a}, @mesh_id={0x72, 0x6}, @random={0x4, 0x31, "f1c4582cd3023cc1dca4e4e384a458ef8ae9cc9e0448e8800beee0a756be5699bd7607421fba861cc51454e984bc763241"}, @ssid={0x0, 0x6, @default_ap_ssid}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @random_vendor={0xdd, 0x43, "015fa240f61e0ffda2a2ee048689ed7f11473a7b90da9f56dbb0612195aa0aff77599056c9ba3ab778b134fac6529097b27309f1073e00b3be37fc58d8ce8011592128"}, @challenge={0x10, 0x1, 0xce}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0xf, 0x0, 0x1, 0x6]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x18d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_a, @device_b, @random="266bd204b2fe", {0x8, 0x10}}, 0x2, @default, 0x1a5, @val={0x0, 0x9, @random="b53bb992ff45b1dd49"}, @val={0x1, 0x5, [{0x18, 0x1}, {0x36}, {0x16, 0x1}, {0x36, 0x1}, {0x1}]}, @void, @void, @val={0x6, 0x2, 0xa2}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x1, 0x7, 0x0, {0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x3}, 0x6, 0x1, 0xd4}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x40, 0x2, 0x17, 0x6}}, [{0xdd, 0xf3, "ac7e54e7a0accc1b2c63bfc94c99b278bb760882f8c249c98a3d11b7d6ce76d07b3b225e3dd940dff964dd50371d96ab4e93268f0126484dec0fbbdf7501b7c6bcf45725ead4c99a9f43cabf54f89b265bbe871989f39050f2c7a3f420a2902fdbd9a6d0b491dd569f784da0c3839bfe9aa0ed68fa2e627ec8f8bc51c58d0c1deecd97b40471e62936f2c631c165977c422428f3906ce3541aecdfc2c6aec72955f1017e844e2238b55ac7c9f614d8d1ad347eb9bc5b82d07872292c502b07e6fd6139cf7642026258c3f9ca43368749eb28ffed07b73c8e1738afa7c9e79c9e7e429cb60f6f5c42f294bee394961d09641624"}, {0xdd, 0x15, "0cabb2e721291ceff7a8aa439290e6bd76e88015b3"}, {0xdd, 0x12, "02afc7b66f5c25a0608b5329bb9897ccaa0b"}]}}, @NL80211_ATTR_BEACON_HEAD={0x4b4, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_b, @device_b, @from_mac=@device_b, {0x1, 0x3}, @value=@ver_80211n={0x0, 0x400, 0x3, 0x1, 0x0, 0x2, 0x1}}, 0xc3, @default, 0xbb3, @void, @val={0x1, 0x2, [{0x1}, {0x48}]}, @void, @void, @val={0x6, 0x2, 0xc}, @void, @val={0x25, 0x3, {0x1, 0x34, 0xe1}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0xb0, 0x21}}, @val={0x76, 0x6, {0xc, 0x0, 0x23, 0x47e}}, [{0xdd, 0x8a, "34ea4a6859d449724a80e89aeb4192a0ea0571e2e304113246650a4b5872664e798cd0566a2f5086cbcd846ec7fb9aef828ea9838519d543a9d108d10816bd491d59642aab9933bbe4c9b2110aee10a6915cf0d004386443cc43c136ed31e2195bfe9b248c5bbb541d445c449c5af77f29174ff7a934df5a56f020bc5b0655a42e16e50b3f15401bca92"}, {0xdd, 0x19, "3f1591895e77ea0a963ace383e04bbdcddb79da0269e80c0c1"}, {0xdd, 0x8, "544103ee728e4cf3"}, {0xdd, 0xd4, "908e9d6bffd0e426bf894837e1c800aab74fcecb78a8fb4ff470f00afa5ab6dbbe97c694a28f4f2606e57c9fabb6e5972630391cff5c447bf7c869beb2cc24a6c660ab5a1f782bb167b8ae4d5081cdd286f015d5ec8e75c780747ba170d2688d0510e3b8ce8d737c58ced629bef4698806345a233ff117f26c828f5645213713e8fa150dfcb34e9a2234edfff2325560f2e13f76a43524318ca1ae8af429f44814bf4364fdc457e9fa0de0f93cca7f796f7fafc8c81708c2b7437a1e3776a19ef153b7baf7d365b70a20e0317c2e48822d3f1195"}, {0xdd, 0xfe, "6e2e0b72374ee2bafc4538af40439e8b732ec55aa1061e40511174239e96094ee566d8a30be9318c693aee96bc64ee35bc856be5dfe0f5282f80161cf3ed78612c276c1c39c12d80fc61df881115a5f34545e3681fa60cbe7d61fbf1affae51f8c1a1feba4a38b893f63ed870f960b8e6544b7af21f170c6fe3ec0785108527183383902fb0ad6112911e58568b650a322f1dca7ac015a8e81cf4b903b529bcc8f03e3a2bb61219bdf05c8b1e7ef48bfb40bff2c757d89afc74801172be1ea213c0539fd25e19db9586e10913fd33305f0e34775e2743f914d1c5d318ee5e55e432b8dadcaffaead627d81b2f52ed36261351e91f3aa07cd0bcd41d98388"}, {0xdd, 0x18, "b2a51062bf25b1cd9c0283bb663e964185ec559090b30d65"}, {0xdd, 0x18, "930af6b096623f6cecfdf6ee448a76b8efe258403b1748f1"}, {0xdd, 0xa4, "5618c5f543b401c032d1177ceb0ff72fecd264607172e30d35bc337d114a4fa738c011a2fa53a35299e1845b74f17d1df6c9149bca29eefea0fb6ad2bc8bca410b4a0128e24164d70f7cd8d304a2f812fc578ddb2c7722ed79310c8170e3c30b80c878e0b0fe11b19f9892e2e6a207b8364c1896e033cba2c1d2757f824d7147b9c2103ee5b14433c4b77c74bede42a22f7527f35b36a40c9b89f5b4864da7ae6f404983"}, {0xdd, 0xfc, "48fa86655fe8e6b5ddcc965e0016ff1b5862b71201b66bbe6837b397d8a4f2e745c5cfe3c474d615e11bb606e24fd537d6166461a0a502941585a4afdb7927f08a6f23e233764ab984fb2125d9ddf25862e0aba34238a9b67c6f5ec4393e8006ea1bf87f91672875aa22476c7cb03b8766783df2f7ad673d3fb1191175f5a7371c7c63c8a5b45f2d09a47ef9c1e33df12fc6c8a6defc7b0fbd6f083e373a61333ce407d40ddda6bd57ab463997e54630999494e8bdb2e49820427d6ea9cf19f0841aa09d28ba32114408e2a801f1c5a304f6e57cfb018caec63597480946da19ea2edcf1612425d9fb861caf984d7bbcd299086e2b96af4f09a16e36"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x52c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xc6, 0x2, "f8af9124b8d78125cfec9ccd726beb620c0cea40435e9ce2ee3b699ae7e8659ab4bc178d5a483c7c48bf933aa6fad1cf0f3af260c4a963b71e0e30c059131c9e5ec686a04d6ef4b4401b4c5af67b536a5816eb894bd2187f5667c3d7b7a50b38500c375864dfeddf762f6c54694b50161184123042b6ef89450039b8ca932be3035a6d8cef0d4d1c95315ce5cd5d024f1e3545123b6f3af7ed55ed34a2c5280713cafa72fe01fa7ef6261cba7378fb50c50ce72a1470703b7d4be707636bac10d3cc"}, @NL80211_FTM_RESP_ATTR_LCI={0xe1, 0x2, "e01cb22725404d1eae730ad949051a85a25495173de57a40f0ec7eaaa48f4a33123234d9b9e699afaeecef67e546874591dab152cb4e71db72ce8ec14b612e4a6217685102469c5633dc739da4815061d5cdfd4d6d0afece48af13a276907732c222060b5cba5ee51d022e5e461c587a61f903c7fe5e76468dee7c948f3ad0571254b33d5ce208d125ac6d340f8eb7779abee995557ce0b3523ecbc855e230189555831c3a6fb70ceebccaa08f1777c5846817b219382e158be89af44cf9bcd2d91b3710cf2ff4cb8806ee821293bd2995bc22e655f04036c568efca0e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb1, 0x3, "50144e686b3fbd8176e15dc633bd772d06d56bf88cb7ee81924d5cdcedecb9d34d7fa05ea3bd3a0aeac59e041cd28753cea38809f2d30ea1137ec7ffdb68e046c4de058c593c6cfc3b1aadce816d746671bdc0baa68d54aa46122b801f2bd80a4be75f362f8e5666af04c8d0d8197b07ec6ba3e3c51066edb8a5872a52529b7102445286f9cfd55dd9d80ed981799d3bf13a39acbf0942db29e463cbf0c8ddb6d66007cca2dc3d3d8635fd7071"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x34, 0x3, "a50181b6d0260c91b38663368c5b0141dfedbf3c7f0f27f1c51f53fff06b04a0096cc9064a25e8cb94bf8517a3beaceb"}, @NL80211_FTM_RESP_ATTR_LCI={0x62, 0x2, "9dafb0dae109db9023ebcd52920ea63cf00648fd44e2171862a95b984cb0f13b9d26dceb7b98b865f51f86b9777715e556cf3c3d632acb965226820911c91fc4483de521ed25719ee0aa8461fe2ac7faf712bb9a4d2e6d212ba6d8272818"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf1, 0x3, "315614e98a060ca02436defa3d142cc5a88a2ed9eab91080b2757fbeb78267fd6b12e06db7936f0afc386aeba1aaa5b0f4cba32d2cb8c292391a4037bebf0ccca6e7b3aee7bf9277e64d7f02692241ecb4ad76f5d7d3e85aacf9a9c16f6ca85dcb7a308125d2e23f706bff88e76448d28805c7e00f6a86d9ddf45375a85df289546084f966ff0f279cd3dff6a09e2488425a0a4c256385266ef76490414146f6b988dfa21c2331952ccc12d7986e07c32f944737732cbdf2fe0043b6caa87ee2bc2e786c95435cadd61879471ece3f7241ffb4f2d4ad2c75764218a5fdce94c1a57adde5ce813c0df1abbd6bbe"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3a, 0x3, "40cdd5760c67edadda8db53c51566f15c3116cdc9e8f18e32f3918cc94cddea62837f3714c5da6adc0570448e93dd5900445e245c86e"}, @NL80211_FTM_RESP_ATTR_LCI={0x74, 0x2, "53b63e5f5f0e16372d4406222f89a6c67837489a46b536ab95a0db2ebefebd9a74adedac91b37419cfe3e28999af37a4af601a1f34b6927a76af5740bcecf08bd335d5c617e05c017196d61a0351b73d614e90f13284f330973fcaadf8fcd2af4524c563c84cecf8defcfaadb7047a1f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x8a, 0x3, "d1228f694a2049f30d320fd36f5e3fa9e9c50ed36a5248d508dfa43a0e5d1468182e3ea9cf2650477e2ee119498979ae74311cea5528a039e3ed9371316ab992de1af57bc0670071928d19d949388ad1d6bf8c8b390a5a1b6ee0f1c919b4592c9b28081b0d299de1d6b380346e88786c6c04284f815380561503482d85449c48beade9c4738c"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x56, 0x80, [@prep={0x83, 0x1f, {{}, 0x2, 0x7f, @device_b, 0x4, @void, 0x1000, 0xffff, @device_b, 0xc}}, @dsss={0x3, 0x1, 0x9}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x7, 0x5}}, @chsw_timing={0x68, 0x4}, @sec_chan_ofs={0x3e, 0x1}, @rann={0x7e, 0x15, {{0x1, 0x9}, 0xc, 0x0, @device_a, 0x58e8, 0x7fffffff, 0xffff35f0}}]}, @NL80211_ATTR_IE={0x1d1, 0x2a, [@supported_rates={0x1, 0x8, [{0x36}, {0x1}, {0x6, 0x1}, {0x1296bbcf235687d5}, {0x4, 0x1}, {0x63, 0x1}, {0x12}, {0xc, 0x1}]}, @preq={0x82, 0x36, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xff, 0x3, @broadcast, 0x9, @value, 0x2, 0x7, 0x2, [{{0x1}, @broadcast, 0x8}, {{0x1}, @broadcast, 0x8}]}}, @ssid={0x0, 0x14, @random="eb0e2a090c72e3b48235cbf5c53a21ca9439eb33"}, @chsw_timing={0x68, 0x4, {0xff81, 0x3}}, @ht={0x2d, 0x1a, {0x2000, 0x1, 0x2, 0x0, {0x6, 0x4, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x400, 0x3, 0x2}}, @mesh_id={0x72, 0x6}, @perr={0x84, 0xf5, {0x2, 0xf, [{{}, @device_b, 0x424d, @void, 0x3d}, {{0x0, 0x1}, @device_b, 0x100, @value=@broadcast, 0x2}, {{}, @device_a, 0x3, @void, 0x1d}, {{}, @broadcast, 0x3, @void, 0x34}, {{0x0, 0x1}, @device_a, 0x5, @value=@broadcast, 0x12}, {{0x0, 0x1}, @device_b, 0xf, @value=@broadcast, 0x2c}, {{}, @device_a, 0x1, @void, 0x3c}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x10}, {{}, @broadcast, 0x8, @void, 0xe}, {{}, @broadcast, 0x1, @void, 0x19}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0xe}, {{0x0, 0x1}, @device_a, 0x5, @value=@broadcast, 0x26}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x3}, {{0x0, 0x1}, @device_b, 0x8, @value, 0x19}, {{}, @broadcast, 0x88, @void, 0x11}]}}, @ibss={0x6, 0x2, 0x6}, @preq={0x82, 0x46, {{0x1, 0x1, 0x1}, 0x64, 0x1, 0x5, @broadcast, 0x9, @void, 0x1, 0x7fff, 0x4, [{{0x1}, @broadcast, 0xfff}, {{}, @broadcast, 0x2}, {{0x1}, @device_a, 0x3}, {{0x1}, @device_b, 0xec11}]}}, @cf={0x4, 0x6, {0xdd, 0xb7, 0x0, 0x1}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xa7, 0x7f, [@mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0xae, 0x9}}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x0, 0x4, 0x5, 0x1}}, @random={0xe, 0x5a, "7009139922f2318ed036bd9b0283ea3bda9d94b6f3283b0dd4ae5ec0ee2e9f571bd8ed5ef9114bc9bbfa293a0bf447c2698bd348b94c86ecfaea1a5ff37f4a21c4066e4bbff3136e992b6961a9a0f11573f219b2f9acfa967554"}, @ht={0x2d, 0x1a, {0x800, 0x0, 0x6, 0x0, {0x91e7, 0x2, 0x0, 0x24d}, 0x6, 0x264, 0xfe}}, @supported_rates={0x1, 0x1, [{0x48, 0x1}]}, @dsss={0x3, 0x1, 0xa1}, @ssid={0x0, 0x6, @default_ap_ssid}]}], @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x540, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x2, 0x1ff, 0x0, 0x3, 0x6, 0x8, 0x3]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x18, 0xba, [0xfa, 0x1, 0x3ff, 0x694, 0x7, 0x658a, 0x80, 0x200, 0x2, 0x3]}]}]}, 0x1b44}, 0x1, 0x0, 0x0, 0x20008001}, 0x8000) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000022c0), r5) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000002300)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000002740)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002700)={&(0x7f0000002340)={0x3b0, r10, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe8, 0x4, "9b8a513d319dd8d71b0f5adb5fafe2ea0951fcb803c673b2289e71660b30b44ec97c0fb0a21c462b2f08f716e1a374d277b089fa4b8b918af5535e2a2b2fcc81a96b369095401dabcdcfddf2cdeb7a50fe9b3ba7455154fb7e9ec302b7f15337ab27303c571a2c054d86e81271d317a6479a9b1f39441876e9b022cf4fca8e4f70d550de61b8e27cbf6963caa2e4229b0d04635c0f01a385bd77d1f2f2b1ed1fcdb87aac7e67d1d9648d6d7a35ed39c9dac70ce1fdbeb35c3189e17f444ac55319abacb37d7e413c37f5fc608cd6d95bc9c4e565361c31ce31c20a7509a15fd8f00a7cc0"}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/-(--{$(&&\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd1f}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03\x03\x03\x03\x03\x03'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x33a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff2d71}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbc7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+)]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa5c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'macsec0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '}*-//\xd9[\xb4+,\xac:&&\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x40040}, 0x800) bind$x25(r6, &(0x7f0000002780)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) write(0xffffffffffffffff, &(0x7f00000027c0)="cf1b9710b7e887bdc86d761249d9b17d9ea58b4129f3a6dfe49984ccd2b41c254f6ff7028d216a694710fd8a0a91d9d04f2ddfff1d73d4b7d4df83e4301bf335c0f7132926840b7990e86bd02d4eeffb02042aea0e6dbf44bf3d59a7455f4f455f04512cc4ce83b51043af4d996c8c24814d9cfd65138d1145d7d5731434f6391db1ead6451a85dc1ead8a0f968cc071409a10fa8b9cf3af992e9e4582063a5cccf919dbad2ad1d70d0d016eea56313c6dc77bac9c641443c1707d5252bbd9fbd44501a6eb082cae5a4f24af9a937c9e2e6267efc0924e52031bfadf1e3eb391ae347d627ecedd2da2d7ca828f6ae0c2422076227961b822", 0xf8) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000028c0)={0xfffffff9, 0xb, 0x1, 0x8, 0x4243}) r12 = accept$inet6(r6, 0x0, &(0x7f0000002900)) setsockopt$sock_int(r12, 0x1, 0x2c, &(0x7f0000002940)=0x8, 0x4) recvmsg(r0, &(0x7f0000002b80)={&(0x7f0000002980)=@phonet, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002a00)=""/189, 0xbd}, {&(0x7f0000002ac0)=""/46, 0x2e}], 0x2, &(0x7f0000002b40)=""/30, 0x1e}, 0x22) sendmsg$nl_route(r5, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)=@newnexthop={0x54, 0x68, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x10}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_ENCAP={0x20, 0x8, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0xf0, 0x18, 0x1, 0x0, 0x69, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x44000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000002d40)={0x0, 0x40, '\x00', 0x1, &(0x7f0000002d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) listen(r5, 0x49ff8a69) ioctl$int_in(r7, 0x5452, &(0x7f0000002d80)=0x5) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000002ec0)={0xffffffffffffffff, &(0x7f0000002dc0)='\x00', 0x40400, &(0x7f0000002e00)={@_ha_fsid={[0x7]}, {0x0, 0x4f, 0x0, 0x6}}, 0x2ac7, &(0x7f0000002e40), &(0x7f0000002e80)=0x4}) getsockopt$bt_rfcomm_RFCOMM_LM(r13, 0x12, 0x3, &(0x7f0000002f00), &(0x7f0000002f40)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000002fc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000003540)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003500)={&(0x7f0000003000)={0x4d8, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x8, 0x1, 0x11cc, 0x45, 0x0, 0x5, 0x3, 0xd, 0x1, 0x7]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2d7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff9}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x48f, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_a, @device_b, @from_mac, {0xd, 0xb8}}, 0x95b1, 0x9, @device_b, {0x0, 0x17, @random="d666c21ae29fbfdee4291b902b2a04a6c91320c256b350"}, @val={0x1, 0x6, [{0xc}, {0x24}, {0x6, 0x1}, {0x5}, {0x6c, 0x1}, {0x4, 0x1}]}, @void, [{0xdd, 0x32, "91fdb4e6350fb216814427dd8e15aae5111ec88c12375f5c858ed27e69f1f6eaeaaf5485394368e3932da21c8b92fd0bdc07"}, {0xdd, 0xcc, "d6cb486e0d67176cb391e47dee3ed0c76b5ec783d5ed2ffd981d96e7c5c2584d25525a10e161e8649ebe349a0c01230cbe3259af08d15b0ffc8b447d1f1950dae799e470dfcc28808010cc5fb9f4e06ef9eaf00e256a8d3ff44975180333f231eff8ff7f1b05a17e06ab0034933e45abcc093cd2097806566ca226a0f707a7cc861acbb3c2e8c0e56a4b861d03a81c00d50f1797a7c8ed99f97202c1ef01cc46c9de1af5a322ef07bb5629c36299966a09b83afadfa8843e4be35a1896095f87d7133669b6d57b34eb2d3739"}, {0xdd, 0x9c, "dcdfc8e0c9c9b995d84e88b5525a38a57b1c29406cc01fe319a656e5ce67c92a51b5c323517baca8ca08f5fc276ae07c2d6dda0406b83cfd97fc46532028ba3ea22341eefc0bee21f546f4e4903a0c604377aac9374f37d10bb999513b08ddb35505fb235a94d614a795bc4da42660485c5a51d3eeec211616929e250c731c9a2d65f2e344944884823e1dfe9648e0b85f87239e9373628e13256990"}, {0xdd, 0xe4, "057bc6d8afa6c12a33fa14ec72c91fc0542da17a6791ee41705ae8378530909936b229cd6425852ab8eb15903706a20712e5c91e27c006f107825d689f7f246b264c52999926baeec2a21c325f29ec9a46ac3282ccdc22c5c4a4131dc7a218d7ccbe0356558d11ababe2f60510d6f99786bdf76ff30bce6f83a9f911de69a32732e8e63249c9bc1dca585240b85d4104bd4ef6f5e6b1d6995f3f8c2f8d60edf01f95d3ce1814bff539b2b767a06485fa905d24b4c1fb25bcf12e7d5685e14421426ff68d2b0e5e2cc5e7b69eab6f0395f0eab56281b12c1340069e80a6fcf8ab998bc53e"}, {0xdd, 0xec, "08ada9139e7a2da3d4f270f9ae60f0acabb53813239aecd519a824be4ea67480a25f2630bc5055376c2b2bce21e89007a98fd1b849867ecb42cd135ffb2a706349506ce62db4a44ae0741d4c0e3e43f1aeaa39fce2f0f0fb83760bcfb92d4c2b9331fcccd381a3b3179c15445219b52c5c6cc94e1d66f368324512b66f54d655281b30463abdbfaac0a353d8cf0a1876d191152d7d22137e15985bcd0e079ad3bb097c1bfbd2ce6a6f6efbc60027edecac2485ae7b041bf6d86fc60631f0c5595ad7aa22e74824694c78f7a90937cfe93a2924e0eea05a0619d67025047e8bb5ba9540b632a8e01aea9c5e99"}, {0xdd, 0x2a, "2e42456b3d9b6c12382de7a5aed8b3fc5dd5dd48fb9aa711dd75d90666c9449e3d8da0aaef67bea2e8e1"}, {0xdd, 0xa6, "e7aa6cdfcda0fc2df7b4d4f9365c1fce8786f6ab51ae18bf81f75933ebc23026f17c7d671c51258d05edadde139e276532e916927960e30b0b3928c1e40ed90f2f53d28c7630e956fb7938d1b4e2fd2f6d4da0aeb9a656655c489581b89263edf4f9dae05f5681b5c0e685b4bd5fe78d1d014317c5830467cc6a4e58e073cd213df48f422ebda6a66483c51b90fb617af4cf0d8cdb3e66e5bb7bf73a90bbc0946027e2dbae4f"}]}}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x8000}, 0x44005) socket$pppoe(0x18, 0x1, 0x0) 22.431607849s ago: executing program 6 (id=4260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x23}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a050000000000000000000a0000090900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 22.241227949s ago: executing program 6 (id=4263): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8024) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}]}, 0x54}, 0x1, 0x0, 0x0, 0xd0}, 0x20000000) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f2, 0x800, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}}, 0x10) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x168, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_DATA={0x7b, 0x1f, "f9022f1332d5ce49842d3f02e78a90710714fd2db4c7972cf77a669e27781eeb8ea7a9ff4c6b600ad8890d16218b03453e5b70c196c24366d9ea43251ac002f020c3fc52df6e094d1a1ab9f8cf24e9b4bb2d5021f89662014c6aea4241dc998150fc97dc87ef6150d5afb3347d6118d7c65a23069aa2d1"}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_DATA={0xc5, 0x1f, "2ba816ab7d3461733908520add9a17711d76d23b5d66f24ada089eeb31d904d568e7d3e1c2f91717f0a196e08afea3251efd4d914b826e3beab8064b95f3cf3df141d881b7f40fde640456e27a6eace23ae3729276f9e622ae5b724f442e2653af54e1db5e5df54eb2af43bac0071d7fdfec07b03646a230cf4edd35ff7d24ec5183d60cf711a7f4ff9d410c0bd93e9c837bea1650b1084deaa82c78208bb464749000981f93c69497257a884bfaf175bbb42b10023cf66cc0abab6bd1995f3123"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7a04}]}, 0x168}, 0x1, 0x0, 0x0, 0x810}, 0x40080) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000a40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x22c, r0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x65}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0xff, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0x85, 0x5b, "3d8de5aa9b163b2fa2e36312842f95e211a10ba92847acae5cb20c6b1802651e1481e10e9dd0999524de4a3c690745b0a88ba8ea4826b59b43a2f38c0ab361f671076bac36b18652a2ac52f86f83d959079081319c10465359f02335fd2eb7ce2449a5582f407eb61b876682968575f1e10cc98c7e7f01e4454384175120400411"}, @NL80211_ATTR_FRAME_MATCH={0x54, 0x5b, "9e6fd7c7c437890ac3eda0cce106494209272b1e883803f808166f7f1b4b3f90f8e8ebf07e8066c9973d52ba23275088c28ec0ad2044e22203c397423e94eb0274ebb23275aff1ce0fd822a050b0a52c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd627}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x80}]}, 0x22c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000a80)=@l2={0x1f, 0x0, @any, 0x5, 0x2}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000b00)="68530844cb56e3898ad2d9f2a4e8abda04059cfee6173256ab09d5fc8e9be0b91ac3110a6b2b217c1389d7c5c0077aba712ed3439d0b946a72cc093e6984af2419", 0x41}, {&(0x7f0000000b80)="2dc73d25f58600ef2cb5eaa7e47e14503f3780a3fd324bef1ff0c4f5d65254fb414067a19e48d27c217cd524d178757d2ffaec8843b19cf2c5bc9ba53dbe9c5c8f2dac4092aa88f416749e10e55caa3e7173b77bdc15b51e65688bac65a7b093eeb3b0f383f36552c5dd35a6d2ae488a808c6a0be15fe92c3dbcaf538f6c16487a1b4e556b11280bb203a8d5211ad8ff94530dbcce2994bbb636af4e26b90bab9d49d185771bd1e1c081747987c3e18a639f893d6be3fb9ef726a36ca30c77432f179a30edf7df4de33011345f5f624900c4645411292f3566a87a46bb5e90a026802f", 0xe3}, {&(0x7f0000000c80)="b7b357dc22cafa4cc2c9a9b61aabfd5116bd705b1eb5e914123656223a2a4c836e14e891cc5cd275fc174f46caa2430a07e2feca86833c085d5f8da93fc653a5bef4d967177a901af448884cf4c8980f503d29572e5b767424c8769e7dc5e24a421d2361cce1f896aebf918c5c630fb7f42e4c46b41dc701e311c107f92d6dbe227fabe4e78c91abea34ab", 0x8b}, {&(0x7f0000000d40)="f894eb3c7ad5a8854541850f4fb81675cece00b60d4405f25cb79734d1b31e475e8280a826fe4338ce0906c97e14bad6540c7b4edede873710b479b9cce22cf3893bb21420556c76ed727514001390584c44059befa7cccf0de82ea62c11ba3a2561d7dfd066e83c92034d39d6fef7f36b4fa76738796db767b14cd61d19a31dd7f7eac5c8e1fde71b0b8b3c2bfde1c9d18942eb12ae6ff7006894710744e1297760af6189ead335afdab9c76d32cf55751cfcaccaa9a58b88d8074476c0ffeacf29a24c8fba21313ea2246074aac807526fd51044a3119f8a49b8c2d30a09f092eb89aba2d286e52b037adb87cfb151ea", 0xf1}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000001e40)="d864b133b70bfd7d0de71f838ce66cf22b524735b7a4add941248dbc509a6a5f0359937bdcabecc9f66af3e123e61a2a2f21aa370d3e085e64e404cb40b88b86b78b78b6971a5ac14e2df79ef5e18c508df3ad2f522f97a0df39a45fcffbd8779487f95a65bf141f6d38a3eee0843f1786683843cdc997cc9849231c3e0443c6fa98aff345508bfe01ffac07c446255462", 0x91}, {&(0x7f0000001f00)="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", 0xfa}], 0x7, &(0x7f0000002080)=[{0xd8, 0x10e, 0x800, "fd366b2dd8b2b864d818e9cbacd80e2dcfcfbb1a9e5e3cb4d24d0f9e69fb69e35eb925b4525d6a30d6984771e6cfd0a954e2711340c2ecbf0736f2b93e2b19e8fb0195ba594e18ccf917ba2f98f82edcff38800db03d25e243cecbf4f4bbfbcabe2402aa1b7208662ba5264fa2bc7a39652b6bdb3212253f83ce64393cde13f44256c096b10c2005b0f90c5aa5dafed188e5a3a4a478799cfc9c9c113fab29a8ae085321715825ded1b5a74eec5a10b4b9b157fd16cf3ac9f48c7c49d71b182da9b5c0"}, {0x60, 0x10a, 0x6, "fb026600046c9d9a14b17130ab1d99176187ae8f680193b813011feca8490f713d6a4e6c134c684ea2598260264d0d27abff48d9d65f5d9ff65d90d1806cc579bac6cf4f4ec35eda0804e8"}, {0x58, 0x1, 0x100, "14f8c4fbc8f1bb484158dcee2275408ded952a34c8a3319094020dd5ec1adc09c233083c4a0638f26645f05f0e5063c9ff5468489db5bd734cb2cd0eda61593e8169"}, {0x50, 0x110, 0x10, "b3e8bc40b6809f7d321dcccc664bee8fdd3bb149e55b1d7cd734aabbe2bb4f58c712160fc57aba60c2dbca9f2859bf51aaf92ec2903a395665e80e"}, {0x70, 0x112, 0x1, "9841db240c00453202042b9e637dc652d1da971ebcc401aa3e9e13216f15f97157cc1f37d1ec35494bec01ad99ceaa890a528d333e8cff2422350195e828223b9f5f8432fa66eff79814196b673d77fa48cf30375879773323304cb27b84d7c5"}], 0x250}, 0x20000080) (async) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000002340), &(0x7f0000002380)=0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000002500)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x50, r7, 0x43c330b9e789cc4b, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x50}}, 0x4000) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002580), r6) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f00000027c0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002780)={&(0x7f00000025c0)={0x1bc, r8, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x178, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a1c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x675e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5762524d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf1ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b0e4cab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69b9caf9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b257130}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6743083}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec71}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1795}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d325851}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5678644b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c37a9c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10e23861}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22ed0aa6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c34dcd6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x93ee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514c1a6a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f47}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51436f5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb79a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x442d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2cd1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fb8431c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef08}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45ca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c49c2ea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50686735}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf1c7}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78797f9a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23e1ca95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b16}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9bf2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x670d9240}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e660ea1}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f2d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a788bd9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67a31d92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaade}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11e096e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7be1d94b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b043b0b}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x88}, 0x40805) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x90) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002940), r4) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000002ac0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002980)={0xc8, r9, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8afe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3812}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0xc8}}, 0x8d5) (async) r10 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002b00)={0x0, 0x80}, &(0x7f0000002b40)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000002b80)=@assoc_value={r11, 0x2}, &(0x7f0000002bc0)=0x8) (async) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000002e40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002c40)={0x1a0, r0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x60, 0xac, "debb9214917d4c73623ef35615c84697c2c77e47ac79d44bb16885f5aaec802cb511dfbeb67214b20e1dfe12279b4305ed13d6766e170c0104901f9b2f784e297d281a4c29dfab55d5d640a49447de867ee93f45f231e4d337f5f9da"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xe0, 0xac, "193e581d97ff418e80f6e7aeb4708dd3feea56971ee2534e6637419f9169da80d46d9a73493aa34ebec8cf60d22fea90618837a64c2905df329e3d73b2a2086c71e44b7d73c13d8c5102257a1b57a0b364abb0127180f5f39e12561e731eda0197e4afbf0fa247b4085341521b256c2a21dc62d7c5788b086d4f163083aea88df83ae20a28f37cbd2a8302c5c3b84ba4966b4b66a01ed20eabb877c1b54dc63ce6665dea087436d729f75a4f314ace911e5ee8f59ef7beb4ff08afc6e3678ba4e7f4b7e2b16744d1ffebc29cb551d957db1154df331c1e638f512dec"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xa0}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5b2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x9}}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xdc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4080}, 0x88010) (async) setsockopt$IP_VS_SO_SET_EDIT(r10, 0x0, 0x483, &(0x7f0000002e80)={0x67, @private=0xa010101, 0x4e24, 0x4, 'none\x00', 0x5, 0x4, 0x67}, 0x2c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000002f40)={0x0, @in6={{0xa, 0x4e23, 0x8, @mcast2, 0x7fff}}, 0x90b8}, &(0x7f0000003000)=0x90) 22.128830349s ago: executing program 6 (id=4265): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x6a4, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x670, 0x2, [@TCA_BPF_ACT={0x66c, 0x1, [@m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xe8, 0xa, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x120, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xe5, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2578f669067fc7f4e7e11e7d6206ac703d98c3cd3b5372b60c63437cedd6c47eeb235ad519ca418c057a0c2e2efdad1db459ffde7207d4b45"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x230, 0x6, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @remote, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x401, 0x7, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x0, 0xd}, @private=0xa010100, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x4, 0x10000, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe21, 0x1, 0x3, 0xfd30, 0x1}, @remote, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @broadcast, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x7, 0xfffffffb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @loopback, @rand_addr=0x64010100, 0xffffff00}}]}, {0x9d, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f47be19f4cc6f84d49f14e97170ef06821de0ad03324f247a528ffe670b5612e99cdea1c052893a8bebddc718dcdb6f83131ecdce1ff76574eb3bd9c8a9b939e1f685c662f3dd9528cd9f8393594571e1dfda71bd155c1a9a37b984aaccd6f7451"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x110, 0x9, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3ff, 0x0, 0xb, 0xd}, 0xf40f}}]}, {0x38, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a166afa2d80373ea83920403cb721db30d012aa4e92778532221b7b7d71aecab94a386e5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x0, 0x0, @private}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 22.037768363s ago: executing program 6 (id=4267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061119400000000000620000000000000950000d700000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd95, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r5, 0x7, 0x5, 0x1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r6, 0x1, 0x6, @random="4840fb6ee8c8"}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x70, r9, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r10, 0xc20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}]}, 0x24}}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061119400000000000620000000000000950000d700000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd95, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000040)=0x84) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r5, 0x7, 0x5, 0x1}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r6, 0x1, 0x6, @random="4840fb6ee8c8"}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x70, r9, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) (async) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r10, 0xc20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}]}, 0x24}}, 0x4000004) (async) 6.956058627s ago: executing program 34 (id=4267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061119400000000000620000000000000950000d700000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd95, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r5, 0x7, 0x5, 0x1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r6, 0x1, 0x6, @random="4840fb6ee8c8"}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x70, r9, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r10, 0xc20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}]}, 0x24}}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061119400000000000620000000000000950000d700000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd95, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000040)=0x84) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r5, 0x7, 0x5, 0x1}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r6, 0x1, 0x6, @random="4840fb6ee8c8"}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x70, r9, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) (async) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r10, 0xc20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}]}, 0x24}}, 0x4000004) (async) 1.994150571s ago: executing program 4 (id=4533): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d2aca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c437dc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc28206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418df19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x100, 0x40, '\x00', r1, @fallback=0x3, r2, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x2, &(0x7f0000000400)=[r5, r6], &(0x7f0000000440)=[{0x3, 0x1, 0xf, 0x4}, {0x3, 0x2, 0xb, 0x1}], 0x10, 0xa}, 0x94) 1.852014962s ago: executing program 4 (id=4535): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20050800) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) recvmmsg(r1, &(0x7f0000009e00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000040)={0xff, 0x4, 0x3}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x4}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendto$packet(r1, &(0x7f0000000340)="7b3c3fcb02b0910a49a86399816272596f5eca58789bea56bfe8a980f85f203ed24eb1720582ce860a5a91474f49dc624fd64925ba52bf2261e179742e5233b1eb12c8ac76c81ba6d68b231d31e030242d3848462ad6b479c09656c28c5583a874eda34e4f65962644c287511d170f3413657b78474f3867bdab55092efb9e91bf7ad4bb06e90cee84001b60e2859419204e6962fd6998f204a9d7bd25f14164d58f6ae643f05d9f81154578c78c68b823f3843030bcce534fcd7a415d7147e5cba12ef1de55dc", 0xc7, 0x80, &(0x7f0000000480)={0x11, 0x19, 0x0, 0x1, 0x40, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x1, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000080)=0x3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.679745745s ago: executing program 2 (id=4538): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000dc36f10000000000030000001801000020786c2500000000002020cd7b1af8ff00000000bfa10000000000000701c5b0e409ffffb702000008000000b703000000000000850000006e0000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x90) r0 = socket(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0xc400) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map, 0xffffffffffffffff, 0x15}, 0x20) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="56b7b6bd5d6fd5db9098916e0a08a5f246300a7cf8dff49dc6ddc389884ed3867136891886d7d672a77be0e685b7a2b97e7ce42d2db424027d5fce2a77565dae34f5dded8562c9c67b87c2afa001c4db77b6e47078648bd1b0479d93ca4b0644d938a4c6d572dc8365c84ab8f19f38ad678e915c71eb2161c8f58ef911b1701393c1eba26cbbe546f70b027bca8e8bbd6e0d07251c0972d2fc3b16c1d476eaaa599154df41bdd73816e3940fd72ebff2c38d813617d3908bde3fe948df", @ANYRES16=r4, @ANYBLOB="00012cbd7000fcdbdf2519000000070006000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc014}, 0x4000000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r9], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000dc36f10000000000030000001801000020786c2500000000002020cd7b1af8ff00000000bfa10000000000000701c5b0e409ffffb702000008000000b703000000000000850000006e0000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x90) (async) socket(0x2, 0x1, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0xc400) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map, 0xffffffffffffffff, 0x15}, 0x20) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r5) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="56b7b6bd5d6fd5db9098916e0a08a5f246300a7cf8dff49dc6ddc389884ed3867136891886d7d672a77be0e685b7a2b97e7ce42d2db424027d5fce2a77565dae34f5dded8562c9c67b87c2afa001c4db77b6e47078648bd1b0479d93ca4b0644d938a4c6d572dc8365c84ab8f19f38ad678e915c71eb2161c8f58ef911b1701393c1eba26cbbe546f70b027bca8e8bbd6e0d07251c0972d2fc3b16c1d476eaaa599154df41bdd73816e3940fd72ebff2c38d813617d3908bde3fe948df", @ANYRES16=r4, @ANYBLOB="00012cbd7000fcdbdf2519000000070006000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc014}, 0x4000000) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r9], 0x20}}, 0x0) (async) 1.443922033s ago: executing program 2 (id=4541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100)={0x27, r1, 0x0, 0x4, 0xbd, 0xb, "bb26dba02ab6c553410f740e3ee974965316a1580d8302353ec193d25ac7f6f008bff1552486aaad366f964a2b1ec51d351d62a7654924dbdcfe155633edac", 0x19}, 0x60) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x0, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0xfe40, 0x2, 0x1, 0x0, 0x3}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) 1.389767757s ago: executing program 0 (id=4542): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x700f, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0xa, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e1f, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fe}}, 0x0, 0x3}, &(0x7f0000003c00)=0x90) 1.374462006s ago: executing program 5 (id=4543): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="450400000000000000000a0000000c00018008000b00000000009aea7fce0f848c26ee8f"], 0x20}}, 0x0) 1.299663833s ago: executing program 2 (id=4544): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x40}, 0x1, 0x7}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x2}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r1, 0x2f, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r1, 0x2f, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000080)) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000080)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd26, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r7 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x4a, &(0x7f0000000040), 0x4) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f00000000c0)={0x16, 0x20, 0x3, 0x8, 0x8}) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newspdinfo={0x3c, 0x24, 0x400, 0x70bd2c, 0x25dfdbff, 0x1, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newspdinfo={0x3c, 0x24, 0x400, 0x70bd2c, 0x25dfdbff, 0x1, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.24493068s ago: executing program 0 (id=4545): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000107000000000000000001"], 0x114}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000107000000000000000001"], 0x114}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001300)) readv(r2, &(0x7f0000001440)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) (async) readv(r2, &(0x7f0000001440)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003e40)={{{@in=@local, @in=@loopback}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000003f40)=0x54) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000bc0)=0xc) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)={0x28, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}}, 0x0) getgid() r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fedbdf25020202000900010073797a3100000000d1bb792f26273084ad26274e12dcd9487cb0f7dc02df0d9aead5ec57e7e8e43a18456b551518823f812d9ae2483f9690bbe34ce6893d42fb007aac4aed9e80c1808d22baf631cafed6479ef5"], 0x20}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000005240)) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000005240)) getgid() (async) getgid() accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000005280), &(0x7f0000005300)=0x60) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000005340)={r1, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000005340)={r1, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ee, &(0x7f0000000300)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005540)={0x6, 0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="001308473413e700e5990f21644281e99f855ee7c2f5a15f26c12dfefb16a72d226600c7f1edf78ca93371eea2de90130b4392baeb2c53a59427d1a6a7a085e6e20b621782812309f72e5131e44b6d19ab9dc550f533dd652c72d980fc3c5da1f566d5f5fc77175fe1368f263b6e757e52e90efa"], &(0x7f00000053c0)='syzkaller\x00', 0x1, 0x2, &(0x7f0000005400)=""/2, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000005440)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000005480)={0x1, 0x0, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000054c0)=[r3, 0x1], &(0x7f0000005500)=[{0x4, 0x4, 0x5, 0xb}, {0x0, 0x1, 0xb, 0x5}], 0x10, 0xffffffff}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000005600)={r1}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000005600)={r1}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000005640)) 1.137627008s ago: executing program 5 (id=4546): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) write$tun(r2, &(0x7f0000000080)={@val={0x0, 0x6001}, @void, @llc={@llc={0xdc, 0xf8, "0bb9", "0c6b1438c378e82b6b2c9eefaea81831517b1461c5ddd6899dfbd2cf1defbdd5aba83c74a6b06b9264e4ed116ad3709d307f0cf2e1be97aa1bfa51b69d77e2d65d6596ff0fc14d0ba03201a0ed4f0db59eb50a56e3389ce721e211df4253cdbd3e995b4599fcef69e7f681aa323596d19efe137b46b8ebecbf1785985c04d75f6206b3c84ea490adc46c338e7640aadee7cea18997ed2c13f0"}}}, 0xa1) 1.051877377s ago: executing program 2 (id=4547): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x7, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000080)=0xd) socket$kcm(0x2, 0xa, 0x2) write$tun(r4, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x62, 0x0, 0xb, 0x6, 0x0, @loopback, @rand_addr=0x64010102}}}, 0x22) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x86, &(0x7f0000000440), 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000380), &(0x7f00000000c0)=0x8) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000070000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000100000000000000000000000000000000000000009c4a277f025d97ceb9ae3d3a79d1841662c2d6f5693328b665ff0d07464eb407ef0674d1273025df2ea3344c9e9ea399b6e2d2e29feb76ef477c2c48081c655644e9b9f729870ca53b5b5d7b577023ab8539aa9c1c4f6d42a58d9d37f1974ceb2a09a88e30d582f5fb851753ae6c091dffd6c3b20b93a87cb8109d2056dbd399a539276dc52cc671a78de4f941ce5a7f569837615b4de21618561a0200000000000000772625856641b69d7ed92ff2acbce116e100eb25ece4827cd09226215aca03237f673d58190e3cc691"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0x6, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f00000005c0)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r9, &(0x7f0000000000)={0x10, @short}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="1803000000000000000000000000000018120000caee0341a2c637d35e33d5435bd36795f2fbd893a59b4851f9dc6aa8de4ff8ba10a992d6054114a55dbd68d692bf2270c14ef5cc9255a252028d0ead745006675952c0e31467d3deaada6c2a5798d93826dc7c30d1f4a66f713d27301e7eddddb5257d196a47af91995fad855431b3f686feb716dc4184aa0385ab4dda89c6bd84855832fd9a", @ANYRES32=r8, @ANYBLOB="0000000000000000850000001b0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xce}, 0x80) 1.047294796s ago: executing program 0 (id=4548): r0 = socket$inet6(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f00000003c0)={{r0, &(0x7f0000000240)='[[-\\%].\x00', 0x80000, &(0x7f0000000280)={@_ha_fsid={[0x5, 0xfffffffd]}, {0x0, 0x1, 0x3, 0x5}}, 0x4, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x3ff}, {[0x6, 0xf8, 0x2, 0xab1c]}, 0x38, 0x10, &(0x7f0000000380)=""/16}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0xf) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x11, 0x5, 0x3, 0x1, 0x20000, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x380000, 0x0, 0x1, 0xffff52f9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x10, 0x1, 0x9, 0x2, 0xa8, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, r11}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x1, 0x0, 0x3, 0x2, 0xfffffffffffffffc, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x77e}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='syzkaller\x00', 0x6, 0xaa, &(0x7f0000000bc0)=""/170, 0x41100, 0x10, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f0000000c80)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000cc0)={0x3, 0x9, 0x2, 0x3}, 0x10, r12, 0x0, 0x0, &(0x7f0000000d40)=[r6, r5, r8, r10, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r4, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r13, r4, 0x25, 0x8, @void}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x14}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x47}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x76}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 877.405769ms ago: executing program 5 (id=4549): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) syz_emit_ethernet(0x7e, &(0x7f00000008c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x80, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x66, 0x1000, 0x0, 0x1, 0xa, @local, @multicast1, {[@ssrr={0x89, 0xf, 0x18, [@multicast2, @remote, @multicast2]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x5, 0x7, "2016e44527"}, {0x5, 0x9, "cda155f8446838"}, {0x2, 0xb, "1adbfd38959d4c8d63"}, {0x5, 0xd, "86d299388651838be571c4"}]}]}}}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) socket$igmp(0x2, 0x3, 0x2) (async) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) (async) syz_emit_ethernet(0x7e, &(0x7f00000008c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x80, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x66, 0x1000, 0x0, 0x1, 0xa, @local, @multicast1, {[@ssrr={0x89, 0xf, 0x18, [@multicast2, @remote, @multicast2]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x5, 0x7, "2016e44527"}, {0x5, 0x9, "cda155f8446838"}, {0x2, 0xb, "1adbfd38959d4c8d63"}, {0x5, 0xd, "86d299388651838be571c4"}]}]}}}}}}}, 0x0) (async) 832.508468ms ago: executing program 4 (id=4550): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x162, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @remote, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x2}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "d5ef18", 0x124, 0x11, 0x1, @loopback, @private2, {[@fragment={0x33, 0x0, 0x69, 0x0, 0x0, 0x8, 0x67}, @srh={0x2, 0x2, 0x4, 0x1, 0x8, 0x40, 0x9, [@mcast1]}, @routing={0x16, 0x4, 0x1, 0x6, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1]}, @routing={0x5c, 0x6, 0x2, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private2]}], {0x4e24, 0x4e20, 0xa4, 0x0, @gue={{0x1, 0x1, 0x0, 0x5, 0x100, @void}, "f0c32727ba800553055baedddbb16270b3fcb4d7a0164b1d221e22d8230e62afbe4ca3d9a0a6c234e65df8b1b3a63ce31f09dd990e0e6408cc67559aab686967ecdd8ec0457e7f582d587f228922f93ab4bb5cab42cd390f2de71416fefcca41d3cba151f8951cba763d3b3e07943adefb4ecb15792ffdc21bb607231b286fa496c4793f0fcfb484703231ef60093ac840dbbc1750dfc61f"}}}}}}}, &(0x7f0000000200)={0x0, 0x1, [0xab1, 0x7d6, 0xc1a, 0x111]}) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00', @ifru_mtu=0x5}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8995, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 728.290485ms ago: executing program 2 (id=4551): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000d40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="71062abd7000fddbdf251ada200004002e8014002e8005000500010000000600010040ff00000c00060001000000010008d0"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000080000000a0000000400308008000300", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000100)={0x40, r11, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x40}}, 0x4004084) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x6c, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x81}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xf7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400001008000000410000004c45c1b0e2d18d65284d8b8857b880000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0xc2, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x7, 0x9, "020007651442eb"}, {0x1, 0x12, "74b000561de584b703c87214d42243b6"}, {0x0, 0x9, "ae06d30bc224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "84a4913275be675de6a70a05a0dc"}, {0x6, 0xa, "ed54fe6655490000"}, {0x2, 0x12, "73bc23f9ffffffa30900a301c8460028"}, {0x0, 0xc, "c8bf6909a79ea788f03d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 686.713513ms ago: executing program 4 (id=4552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c0000009700000000000000000000000a0000010900010073797a3100000000100004800c000180080001006475700009602b00020073797a3200000000140000001100010000000000000000000200"], 0x64}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 592.010904ms ago: executing program 5 (id=4553): recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x270bd2e, 0x259fdbfb, {0x7, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008030) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bond0\x00'}) 559.469004ms ago: executing program 4 (id=4554): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x89}, 0x24048800) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@none, 0x8}) 541.557954ms ago: executing program 0 (id=4555): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d0020"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=r1, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 442.888402ms ago: executing program 7 (id=4465): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)={@link_local={0xd}, @empty, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @empty}, {0xfffc, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 388.328311ms ago: executing program 5 (id=4556): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000a00)="e499", 0x2}], 0x1}, 0x41) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/247, 0xf7}], 0x1}, 0x40000122) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) socket$inet(0x2, 0x3, 0x1) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000a00)="e499", 0x2}], 0x1}, 0x41) (async) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) (async) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/247, 0xf7}], 0x1}, 0x40000122) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 276.783856ms ago: executing program 0 (id=4557): syz_emit_ethernet(0x266, &(0x7f0000000280)={@multicast, @random="467b5543f090", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x230, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0xa, "8cd86ff706598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2602"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x1a, "fe9082fe24f6855e8bb90ae2d18ba01cabca6d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13f6cbc05618054f4a250202f4af9dde25a5b85b9d930914625d8a049b4cf0d129806ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de16f2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de470000"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0) 264.470014ms ago: executing program 7 (id=4558): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000001540)={&(0x7f0000001480)=[{&(0x7f0000000080)="e4eed3e700863ac977abca7922d849e2fcc7ce6321e31cf2699c7a5f22e6f27eb1cd5754a1333bb8c1e1ca57371f96ec5170840cf74157765d76ef22770fdf635a49ab7808bbc13ceb354aead7463c8dfd72180646e274bbae4e0ae7c08930a358adb0643915d3ea3c442dfa7daf", 0x6e}, {&(0x7f0000000100)="007cac6c4b6d8b089e05c9eca6a932cda4af9e8ef6b116a02273648ae8150c1076e811b4a7c7ac6ecc54dfac5cca20039be9877065e7c374da210640f42befb814d65422c36ae79e83383b", 0x4b}, {&(0x7f0000000180)="893186766831621d68ece2354d399ea906fef101a953fcae51540eb5a34555205293b159fd82d2eceaa91bd81118dcde7ed0bfc39597b077a3c713984e0acac0efcac3e8a4b669b756b4532cb0239a0ba688f2073956090979d4337592de7c040574", 0x62}, {&(0x7f0000000200)="0ea3d905a4d852327f4dda3ee967f2450377f817d9742b5a6eb0d5289fddc1f67813b4a6fd3bd616a87e27ff2e4999feb2a684673f1e29e6f8092275be9d7f024bd61cc34b96d0a3e2eeb7c6ae83c8511efa25ad264e39f0283bf18cba7ea15d049bf152cd7332fa88d011f3982220db53aaccfe420d620b4bd9ddaeb358", 0x7e}, {&(0x7f0000000280)="6609670a98", 0x5}, {&(0x7f00000002c0)="c8ce6e4cb03a351606da60d53859ddc3824e562f371951ac84eaa496217798014190cb888ba69e4a41a80903c6f168beccd535ff8815c5d9c0438e4913720b362daccd5fd7ad040136600f71aa9d841047", 0x51}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="4f0a5f4dfbdf5a6ec461a54d6659f062a2a52bbba4842bfcf61b9d9380c40565504f6333a745f853af32b957ef690dd74daeb59be9694e9c27166c55c2e683b1de749acbb56e194ef0afd4d8e1a38428349a5d7fe679366bd583c9ad84616ab062a87b994a860e97b95e8231229fd27872dcb827a25f6098550dff173b1af9036da7806975bbcd2de26443844ac3", 0x8e}, {&(0x7f0000001400)="f0f047f968e0fac523fa7eaedaa0d4e48ce5e7c41d4e0b220b8b30aeec952d6b7f43bdf09d96f82e95d09372f7cf1dd77f5920a5200d276f3c1d8a4de25fa36e21cc9b57e4f928195772bf859cedfb5feff6ea69c983a1fc009ef402976fa77649fe3d1c8049564f", 0x68}], 0x9, 0x1, 0x0, 0x4, 0x8, 0x7fff}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f00000015c0)) socketpair(0x1, 0x1, 0x401, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001780)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1db23000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x50, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_FAMILY={0x5, 0xd, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x81}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001940), r5) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000001d40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001980)={0x348, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6ffc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NODE={0x2a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "a045ee7ac3ae9d16542f6bcbb43c84ba249c41f243"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x103, 0x3, "3d52fd9c6f23eddb929229c375cf0abb89bef02331381f3cf14ce2b186856ae79e49deaddf4e8f5470944716f84e6b59601433cc1b193bcced0db86708e65565c040a805fa1354b83b3fd930616d9dee0b1ab19e23b250c238037fc47825255249f83050c25cd293384ced8c4b3da1e64d37206456d29c93909ec1e7e03070f8de76b6e236689b25c82bf63feca7ba59a33388faee6614df8dc4beaa4a7ab0daed724f45641f5921f851c65ed12e507ab85cff4b7cd75e73bd6a3f02c47eeb13d2ff5c98331e28c6ae93391dfe495d9e556fd27c78ead1470c6454e03a63cafc333cf614d650647d4b982fd14ca509dc41b1578e3a465eaf5c8c9e6b70dffb"}, @TIPC_NLA_NODE_ID={0x3f, 0x3, "2e43d1cc19589ff87b3ed5abeb878de0b040d7dc9695b352bcdbd61f22e1c4ea6307db9c8cce78e956b9177d6a82b17ec4f54dc9432911f39b287d"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc9, 0x3, "4306585639a340c226b951b49335647d2c59c5e600b5192aedacce87120aab0ebaa3610a889b6255c9ea0737e0246f5d4ebabdf200fbc7e09d23bc5197b7b251dc272cffe7702a42ed0b6a568343659fbe318ab3f2686598e0c3470a4a734f25b3442834f4aef6aa343957e39d7b748c626a7840ad1c0bf192897772548b45dbef3448a05f3a5d3d30f31b07b89b1b765ef6f3374f95396de230fa268b5a99fb9ad1bb901934d6981432dba0da271dda5cd66b328b65e42da0d0498eb2e10c7f2220b6de53"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "9f5515fd94570c74f509a647041c101299c9d2f190ff"}}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x4844}, 0x44804) r7 = socket$pptp(0x18, 0x1, 0x2) ioctl$NILFS_IOCTL_SYNC(r7, 0x80086e8a, &(0x7f0000001d80)) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000001dc0)=[{}], &(0x7f0000001e00)=0x8) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000003200)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000031c0)={&(0x7f0000001e80)={0x1328, r6, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x100c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x11b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_LINK={0x154, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75b70778}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbde8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x3c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}]}, 0x1328}, 0x1, 0x0, 0x0, 0x40000}, 0x83) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000003280), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000003480)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003440)={&(0x7f00000032c0)={0x144, r10, 0x300, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0xfffff83b}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb5}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x6eb}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x2b8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x7fff}, {0x5}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4d101}, 0x81) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000034c0)={r9}) accept(r8, &(0x7f0000003500)=@alg, &(0x7f0000003580)=0x80) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000003680)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10008}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000036c0)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000003840)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003800)={&(0x7f0000003740)={0x9c, r3, 0x602, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7b22}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x6}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1800}, 0x20008800) setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000003880)=0x1, 0x4) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003900), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000039c0)={r0, 0x58, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000003ac0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a00)={0x48, r11, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xbfe7a5e871225668}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000003b00)={@multicast2, @multicast1}, &(0x7f0000003b40)=0xc) 188.433293ms ago: executing program 2 (id=4559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r5, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e0000180002800400120005001600010000000800150000000076"], 0x48}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="9ef0123d31012d1a755e8f20ac821a57", 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x0) 187.436424ms ago: executing program 5 (id=4560): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000032c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe40400000056bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c3630000000002232017810e743bdaf879946547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb50409fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4d8521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060fd2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3bca426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db00000000000001f915268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde0000000000000000000000000628a663ed417be6ff5b172cba4a1ec629a39ec253c087b1e9ce84e25b8717ae8581bf28c16a8bbda8d1c4b3d5b4ce7e147003e"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$kcm(0xa, 0x3, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x0, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000880)="00bc49eb00000009cecefb5d97e5a3", 0xf}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r2, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES64=r3], 0x48}, 0x1, 0x0, 0x0, 0x2400008c}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x2}]}}}]}, 0x3c}}, 0x4008000) 121.858246ms ago: executing program 0 (id=4561): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}}) 74.966768ms ago: executing program 7 (id=4562): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_getaddr={0x0, 0x16, 0x10, 0x70bd26, 0x25dfdbfe, {0xa, 0x40, 0x1, 0xff, r2}, [@IFA_RT_PRIORITY={0x0, 0x9, 0xbec}, @IFA_RT_PRIORITY={0x0, 0x9, 0xfffffebf}, @IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_TARGET_NETNSID, @IFA_LOCAL={0x0, 0x2, @empty}, @IFA_ADDRESS={0x0, 0x1, @private1}, @IFA_ADDRESS={0x0, 0x1, @mcast1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x20000084) 0s ago: executing program 4 (id=4563): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x11, 0x0, 0x89, 0x0, @remote, @private}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x40, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x40}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2}}, 0x3, 0x0, 0x20000, 0x81, 0xb1, 0x0, 0x4}, 0x9c) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0xf, &(0x7f0000000380), 0x4) unshare(0x22020600) unshare(0x8000200) kernel console output (not intermixed with test programs): entered allmulticast mode [ 491.383270][T16843] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.506372][T16843] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.527528][T17001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'. [ 491.536547][T17001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2978'. [ 492.734565][ T5625] Bluetooth: hci0: command tx timeout [ 492.975445][ T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.983799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.543708][T16044] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 493.555853][T16044] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 493.563728][T16044] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 493.572309][T16044] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 493.580266][T16044] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 493.788378][T17006] »»»»»» speed is unknown, defaulting to 1000 [ 493.993504][T17006] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.000810][T17006] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.008267][T17006] bridge_slave_0: entered allmulticast mode [ 494.015976][T17006] bridge_slave_0: entered promiscuous mode [ 494.023810][T17006] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.032041][T17006] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.039398][T17006] bridge_slave_1: entered allmulticast mode [ 494.047252][T17006] bridge_slave_1: entered promiscuous mode [ 494.072562][T17006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.084094][T17006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.111833][T17006] team0: Port device team_slave_0 added [ 494.119616][T17006] team0: Port device team_slave_1 added [ 494.142366][T17006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.150066][T17006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.176752][T17006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.188910][T17006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.195887][T17006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.222080][T17006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.255451][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.266502][T17006] hsr_slave_0: entered promiscuous mode [ 494.273121][T17006] hsr_slave_1: entered promiscuous mode [ 494.279605][T17006] debugfs: 'hsr0' already exists in 'hsr' [ 494.285421][T17006] Cannot create hsr debugfs directory [ 494.377309][T16989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 494.595278][T16843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 494.611509][T16843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 494.617784][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2985'. [ 494.622934][T16843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 494.648401][T16843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 494.720234][T16843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 494.730654][T16843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 494.739675][T16843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 494.756253][T16843] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 494.815815][T16044] Bluetooth: hci0: command tx timeout [ 494.970203][T17006] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 494.992943][T17006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 495.001166][T17006] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 495.017717][T17006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 495.033325][T17006] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 495.044072][T17054] syz.1.2988: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 495.045333][T17006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 495.061954][T17054] CPU: 1 UID: 0 PID: 17054 Comm: syz.1.2988 Not tainted syzkaller #0 PREEMPT(full) [ 495.061979][T17054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.061996][T17054] Call Trace: [ 495.062008][T17054] [ 495.062017][T17054] dump_stack_lvl+0xe8/0x150 [ 495.062048][T17054] warn_alloc+0x249/0x340 [ 495.062077][T17054] ? stack_trace_save+0xa9/0x100 [ 495.062111][T17054] ? __pfx_warn_alloc+0x10/0x10 [ 495.062146][T17054] ? kasan_save_track+0x4f/0x80 [ 495.062169][T17054] ? kasan_save_track+0x3e/0x80 [ 495.062193][T17054] ? __kasan_kmalloc+0x93/0xb0 [ 495.062219][T17054] ? __kmalloc_cache_noprof+0x31c/0x660 [ 495.062246][T17054] ? xskq_create+0x56/0x170 [ 495.062269][T17054] ? xsk_setsockopt+0x54c/0x990 [ 495.062289][T17054] ? do_sock_setsockopt+0x17c/0x1b0 [ 495.062315][T17054] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 495.062340][T17054] ? do_syscall_64+0x15f/0xf80 [ 495.062369][T17054] __vmalloc_node_range_noprof+0x132/0x1750 [ 495.062428][T17054] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 495.062461][T17054] ? __kasan_kmalloc+0x93/0xb0 [ 495.062494][T17054] vmalloc_user_noprof+0xad/0xe0 [ 495.062520][T17054] ? xskq_create+0xbf/0x170 [ 495.062545][T17054] xskq_create+0xbf/0x170 [ 495.062571][T17054] xsk_init_queue+0x8a/0xe0 [ 495.062597][T17054] xsk_setsockopt+0x54c/0x990 [ 495.062622][T17054] ? __pfx_xsk_setsockopt+0x10/0x10 [ 495.062645][T17054] ? __pfx_aa_sk_perm+0x10/0x10 [ 495.062672][T17054] ? aa_sock_opt_perm+0xff/0x1a0 [ 495.062701][T17054] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 495.062727][T17054] ? __pfx_xsk_setsockopt+0x10/0x10 [ 495.062752][T17054] do_sock_setsockopt+0x17c/0x1b0 [ 495.062785][T17054] __x64_sys_setsockopt+0x13d/0x1b0 [ 495.062814][T17054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.062835][T17054] do_syscall_64+0x15f/0xf80 [ 495.062862][T17054] ? trace_irq_disable+0x3b/0x140 [ 495.062890][T17054] ? clear_bhb_loop+0x40/0x90 [ 495.062915][T17054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.062934][T17054] RIP: 0033:0x7f5f2399ce59 [ 495.062960][T17054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.062976][T17054] RSP: 002b:00007f5f248c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 495.062997][T17054] RAX: ffffffffffffffda RBX: 00007f5f23c15fa0 RCX: 00007f5f2399ce59 [ 495.063012][T17054] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000014 [ 495.063025][T17054] RBP: 00007f5f23a32d6f R08: 0000000000000004 R09: 0000000000000000 [ 495.063038][T17054] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.063051][T17054] R13: 00007f5f23c16038 R14: 00007f5f23c15fa0 R15: 00007ffcf7b8b2e8 [ 495.063083][T17054] [ 495.063179][T17054] Mem-Info: [ 495.069189][T17006] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 495.096978][T17054] active_anon:6631 inactive_anon:0 isolated_anon:0 [ 495.096978][T17054] active_file:2825 inactive_file:40057 isolated_file:0 [ 495.096978][T17054] unevictable:768 dirty:99 writeback:0 [ 495.096978][T17054] slab_reclaimable:11462 slab_unreclaimable:110334 [ 495.096978][T17054] mapped:35395 shmem:1294 pagetables:1305 [ 495.096978][T17054] sec_pagetables:0 bounce:0 [ 495.096978][T17054] kernel_misc_reclaimable:0 [ 495.096978][T17054] free:1304421 free_pcp:6912 free_cma:0 [ 495.401096][T17054] Node 0 active_anon:26524kB inactive_anon:0kB active_file:11300kB inactive_file:160032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141580kB dirty:396kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14240kB pagetables:5056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 495.403131][T17006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 495.436777][T17054] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 495.477048][T17054] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 495.520955][T17054] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 495.529494][T17054] Node 0 DMA32 free:1263848kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26524kB inactive_anon:0kB active_file:11300kB inactive_file:160032kB unevictable:1536kB writepending:396kB zspages:0kB present:3129332kB managed:2552620kB mlocked:0kB bounce:0kB free_pcp:28128kB local_pcp:12980kB free_cma:0kB [ 495.573416][T17054] lowmem_reserve[]: 0 0 0 0 0 [ 495.580364][T17054] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:28kB free_cma:0kB [ 495.597911][T17061] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2989'. [ 495.612781][T17054] lowmem_reserve[]: [ 495.625088][T16044] Bluetooth: hci3: command tx timeout [ 495.629566][T17054] 0 0 0 0 0 [ 495.629604][T17054] Node 1 Normal free:3938216kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 495.629656][T17054] lowmem_reserve[]: 0 0 0 0 0 [ 495.629692][T17054] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 495.629795][T17054] Node 0 DMA32: 6322*4kB (UME) 3410*8kB (UM) 2310*16kB (UME) 433*32kB (UME) 599*64kB (UM) 382*128kB (UM) 284*256kB (UME) 151*512kB (UME) 69*1024kB (UE) 48*2048kB (UM) 184*4096kB (M) = 1263256kB [ 495.731936][T16843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.768765][T17054] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 495.779493][T16843] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.800089][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.807296][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.820060][T17054] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) [ 495.820120][T17061] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2989'. [ 495.827664][T17054] 11*16kB (UM) 5*32kB (UM) 7*64kB (UM) 1*128kB (M) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3938216kB [ 495.869184][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.876339][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.888961][T17054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 495.900210][T17054] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 495.911514][T17054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 495.921915][T17054] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 495.946317][T17054] 44172 total pagecache pages [ 495.971519][T17054] 0 pages in swap cache [ 495.978731][T17054] Free swap = 124996kB [ 495.983928][T17054] Total swap = 124996kB [ 495.990157][T17054] 2097051 pages RAM [ 495.997609][T17054] 0 pages HighMem/MovableOnly [ 496.002409][T17054] 427114 pages reserved [ 496.008936][T17054] 0 pages cma reserved [ 496.056528][T17006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.104289][T17006] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.134111][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.141343][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.210362][ T7250] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.217643][ T7250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.239741][T17078] syzkaller0: entered promiscuous mode [ 496.249684][T17078] syzkaller0: entered allmulticast mode [ 496.895430][T16044] Bluetooth: hci0: command tx timeout [ 497.021284][T17107] bond0: entered promiscuous mode [ 497.036025][T17107] bond_slave_0: entered promiscuous mode [ 497.055206][T17107] bond_slave_1: entered promiscuous mode [ 497.091220][T17107] bond0: left promiscuous mode [ 497.109764][T17107] bond_slave_0: left promiscuous mode [ 497.127825][T17107] bond_slave_1: left promiscuous mode [ 497.241395][T16843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.652999][T17006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.695066][T16044] Bluetooth: hci3: command tx timeout [ 497.899228][T16843] veth0_vlan: entered promiscuous mode [ 497.938437][T16843] veth1_vlan: entered promiscuous mode [ 498.008994][T16843] veth0_macvtap: entered promiscuous mode [ 498.022227][T16843] veth1_macvtap: entered promiscuous mode [ 498.049610][T16843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.074179][T16843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.110191][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.120412][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.132854][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.144306][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.298696][T17006] veth0_vlan: entered promiscuous mode [ 498.343811][T17006] veth1_vlan: entered promiscuous mode [ 498.407917][T17006] veth0_macvtap: entered promiscuous mode [ 498.431174][T17006] veth1_macvtap: entered promiscuous mode [ 498.437338][T17144] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.456422][T17006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.491244][T17006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.538857][ T1149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.612400][ T1149] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.648006][ T1149] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.663744][ T1149] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.703598][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.731895][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.750426][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.758894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.857468][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.882732][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.023333][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.037335][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.071214][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.088887][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.487602][T17198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3011'. [ 499.510812][T17198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3011'. [ 499.523026][T17200] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.3012'. [ 499.538230][T17200] netlink: 'syz.5.3012': attribute type 1 has an invalid length. [ 499.546716][T17200] netlink: 'syz.5.3012': attribute type 1 has an invalid length. [ 499.614015][T17198] IPVS: length: 239 != 24 [ 499.784490][ T5625] Bluetooth: hci3: command tx timeout [ 499.814713][T16047] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 499.838479][T16047] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 499.863156][T16047] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 499.877191][T16047] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 499.891958][T16047] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 499.968913][T17210] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 499.969601][ T5085] IPVS: starting estimator thread 0... [ 499.984048][T17217] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3015'. [ 500.022492][ T1351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.067418][T17220] syzkaller1: entered promiscuous mode [ 500.094913][T17218] IPVS: using max 33 ests per chain, 79200 per kthread [ 500.106241][T17220] syzkaller1: entered allmulticast mode [ 500.331949][T17232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3019'. [ 500.625871][T17243] syz_tun (unregistering): left allmulticast mode [ 500.731807][T17248] bond0: (slave bond_slave_1): Releasing backup interface [ 500.777116][T17248] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 500.872022][T17207] »»»»»» speed is unknown, defaulting to 1000 [ 500.881460][T17262] netlink: 'syz.5.3025': attribute type 1 has an invalid length. [ 500.931403][T17262] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3025'. [ 500.962277][T17262] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3025'. [ 500.977616][T17262] netlink: 'syz.5.3025': attribute type 1 has an invalid length. [ 500.994861][T17262] netlink: 'syz.5.3025': attribute type 8 has an invalid length. [ 501.010191][T17262] netlink: 606 bytes leftover after parsing attributes in process `syz.5.3025'. [ 501.062042][T17272] x_tables: duplicate underflow at hook 2 [ 501.296207][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.652566][T17302] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3036'. [ 501.727755][T17309] siw: device registration error -23 [ 501.793477][T17312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3038'. [ 501.854799][T16047] Bluetooth: hci3: command 0x0419 tx timeout [ 501.917062][T17207] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.943102][T16047] Bluetooth: hci6: command tx timeout [ 501.957531][T17207] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.997069][T17207] bridge_slave_0: entered allmulticast mode [ 502.043853][T17207] bridge_slave_0: entered promiscuous mode [ 502.117151][T17320] »»»»»»: renamed from lo (while UP) [ 502.219517][T17207] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.245375][T17207] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.282933][T17207] bridge_slave_1: entered allmulticast mode [ 502.307501][T17207] bridge_slave_1: entered promiscuous mode [ 502.399696][T17207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.457935][T17207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.666862][T17341] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 502.675605][T17341] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 502.707684][T17207] team0: Port device team_slave_0 added [ 502.733001][T17207] team0: Port device team_slave_1 added [ 502.771217][T17344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.858924][T17207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.886315][T17207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.959080][T17207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.997198][T17207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.011478][T17207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.050840][T17361] netlink: 'syz.1.3048': attribute type 1 has an invalid length. [ 503.099663][T17207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.277657][T17377] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3056'. [ 503.465591][T17207] hsr_slave_0: entered promiscuous mode [ 503.490219][T17207] hsr_slave_1: entered promiscuous mode [ 503.515627][T17207] debugfs: 'hsr0' already exists in 'hsr' [ 503.528969][T17207] Cannot create hsr debugfs directory [ 503.595259][T17390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3062'. [ 503.743902][T17394] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 503.780140][T17399] x_tables: duplicate underflow at hook 1 [ 503.812740][T17399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3063'. [ 503.936590][T16047] Bluetooth: hci3: command 0x0419 tx timeout [ 504.014880][T16047] Bluetooth: hci6: command tx timeout [ 504.058702][T17207] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.075416][T17207] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.087811][T17207] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 504.159602][T17410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.249382][T17207] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.260618][T17207] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.271420][T17207] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 504.306354][T17389] netlink: 'syz.5.3060': attribute type 29 has an invalid length. [ 504.315568][T17395] netlink: 'syz.5.3060': attribute type 29 has an invalid length. [ 504.442060][T17207] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.462791][T17207] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.482768][T17207] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 504.496729][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.505373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.272649][T17451] netlink: 'syz.1.3076': attribute type 1 has an invalid length. [ 505.282412][T17207] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 505.288086][T17452] netlink: 'syz.1.3076': attribute type 1 has an invalid length. [ 505.320626][T17207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.386347][T17455] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 505.399629][T17455] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 505.435702][T17207] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 505.447501][T17207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.458538][T17207] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 505.477921][T17207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.501539][T17451] bond6: (slave bridge7): Enslaving as an active interface with a down link [ 505.515780][T17207] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 505.539134][T17207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 505.780358][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.921438][T17480] batadv_slave_1: entered promiscuous mode [ 506.054277][T17480] batadv_slave_1: left promiscuous mode [ 506.085813][T17483] netlink: 'syz.1.3081': attribute type 21 has an invalid length. [ 506.096395][T16047] Bluetooth: hci6: command tx timeout [ 506.165194][T17483] __nla_validate_parse: 2 callbacks suppressed [ 506.165209][T17483] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3081'. [ 506.757939][T17207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.808997][T17507] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001 [ 506.809187][T17207] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.821708][T17504] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 506.859943][ T7250] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.876269][ T7250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.945692][ T7250] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.952901][ T7250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.048968][T17527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3090'. [ 507.089377][T17518] bond1 (unregistering): Released all slaves [ 507.112241][T17521] netlink: 'syz.0.3090': attribute type 2 has an invalid length. [ 507.191653][T17527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.351824][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3095'. [ 507.581210][T17548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.591353][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.668421][T17555] veth0: entered promiscuous mode [ 507.686129][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3100'. [ 508.043761][T17571] tap0: tun_chr_ioctl cmd 1074025672 [ 508.063651][T17571] tap0: ignored: set checksum disabled [ 508.113247][T17576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3107'. [ 508.175742][T16047] Bluetooth: hci6: command tx timeout [ 508.429202][T17582] syzkaller0: entered promiscuous mode [ 508.448272][T17582] syzkaller0: entered allmulticast mode [ 508.524419][T17591] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3110'. [ 508.559040][T17207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.570501][T17590] syzkaller1: entered promiscuous mode [ 508.582887][T17590] syzkaller1: entered allmulticast mode [ 508.846673][T17207] veth0_vlan: entered promiscuous mode [ 508.864337][T17207] veth1_vlan: entered promiscuous mode [ 508.939840][T17207] veth0_macvtap: entered promiscuous mode [ 508.952538][T17207] veth1_macvtap: entered promiscuous mode [ 508.999011][T17207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.020674][T17207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.042002][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.062564][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.102696][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.138212][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.334209][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.359577][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.431551][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.441290][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.603908][T17624] »»»»»» speed is unknown, defaulting to 1000 [ 509.839497][T17633] »»»»»» speed is unknown, defaulting to 1000 [ 510.031004][T16044] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 510.042581][T16044] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 510.053300][T16044] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 510.068464][T16044] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 510.077178][T16044] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 510.231153][T17658] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3130'. [ 510.260990][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3130'. [ 510.279867][ T7250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.289161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.432102][T17662] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3131'. [ 510.707214][T17660] bond0: option miimon: invalid value (18446744071829782528) [ 510.715057][T17660] bond0: option miimon: allowed values 0 - 2147483647 [ 510.922567][T17681] netlink: 'syz.2.3137': attribute type 1 has an invalid length. [ 511.007282][T17686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3138'. [ 511.048697][T17681] bond0: (slave veth3): Enslaving as an active interface with an up link [ 511.085082][T17691] netlink: 'syz.4.3138': attribute type 16 has an invalid length. [ 511.109892][T17691] netlink: 'syz.4.3138': attribute type 3 has an invalid length. [ 511.128508][T17689] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 511.164285][T17689] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 511.529570][T17648] »»»»»» speed is unknown, defaulting to 1000 [ 511.540647][ T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.549074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.677975][T17709] __nla_validate_parse: 1 callbacks suppressed [ 511.678000][T17709] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3143'. [ 512.021739][ T1149] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.072097][ T1149] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.085325][T17729] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3149'. [ 512.105099][ T1149] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 512.178158][T16047] Bluetooth: hci4: command tx timeout [ 512.204184][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'. [ 512.226186][T17729] : entered promiscuous mode [ 512.232579][T17738] openvswitch: netlink: Missing valid actions attribute. [ 512.233675][T17729] : entered allmulticast mode [ 512.242765][T17738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.249704][T17735] netdevsim netdevsim0 : renamed from netdevsim0 [ 512.283822][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'. [ 512.331846][ T1149] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.379129][ T1149] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.402903][ T1149] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 512.522326][T17755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3157'. [ 512.536174][T17755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3157'. [ 512.552740][T17735] syzkaller1: entered promiscuous mode [ 512.561613][T17735] syzkaller1: entered allmulticast mode [ 512.600285][T17755] netlink: 'syz.4.3157': attribute type 21 has an invalid length. [ 512.603420][ T1149] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.621411][ T1149] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.634068][ T1149] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 512.662679][T17755] netlink: 'syz.4.3157': attribute type 1 has an invalid length. [ 512.929964][ T1149] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.966081][ T1149] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.990224][ T1149] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 513.188736][T17778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.262013][T17783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3164'. [ 513.516559][T17648] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.523952][T17648] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.531673][T17648] bridge_slave_0: entered allmulticast mode [ 513.539916][T17648] bridge_slave_0: entered promiscuous mode [ 513.583903][T17648] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.606542][T17648] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.639150][T17648] bridge_slave_1: entered allmulticast mode [ 513.651277][T17648] bridge_slave_1: entered promiscuous mode [ 513.800566][ T1149] dvmrp0: left allmulticast mode [ 513.818547][ T1149] pimreg: left allmulticast mode [ 513.943350][T17820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3171'. [ 514.172409][T17832] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3174'. [ 514.254651][T16047] Bluetooth: hci4: command tx timeout [ 514.969984][ T1149] bond6 (unregistering): (slave bridge7): Releasing active interface [ 515.040913][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.052372][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.063007][ T1149] bond0 (unregistering): Released all slaves [ 515.074301][ T1149] bond1 (unregistering): Released all slaves [ 515.090248][ T1149] bond2 (unregistering): Released all slaves [ 515.111281][ T1149] bond3 (unregistering): (slave veth13): Releasing active interface [ 515.120855][ T1149] bond3 (unregistering): Released all slaves [ 515.136125][ T1149] bond4 (unregistering): Released all slaves [ 515.157383][ T1149] bond5 (unregistering): Released all slaves [ 515.171981][ T1149] bond6 (unregistering): Released all slaves [ 515.209807][T17648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.281135][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 515.322748][T17648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.441741][T17854] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 515.445670][ T1149] tipc: Left network mode [ 515.496247][T17648] team0: Port device team_slave_0 added [ 515.566544][T17648] team0: Port device team_slave_1 added [ 515.594855][T17857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3177'. [ 515.610125][T17859] Cannot find set identified by id 0 to match [ 515.625467][T17861] Cannot find set identified by id 0 to match [ 515.685668][T17648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.699484][T17648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.764971][T17648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.821800][T17865] syzkaller0: entered promiscuous mode [ 515.832811][T17865] syzkaller0: entered allmulticast mode [ 515.850065][ T1149] IPVS: stopping master sync thread 6016 ... [ 515.878651][T17648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.895127][T17648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.921477][T17648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.219402][T17878] IPVS: Scheduler module ip_vs_sip not found [ 516.336555][T16047] Bluetooth: hci4: command tx timeout [ 516.502973][T17648] hsr_slave_0: entered promiscuous mode [ 516.516199][T17648] hsr_slave_1: entered promiscuous mode [ 516.526322][T17648] debugfs: 'hsr0' already exists in 'hsr' [ 516.560146][T17648] Cannot create hsr debugfs directory [ 516.670519][T17900] sch_fq: defrate 0 ignored. [ 516.908200][T17913] netlink: 'syz.2.3192': attribute type 19 has an invalid length. [ 516.931392][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 517.022994][T17906] tipc: Started in network mode [ 517.028040][T17906] tipc: Node identity c20a1c5510a8, cluster identity 4711 [ 517.036181][T17906] tipc: Enabled bearer , priority 0 [ 517.049789][T17906] __nla_validate_parse: 2 callbacks suppressed [ 517.049807][T17906] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3189'. [ 517.198873][T17921] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3195'. [ 517.303852][T17917] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.321739][T17917] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.352997][T17905] tipc: Disabling bearer [ 517.634986][T17917] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.647210][T17917] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.687376][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.705337][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.799533][ T1149] veth1_macvtap: left promiscuous mode [ 517.808364][ T1149] veth0_macvtap: left promiscuous mode [ 518.270504][T17951] bond0: entered allmulticast mode [ 518.276888][T17951] bond_slave_0: entered allmulticast mode [ 518.282782][T17951] bond_slave_1: entered allmulticast mode [ 518.289726][T17954] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3201'. [ 518.305000][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 518.415557][T16047] Bluetooth: hci4: command tx timeout [ 518.451561][T17917] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.465873][T17917] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.761561][T17917] netdevsim netdevsim0  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.772693][T17917] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.988260][T17994] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3209'. [ 519.861154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.943482][ T8351] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.969769][ T1149] IPVS: stop unused estimator thread 0... [ 521.970786][ T8351] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.031910][ T141] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.061457][ T141] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.330746][T18062] netlink: 'syz.2.3218': attribute type 58 has an invalid length. [ 522.344253][T18062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3218'. [ 522.390924][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.406984][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.617031][T18072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3220'. [ 522.689987][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.718510][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.870871][T18079] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3222'. [ 523.011363][T17648] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 523.051132][T17648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.076054][T17648] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 523.107178][T17648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.176059][T17648] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 523.229582][T17648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.260351][T17648] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 523.289652][T17648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 523.395453][T18115] IPVS: length: 134 != 24 [ 523.602885][T17648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.628429][T18133] netlink: 'syz.0.3234': attribute type 4 has an invalid length. [ 523.651595][T17648] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.685914][T18133] netlink: 'syz.0.3234': attribute type 4 has an invalid length. [ 523.711520][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.718745][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.777950][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.785178][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.822962][T18144] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.830726][T18144] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.867617][T18149] netlink: 'syz.2.3237': attribute type 1 has an invalid length. [ 523.889997][T18147] netlink: 'syz.2.3237': attribute type 1 has an invalid length. [ 523.903600][T18151] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 523.946255][T18144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3236'. [ 524.038618][T18159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3239'. [ 524.078280][T18159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3239'. [ 524.583038][T18184] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3246'. [ 524.627260][T18184] netlink: 'syz.5.3246': attribute type 9 has an invalid length. [ 524.732234][T18200] IPVS: set_ctl: invalid protocol: 56 224.0.0.2:20002 [ 524.782723][T18193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 524.992771][T18209] netlink: 'syz.0.3251': attribute type 6 has an invalid length. [ 525.063636][T18216] netlink: 'syz.2.3253': attribute type 3 has an invalid length. [ 525.569339][T18229] syzkaller0: entered promiscuous mode [ 525.575478][T18229] syzkaller0: entered allmulticast mode [ 525.607797][T17648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.643742][T18243] tipc: Started in network mode [ 525.652403][T18243] tipc: Node identity , cluster identity 4711 [ 525.686519][T18243] tipc: Failed to set node id, please configure manually [ 525.723071][T18243] tipc: Enabling of bearer rejected, failed to enable media [ 527.921774][T17648] veth0_vlan: entered promiscuous mode [ 527.960912][T17648] veth1_vlan: entered promiscuous mode [ 528.052819][T17648] veth0_macvtap: entered promiscuous mode [ 528.096828][T17648] veth1_macvtap: entered promiscuous mode [ 528.180538][T18290] netlink: 'syz.5.3268': attribute type 8 has an invalid length. [ 528.246261][T18290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3268'. [ 528.307797][T18296] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3268'. [ 528.361304][T17648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.373857][T17648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.395321][T18290] bond0: entered promiscuous mode [ 528.400924][T18290] bond_slave_0: entered promiscuous mode [ 528.412408][T18290] bond_slave_1: entered promiscuous mode [ 528.420325][T18290] gretap0: entered promiscuous mode [ 528.426689][T18290] team0: entered promiscuous mode [ 528.431743][T18290] team_slave_0: entered promiscuous mode [ 528.438091][T18290] team_slave_1: entered promiscuous mode [ 528.446931][T18290] hsr1: entered promiscuous mode [ 528.577071][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.595510][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.627369][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.643372][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.745118][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3273'. [ 528.943513][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.952622][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.042558][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.073629][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.211158][T18335] ip6gre1: entered allmulticast mode [ 529.258584][T18335] ip6gre1: entered promiscuous mode [ 529.258932][T18341] netlink: 'syz.0.3281': attribute type 1 has an invalid length. [ 529.264244][T18335] team0: Device ip6gre1 is of different type [ 529.335364][T18343] veth0: entered promiscuous mode [ 529.395473][T18341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 529.437399][T18347] bond2: (slave geneve2): making interface the new active one [ 529.458983][T18347] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 529.482353][T18337] veth0: left promiscuous mode [ 529.489364][T18351] Bluetooth: MGMT ver 1.23 [ 529.640113][T18357] netlink: 'syz.5.3285': attribute type 1 has an invalid length. [ 529.643921][T18361] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3287'. [ 529.741774][T18357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.787738][T18366] bond1: (slave veth3): Enslaving as an active interface with a down link [ 529.838430][T18357] bond1: (slave veth0_to_bond): making interface the new active one [ 529.850951][T18377] netlink: 'syz.2.3290': attribute type 1 has an invalid length. [ 529.862586][T18357] veth0_to_bond: entered promiscuous mode [ 529.869655][T18357] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 529.903121][T18379] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3290'. [ 529.973361][T18366] bond1: (slave veth5): Enslaving as an active interface with a down link [ 530.075794][T18377] bond1: entered promiscuous mode [ 530.092162][T18377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.295153][T18393] netlink: 'syz.5.3295': attribute type 1 has an invalid length. [ 530.332149][T18393] 8021q: adding VLAN 0 to HW filter on device bond2 [ 530.360237][T18393] bond2: entered promiscuous mode [ 530.365680][T18393] bond2: entered allmulticast mode [ 530.371416][T18400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3297'. [ 530.437524][T18400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3297'. [ 530.486050][T18393] bond3: (slave syz_tun): Device is not bonding slave [ 530.492946][T18393] bond3: option active_slave: invalid value (syz_tun) [ 530.508078][T18393] bond3 (unregistering): Released all slaves [ 530.607665][T18410] bond1: option all_slaves_active: invalid value (222) [ 530.650489][T18410] bond1 (unregistering): Released all slaves [ 530.716882][T18418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3301'. [ 530.757536][T18424] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3300'. [ 530.907428][T18418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.930733][T18434] netlink: 'syz.0.3305': attribute type 1 has an invalid length. [ 530.956632][T18434] netlink: 'syz.0.3305': attribute type 1 has an invalid length. [ 530.967050][T18430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.980390][T18430] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 530.991990][T18430] bond1: (slave vti0): Error -95 calling set_mac_address [ 531.366493][T18460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3311'. [ 531.535570][T16047] Bluetooth: hci0: command tx timeout [ 531.836645][T18490] syzkaller0: entered promiscuous mode [ 531.853047][T18490] syzkaller0: entered allmulticast mode [ 534.058774][T18501] tipc: Started in network mode [ 534.063712][T18501] tipc: Node identity , cluster identity 4711 [ 534.070054][T18501] tipc: Failed to obtain node identity [ 534.075708][T18501] tipc: Enabling of bearer rejected, failed to enable media [ 534.400297][T18521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3330'. [ 534.587848][T18527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3330'. [ 534.664028][T18510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.699334][T18510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.027436][T18510] mac80211_hwsim hwsim33 wlan0: left promiscuous mode [ 535.190564][ T34] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.237841][ T34] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.335697][ T34] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.353893][ T34] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.431516][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3332'. [ 535.464122][T18565] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 535.906052][T18599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3343'. [ 535.935529][T18599] openvswitch: netlink: EtherType 50a is less than min 600 [ 536.463968][T18639] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3356'. [ 536.508069][T18639] syzkaller1: entered promiscuous mode [ 536.515551][T18639] syzkaller1: entered allmulticast mode [ 536.604104][T18645] bridge0: port 3(ipvlan2) entered blocking state [ 536.621961][T18645] bridge0: port 3(ipvlan2) entered disabled state [ 536.632197][T18645] ipvlan2: entered allmulticast mode [ 536.643157][T18645] bridge0: entered allmulticast mode [ 536.671040][T18645] ipvlan2: left allmulticast mode [ 536.686028][T18645] bridge0: left allmulticast mode [ 536.817745][T18652] x_tables: duplicate underflow at hook 2 [ 536.871265][T18654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.889486][T18654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.998473][T18662] bond0: (slave bond_slave_1): Releasing backup interface [ 537.010425][T18662] bond_slave_1: left promiscuous mode [ 537.017536][T18662] bond_slave_1: left allmulticast mode [ 537.053218][T18664] xt_cgroup: path and classid specified [ 537.266531][T18676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.293807][T18678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.124862][ T13] veth0_to_bond: left promiscuous mode [ 562.738178][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.353446][ T12] bond5 (unregistering): (slave geneve2): Releasing active interface [ 573.478808][ T12] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 573.527375][ T12] bond2 (unregistering): (slave bridge3): Releasing active interface [ 573.802034][ T12] bond0 (unregistering): Released all slaves [ 573.812451][ T12] bond1 (unregistering): Released all slaves [ 573.825904][ T12] bond2 (unregistering): Released all slaves [ 573.841066][ T12] bond3 (unregistering): Released all slaves [ 573.860622][ T12] bond4 (unregistering): Released all slaves [ 573.873904][ T12] bond5 (unregistering): Released all slaves [ 573.887311][ T12] bond6 (unregistering): Released all slaves [ 573.901580][ T12] bond7 (unregistering): Released all slaves [ 573.922655][ T12] bond8 (unregistering): Released all slaves [ 573.938500][ T12] bond9 (unregistering): Released all slaves [ 574.063922][ T12] tipc: Left network mode [ 574.484038][ T12] hsr_slave_0: left promiscuous mode [ 574.490002][ T12] hsr_slave_1: left promiscuous mode [ 574.502856][ T12] dummy0: left allmulticast mode [ 574.509008][ T12] veth1_vlan: left promiscuous mode [ 575.256249][ T12] IPVS: stop unused estimator thread 0... [ 588.334915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.424611][T16044] Bluetooth: hci5: command 0x0406 tx timeout [ 593.290324][T18805] syzkaller0: entered promiscuous mode [ 593.309759][T18805] syzkaller0: entered allmulticast mode [ 593.323449][T18808] netlink: 'syz.4.3373': attribute type 1 has an invalid length. [ 593.365364][T18805] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3374'. [ 593.368191][T18808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3373'. [ 593.472306][T18815] netlink: 'syz.2.3376': attribute type 1 has an invalid length. [ 593.501881][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3376'. [ 593.761064][T18829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3379'. [ 593.786657][T18829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3379'. [ 593.790812][T18833] netlink: 'syz.2.3380': attribute type 16 has an invalid length. [ 593.801590][T18828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3379'. [ 593.806189][T18833] netlink: 'syz.2.3380': attribute type 17 has an invalid length. [ 593.828817][T18828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3379'. [ 593.988891][T18833] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.029695][T18833] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.138830][T18833] bond1: left promiscuous mode [ 594.172087][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.201973][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.239343][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.324142][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.446892][T18860] bond2 (unregistering): Released all slaves [ 594.482084][T18870] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3390'. [ 594.506831][T18871] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 594.755996][T18883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3395'. [ 594.848559][T18889] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 594.856507][T18890] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 594.983899][T18898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3399'. [ 595.117282][T18902] vcan1: entered promiscuous mode [ 595.122479][T18902] vcan1: entered allmulticast mode [ 595.220642][T18910] netlink: 'syz.4.3405': attribute type 1 has an invalid length. [ 595.321430][T18910] bond2 (unregistering): Released all slaves [ 595.533071][T18910] syzkaller0: entered promiscuous mode [ 595.549495][T18910] syzkaller0: entered allmulticast mode [ 595.728125][T18942] netlink: 'syz.5.3412': attribute type 1 has an invalid length. [ 595.737020][T18942] netlink: 'syz.5.3412': attribute type 2 has an invalid length. [ 595.746653][T18942] netlink: 'syz.5.3412': attribute type 1 has an invalid length. [ 595.756131][T18944] netlink: 'syz.2.3411': attribute type 1 has an invalid length. [ 595.762472][T18942] netlink: 'syz.5.3412': attribute type 3 has an invalid length. [ 596.542364][T18987] IPVS: Scheduler module ip_vs_sip not found [ 596.945130][T19024] xt_hashlimit: size too large, truncated to 1048576 [ 596.975914][T16047] Bluetooth: hci4: command 0x0405 tx timeout [ 597.017152][T19032] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 597.568375][T19069] veth1_macvtap: left promiscuous mode [ 597.584170][T19069] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 597.666607][T19078] netlink: zone id is out of range [ 597.697883][T19078] netlink: zone id is out of range [ 597.721124][T19078] netlink: zone id is out of range [ 597.748131][T19078] netlink: zone id is out of range [ 597.777643][T19078] netlink: zone id is out of range [ 597.801776][T19078] netlink: zone id is out of range [ 597.839813][T19078] netlink: zone id is out of range [ 597.851656][T19078] netlink: zone id is out of range [ 597.868919][T19078] netlink: zone id is out of range [ 597.889010][T19078] netlink: zone id is out of range [ 598.117634][ T1104] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.156370][ T1104] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.180441][ T1104] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.202614][T19107] Cannot find add_set index 2 as target [ 598.218692][ T1104] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.560185][T19136] __nla_validate_parse: 15 callbacks suppressed [ 598.560204][T19136] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3467'. [ 598.797395][T19149] validate_nla: 4 callbacks suppressed [ 598.797413][T19149] netlink: 'syz.4.3471': attribute type 1 has an invalid length. [ 598.903867][T19159] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3473'. [ 598.918599][T19158] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3473'. [ 598.935653][T19156] syzkaller0: entered promiscuous mode [ 598.958424][T19156] syzkaller0: entered allmulticast mode [ 599.139109][T16044] block nbd1: Receive control failed (result -32) [ 599.322523][T19183] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3480'. [ 599.332344][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3478'. [ 599.472340][T19186] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 600.010014][T19205] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3486'. [ 600.222727][T19229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3493'. [ 600.262451][T19229] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3493'. [ 600.295727][T19232] netlink: 212128 bytes leftover after parsing attributes in process `syz.5.3491'. [ 600.679880][T19250] IPv6: NLM_F_CREATE should be specified when creating new route [ 600.881306][T19262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3503'. [ 600.967785][T19262] bridge1: entered promiscuous mode [ 600.990624][T19262] bridge1: entered allmulticast mode [ 601.053318][T19262] team0: Port device bridge1 added [ 601.272026][T19289] siw: device registration error -23 [ 601.349455][T19288] syzkaller1: entered promiscuous mode [ 601.357352][T19288] syzkaller1: entered allmulticast mode [ 601.373910][T19295] macsec1: entered promiscuous mode [ 601.382580][T19295] bridge0: entered promiscuous mode [ 601.401470][T19295] macsec1: entered allmulticast mode [ 601.414228][T19295] bridge0: entered allmulticast mode [ 601.421967][T19295] bridge0: port 3(macsec1) entered blocking state [ 601.433860][T19295] bridge0: port 3(macsec1) entered disabled state [ 601.523642][T19295] bridge0: left allmulticast mode [ 601.530054][T19295] bridge0: left promiscuous mode [ 602.022133][T19335] tipc: Started in network mode [ 602.039860][T19335] tipc: Node identity 00000000000000002d2e00000000407f, cluster identity 4711 [ 602.220272][T19343] netlink: 'syz.0.3525': attribute type 4 has an invalid length. [ 602.597314][T19357] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 602.598780][T19361] netlink: 'syz.2.3530': attribute type 26 has an invalid length. [ 602.619515][T19361] netlink: 'syz.2.3530': attribute type 26 has an invalid length. [ 602.853290][T19369] sctp: [Deprecated]: syz.0.3534 (pid 19369) Use of struct sctp_assoc_value in delayed_ack socket option. [ 602.853290][T19369] Use struct sctp_sack_info instead [ 602.957937][T19375] net_ratelimit: 137 callbacks suppressed [ 602.957953][T19375] ip6tnl0: mtu greater than device maximum [ 603.076475][T19385] nbd: must specify a size in bytes for the device [ 603.286492][T19403] nbd: device at index 64 is going down [ 603.495049][T19422] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 603.585652][T19429] veth0: entered promiscuous mode [ 603.600272][T18790] udevd[18790]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 603.628997][T19203] udevd[19203]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 603.920175][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 604.222336][T19464] __nla_validate_parse: 9 callbacks suppressed [ 604.222355][T19464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3557'. [ 604.416413][T19428] veth0: left promiscuous mode [ 604.451463][T19477] xt_TPROXY: Can be used only with -p tcp or -p udp [ 604.639289][T19480] bond2: Removing last arp target with arp_interval on [ 604.676155][T19492] ip6gre1: entered allmulticast mode [ 604.767140][T19494] syzkaller0: entered promiscuous mode [ 604.772657][T19494] syzkaller0: entered allmulticast mode [ 604.889649][T19505] Cannot find del_set index 4 as target [ 605.041450][T19511] IPv6: Can't replace route, no match found [ 605.047688][T19515] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3572'. [ 605.064812][T19511] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3570'. [ 605.151321][T19514] nbd2: detected capacity change from 0 to 127 [ 605.176731][T16044] block nbd2: Receive control failed (result -32) [ 605.207234][T19203] block nbd2: Dead connection, failed to find a fallback [ 605.227666][T19203] block nbd2: shutting down sockets [ 605.237236][T19203] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.248113][T19203] Buffer I/O error on dev nbd2, logical block 0, async page read [ 605.261138][T19203] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.270602][T19203] Buffer I/O error on dev nbd2, logical block 1, async page read [ 605.279110][T19203] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.288864][T19203] Buffer I/O error on dev nbd2, logical block 2, async page read [ 605.303531][T19203] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.315318][T19203] Buffer I/O error on dev nbd2, logical block 3, async page read [ 605.333320][T19528] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3574'. [ 605.338335][T19203] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.368181][T19529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3575'. [ 605.379879][T19203] Buffer I/O error on dev nbd2, logical block 0, async page read [ 605.390534][T19203] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.400098][T19203] Buffer I/O error on dev nbd2, logical block 1, async page read [ 605.408453][T19203] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.422670][T19203] Buffer I/O error on dev nbd2, logical block 2, async page read [ 605.447650][T19203] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.472322][T19203] Buffer I/O error on dev nbd2, logical block 3, async page read [ 605.480451][T19203] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.495829][T19203] Buffer I/O error on dev nbd2, logical block 0, async page read [ 605.514632][T19203] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.536534][T19543] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3578'. [ 605.550387][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3579'. [ 605.559917][T19203] Buffer I/O error on dev nbd2, logical block 1, async page read [ 605.582618][T19543] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3578'. [ 605.595441][T19545] x_tables: duplicate underflow at hook 1 [ 605.606979][T19203] ldm_validate_partition_table(): Disk read failed. [ 605.615373][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3579'. [ 605.646766][T19203] Dev nbd2: unable to read RDB block 0 [ 605.668289][T19203] nbd2: unable to read partition table [ 605.731872][T19203] ldm_validate_partition_table(): Disk read failed. [ 605.759759][T19203] Dev nbd2: unable to read RDB block 0 [ 605.768869][T19203] nbd2: unable to read partition table [ 605.806626][T19554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3581'. [ 605.905602][T19567] netlink: 'syz.2.3585': attribute type 4 has an invalid length. [ 605.915733][T19566] netlink: 'syz.2.3585': attribute type 4 has an invalid length. [ 606.156273][T19586] netlink: 'syz.4.3590': attribute type 1 has an invalid length. [ 606.246344][T19586] 8021q: adding VLAN 0 to HW filter on device bond2 [ 606.278294][T19589] bridge0: port 3(syz_tun) entered blocking state [ 606.291048][T19589] bridge0: port 3(syz_tun) entered disabled state [ 606.299688][T19589] syz_tun: entered allmulticast mode [ 606.306729][T19597] netlink: 'syz.0.3593': attribute type 1 has an invalid length. [ 606.319506][T19589] syz_tun: entered promiscuous mode [ 606.325741][T19589] bridge0: port 3(syz_tun) entered blocking state [ 606.332307][T19589] bridge0: port 3(syz_tun) entered forwarding state [ 606.376205][T19590] bond2: (slave veth3): Enslaving as an active interface with a down link [ 606.397161][T19594] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 606.404338][T19594] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 606.443844][T19597] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 606.470362][T19609] netlink: 'syz.2.3596': attribute type 13 has an invalid length. [ 606.728283][T19631] x_tables: duplicate underflow at hook 1 [ 607.014665][T19647] netlink: 'syz.5.3608': attribute type 1 has an invalid length. [ 607.190027][T19649] sctp: [Deprecated]: syz.0.3610 (pid 19649) Use of int in maxseg socket option. [ 607.190027][T19649] Use struct sctp_assoc_value instead [ 607.226805][T19649] vcan1: entered promiscuous mode [ 607.243161][T19649] vcan1: entered allmulticast mode [ 607.781067][T19682] netlink: 'syz.0.3616': attribute type 3 has an invalid length. [ 608.142966][T19694] netlink: 'syz.2.3618': attribute type 1 has an invalid length. [ 608.333173][T19699] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 608.350084][T19699] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 609.332070][T19778] __nla_validate_parse: 11 callbacks suppressed [ 609.332088][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3637'. [ 609.396828][T19783] sctp: [Deprecated]: syz.2.3639 (pid 19783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 609.396828][T19783] Use struct sctp_sack_info instead [ 609.771379][T19800] SET target dimension over the limit! [ 609.875419][T16047] Bluetooth: hci4: link tx timeout [ 609.884157][T16047] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 609.900265][T16047] Bluetooth: hci4: link tx timeout [ 609.905795][T16047] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 609.926092][T19811] netlink: 'syz.5.3647': attribute type 1 has an invalid length. [ 610.286196][T19829] xt_policy: too many policy elements [ 610.293184][T19829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3651'. [ 610.309192][T19829] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3651'. [ 610.771282][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3650'. [ 610.804149][T19822] openvswitch: netlink: Flow actions attr not present in new flow. [ 610.916271][T16047] Bluetooth: hci0: command 0x0406 tx timeout [ 610.972205][T19851] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 611.003970][T19851] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 611.028391][T19852] veth0: entered promiscuous mode [ 611.041264][T19851] veth0: left promiscuous mode [ 611.230391][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3657'. [ 611.354167][T19869] : entered promiscuous mode [ 611.918062][T19912] netlink: 'syz.5.3666': attribute type 1 has an invalid length. [ 611.935287][T16044] Bluetooth: hci4: command 0x0405 tx timeout [ 611.938310][T19912] netlink: 'syz.5.3666': attribute type 1 has an invalid length. [ 612.052447][T19921] netlink: 'syz.2.3669': attribute type 1 has an invalid length. [ 612.081401][T19921] 8021q: adding VLAN 0 to HW filter on device bond4 [ 612.131546][T19921] bond4: (slave ip6gretap1): making interface the new active one [ 612.142054][T19921] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 612.192904][T19923] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3668'. [ 612.231907][T19918] »»»»»» speed is unknown, defaulting to 1000 [ 612.263543][T19927] lo: Caught tx_queue_len zero misconfig [ 612.325669][T19930] Unknown options in mask b7f2 [ 612.931997][T19963] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3679'. [ 613.000261][T19963] : entered promiscuous mode [ 613.478295][T19983] ipvlan2: entered allmulticast mode [ 613.494145][T19983] batadv_slave_1: entered allmulticast mode [ 613.503381][T19983] batman_adv: batadv0: Adding interface: ipvlan2 [ 613.511191][T19983] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.539662][T19983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.552992][T19983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.563856][T19983] batman_adv: batadv0: Interface activated: ipvlan2 [ 613.678254][T19999] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 613.717019][T19999] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode [ 614.077032][T20027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3695'. [ 614.117092][T20027] ip6tnl0: Caught tx_queue_len zero misconfig [ 614.135140][T20027] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3695'. [ 614.169444][T20032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3695'. [ 614.377308][T20039] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3697'. [ 614.398755][T20039] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3697'. [ 614.417813][T20039] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3697'. [ 614.721332][T20053] IPVS: length: 201 != 8 [ 614.795833][T20053] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.3699'. [ 615.567680][T20078] tipc: Enabled bearer , priority 0 [ 615.585250][T20073] syzkaller1: entered promiscuous mode [ 615.596763][T20073] syzkaller1: entered allmulticast mode [ 615.610243][T20081] netem: change failed [ 615.675845][T20086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3705'. [ 615.771259][T20088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3706'. [ 615.829797][T20097] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3709'. [ 615.839537][T20097] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 615.950615][T20105] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3711'. [ 616.014588][T16044] Bluetooth: hci3: command 0x0419 tx timeout [ 616.694519][T18528] tipc: Node number set to 3533839445 [ 624.178835][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.260080][T16044] Bluetooth: hci6: command 0x0406 tx timeout [ 655.484182][T20174] netlink: 'syz.2.3715': attribute type 1 has an invalid length. [ 655.562177][T20173] team_slave_1: entered allmulticast mode [ 655.606360][T20178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3718'. [ 655.630624][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 655.643066][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 655.651983][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 655.677041][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 655.680770][T20178] netlink: 'syz.0.3718': attribute type 16 has an invalid length. [ 655.688664][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 655.700571][T20178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3718'. [ 656.008849][T20206] x_tables: duplicate underflow at hook 1 [ 656.390442][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.412305][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.469819][T20229] xt_hashlimit: size too large, truncated to 1048576 [ 656.621804][T20244] nbd: nbd0 already in use [ 656.653508][T20179] »»»»»» speed is unknown, defaulting to 1000 [ 656.813364][T20254] bridge_slave_0: left allmulticast mode [ 656.825283][T20254] bridge_slave_0: left promiscuous mode [ 656.831618][T20254] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.843845][T20254] bridge_slave_1: left allmulticast mode [ 656.850135][T20254] bridge_slave_1: left promiscuous mode [ 656.858126][T20254] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.867953][T20260] netlink: 'syz.2.3740': attribute type 13 has an invalid length. [ 656.906787][T20254] bond0: (slave bond_slave_0): Releasing backup interface [ 656.973951][T20254] bond0: (slave bond_slave_1): Releasing backup interface [ 657.039644][T20254] team0: Port device team_slave_0 removed [ 657.045716][T20275] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3743'. [ 657.065144][T20254] team0: Port device team_slave_1 removed [ 657.072226][T20254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.083980][T20254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.099835][T20254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.123243][T20254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.134806][T20281] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 657.148790][T20254] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 657.236872][T20286] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 657.254074][T20258] team0: Mode changed to "activebackup" [ 657.268121][T20267] vlan0: entered promiscuous mode [ 657.283994][T20267] team0: Port device vlan0 added [ 657.303488][T20273] tipc: Started in network mode [ 657.320241][T20273] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 657.328216][T20273] tipc: Enabled bearer , priority 0 [ 657.503435][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3747'. [ 657.553962][T20294] syzkaller0: entered promiscuous mode [ 657.572419][T20294] syzkaller0: entered allmulticast mode [ 657.679611][T20311] openvswitch: netlink: IP tunnel dst address not specified [ 657.775565][T16044] Bluetooth: hci1: command tx timeout [ 657.891704][T20322] netlink: 'syz.5.3751': attribute type 13 has an invalid length. [ 658.036828][T20335] H: renamed from dummy0 (while UP) [ 658.057550][T20179] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.088349][T20179] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.131972][T20179] bridge_slave_0: entered allmulticast mode [ 658.179252][T20179] bridge_slave_0: entered promiscuous mode [ 658.245775][T20179] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.267755][T20179] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.288339][T20179] bridge_slave_1: entered allmulticast mode [ 658.303568][T20179] bridge_slave_1: entered promiscuous mode [ 658.386032][T20179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.431700][T20179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.469243][T20366] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3762'. [ 658.501873][T20366] openvswitch: netlink: Flow key attr not present in new flow. [ 658.505635][ T7481] tipc: Node number set to 11578026 [ 658.540226][T20363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3762'. [ 658.558068][T20179] team0: Port device team_slave_0 added [ 658.561601][T20363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3762'. [ 658.578336][T20179] team0: Port device team_slave_1 added [ 658.592175][T20363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3762'. [ 658.603728][T20371] RDS: rds_bind could not find a transport for fe80::e, load rds_tcp or rds_rdma? [ 658.661000][T20179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.682153][T20179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.719571][T20179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.770915][T20179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.797238][T20179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.843672][T20179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.913899][T20179] hsr_slave_0: entered promiscuous mode [ 658.928014][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3770'. [ 658.938560][T20179] hsr_slave_1: entered promiscuous mode [ 658.944261][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3770'. [ 658.955054][T20179] debugfs: 'hsr0' already exists in 'hsr' [ 658.960889][T20179] Cannot create hsr debugfs directory [ 659.036521][T20396] netlink: 'syz.4.3772': attribute type 32 has an invalid length. [ 659.088237][T20396] bond3: Setting coupled_control to off (0) [ 659.298657][T20407] netlink: 'syz.0.3773': attribute type 29 has an invalid length. [ 659.350049][T20409] netlink: 'syz.0.3773': attribute type 29 has an invalid length. [ 659.707093][T20415] netlink: 'syz.2.3777': attribute type 22 has an invalid length. [ 659.812340][T20418] netlink: 'syz.2.3777': attribute type 1 has an invalid length. [ 659.824545][T20418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 659.831820][T20418] IPv6: NLM_F_CREATE should be set when creating new route [ 659.854954][T16044] Bluetooth: hci1: command tx timeout [ 659.988058][T20415] netlink: 'syz.2.3777': attribute type 22 has an invalid length. [ 659.988800][T20179] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 660.044519][T20179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 660.110679][T20179] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 660.162662][T20179] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 660.198514][T20179] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 660.233427][T20179] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 660.251037][T20179] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 660.293066][T20179] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 660.630930][T20179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.703049][T20179] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.739233][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.746491][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.781856][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.789074][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.866257][T20469] __nla_validate_parse: 7 callbacks suppressed [ 660.866275][T20469] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3790'. [ 660.925726][T20469] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3790'. [ 661.129692][T20482] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3795'. [ 661.170200][T20482] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3795'. [ 661.191234][T20482] netlink: 19 bytes leftover after parsing attributes in process `syz.5.3795'. [ 661.699169][T20179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.722739][T20511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 661.849255][T20524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3807'. [ 661.861519][T20524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3807'. [ 661.937433][T16044] Bluetooth: hci1: command tx timeout [ 662.076725][T20179] veth0_vlan: entered promiscuous mode [ 662.090130][T20179] veth1_vlan: entered promiscuous mode [ 662.120387][T20179] veth0_macvtap: entered promiscuous mode [ 662.131391][T20179] veth1_macvtap: entered promiscuous mode [ 662.150007][T20179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.166229][T20179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.183415][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.193592][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.203469][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.212668][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.015570][T16044] Bluetooth: hci1: command tx timeout [ 664.415205][T20496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 664.612380][ T7249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.630663][ T7249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.652615][T20543] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 664.674110][T20543] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 664.734930][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.756782][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.950598][T20558] netlink: 'syz.2.3820': attribute type 8 has an invalid length. [ 664.976197][T20558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3820'. [ 665.555324][T20598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3829'. [ 665.622562][T20604] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3832'. [ 665.812956][T20620] xt_hashlimit: invalid interval [ 666.083644][T20628] __nla_validate_parse: 2 callbacks suppressed [ 666.083665][T20628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3839'. [ 668.481879][T20594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 668.720567][T20659] sctp: [Deprecated]: syz.0.3847 (pid 20659) Use of int in max_burst socket option. [ 668.720567][T20659] Use struct sctp_assoc_value instead [ 669.030076][T20677] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3852'. [ 669.247435][T20684] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3853'. [ 669.356665][T20689] syzkaller0: entered promiscuous mode [ 669.370315][T20689] syzkaller0: entered allmulticast mode [ 669.494075][T20709] netlink: 'syz.2.3859': attribute type 1 has an invalid length. [ 669.529381][T20709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 669.536682][T20709] IPv6: NLM_F_CREATE should be set when creating new route [ 669.764908][T20715] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 669.798791][T20718] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3864'. [ 669.928664][T20722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3865'. [ 669.988739][T20724] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 669.998980][T20724] batadv1: entered promiscuous mode [ 670.019658][T20724] team0: Port device batadv1 added [ 670.126337][T20722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3865'. [ 670.255435][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.596987][T20754] netlink: 'syz.0.3875': attribute type 1 has an invalid length. [ 670.843659][ T7481] IPVS: starting estimator thread 0... [ 670.849607][T20769] netlink: 'syz.5.3879': attribute type 1 has an invalid length. [ 670.869382][T20770] netlink: 'syz.5.3879': attribute type 1 has an invalid length. [ 670.878181][T20773] smc: net device team0 applied user defined pnetid SYZ0 [ 670.901717][T20773] smc: net device team0 erased user defined pnetid SYZ0 [ 670.919476][T20769] 8021q: adding VLAN 0 to HW filter on device bond3 [ 670.956075][T20771] IPVS: using max 29 ests per chain, 69600 per kthread [ 671.077919][T20783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3882'. [ 671.098667][T20786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3885'. [ 671.111611][T20786] netlink: 'syz.6.3885': attribute type 5 has an invalid length. [ 671.119700][T20786] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3885'. [ 671.125807][T20735] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 671.138173][T20786] geneve2: entered promiscuous mode [ 671.150246][T20786] geneve2: entered allmulticast mode [ 671.168617][ T1149] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 671.211995][ T1149] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 671.257492][ T1149] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 671.290546][ T1149] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 671.315748][T20797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3888'. [ 671.329258][T20797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3888'. [ 671.340178][T20793] netlink: 'syz.6.3887': attribute type 1 has an invalid length. [ 671.360597][T20793] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3887'. [ 671.761294][T20833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3900'. [ 671.785587][T20832] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3900'. [ 671.800167][T20832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3900'. [ 672.335530][T16044] Bluetooth: hci0: command 0x0406 tx timeout [ 672.757108][T20850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3902'. [ 672.842389][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3902'. [ 672.979453][T16044] Bluetooth: hci4: link tx timeout [ 672.984744][T16044] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 673.200327][T20893] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 673.267583][T20901] ipt_REJECT: TCP_RESET invalid for non-tcp [ 673.665004][T20924] veth1_macvtap: left promiscuous mode [ 673.828080][T20931] lo: entered promiscuous mode [ 673.839577][T20931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.058599][T20951] netlink: 'syz.6.3928': attribute type 10 has an invalid length. [ 674.124034][T20951] team0: Port device dummy0 added [ 674.136324][T20955] syzkaller0: entered promiscuous mode [ 674.151485][T20955] syzkaller0: entered allmulticast mode [ 674.326182][T20971] IPVS: length: 40 != 8 [ 674.547926][T20982] bridge: RTM_NEWNEIGH with invalid ether address [ 674.561323][T20984] netlink: 'syz.6.3941': attribute type 4 has an invalid length. [ 675.067473][T16044] Bluetooth: hci4: command 0x0405 tx timeout [ 675.656772][T21056] openvswitch: netlink: Message has 6 unknown bytes. [ 675.671556][T21055] syzkaller1: entered promiscuous mode [ 675.690036][T21055] syzkaller1: entered allmulticast mode [ 676.121548][T21074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.192031][T21074] __nla_validate_parse: 13 callbacks suppressed [ 676.192051][T21074] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.3966'. [ 676.215565][T21081] atomic_op ffff88804a762998 conn xmit_atomic 0000000000000000 [ 676.404810][T21086] nbd: nbd2 already in use [ 676.625525][T21065] infiniband syz1: set active [ 676.630376][T21102] xt_hl: Unknown TTL match mode: 255 [ 676.643091][T21065] infiniband syz1: added batadv_slave_1 [ 676.684114][T21106] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 676.704211][T21106] bond4 (unregistering): Released all slaves [ 676.725135][T21065] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 676.742339][T21065] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 676.765933][T21065] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 676.792517][T21112] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20001 [ 676.864191][T21114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3975'. [ 676.878311][T21065] RDS/IB: syz1: added [ 676.888297][T21065] smc: adding ib device syz1 with port count 1 [ 676.895644][T21065] smc: ib device syz1 port 1 has no pnetid [ 676.916920][T21116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3975'. [ 677.675775][T21122] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3977'. [ 685.616226][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 698.188496][T21231] x_tables: unsorted underflow at hook 3 [ 698.200455][T21233] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3983'. [ 698.238065][T21232] tipc: Started in network mode [ 698.272692][T21232] tipc: Node identity ac14140f, cluster identity 4711 [ 698.317880][T21232] tipc: New replicast peer: 255.255.255.255 [ 698.346884][T21232] tipc: Enabled bearer , priority 10 [ 698.391487][T21251] macvlan0: entered promiscuous mode [ 698.419559][T21248] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3988'. [ 698.487453][T21256] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3992'. [ 698.544160][T21264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3992'. [ 698.801570][T21284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3997'. [ 698.872560][T21288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4000'. [ 699.141101][T21311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4007'. [ 699.332058][T21326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4012'. [ 699.465628][ T7481] tipc: Node number set to 2886997007 [ 699.540750][T21339] syzkaller0: entered promiscuous mode [ 699.547495][T21339] syzkaller0: entered allmulticast mode [ 699.923172][T21354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 699.938890][T21366] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4023'. [ 700.157023][T21374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4027'. [ 700.234309][T21382] netlink: 'syz.6.4028': attribute type 17 has an invalid length. [ 700.259380][T21382] gretap0: entered promiscuous mode [ 700.272902][T21382] gretap0: left promiscuous mode [ 700.439233][T21393] x_tables: duplicate underflow at hook 2 [ 700.455101][T21394] x_tables: duplicate underflow at hook 2 [ 700.527199][T21402] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 700.801557][T21408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.902252][T21423] x_tables: duplicate underflow at hook 2 [ 700.920532][T21427] netlink: 'syz.5.4042': attribute type 7 has an invalid length. [ 700.929837][T21425] netlink: 'syz.5.4042': attribute type 7 has an invalid length. [ 700.937740][T21425] netlink: 'syz.5.4042': attribute type 8 has an invalid length. [ 700.949463][T21427] netlink: 'syz.5.4042': attribute type 8 has an invalid length. [ 700.965415][T21425] ip6gretap0: entered promiscuous mode [ 700.977995][T21425] ip6gretap0: left promiscuous mode [ 701.000051][T21432] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 701.012683][T21427] ip6gretap0: entered promiscuous mode [ 701.029659][T21427] ip6gretap0: left promiscuous mode [ 701.451338][T21452] netlink: 'syz.5.4049': attribute type 23 has an invalid length. [ 701.479389][T21454] netlink: 'syz.0.4050': attribute type 1 has an invalid length. [ 701.511319][T21454] netlink: 'syz.0.4050': attribute type 2 has an invalid length. [ 701.556404][T21459] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 701.703284][T21463] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 701.738102][T21463] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 701.761005][T21463] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 701.762256][T21472] netlink: 'syz.6.4054': attribute type 4 has an invalid length. [ 701.816955][T21475] netlink: 'syz.4.4055': attribute type 1 has an invalid length. [ 702.932123][T21533] ieee802154 phy0 wpan0: encryption failed: -22 [ 703.079899][T21540] x_tables: duplicate underflow at hook 3 [ 705.088342][T21498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.113050][T21514] __nla_validate_parse: 18 callbacks suppressed [ 705.113068][T21514] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4065'. [ 705.166663][T21514] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 705.200900][T21556] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4077'. [ 705.242049][T21559] ip6t_REJECT: ECHOREPLY is not supported [ 705.560604][T21575] netlink: 'syz.0.4084': attribute type 11 has an invalid length. [ 705.586679][T21575] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4084'. [ 705.658601][T21577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4085'. [ 705.696502][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4086'. [ 705.753618][T21585] validate_nla: 4 callbacks suppressed [ 705.753636][T21585] netlink: 'syz.2.4088': attribute type 1 has an invalid length. [ 705.866782][T21585] 8021q: adding VLAN 0 to HW filter on device bond5 [ 705.879183][T21585] netlink: 'syz.2.4088': attribute type 1 has an invalid length. [ 705.887424][T21585] netlink: 'syz.2.4088': attribute type 2 has an invalid length. [ 705.934185][T21598] sctp: [Deprecated]: syz.6.4091 (pid 21598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 705.934185][T21598] Use struct sctp_sack_info instead [ 705.957062][T21598] netlink: 'syz.6.4091': attribute type 1 has an invalid length. [ 705.965194][T21598] netlink: 236 bytes leftover after parsing attributes in process `syz.6.4091'. [ 706.008175][T21593] bond5: (slave veth0_to_bond): making interface the new active one [ 706.041436][T21593] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 706.193654][T21607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4094'. [ 706.434189][T21620] gretap1: entered promiscuous mode [ 706.441904][T21620] batman_adv: batadv0: Adding interface: gretap1 [ 706.449352][T21620] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 706.482816][T21620] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 706.797955][T21635] nbd: must specify at least one socket [ 706.862002][T21639] syzkaller1: entered promiscuous mode [ 706.873574][T21639] syzkaller1: entered allmulticast mode [ 706.921740][T21639] erspan0: entered promiscuous mode [ 706.947852][T21639] erspan0: entered allmulticast mode [ 707.216402][T21665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4114'. [ 707.351092][T21675] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4117'. [ 707.426151][T21678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.730246][T21695] bond0: left allmulticast mode [ 707.743980][T21695] bond_slave_0: left allmulticast mode [ 707.974901][T18528] IPVS: starting estimator thread 0... [ 708.094913][T21717] IPVS: using max 26 ests per chain, 62400 per kthread [ 708.541836][T21762] bond0: Device is already in use. [ 708.856041][T21782] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 708.863943][T21782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.957631][T21789] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4151'. [ 710.748331][T21702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 710.901884][T21792] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4152'. [ 711.437743][T21821] netlink: 'syz.4.4160': attribute type 13 has an invalid length. [ 711.439240][T21827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4162'. [ 711.552351][T21834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4163'. [ 711.773612][T21849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4164'. [ 711.979218][T21861] netlink: 'syz.4.4167': attribute type 1 has an invalid length. [ 712.090561][T21841] 8021q: adding VLAN 0 to HW filter on device bond5 [ 712.144165][T21841] bond4: (slave bond5): Enslaving as an active interface with an up link [ 712.220906][T21878] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4173'. [ 712.232294][T21879] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4173'. [ 712.407673][T21890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4176'. [ 712.439971][ T29] audit: type=1804 audit(1778805581.386:7): pid=21891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4174" name="/newroot/327/cgroup.controllers" dev="tmpfs" ino=1699 res=1 errno=0 [ 712.501311][ T29] audit: type=1800 audit(1778805581.386:8): pid=21891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4174" name="cgroup.controllers" dev="tmpfs" ino=1699 res=0 errno=0 [ 712.572368][T21894] netlink: 'syz.4.4178': attribute type 1 has an invalid length. [ 712.658831][T21908] lo: Caught tx_queue_len zero misconfig [ 712.769984][T21910] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4181'. [ 712.850338][T21912] ieee802154 phy0 wpan0: encryption failed: -22 [ 712.890168][T21929] netlink: 'syz.5.4185': attribute type 4 has an invalid length. [ 712.940282][T21930] Bluetooth: MGMT ver 1.23 [ 713.276436][T21948] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 713.288464][T21948] IPv6: addrconf: prefix option has invalid lifetime [ 713.301931][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 713.309510][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 713.392450][T21954] Bluetooth: MGMT ver 1.23 [ 713.472428][T21940] netlink: 187436 bytes leftover after parsing attributes in process `syz.0.4186'. [ 713.631698][T21971] netlink: 'syz.4.4194': attribute type 9 has an invalid length. [ 713.672002][T21970] netlink: 'syz.6.4193': attribute type 1 has an invalid length. [ 713.719373][T21974] netlink: 'syz.6.4193': attribute type 1 has an invalid length. [ 713.896569][T21989] netlink: 'syz.6.4200': attribute type 1 has an invalid length. [ 713.952073][T21989] bond2: entered promiscuous mode [ 713.958632][T21992] netlink: 'syz.2.4197': attribute type 1 has an invalid length. [ 713.958923][T21989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 714.011269][T21989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 714.025682][T21989] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 714.036809][T21989] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 714.051825][T21989] bond2: (slave ip6gre1): making interface the new active one [ 714.060256][T21989] ip6gre1: entered promiscuous mode [ 714.067098][T21989] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 714.211477][ T29] audit: type=1800 audit(1778805583.156:9): pid=22010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4202" name="blkio.bfq.sectors" dev="tmpfs" ino=387 res=0 errno=0 [ 716.825859][T21982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 717.222324][T22029] netlink: 'syz.0.4210': attribute type 1 has an invalid length. [ 717.642890][T22054] IPv6: NLM_F_CREATE should be specified when creating new route [ 717.733423][T22057] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4217'. [ 717.751937][T22059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4218'. [ 717.835909][T22061] sctp: [Deprecated]: syz.2.4219 (pid 22061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 717.835909][T22061] Use struct sctp_sack_info instead [ 717.876039][T22061] sctp: [Deprecated]: syz.2.4219 (pid 22061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 717.876039][T22061] Use struct sctp_sack_info instead [ 718.015883][T22071] nft_compat: unsupported protocol 1 [ 718.119555][T22083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4227'. [ 718.193092][T22079] syzkaller0: entered promiscuous mode [ 718.200795][T22079] syzkaller0: entered allmulticast mode [ 718.223818][T22079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4225'. [ 718.230615][T22086] block nbd0: reconnected socket [ 718.922843][ T5625] block nbd0: Receive control failed (result -32) [ 721.171986][T22119] team0: Port device vlan0 removed [ 721.250913][ T13] tipc: Resetting bearer [ 721.293693][T22116] netlink: 'syz.6.4235': attribute type 1 has an invalid length. [ 721.330356][T22116] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4235'. [ 721.454704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.581184][T22149] netlink: 'syz.2.4243': attribute type 1 has an invalid length. [ 721.646054][T22149] bond6: entered promiscuous mode [ 721.661433][T22149] 8021q: adding VLAN 0 to HW filter on device bond6 [ 721.716470][T22149] 8021q: adding VLAN 0 to HW filter on device bond6 [ 721.723980][T22149] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 721.735048][T22149] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 721.754535][T22149] bond6: (slave ip6gre1): making interface the new active one [ 721.762507][T22149] ip6gre1: entered promiscuous mode [ 721.770034][T22149] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 721.853646][T22163] bond4 (unregistering): Released all slaves [ 721.921266][T22168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4248'. [ 722.020635][T22174] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 722.036858][T22174] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 722.071049][T22176] tipc: Started in network mode [ 722.076231][T22176] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 722.088447][T22176] tipc: Enabling of bearer rejected, failed to enable media [ 722.203580][T22183] netlink: 'syz.4.4254': attribute type 11 has an invalid length. [ 722.519951][T22209] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4260'. [ 722.562025][T22201] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4260'. [ 722.676371][T22219] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20004 [ 722.752741][T22226] netlink: 'syz.6.4265': attribute type 11 has an invalid length. [ 722.761074][T22226] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4265'. [ 723.035482][T22245] tipc: Resetting bearer [ 723.536286][T22275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 723.543571][T22275] IPv6: NLM_F_CREATE should be set when creating new route [ 723.597402][T22293] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.4284'. [ 723.621050][T22293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4284'. [ 723.633547][T22293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4284'. [ 723.741759][T22301] Dead loop on virtual device ip6_vti0 (net 225), fix it urgently! [ 723.812857][T22303] IPv6: sit1: Disabled Multicast RS [ 723.822761][T22303] sit1: entered allmulticast mode [ 723.851398][T22306] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 723.861742][T22306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.996417][T22315] x_tables: duplicate underflow at hook 2 [ 724.063818][T18549] IPVS: starting estimator thread 0... [ 724.079067][T22322] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 724.154497][T22320] IPVS: using max 29 ests per chain, 69600 per kthread [ 724.174343][T22326] sctp: [Deprecated]: syz.5.4298 (pid 22326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 724.174343][T22326] Use struct sctp_sack_info instead [ 724.200892][T22327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4299'. [ 724.330992][T22336] netlink: 'syz.4.4301': attribute type 61 has an invalid length. [ 724.341158][T22336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4301'. [ 724.351238][T22338] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4302'. [ 724.378387][T22338] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4302'. [ 724.389966][T22338] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4302'. [ 724.399292][T22338] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4302'. [ 724.528376][T22343] vlan2: entered allmulticast mode [ 724.533532][T22343] bond0: entered allmulticast mode [ 724.539312][T22343] bond_slave_0: entered allmulticast mode [ 724.765255][T22364] netlink: 'syz.0.4311': attribute type 1 has an invalid length. [ 726.154187][T22464] syzkaller0: entered promiscuous mode [ 726.166336][T22464] syzkaller0: entered allmulticast mode [ 726.279946][T22470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.516646][T22488] netlink: 'syz.4.4350': attribute type 30 has an invalid length. [ 726.568347][T22488] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 727.023930][T22521] mac80211_hwsim hwsim48 wlan0: entered allmulticast mode [ 727.212311][T22535] netlink: 'syz.0.4364': attribute type 1 has an invalid length. [ 727.244202][T22537] bond6 (unregistering): Released all slaves [ 727.318183][T22542] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 727.334887][T22542] bond4: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 727.351318][T22542] bond4: (slave vxcan3): making interface the new active one [ 727.360374][T22542] bond4: (slave vxcan3): Enslaving as an active interface with an up link [ 727.422616][T22549] netlink: 'syz.5.4368': attribute type 1 has an invalid length. [ 727.456537][T22549] bond6: entered promiscuous mode [ 727.462091][T22549] 8021q: adding VLAN 0 to HW filter on device bond6 [ 727.513712][T22549] 8021q: adding VLAN 0 to HW filter on device bond6 [ 727.533591][T22549] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 727.551459][T22549] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 727.566541][T22549] bond6: (slave ip6gre1): making interface the new active one [ 727.574164][T22549] ip6gre1: entered promiscuous mode [ 727.582089][T22549] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 727.808217][T22578] __nla_validate_parse: 135 callbacks suppressed [ 727.808234][T22578] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4375'. [ 727.832417][T22584] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4376'. [ 727.842007][T22582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4375'. [ 727.930474][T22586] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4378'. [ 727.978642][T22589] netlink: 'syz.4.4379': attribute type 21 has an invalid length. [ 727.986735][T22589] IPv6: NLM_F_CREATE should be specified when creating new route [ 728.199706][T22606] netlink: 276 bytes leftover after parsing attributes in process `syz.5.4384'. [ 728.331291][T22619] lo: left promiscuous mode [ 728.357596][T22619] mac80211_hwsim hwsim33 wlan0: left promiscuous mode [ 728.409843][T22619] vlan2: left allmulticast mode [ 728.427346][T22619] bond0: left allmulticast mode [ 728.440446][T22619] bond_slave_0: left allmulticast mode [ 728.497460][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.523297][ T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.562000][ T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.586947][ T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.260013][T22617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 731.275730][T22645] netlink: 'syz.5.4394': attribute type 1 has an invalid length. [ 731.365877][T22664] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4399'. [ 731.696108][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 731.860212][T22687] netlink: 'syz.0.4405': attribute type 32 has an invalid length. [ 731.869796][T22687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4405'. [ 731.869855][T22685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 731.937906][T22687] bond5: Setting coupled_control to off (0) [ 732.013214][T22694] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 732.239714][T22701] raw_sendmsg: syz.5.4410 forgot to set AF_INET. Fix it! [ 732.338541][T22712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4413'. [ 732.885699][T22744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4421'. [ 732.906671][T22744] netlink: 'syz.5.4421': attribute type 1 has an invalid length. [ 732.922018][T22744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4421'. [ 732.948545][T22744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4421'. [ 732.962653][T22744] netlink: 'syz.5.4421': attribute type 1 has an invalid length. [ 732.973034][T22744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4421'. [ 733.120911][T22753] TCP: TCP_TX_DELAY enabled [ 733.148834][T22756] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4423'. [ 733.227296][T22760] netlink: 'syz.5.4426': attribute type 1 has an invalid length. [ 733.272160][T22760] bond7: entered promiscuous mode [ 733.279203][T22760] 8021q: adding VLAN 0 to HW filter on device bond7 [ 733.341038][T22775] netlink: 'syz.4.4429': attribute type 2 has an invalid length. [ 733.435897][T22784] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4431'. [ 733.513900][T22788] netlink: 'syz.4.4432': attribute type 1 has an invalid length. [ 733.532727][T22788] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4432'. [ 733.535822][T22789] sch_tbf: burst 0 is lower than device lo mtu (32783) ! [ 733.555107][T22788] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4432'. [ 733.582614][T22788] netlink: 'syz.4.4432': attribute type 1 has an invalid length. [ 733.626455][T22788] netlink: 'syz.4.4432': attribute type 8 has an invalid length. [ 733.665002][T22788] netlink: 582 bytes leftover after parsing attributes in process `syz.4.4432'. [ 733.690053][T22803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.710241][T22802] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4436'. [ 733.711224][ T7250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.755070][ T7250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.907617][T22809] »»»»»» speed is unknown, defaulting to 1000 [ 734.465896][T22851] lo: Caught tx_queue_len zero misconfig [ 734.483961][T22851] ip6tnl0: Caught tx_queue_len zero misconfig [ 734.773588][T22868] pim6reg: entered allmulticast mode [ 737.313901][T22839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 737.324014][T22846] netlink: 'syz.0.4447': attribute type 1 has an invalid length. [ 737.332837][T22846] netlink: 'syz.0.4447': attribute type 1 has an invalid length. [ 737.340675][T22846] netlink: 'syz.0.4447': attribute type 8 has an invalid length. [ 737.595791][T22888] openvswitch: netlink: Flow key attr not present in new flow. [ 737.929515][T22903] __nla_validate_parse: 11 callbacks suppressed [ 737.929535][T22903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4464'. [ 737.939564][T22906] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 737.960964][T22908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4467'. [ 737.978592][T22903] veth0_macvtap: left promiscuous mode [ 738.018283][T22911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4467'. [ 738.048330][T22908] macsec1: entered promiscuous mode [ 738.053701][T22908] bridge0: entered promiscuous mode [ 738.060114][T22908] macsec1: entered allmulticast mode [ 738.066628][T22908] bridge0: entered allmulticast mode [ 738.072656][T22908] bridge0: port 3(macsec1) entered blocking state [ 738.078477][T16044] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 738.093574][T22908] bridge0: port 3(macsec1) entered disabled state [ 738.104294][T16044] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 738.113212][T16044] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 738.122001][T16044] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 738.129776][T16044] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 738.154949][T22908] bridge0: left allmulticast mode [ 738.232812][T22911] macsec1: entered promiscuous mode [ 738.244797][T22911] macsec1: entered allmulticast mode [ 738.250537][T22917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.265881][T22911] bridge0: entered allmulticast mode [ 738.272656][T22911] bridge0: port 3(macsec1) entered blocking state [ 738.287116][T22911] bridge0: port 3(macsec1) entered disabled state [ 738.301718][T22911] bridge0: left allmulticast mode [ 738.321106][ T7481] bridge0: left promiscuous mode [ 738.345125][T22916] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 738.346179][T22923] syzkaller1: entered promiscuous mode [ 738.360104][T22923] syzkaller1: entered allmulticast mode [ 738.455122][T22928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4470'. [ 738.675341][T22937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4472'. [ 738.702129][T22938] team_slave_1: Caught tx_queue_len zero misconfig [ 738.731930][T22913] »»»»»» speed is unknown, defaulting to 1000 [ 738.971505][T22949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4477'. [ 739.041223][T22951] IPv6: sit1: Disabled Multicast RS [ 739.051165][T22951] sit1: entered allmulticast mode [ 739.369632][T22969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4484'. [ 739.410626][T22976] x_tables: duplicate entry at hook 3 [ 739.453712][T22978] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4484'. [ 739.749537][T22913] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.773603][T22913] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.782312][T22913] bridge_slave_0: entered allmulticast mode [ 739.791707][T22913] bridge_slave_0: entered promiscuous mode [ 739.813435][T22913] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.850901][T22913] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.904327][T22913] bridge_slave_1: entered allmulticast mode [ 739.931841][T22913] bridge_slave_1: entered promiscuous mode [ 739.996894][T22913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.010396][T22913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.048865][T23012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4493'. [ 740.065556][T23013] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4492'. [ 740.082118][T22913] team0: Port device team_slave_0 added [ 740.105368][T22913] team0: Port device team_slave_1 added [ 740.189772][T22913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.200891][T22913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.249669][T22913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.263986][ T5625] Bluetooth: hci7: command tx timeout [ 740.279546][T22913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.288486][T22913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.315792][T22913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.336680][T23024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.430016][T22913] hsr_slave_0: entered promiscuous mode [ 740.451686][T22913] hsr_slave_1: entered promiscuous mode [ 740.466650][T22913] debugfs: 'hsr0' already exists in 'hsr' [ 740.475916][T22913] Cannot create hsr debugfs directory [ 740.936488][T23057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 741.072393][T23061] ipt_REJECT: ECHOREPLY no longer supported. [ 741.079074][T23061] netlink: 'syz.0.4507': attribute type 28 has an invalid length. [ 741.087836][T23061] netlink: 'syz.0.4507': attribute type 3 has an invalid length. [ 741.223291][T22913] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 741.257811][T22913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 741.274193][T22913] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 741.294275][T22913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 741.295112][T23076] x_tables: duplicate underflow at hook 2 [ 741.323904][T22913] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 741.372160][T22913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 741.389324][T22913] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 741.405807][T22913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 741.431713][T23083] netlink: 'syz.4.4516': attribute type 1 has an invalid length. [ 741.593546][T22913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.627629][T22913] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.651507][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.658746][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.710264][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.717493][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.723791][T23105] netlink: 'syz.0.4520': attribute type 1 has an invalid length. [ 741.804028][T23105] 8021q: adding VLAN 0 to HW filter on device bond6 [ 742.315536][T23139] tipc: Resetting bearer [ 742.327140][T23139] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 742.343607][ T5625] Bluetooth: hci7: command tx timeout [ 742.624995][ T5625] block nbd3: Receive control failed (result -32) [ 742.752885][T22913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.020318][T23159] __nla_validate_parse: 6 callbacks suppressed [ 743.020335][T23159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4531'. [ 743.359152][T22913] veth0_vlan: entered promiscuous mode [ 743.405263][T22913] veth1_vlan: entered promiscuous mode [ 743.406388][T23193] No such timeout policy "syz0" [ 743.424946][T23195] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4541'. [ 743.497724][T22913] veth0_macvtap: entered promiscuous mode [ 743.528335][T22913] veth1_macvtap: entered promiscuous mode [ 743.578793][T22913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.592596][T23202] netlink: 'syz.5.4543': attribute type 11 has an invalid length. [ 743.608849][T22913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.642236][T23208] netlink: 'syz.0.4545': attribute type 1 has an invalid length. [ 743.659709][T23206] netlink: 'syz.0.4545': attribute type 1 has an invalid length. [ 743.663158][ T7249] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.681009][ T7249] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.701928][ T7249] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.712413][ T7249] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.812072][T23211] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4546'. [ 744.003468][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.040817][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.068369][T23225] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 744.126361][T23228] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 744.172684][ T1351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.198340][ T1351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.317855][T23238] netlink: 'syz.5.4553': attribute type 2 has an invalid length. [ 744.328228][T23240] lo speed is unknown, defaulting to 1000 [ 744.334242][T23240] lo speed is unknown, defaulting to 1000 [ 744.343397][T23238] netlink: 'syz.5.4553': attribute type 2 has an invalid length. [ 744.353264][T23240] lo speed is unknown, defaulting to 1000 [ 744.369850][T23240] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 744.418149][ T5625] Bluetooth: hci7: command tx timeout [ 744.427735][T23240] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 744.449190][T23240] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 744.475711][T23240] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 744.516976][T23240] lo speed is unknown, defaulting to 1000 [ 744.527877][T23240] lo speed is unknown, defaulting to 1000 [ 744.536805][T23240] lo speed is unknown, defaulting to 1000 [ 744.581490][T23240] lo speed is unknown, defaulting to 1000 [ 744.626713][T23240] lo speed is unknown, defaulting to 1000 [ 744.682880][T23240] lo speed is unknown, defaulting to 1000 [ 744.702839][T23240] lo speed is unknown, defaulting to 1000 [ 744.724196][T23240] lo speed is unknown, defaulting to 1000 [ 744.754553][T23240] lo speed is unknown, defaulting to 1000 [ 744.768701][T23240] lo speed is unknown, defaulting to 1000 [ 744.899375][T23267] syzkaller1: entered promiscuous mode [ 744.910721][T23267] syzkaller1: entered allmulticast mode [ 744.951045][T23267] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 744.982595][T23273] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4567'. [ 745.022572][T23273] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4567'. [ 745.050525][T23274] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4567'. [ 745.058227][T23273] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4567'. [ 745.067453][T23278] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4564'. [ 745.096263][T23274] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4567'. [ 745.109140][T23267] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4564'. [ 745.270175][T23286] netlink: 'syz.7.4570': attribute type 6 has an invalid length. [ 746.495174][ T5625] Bluetooth: hci7: command tx timeout [ 747.057761][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 763.055104][ T30] INFO: task syz.1.3511:19285 blocked for more than 143 seconds. [ 763.063245][ T30] Not tainted syzkaller #0 [ 763.068397][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 763.077380][ T30] task:syz.1.3511 state:D stack:25648 pid:19285 tgid:19283 ppid:17648 task_flags:0x400140 flags:0x00080002 [ 763.089444][ T30] Call Trace: [ 763.092775][ T30] [ 763.095778][ T30] __schedule+0x17b4/0x5680 [ 763.100300][ T30] ? __lock_acquire+0x6b5/0x2cf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 763.105739][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 763.111934][ T30] ? __pfx___schedule+0x10/0x10 [ 763.118672][ T30] ? schedule+0x90/0x360 [ 763.123245][ T30] schedule+0x164/0x360 [ 763.127907][ T30] schedule_preempt_disabled+0x13/0x30 [ 763.133409][ T30] __mutex_lock+0x7f7/0x1550 [ 763.174738][ T30] ? __mutex_lock+0x608/0x1550 [ 763.191948][ T30] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 763.219817][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 763.244517][ T30] ? __nlmsg_put+0xef/0x1b0 [ 763.254744][ T30] ? genlmsg_put+0x137/0x2e0 [ 763.266253][ T30] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 763.284619][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 763.300763][ T30] ? __nla_parse+0x40/0x60 [ 763.305354][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 763.311718][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 763.318116][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 763.323692][ T30] ? __asan_memcpy+0x40/0x70 [ 763.328916][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 763.335133][ T30] genl_rcv_msg+0x61c/0x7a0 [ 763.339688][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 763.344830][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 763.350935][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 763.357909][ T30] ? __asan_memcpy+0x40/0x70 [ 763.362555][ T30] ? __skb_clone+0x63/0x7a0 [ 763.368236][ T30] netlink_rcv_skb+0x232/0x4b0 [ 763.373052][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 763.379279][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 763.385259][ T30] ? down_read+0x270/0x2e0 [ 763.389707][ T30] ? genl_rcv+0xd/0x40 [ 763.393785][ T30] genl_rcv+0x28/0x40 [ 763.397824][ T30] netlink_unicast+0x75c/0x8e0 [ 763.402611][ T30] netlink_sendmsg+0x813/0xb40 [ 763.407449][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.412750][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 763.418296][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 763.423611][ T30] ____sys_sendmsg+0x972/0x9f0 [ 763.428866][ T30] ? __might_fault+0xaf/0x130 [ 763.433600][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 763.439307][ T30] ? import_iovec+0x73/0xa0 [ 763.443859][ T30] ___sys_sendmsg+0x2a5/0x360 [ 763.449518][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 763.454792][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 763.461155][ T30] ? futex_wake+0x4ac/0x580 [ 763.466197][ T30] ? __fget_files+0x2a/0x420 [ 763.470833][ T30] ? __fget_files+0x3a0/0x420 [ 763.479381][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 763.487333][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 763.492854][ T30] ? rcu_is_watching+0x15/0xb0 [ 763.498050][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.504165][ T30] do_syscall_64+0x15f/0xf80 [ 763.510244][ T30] ? trace_irq_disable+0x3b/0x140 [ 763.515653][ T30] ? clear_bhb_loop+0x40/0x90 [ 763.520370][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.526716][ T30] RIP: 0033:0x7fbff2f9ce59 [ 763.531168][ T30] RSP: 002b:00007fbff3d86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.541882][ T30] RAX: ffffffffffffffda RBX: 00007fbff3215fa0 RCX: 00007fbff2f9ce59 [ 763.550026][ T30] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 763.558560][ T30] RBP: 00007fbff3032d6f R08: 0000000000000000 R09: 0000000000000000 [ 763.566787][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.574918][ T30] R13: 00007fbff3216038 R14: 00007fbff3215fa0 R15: 00007ffe7390f958 [ 763.582930][ T30] [ 763.586240][ T30] [ 763.586240][ T30] Showing all locks held in the system: [ 763.622353][ T30] 1 lock held by khungtaskd/30: [ 763.649692][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 763.674577][ T30] 2 locks held by getty/5382: [ 763.680868][ T30] #0: ffff888031ff20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 763.712221][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 763.734584][ T30] 2 locks held by syz.3.2850/16520: [ 763.744481][ T30] #0: ffffffff8fe3f228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 763.764548][ T30] #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 763.784558][ T30] 1 lock held by syz-executor/17006: [ 763.802782][ T30] 3 locks held by kworker/1:14/18545: [ 763.844443][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 763.884442][ T30] #1: ffffc9000462fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 763.916100][ T30] #2: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 763.954509][ T30] 2 locks held by syz.1.3511/19285: [ 763.959970][ T30] #0: ffffffff8fe3f228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 763.984438][ T30] #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 764.005427][ T30] 2 locks held by syz.6.4267/22229: [ 764.024472][ T30] #0: ffffffff8fe3f228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 764.052763][ T30] #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 764.069158][ T30] 5 locks held by syz-executor/22913: [ 764.076258][ T30] #0: ffff88802ae98ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 764.087425][ T30] #1: ffff88802ae980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 764.107203][ T30] #2: ffffffff8ff52fa0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 764.119414][ T30] #3: ffff88807e3f72f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 764.129254][ T30] #4: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 764.140604][ T30] [ 764.143824][ T30] ============================================= [ 764.143824][ T30] [ 764.182680][ T30] NMI backtrace for cpu 0 [ 764.182708][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 764.182728][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 764.182739][ T30] Call Trace: [ 764.182746][ T30] [ 764.182754][ T30] dump_stack_lvl+0xe8/0x150 [ 764.182780][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 764.182801][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 764.182823][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 764.182847][ T30] sys_info+0x135/0x170 [ 764.182863][ T30] watchdog+0xfd3/0x1030 [ 764.182896][ T30] ? watchdog+0x1c9/0x1030 [ 764.182925][ T30] kthread+0x388/0x470 [ 764.182952][ T30] ? __pfx_watchdog+0x10/0x10 [ 764.182974][ T30] ? __pfx_kthread+0x10/0x10 [ 764.182997][ T30] ret_from_fork+0x514/0xb70 [ 764.183019][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 764.183038][ T30] ? __switch_to+0xc79/0x1410 [ 764.183065][ T30] ? __pfx_kthread+0x10/0x10 [ 764.183088][ T30] ret_from_fork_asm+0x1a/0x30 [ 764.183125][ T30] [ 764.183143][ T30] Sending NMI from CPU 0 to CPUs 1: [ 764.299985][ C1] NMI backtrace for cpu 1 [ 764.300002][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 764.300019][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 764.300030][ C1] Workqueue: events drain_vmap_area_work [ 764.300056][ C1] RIP: 0010:stack_depot_save_flags+0x156/0x810 [ 764.300078][ C1] Code: c8 31 c5 c1 c0 18 29 c5 48 8b 05 35 d8 8a 15 8b 0d 27 d8 8a 15 21 e9 48 c1 e1 04 4c 8d 24 08 65 ff 05 5e b5 4a 0e 4c 8b 3c 08 <4d> 39 e7 44 89 2c 24 74 05 45 89 d5 eb 34 45 31 ff e9 85 00 00 00 [ 764.300091][ C1] RSP: 0018:ffffc900001e7568 EFLAGS: 00000282 [ 764.300104][ C1] RAX: ffff88823ae00000 RBX: 0000000000000000 RCX: 0000000000139ac0 [ 764.300114][ C1] RDX: 00000000b239abf0 RSI: 0000000000000001 RDI: 000000005986d171 [ 764.300124][ C1] RBP: 00000000afc139ac R08: 000000006d167fb2 R09: 00000000617736ea [ 764.300134][ C1] R10: 000000000000000d R11: ffffffff81b0e910 R12: ffff88823af39ac0 [ 764.300144][ C1] R13: 0000000000000000 R14: ffffc900001e75c0 R15: ffff88806aa950a0 [ 764.300155][ C1] FS: 0000000000000000(0000) GS:ffff88812538d000(0000) knlGS:0000000000000000 [ 764.300168][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 764.300183][ C1] CR2: 000055b26b4264c8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 764.300196][ C1] Call Trace: [ 764.300202][ C1] [ 764.300213][ C1] kasan_save_track+0x4f/0x80 [ 764.300232][ C1] ? kasan_save_track+0x3e/0x80 [ 764.300249][ C1] ? kasan_save_free_info+0x46/0x50 [ 764.300265][ C1] ? __kasan_slab_free+0x5c/0x80 [ 764.300283][ C1] ? kmem_cache_free+0x182/0x650 [ 764.300301][ C1] ? reclaim_list_global+0x3b2/0x13a0 [ 764.300321][ C1] ? purge_vmap_node+0x914/0x960 [ 764.300340][ C1] ? __purge_vmap_area_lazy+0x779/0xb40 [ 764.300359][ C1] ? drain_vmap_area_work+0x27/0x40 [ 764.300378][ C1] ? process_scheduled_works+0xb5d/0x1860 [ 764.300393][ C1] ? worker_thread+0xa53/0xfc0 [ 764.300406][ C1] ? kthread+0x388/0x470 [ 764.300423][ C1] ? ret_from_fork+0x514/0xb70 [ 764.300437][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 764.300476][ C1] ? reclaim_list_global+0x3b2/0x13a0 [ 764.300495][ C1] kasan_save_free_info+0x46/0x50 [ 764.300511][ C1] __kasan_slab_free+0x5c/0x80 [ 764.300530][ C1] kmem_cache_free+0x182/0x650 [ 764.300549][ C1] ? __pfx_free_vmap_area_rb_augment_cb_rotate+0x10/0x10 [ 764.300573][ C1] reclaim_list_global+0x3b2/0x13a0 [ 764.300596][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 764.300618][ C1] purge_vmap_node+0x914/0x960 [ 764.300650][ C1] ? __pfx_purge_vmap_node+0x10/0x10 [ 764.300672][ C1] ? flush_tlb_kernel_range+0x350/0x460 [ 764.300696][ C1] __purge_vmap_area_lazy+0x779/0xb40 [ 764.300719][ C1] ? process_scheduled_works+0xa70/0x1860 [ 764.300734][ C1] drain_vmap_area_work+0x27/0x40 [ 764.300753][ C1] process_scheduled_works+0xb5d/0x1860 [ 764.300783][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 764.300802][ C1] ? assign_work+0x3d5/0x5e0 [ 764.300819][ C1] worker_thread+0xa53/0xfc0 [ 764.300847][ C1] kthread+0x388/0x470 [ 764.300864][ C1] ? __pfx_worker_thread+0x10/0x10 [ 764.300878][ C1] ? __pfx_kthread+0x10/0x10 [ 764.300896][ C1] ret_from_fork+0x514/0xb70 [ 764.300912][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 764.300927][ C1] ? __switch_to+0xc79/0x1410 [ 764.300949][ C1] ? __pfx_kthread+0x10/0x10 [ 764.300967][ C1] ret_from_fork_asm+0x1a/0x30 [ 764.300991][ C1] [ 764.645672][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 764.652578][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 764.661695][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 764.671762][ T30] Call Trace: [ 764.675052][ T30] [ 764.677986][ T30] vpanic+0x56c/0xa60 [ 764.681974][ T30] ? __pfx___schedule+0x10/0x10 [ 764.686810][ T30] ? __pfx_vpanic+0x10/0x10 [ 764.691298][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 764.697434][ T30] panic+0xc5/0xd0 [ 764.701139][ T30] ? __pfx_panic+0x10/0x10 [ 764.705543][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 764.710932][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 764.717089][ T30] watchdog+0x102c/0x1030 [ 764.721426][ T30] ? watchdog+0x1c9/0x1030 [ 764.725840][ T30] kthread+0x388/0x470 [ 764.729901][ T30] ? __pfx_watchdog+0x10/0x10 [ 764.734569][ T30] ? __pfx_kthread+0x10/0x10 [ 764.739151][ T30] ret_from_fork+0x514/0xb70 [ 764.743729][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 764.748831][ T30] ? __switch_to+0xc79/0x1410 [ 764.753501][ T30] ? __pfx_kthread+0x10/0x10 [ 764.758085][ T30] ret_from_fork_asm+0x1a/0x30 [ 764.762860][ T30] [ 764.766407][ T30] Kernel Offset: disabled [ 764.770716][ T30] Rebooting in 86400 seconds..