last executing test programs: 4m36.055698576s ago: executing program 4 (id=2562): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.freeze\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7000fcdbdf250100000014000b00000000000000000000000000000000010c000300030000000000000008000200000000000800020000000000f506945f7a636bf33b255ef297cdbaa6031f58d172338a26f4b51b42b25f30392a1e91b63004b0f620d74520acce49401214d77da1a5b32bc746a3b1fc8081f986fee344eb7b3369bbfc4486da27cc0a4698d136a78b2b912db263f5"], 0x44}, 0x1, 0x0, 0x0, 0x54090}, 0x4000044) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x4, 0x9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.freeze\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7000fcdbdf250100000014000b00000000000000000000000000000000010c000300030000000000000008000200000000000800020000000000f506945f7a636bf33b255ef297cdbaa6031f58d172338a26f4b51b42b25f30392a1e91b63004b0f620d74520acce49401214d77da1a5b32bc746a3b1fc8081f986fee344eb7b3369bbfc4486da27cc0a4698d136a78b2b912db263f5"], 0x44}, 0x1, 0x0, 0x0, 0x54090}, 0x4000044) (async) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x4, 0x9}, 0x10) (async) 4m35.827042005s ago: executing program 4 (id=2564): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000000000000000000006dc9000002000000100100900c000000"], 0x20}, 0x0) 4m35.656531185s ago: executing program 4 (id=2565): socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x3a, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x77801061241920b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfffd}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="60001c00", @ANYRES16=r2, @ANYBLOB="000029bd7000fedbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0004000000080001007063690011000200303030303a30303a31302e300000000008008c0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4044000}, 0x20008004) (async) socket$kcm(0x2, 0x3, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8", 0x1}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) 4m35.433203082s ago: executing program 4 (id=2570): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d00010000000000000000"], 0x1c}}, 0x8840) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4c}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000001c0)=0xba36, 0x4) 4m35.224412146s ago: executing program 4 (id=2572): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010800000000000000000000000011000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073"], 0x58}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x1}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18, 0x1, {0x10}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m35.060934704s ago: executing program 4 (id=2576): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) socket$kcm(0x21, 0x0, 0xa) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xbb}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) (async) close(0x4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x36, &(0x7f0000000180)={@empty, r10}, 0x14) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r10, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) 4m19.995700749s ago: executing program 32 (id=2576): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) socket$kcm(0x21, 0x0, 0xa) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xbb}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) (async) close(0x4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x36, &(0x7f0000000180)={@empty, r10}, 0x14) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r10, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) 2m34.286081478s ago: executing program 0 (id=4224): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4000}], 0x1, &(0x7f00000003c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000000)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @generic={0xe9, 0x0, 0x0, 0x3ff, 0xfff7fbff}], &(0x7f00000000c0)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000040)={r2, 0x7}) 2m34.165266218s ago: executing program 0 (id=4228): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a0000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) 2m34.040278291s ago: executing program 0 (id=4230): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @local}, 0x10) (async) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000180)={r0, 0xa}) listen(r0, 0x6d5) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000025c0)=ANY=[], 0x6c68}, 0x1, 0x0, 0x0, 0x24000041}, 0x20008000) (async) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000025c0)=ANY=[], 0x6c68}, 0x1, 0x0, 0x0, 0x24000041}, 0x20008000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x18, @void}, 0x10) (async) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x18, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r6, 0x4) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0xfffffdc2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 2m33.775086295s ago: executing program 0 (id=4238): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x31, 0x2}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) 2m33.672781118s ago: executing program 0 (id=4241): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r2, 0x25, 0x0, @void}, 0x10) 2m33.438520764s ago: executing program 0 (id=4247): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff03"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x4}}]}]}, 0x48}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf6503000000"], 0x14}}, 0x24048000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x1c, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) (async) write$nci(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="52000180"], 0x5) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x44810) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x1c0, r12, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x6c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3afa0a98}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb033}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1a}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x80, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xa2d}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7d}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4ec0}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5ef32faf}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x29}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40010}, 0x44001) 2m29.849260931s ago: executing program 5 (id=4318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000000)=""/134, 0x86}], 0x2}, 0x2000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80200003e000701feffffff00000000017c0000040042808802018006000600800a00007b02018020ef82972c4a888fa13836e811c4cd03b722b4ceca8be06b765000fcffffffffffff7eb6b5009a881fd61885956a03d9a9dc8452516454a3d167abf84c778c4df8237c0c0860693c5060dfea16df72653289de5ae7f1f3a2746c7e0900000011b9b91ed5687f850c00c8007d25212b2b4a2d000800a500", @ANYRES32=r2, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31a19b3c}, 0x94) (async) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000580)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000240), 0x0}, 0x20) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)=r3}, 0x20) (rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000007c0)={'ip6gre0\x00', 0x0, 0x2f, 0x50, 0x6, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x8000, 0x8000, 0x5}}) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@fwd={0x6}, @func={0xe, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x30, 0x5f, 0x61]}}, &(0x7f0000000880)=""/41, 0x35, 0x29, 0x0, 0xffff1f2e}, 0x28) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x6e10, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x6}]}, &(0x7f0000000500)='syzkaller\x00', 0x9, 0x0, 0x0, 0x1e00, 0x0, '\x00', r8, 0x1c, r9, 0x8, &(0x7f0000000900)={0x19, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0xf, 0x2, 0x7}, 0x10, 0xc678, r7, 0x2, &(0x7f0000000980)=[r5, r7, r4, r10], &(0x7f0000000a80)=[{0x1, 0x4, 0x8}, {0x4, 0x3, 0xd, 0x6}], 0x10, 0x6}, 0x94) (async) r11 = socket$kcm(0x2, 0xc, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec97000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce) 2m29.624641266s ago: executing program 5 (id=4324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8d}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x814) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14f02f00f6ffffff04000001cba5b0e24c560bef0d161aefab8b64146013dcf5ba706abb0f2b00000000bf2c0a7b510a68b01584e1620d92d8892836ac336d30b580cb4461785bed5a2239f95de65b63309d4b31afe7554480a20a883064463559959aa37a4ef6121394c5046e4f6962260de8836a319ef9da21ca799d4123b26ea467d1977a2bb5d2e207008ea32985d7e9ea3bf917c3a10fdc4a2268671607f4"], 0x14}, 0x1, 0x0, 0x0, 0x4044084}, 0x2000c0c4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2m29.315621618s ago: executing program 5 (id=4329): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@local, @private=0xa010100, 0x1, 0x6}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000080)=0x1000, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40000) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000240)=0x68) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @rose}, [@rose, @null, @null, @netrom, @bcast, @bcast, @rose, @rose]}, &(0x7f0000000300)=0x48, 0x80400) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000340)=0x9f2, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000380)="68f63d9c09990997e402354fb17d21d8", 0x10) r4 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000003c0)=r4) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000400), &(0x7f0000000440)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x30, 0x2e}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)=@newtfilter={0x1a0, 0x2c, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x5, 0x1}, {0xfff3, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff5}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_flow={{0x9}, {0x148, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x7}, @TCA_FLOW_EMATCHES={0x134, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x1c9c}, {0x6, 0x4, 0x10, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x100, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfc, 0x2, 0x0, 0x0, {{0xf, 0x0, 0x7fff}, "2b851a61f65a773905e81f5332f6d7223b06718c458518030ae914e965a8b71e1b6d585c68c362f95dd659a5b21dabc902b2f04a26188979560dd7bc97242eb21904b6f78caffb52f8af5fcf0a550b05c9ca9418a75617154f493e11c2d50fccbcdec7672d6099dc45b69514ffd2e0aaca5e97b36790ae67d448995ddcfea2f51920d9711981cfc5b47a783aad3c3fa1d3e4457e441135332ab24bc04a4e7e13452af00e3b9ff8ad893a8dc1a974a9e388683e8c5974036bb907f5d014b3c7c328155223e420acb4bec4efcc56af3f92c9f186203fc9aab13c081bd9e7c57bdc3827a1c10d1106b971f9cd7978f6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8e, 0xa3}}, @TCA_RATE={0x6, 0x5, {0xb, 0x8}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4048844}, 0x20000000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000840), &(0x7f0000000880)=0x4) r8 = accept$unix(0xffffffffffffffff, &(0x7f00000008c0)=@abs, &(0x7f0000000940)=0x6e) bind$unix(r8, &(0x7f0000000980)=@abs={0x1, 0x0, 0x4e21}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000a00)=0x8, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000a40)={r1}) setsockopt$RXRPC_SECURITY_KEY(r9, 0x110, 0x1, &(0x7f0000000a80)='flow\x00', 0x5) r10 = accept4$llc(r9, &(0x7f0000000ac0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000b00)=0x10, 0x80800) listen(r10, 0x4) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000b80), r5) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) getpeername$packet(r9, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c40)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f00000017c0)={&(0x7f0000000b40), 0xc, &(0x7f0000001780)={&(0x7f0000001240)={0x510, r11, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r12}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x79f}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9d1d}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x61ed}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x8f, 0x33, 0x833}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}]}}]}, 0x510}}, 0x8041) 2m29.174120032s ago: executing program 5 (id=4332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e21, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x0, 0x5, @loopback}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r10}, 0xc) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r11, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x2}, 0xe) listen(r11, 0x0) r12 = accept4(r11, 0x0, 0x0, 0x80000) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r12, @ANYRES32=r13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m29.078299232s ago: executing program 5 (id=4333): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r1, 0x15, 0x0, @void}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="170a29bd7000fedbdf25050000001400018006000100020000000800050003000000"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, &(0x7f0000003700)={0x77359400}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021}}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4040080) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x40, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x1419, 0x1}, 0x10}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, 0xa, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004840}, 0x20004810) socket$inet6_mptcp(0xa, 0x1, 0x106) 2m28.760439103s ago: executing program 5 (id=4335): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4000) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) connect$can_bcm(r3, &(0x7f0000000000), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, 0x0}, 0x20) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x222, 0x6, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3}, 0x3, 0x1, 0x0, 0x0, "ea1ee06e4a675d1c"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) (async) sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES64=r7, @ANYRESDEC, @ANYRES64=r4, @ANYRES8=r6], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x51e6ad4ea983ca01) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 2m18.419701466s ago: executing program 33 (id=4247): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff03"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x4}}]}]}, 0x48}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf6503000000"], 0x14}}, 0x24048000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x1c, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) (async) write$nci(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="52000180"], 0x5) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x44810) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x1c0, r12, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x6c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3afa0a98}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb033}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1a}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x80, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xa2d}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7d}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4ec0}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5ef32faf}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x29}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40010}, 0x44001) 2m13.633228257s ago: executing program 34 (id=4335): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4000) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) connect$can_bcm(r3, &(0x7f0000000000), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, 0x0}, 0x20) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x222, 0x6, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3}, 0x3, 0x1, 0x0, 0x0, "ea1ee06e4a675d1c"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) (async) sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES64=r7, @ANYRESDEC, @ANYRES64=r4, @ANYRES8=r6], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x51e6ad4ea983ca01) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1m37.028184812s ago: executing program 2 (id=5027): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000040)={'sit0\x00', @ifru_flags=0x2}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x14, 0x4f, 0x10}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x34, r1, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ac}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000040)={'sit0\x00', @ifru_flags=0x2}) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x14, 0x4f, 0x10}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x34, r1, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ac}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x34}}, 0x0) (async) 1m36.869359253s ago: executing program 2 (id=5032): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc82c0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xb, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0xfffffffffffffdb1}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r8, &(0x7f00000004c0)=[{&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000800)="38c8114fa3db529ed03bcef786dd", 0xe}], 0x2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x101) 1m36.30371579s ago: executing program 2 (id=5041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r3, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x40000000) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000004c0)={{r0}, "28670a8daeade76e34fff6d9418c8a78466c4cb54c18cfa9bf7fa78320d12a4a67ff8389f3d67f1bbc6db4a18e086f63fd47edd23a3673612aefa0b1386fdf53f0f3ddb0b6e051cae0b410ece3d53a08a5ad595ab8576723f528b2527aac2c8e8a32abfbab3d04a053e51e72efdc3d4f2d129c03086cb721a52ea626caf89c1346e9507351ee623e3e4046839aef7f58e60c317aacf7649e79127869bd1c8f840ecd477f2d693cce77f40d170b277851b577b287d2a02df423ba5000f50e9ded4f6d9055f719cc2cc8dd67330ecdb070d3e9cdf3644c2325d902860440f89f1f9e1ae1edc8e73dcd007e5d1582332a17cd9e4f6f8eef3e0b1db479a42950f47b95f08109ac86c3d825deaa2b240bcb4c8fcff58d223d7351ede0b865e773f4b520ac0b682ba90b7747e421f687d4415a11445a7841516261fe67bfe96c1f2a010b8a21f51afb57d47f5d6526f199a478a757906fc39a51347afa0ebc1d96e44f6105e8a44037e51bc5ba0a1e45d2ac824862fcf5dae6eeb0454920d749123d418d97141e72de9ab8a2062e125c02a08b8d4a80e536ddcd34834d2839468338f29bfab4d30877fd5fbe77593184641cb5d4b1b21471c2d323fd32c0a31be8d976e4b9691f9c84c14286b84fbd4484fd1be349df5750beca2db4e4b4e1d96a2c9eaa08ca09a4c125b54dc529e78ea81c2f93090dacecc20ecc6386ccf10ae0f375a28d418e0d427b860da51473e5fa296080cac3c0319b403fdd604d6246d668a2a4d2dbc180cf396dea0f4f814dab58703ee692ce48b83b69926ded6630e1835b58f740884b846748a32d170221d72e02eb621e3918a97485763c3e8665142fcddfb1e43e1daa08863370d34f49a70f2bbcaebb35bd0fe1a59a6d3e2bf06f1c1381ccebf0cc5901aa1ef9ebafe0b8753b887a6a4e54e53fc4a742b766813c56917f6bfb37c587a8ade894390b0e818bde9ff5546d2a6f9af28871cad3deb1f2a7e780ad5e51766226091ca4b0805838078981bd728b53a566702cdf19b5e097440534bd3145b2fc086efa674ed158c312abdc82760109609ec7c62ee7031d2d2bfcdb893a15289186c0709dd7198331a9ed5514142e3b379f405ea60a8283e779ce101fbad9fec8081d45945c2ff7473b8b71c6400da4f412707014907aedcaf78a1fd35ab585853be7f0826f995bf850f9a766cf78899085fc1cd140521653c3f26d6ccabfdb829a64206762913161be9cd43e067c91fcf566ecd5bbc33e5c30d7c717e6dec9872889bc63c60031ca2e57db452c412fba0012dee357ce0aba81c6aa70854aacbabf220d69a90026b4fde80fdbbed117bc23a8f65056a2f2d1ede3889995a5108b60ad939010a68a333b09e47587443f27a77029f3eec2bd9ac59f9da02f51250b476c9e3e3c1b566b258e851af40e13e780569733aed1094b5f0c60af8beefe691e1621f7b34c1fd201ddaeeffbfce84c8fb88114b9c0f2fa16635775b098f07dbd58901bea8e809ecbc2ae687078a32b7cecd1276dc65b96f244557b6b01335942d89958a338971c5e0098cbc01dc452e8c2b3e18d508dd19bdd3b357312f3109e2a1190b73b7b77d38eb62e9d66001b60fbb282ae39f9d305917795bfd6b5fee605b66e23661baf9a1669955f9e19321a96762294a8838d2225986490b1a9775d2d29e0052ffc0da6e3e4e3892fbe3230fb6193cfbe2ff394aecd4ef869d99df0937b459afeb11d8d9c9fbd57a486b526ceebbe807fc39db407f5d442e046ea46a15bd8d4a738f9233f09ecf41590eab28a2405c07971e7ea908abce07cb7c1cf148fa3422f5de7ea5460cddafb89f1f190e0f4d5643fc7b9818a0c41715e0f55ab5c319412f8fa839820c901033d56edea38a9d1ca26c4a40080dfae2275ac9a775420f8c68a6d42cec6cc7d7462d1210807815cc066c219398ad2e1e8ae4a1259608bfb108236bef0f14f64ae4a9350fcd01b123a22f445e4ad70079c2f0838a58f0eb1a681355e7657b8a364cbc86e571a46e810301239baeac44be523551a0a19e6bcf0a1d386ca8b68dc1a412e747afe6a331b82c0001350afa364b159965063c324001fee8f69edd4ca8a66cf04dc693608d85ae1f554b3859c202caf3ee232b2bfb24af1f5904d2216719b46fd2485b2a6de62b9bfcdb08f36a1cf4f0dbff4cd05e62d6fd0fa6c488df738da69c665e64535014bcb73eef572ea86ea9e8420f09b5f977ad19ef711518099057f7f9f4bf451acbe992138501a260f85c38c2874c527364c53291a74eec10af60231ab02f20211e979a27e51bb7cde81e74200bace7c93679fc82985ceca353d02946d194cee0a989a1666a1e8542b07ece017baaa92d9edb7f34c1ee9abc7acf50accfcd40c3c7379b4f1c3bad6be0ea008afbd7f802d8e13d285aae10f370c18ceeca63649c13cb0c100ff7bd02adf58850ab6a5ae92554eb641ee15a380115449d311fd1ed3247f07ffadaa80894cd5ba4a8c9d2487f5f85fea1323b6534745b504c75a423f6d178ef4ded4bfe9f97326058ae2a3eb089da3b139bef5d3ff4b6e53c38b35dac21d9d4965b26795286ee50cffe4f7538ee76a31459af8a0acb98a43a0705ffd4c82c6723af1976be0a7da5873f22c4bcffea30e2d65ab11c10fe891e9ed370e21dcdde6faf1a582d90b92d4ed324feafb3ed96f584d446dcf11c737d51f0d434ce829d46af72dda8ae95fc6012c45e88e31badf67a526ab19f1248ae885d1577ded38d2fa415f586123492ac5c25f7a7e4240816f381ca8df16a88a0b7ee54246c89da467938f5a4a65785ae7b7b880802da21164adc5637bdc29a11df0c8a3d839fb27498a44acb9b6e35785b87e53329bd7bfa2117548f7a3ef01339dcd36c1afe32335f9470c6e515e9bc0b7fc16c537a2f7d1f816ed5d73729138a56463ec1ced52559e6f4e6a50ae3178c4ab23692b0b7114ef18369905d71c14d83ed948e39bf0ce66c7a7df8eeb3d0253bb51f3ddcfe989ab8dde68052c8dff5255e60a9dae3244ce34fb1e8104b597d01ba6de1b492674f22980ec9f70781922339ab66f2dcfe143d32e0c5431b8d235b68814ebdf3a26eb9133590a88aabb53d80382af690bfa8eb4ab6ea61a995010bb1daaa608adc0bb4b555b93ce4b1cc8d348f321c0913ceb169d8f2116625887114de20ef2227231c8cd5cdfd392a6d6c1511a969343f9b9d9cc505cf4e34cb0c9b65bcc851910f552f0a1c383e02c92f5f1cde68d9a7979cf83e90052ad81b4cb5c4993348d05453054243c3e05d10a7938c68737a272a123f546e37e2837e738bab1a25ddb68f81e80a3b324c02e9697d0a2702ab81c9578650b545064b9385f33d1a8ceae1484b90eed9493b3974592286881d2adbe489586528f0ab66fa23d5d83ae4fe7f039a234468cd4c741ccaaddc47c65aed9db8752eed2ab705c1175c28221a17369dae380e89797d2293232030bdb5d192cbd5671da3462fc9de79fa80125bd9770a69f76bb57380387871fdcfa878d039e663e2460ee67bb7e6cb2cf87cd9018df8058e5ae5758ec8166ca5e350be35c1aa00b53b6bca6d5beebbe5082d576fae92064f3be74e6dd681d0746a4949f805b704eb314eaee48a28b0c74330d68fcd39521af9a918a5e2c67f61125e7379c20949f7bb99c9726bc898af96668989c5037059ed26f859c19ff8b11f3adc9a765ada4d737860ba978adeaca6b7a30cdca91de7008fb568402876f21e3b5cb03a75b9027604c2f536b945b58600b79a3a6d436f2fac420425cd40529797100a48560880d85f5be4c8bedf01309cfed799df1112157c6eec0499beabea61d116fd93082c20fd4d49a25e48326e0dac5e6c5ba9bbe7606c2614ef3cea946af580265a5a2bdf8bf0ccfd4a32efef843ae01f6c8e62bc4d16681deb107683fb49c725cb2af653ae0102b2138eedf4915460947abd3655d3f67612897ee4000ebe071889eccd39ad80e36ed233ab2edac425f3ba6c5aa47e2360a1075d3ff95f49fa4e7e932b0d0b1f4e3e63db4d8201709aacde962fc5b8d2e3dfc7edba58ffaac9255290455fac653d14ce2b5e6dd79c6da9db79e469bba67373b6d9fb7b1f915a9469915c7705ba9d838cde3b9b51842d049d8afb5649e52005ee4cc22df97adeb44c9ca7dd679ed5729958eb6ccd74c699da4e12bc1a9b5ede323bd93843388090f16571d76a72aa7f9a9cfbc6674cc25f4923f7057a2876cdfb80deba8b388832f5a41ee4e80bd32048c5051589597493c08d9e94acc874e9c7e80f27a5df187dc7d1ad4fd7042c39254748989e027064c403397fcd1b2395d543cf9baa72f73c79e1cad9ac03b0549c73ff066bd8350172814872ad2dc95be0c00353a7bb0e0c67acb2698ae9eb477c3455bcc250c7e2440cfe108299e764ab09beae40373244bd93c19b80162ec29bbce5d7a05f496b2ba1dc2cae1a3bbef5429597b7cf9214aeb6bb231890309c247e1d2c519f5e83f6849b059fbbad53f2fdf09a0edb46365e9546951fbc40e8ae8dd338b7834fd234a689cec5b160757b4a68263967fb216427b18b2cc522e9aceee290db500529bed866019cd2b2d2e69cab2713278748185ba9fbc86f6f2003a106df621562f57664d3bb26ec3190609b6cac359391da9c4155ede0819133b8c9289c268d78f79ee9f729beb318b5f7d121aa79b4f0036cf03426bd16bd81ee17a1dd47f8ef52d635d93b45c228af81771859fbec0e8f6bae60c4737a1b039ec0af878e87ca6a9aca58ff8fe307c667e2b840f69976931d4a509c11855bfae3890e5002b0dbbcf1e3f9a5820628b8318fcce495a767d347e8eb79bd81891df2a061706bddc35c81095b2946794147f964776c764bdddd2721919624ddfa012f408ff20aa97824dc7e5aff68039c18d658e6d2d380a8a27279f6362402c62ea0c9b83fb2a711c6ab48817d319038e9c39869f22225e47ecb1b4f7bbc2a564fa12227fcab402c24c303a1e3d0e8754d7cd5def05a30c9bf921e324b5a0c6ecae95c082a10fc2d7c18bf0d60794f6fd37f91f17bd4a72e6a5d00c161ac6932b352e39788f73c04393763f5ae4f33d4b902ccc22d05d02bd506f51ab13718f26164968c91b3708fcf1cfa330d9ce863e2fb9df8555696f5824c381a3003ac2c2d1da07b564366fe4a9646ca2db7451b314eb324a8c2f9ed559eccbd95b9425ab52c308628cccab8ea64806b989786ed69ddf5f4092b69da2af93372e61331c0bd7c4f1139cd4e2e21da253214300c32951aedfec0394cee35b89e19eb1596d627c5cc3087322cebd4544ea6a4506fb1cb713661600f54cbc08d666b9a0d722c6d57e0c4bb8180a9eb035620ef37698e593d91bc26c7e1868aba19a8c19021d123db500e86739a12fe562bdd07fcba71da15517241821c2d8193da3a2a25ac390cb25222dccbe9d0ed32c3025e345f3c194ffe1abab08e741c94d15fbe1dbe63e85a099c343278c5a239daa0419d68a9630cc132b225554b1c1062e8239f3e2c2cac143a1ed2df9e847c3361c8e31c62140e3f5af50b437a6b4aca6d873474d70948e0807ca1a24cc39b67f7f367d1e1ec2c449a8214db5a1498c554df12b28a7c3a8d8d7280f5c474f55232f2d91af82890348007d343d14b6c3ac153998c07262e194df1811509d019a2439be13e4f17b782a0c63eaa0023cd4fc86435d97db46bd2b6dd4dc2a14cc9e89fb2134eba25c1cf5d3af76f5dd10ca4fc45bd216abda9bd93c6c040165309051910d52"}) 1m36.198943132s ago: executing program 2 (id=5043): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(0x4) 1m36.060050801s ago: executing program 2 (id=5046): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x3, [0x20, 0x6, 0x8]}, &(0x7f00000000c0)=0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}], 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000380)="147583ddad20cd569ba54a58fd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) 1m35.990827405s ago: executing program 2 (id=5047): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="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"], 0x150}}, 0x0) 1m20.783856542s ago: executing program 35 (id=5047): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="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"], 0x150}}, 0x0) 48.033926593s ago: executing program 8 (id=5753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000ac0)={0xd4, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7fd87bb5f7f443f3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5ceb8d3614d8280584961ff48c8b7fd9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="346de005fa211531e0dc7f648ed344719986d40e73cd6522545495ac0820c950"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a59a5aa5d7420e6e24199b6f1c6a45e5"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="150d3a564c281acb426d098a1901ef1d6aee47e4b14fdd59"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c15437378556a02c876167551a128862fea6472804e90a11cc7d09e5e012faf0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f43b8082f02afcac"}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) 47.910934471s ago: executing program 8 (id=5755): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x25, &(0x7f00000000c0)=0x10001, 0x4) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14, 0x800) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) 47.603578623s ago: executing program 8 (id=5758): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x40, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x9c}, @nested={0x6, 0x9, 0x0, 0x1, [@generic="f8e6"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000001340)=""/4051, 0xfd3}, {&(0x7f0000000040)=""/114, 0x72}], 0x3}, 0x1}], 0x1, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) recvfrom$ax25(r3, 0x0, 0x0, 0x2, 0x0, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r4, 0x0, 0x0, 0x0) ioctl$FICLONE(r3, 0x40049409, r4) (async) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 47.436030674s ago: executing program 8 (id=5759): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa}, 0x20) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000800800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async, rerun: 64) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="07000000a008"], 0x80}}, 0x0) (rerun: 64) 47.334970826s ago: executing program 8 (id=5761): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x12, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x400000, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) 47.179929497s ago: executing program 8 (id=5762): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) (async, rerun: 64) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (rerun: 64) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async, rerun: 32) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (rerun: 32) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000080), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x1a4, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xaaf1, 0x28}}}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random_vendor={0xdd, 0xb9, "f0fba1116977c46caadd2cfa5fb19d2cfa422c7b8770c5469f17de83888f91a73482018239d237a83d61711fdda5f8f120697302efefbb279377277e0e53156e462f8d5eccb82806c5bb9da05e28a9971df6fdb6f2da0fe924dde87b96a1d4d3bfb15161370869f8ba498e01ce64d6c181702d0a3dc00acce0836438cf4f278e3231e264dc588d9404d551b4035f7c24516f1f90cde0d74ee24a2954111e87bdffe4691017dfbe56022efaf65e1df04308ce39dd81aba839d2"}, @gcr_ga={0xbd, 0x6, @device_b}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x8, 0x9}}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x0, 0x0, {0x0, 0x1ffb, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x29fc, 0x50}}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xf}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x6000}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x4}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x6}]}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x34}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x57}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x81}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff0d}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff37}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x8}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40c4}, 0x24000040) 31.862411318s ago: executing program 36 (id=5762): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) (async, rerun: 64) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (rerun: 64) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async, rerun: 32) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (rerun: 32) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000080), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x1a4, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xaaf1, 0x28}}}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random_vendor={0xdd, 0xb9, "f0fba1116977c46caadd2cfa5fb19d2cfa422c7b8770c5469f17de83888f91a73482018239d237a83d61711fdda5f8f120697302efefbb279377277e0e53156e462f8d5eccb82806c5bb9da05e28a9971df6fdb6f2da0fe924dde87b96a1d4d3bfb15161370869f8ba498e01ce64d6c181702d0a3dc00acce0836438cf4f278e3231e264dc588d9404d551b4035f7c24516f1f90cde0d74ee24a2954111e87bdffe4691017dfbe56022efaf65e1df04308ce39dd81aba839d2"}, @gcr_ga={0xbd, 0x6, @device_b}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x8, 0x9}}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x0, 0x0, {0x0, 0x1ffb, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x29fc, 0x50}}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xf}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x6000}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x4}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x6}]}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x34}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x57}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x81}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff0d}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff37}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x8}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40c4}, 0x24000040) 2.258404391s ago: executing program 3 (id=6278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa8, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc04308", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r3, 0x952de000) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000380)='G', 0x0}, 0x20) syz_emit_ethernet(0x82, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@loopback, 0x200}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x7e, 0xee89, 0x0, @loopback, @loopback, 0x10, 0x8046, 0xe3, 0xff}}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@delqdisc={0x108, 0x25, 0x8, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xf8c9cc0ff8e55278, 0xb}, {0x10, 0x8}, {0xfff2, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4d}, @TCA_RATE={0x6, 0x5, {0x2, 0xd}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0x101, 0xb, 0x1, 0x0, 0x81, 0x5}}, {0xe, 0x2, [0x7, 0x0, 0x1, 0x6, 0x5]}}]}, @TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xe9, 0x782, 0x9, 0x2, 0x9, 0x9, 0x7}}, {0x12, 0x2, [0x5, 0x8, 0x88cf, 0x8, 0xba83, 0x5, 0x1]}}, {{0x1c, 0x1, {0x4, 0x7, 0x3, 0x9, 0x1, 0xb, 0x6, 0x4}}, {0xc, 0x2, [0x3ff, 0x0, 0x2, 0x13a]}}, {{0x1c, 0x1, {0x4, 0xe2, 0xfff9, 0x9, 0x2, 0x10, 0xd1, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x89, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, 0x2}}, {0x8, 0x2, [0xfff9, 0xf]}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 2.257531448s ago: executing program 6 (id=6279): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6gretap0\x00', 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000004c0)) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0xd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0xffffffff, 0x25dfd9ff, {0x0, 0x0, 0x0, r5, {0x10, 0xa}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004081}, 0x24000085) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x8, 0x8000, 0x9, 0x3, {{0x20, 0x4, 0x1, 0x5, 0x80, 0x66, 0x0, 0x2, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp_addr={0x44, 0x14, 0x40, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast2, 0xc}]}, @rr={0x7, 0x7, 0xd1, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0xe4, 0x3, 0x4, [{@broadcast, 0x800000}, {@private=0xa010101, 0xb9b6}, {@empty, 0x1}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@remote, 0x3}, {@rand_addr=0x64010100, 0xfffffff9}]}, @generic={0x44, 0xb, "7d82ea5cdcdb0fcda8"}, @rr={0x7, 0x7, 0x13, [@loopback]}, @end, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x10c, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x101}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x20, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r10], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f0000000480)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x89b0, &(0x7f0000000080)={'bridge0\x00', 0x2000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) 2.07088848s ago: executing program 3 (id=6283): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000100)={r0, &(0x7f0000000000)='}/}\x00', 0x40000, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x80000000]}, {0x400, 0x2, 0x1, 0x9}}, 0x1000, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x6}) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) (async) pwrite64(r1, &(0x7f00000001c0)="d4b038eb35f1f3f96a03e05671a2d44de2efa56dfde9bd352146cba23ba917a3be6ee041ae5d5af60ef0698d35819085f2e817b1525edb973a54382e7db75e70cde8ed748e046ce5e922f2aeb0ff8a0aa33352cc0148367d5bec37cd1c8c4886d0b8cad503d8df4936e5", 0x6a, 0x2) (async) ioctl$XFS_IOC_EXCHANGE_RANGE(r1, 0x40285881, &(0x7f0000000240)={r1, 0x0, 0x0, 0xffffffffffff8001, 0x42, 0x2}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x5c000) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r1, 0x1d, 0x0, 0x2, &(0x7f0000000500)=[0x0], 0x1, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'erspan0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x40, 0x20, 0x0, 0xfffff801, {{0x2a, 0x4, 0x0, 0x13, 0xa8, 0x64, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x3, 0x0}, {[@lsrr={0x83, 0x27, 0x34, [@loopback, @loopback, @empty, @broadcast, @remote, @empty, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @noop, @noop, @cipso={0x86, 0x18, 0x1, [{0x6, 0xb, "b9cf9d5694f9db7887"}, {0x1, 0x7, "f4640e75ce"}]}, @cipso={0x86, 0x17, 0x3, [{0x1, 0x11, "d3f32cc3ce47e2bd2a97b7290f541e"}]}, @timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x2, [{@remote, 0x9}, {@remote, 0x9f}]}, @timestamp={0x44, 0x18, 0x94, 0x0, 0x1, [0x6, 0x6070, 0x5, 0x80, 0x8]}, @timestamp={0x44, 0x10, 0x90, 0x0, 0x1, [0x800, 0x2, 0x6]}]}}}}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@ifindex=r8, 0xffffffffffffffff, 0x19, 0x30, 0x0, @void, @void, @void, @value, r7}, 0x20) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, r9, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c0d0}, 0x20000801) (async) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) sendmsg$nl_crypto(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)=@del={0xf0, 0x11, 0x101, 0x70bd28, 0x25dfdbff, {{'ansi_cprng\x00'}, '\x00', '\x00', 0x2000, 0x2000}, [{0x8, 0x1, 0x5}, {0x8, 0x1, 0x2}]}, 0xf0}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000bc0)={0x6, 'nr0\x00', {0x7}, 0x5}) (async) sendmsg$nl_route(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)=@ipv4_newaddr={0x54, 0x14, 0x1, 0x70bd25, 0x25dfdbfd, {0x2, 0x78, 0x1, 0x0, r8}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_FLAGS={0x8, 0x8, 0x212}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x19c1d768, 0x7f, 0xa9d}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000002) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r10, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, r11, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14044010}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x54, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xdb2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 1.95615216s ago: executing program 3 (id=6285): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-camellia-aesni-avx2)\x00'}, 0x58) bind$alg(r1, &(0x7f0000000ec0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(serpent)\x00'}, 0x58) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0xff, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0xff, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000780)={0x2, &(0x7f0000000600)=[{}, {}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7c020000210001000000000000f8ffffffffffffff0000000000000000000000fe8000000000000000000000000000c40000000000000000000000000000000086c3e2f63245fdc6852d5b55249f23ee00e244665bced7db812c12ce697944f8550118e847d83ae8eaf76c9b8dcd0a41a366", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000019021100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000fc020000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000ffffe000000200000000000000000000000000000000ac141400000000000000000000000000000000000000000000000000ff020000000000000000000000000001ffffffff000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000bb0000000000000000000000000a00100000000000000000004000170009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001900000000000c0015000000000000000000"], 0x27c}}, 0x0) (async) sendmsg$nl_xfrm(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7c020000210001000000000000f8ffffffffffffff0000000000000000000000fe8000000000000000000000000000c40000000000000000000000000000000086c3e2f63245fdc6852d5b55249f23ee00e244665bced7db812c12ce697944f8550118e847d83ae8eaf76c9b8dcd0a41a366", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000019021100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000fc020000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000ffffe000000200000000000000000000000000000000ac141400000000000000000000000000000000000000000000000000ff020000000000000000000000000001ffffffff000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000bb0000000000000000000000000a00100000000000000000004000170009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001900000000000c0015000000000000000000"], 0x27c}}, 0x0) getsockopt$bt_hci(r5, 0x84, 0x85, &(0x7f00000020c0)=""/4064, &(0x7f0000000000)=0xfe0) (async) getsockopt$bt_hci(r5, 0x84, 0x85, &(0x7f00000020c0)=""/4064, &(0x7f0000000000)=0xfe0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0xffff, @rand_addr=0x64010101}}}, 0x108) getsockopt$inet_buf(r7, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x814) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x814) shutdown(r0, 0x1) 1.876239424s ago: executing program 6 (id=6286): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'dvmrp1\x00', 'veth0_to_hsr\x00', {}, {}, 0x18, 0x0, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 1.826593488s ago: executing program 3 (id=6289): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc}}]}, 0x34}}, 0x0) 1.736067585s ago: executing program 7 (id=6290): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003900000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1f}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000), 0x4) ioctl$sock_ifreq(r8, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='gre0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf254500000008000300", @ANYRES32=r5, @ANYBLOB="d859b5864f0c836f6f140a5a633b38ff50db858348e56c093ca11c5ea4739c19ccdb30d50757dea7c534489e266311a541fda48892768b"], 0x1c}, 0x1, 0x0, 0x0, 0x24000012}, 0x20040000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002bbd7000ffdbdf253700000008000300", @ANYRES32=r9, @ANYBLOB="080022017101000008002700020000000800b3acdadc9f000600000008009f0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) close(0x4) 1.734210114s ago: executing program 6 (id=6291): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000140)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd26, 0x25dfdbff, {0x7, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd26, 0x25dfdbff, {0x7, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000300)=0x40) 1.554420628s ago: executing program 6 (id=6293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 1.530684263s ago: executing program 9 (id=6294): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_coalesce={0x3c, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r3, 0x0) ppoll(&(0x7f0000000280)=[{r3, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.408033176s ago: executing program 6 (id=6296): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000209c", @ANYRES16, @ANYBLOB="070627bd7000fcdbdf252d0000000a0001"], 0x20}, 0x1, 0x0, 0x0, 0x8015}, 0x4008000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b32, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4, @ANYBLOB="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"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delqdisc={0x24, 0x25, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe6, 0x8}, {0x9, 0x10}, {0xe, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) (rerun: 64) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000940)=@add_del={0x2, &(0x7f00000000c0)='veth0_to_team\x00'}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000340)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @remote}, 0x1, 0x4}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000440)="8a6002f5c0bfd189968e12dad7181fb70cc270908e5b95386fe51ddb9b2ab95b21135298fd651345516ab76a768dca72e1e2ce817b4b78dfdf25409bafe22b4e2d2e0583f63053a7f41e3959818fa897f0f47a886f2758524d2356d3081c5e8a325e2b4555f31e610eb0c2eef72fee1025abf43dcf97cffa6721eb435c9e363da8ab1a3a427eb7ebc35672b1992e1474a6624aff29c579e783", 0x99}, {&(0x7f0000000240)="3855831d70e9a19979d2f8f2b11e8053c86364bde31fa21de5aa02cd7cc82f45cd2dec0e19c030ddb0e7c23feeba53026436262a73e4b4299070a1fc0a35967ee01ba4d8f7e6db4b841684406d96a8f2b533c6e669211b16c5051c781d4ca4b979d061ab718a1b55", 0x68}, {&(0x7f0000000500)="07c6cef7ad966efa1a122d024c49880082f2f9a3d4fa3d3a1d177b74d9c969da12a12f4bf65eb55d807bd7ca16638707df963b4a11414f2144ae4732cfb4e1125ad83b54b71ae6d175cb091c62d0cc3ac1280a1919784da356f375813467b6cc6c03b1e5093cc5c223299f22bcde5d392bc9cef410c3795d43f3ccdc129a2febfbd0dcc18543dbfa6ecb58e04e2a5784c05b39d6b52d670d9d76e72faa9eb1d180d2f10c9b474d8a5abfcaed6b53342d09b95de2c8d5c1e400bee4aa92d2a79a1b450aa176368342f79bff515298f24aee16b82dbfc0a8eb8efd3ce724", 0xdd}, {&(0x7f0000000600)="d6afe0d3639ced555e3c7885b4de0613c591c23d8ffb27e8d3b7e1fbb7afc9e168378aede6af20103296c3833b31b0df78842a73896af80126700bca6af8b669d5cc70b8a5694049dfcb113924456ed35834100df0aee3a6a57a8fb3fe77666ce348f5fa560b2527ff7c7c", 0x6b}, {&(0x7f0000000680)="7a67c87e07e8f14de7805bd5cdfedc22a155d14f3ae4f1319704af1864050f8ffcef3c51218d8133f520e3367c371f21f1a28a9681396b9e8eec3e25c14d585d130fca21117771686f29289cd1dbd77e7eff78de95925845d5fefd91f16f9ed2f7031ea328c514b8a5d7bdb8eb10435f72963cba7c4bd9f8c4d20aabb2227a29a1a2013d314dfe146dc0eba2b53993d04fde0e44886ac6eed51d92f1483c11ea5ec0ee", 0xa3}, {&(0x7f0000000740)="0bb8200bc647dd12fe87d7f8c4e3111505f35fe4ccf25affe162b2975d3167cfbb139c2f2af3c7a03323f4f0cd32d82dd7bf9122750a25345adb99b2740a63ef99c00e1841c6a65d", 0x48}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f00000007c0)="b60512a968865184eebe4cb0ffb65d8d21d49ff7798daff07d40982c3ed903b11eaf7782023dee1e8bbebd781529ea1c2a0b80275cba8d72ee50f59313167aef467afb047103da7b1934616c6a71bb48640531fadf72a764d469059a1692c394078d0813beacde86ccfbceab1ea36b6db8a243", 0x73}, {&(0x7f0000000840)="5c9be8b4cfe0d6b621ee334055a94bf759d311ced7b50886e607ee2ece4141ffe1ec5a46d2fc4973d2647d5d8810d09eb05a98004f7b4796506ae745cc1e71322ccd4e177e56d7a09582adf18d0376880e37478ad327193f3be25ad9789c18a20ddf5372f4758f44f77b94946440a99832e22b0be648824891", 0x79}, {&(0x7f00000008c0)="ebbce0e47cc4aae32973024208d7fd404cf6349521c25ee9a3b462453c29ab44a0519ed9bc01c8e665afd5339bb997755a22ed119691fad980aed82c737ae0ea4ea67b", 0x43}], 0xa, &(0x7f00000000c0)}}], 0x1, 0x20004014) 1.407495948s ago: executing program 1 (id=6297): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0xa0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x80) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x48000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.289022473s ago: executing program 7 (id=6298): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x2}, {0x3, 0x1, 0x0, 0x1}}], 0x10) (async, rerun: 64) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x40000000, {}, [{0x54, 0x1, [@m_mpls={0x1b, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf47eb}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 1.282419118s ago: executing program 9 (id=6299): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000090600"/20, @ANYRES32=0x0, @ANYRES32=r0], 0x3c}}, 0x0) 1.083830937s ago: executing program 1 (id=6300): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x79}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000015c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x24, 0x7, 0xa, 0x0, 0x0, 0x0, {0x7}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000800) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="911d29b0ab272818c565411c0575bbb0e9e47ce980ab1026f740a5e95ef73e0c762478237893a7b3b00b47b06d2de6032ea006cd1c14938a4cbb06b761032e4d061331543e", 0x45, 0x80000, &(0x7f00000001c0)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x14, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r4, r4, 0x2e}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r5, 0x0, r5}, 0x5) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@bridge_newneigh={0x2c, 0x1c, 0x200, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x0, r2, 0x1, 0x13, 0xa}, [@NDA_VLAN={0x6, 0x5, 0x4}, @NDA_SRC_VNI={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20044845) 1.049594347s ago: executing program 9 (id=6301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100002500010300000000c00e000001"], 0x114}], 0x1}, 0x40000) recvmmsg(r4, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0xffff776b}, {{0x0, 0x0, 0x0}, 0x606}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000001d40)}, 0x8}], 0x4, 0x20, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x64, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c15437378556a02c876167551a128862fea6472804e90a11cc7d09e5e012faf0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f43b8082f02afcac"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d182ef3d0d272bc4bf94b5ab91526f74"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) 855.998668ms ago: executing program 3 (id=6302): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="6e3939db27fc45f36e5ffa7caaf6005f0acc8f280567c0e09861b545e5a0f14d206ac57b79faa22c14038c3d94249db1f45c6226ac94f921aaf6b440fd54e27057e0bdd885c33cd7f72cdbb4c5776cef4e62b8f5e2ba47409372ac54e7e31b69a1f128d5a876318ec3ddd679efe891f15d14eb85ef") ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='!\x00', 0x0, &(0x7f00000000c0)={@align=0x3, {0x9, 0x0, 0x7fff, 0x5}}, 0xfffffff9, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x5}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x11, 0x2, 0x2, 0x200, 0xc, 0x6, 0x9, 0x1, 0x0}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r1}, &(0x7f0000000280)=0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001640)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0x6, 0x27, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7fff}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000640)=""/4096, 0x40f00, 0x23, '\x00', r3, 0x25, r0, 0x8, &(0x7f0000001680)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000016c0)={0x4, 0xa, 0xfffff04b, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001700)=[r0, r0, r0, r0, r0, r0, 0x1, r0, r0], &(0x7f0000001740)=[{0x5, 0x2, 0x7, 0x5}, {0x0, 0x2, 0xa, 0xb}, {0x4, 0x1, 0xb, 0xc}, {0x2, 0x3, 0x4, 0x9}, {0x3, 0x5, 0x1, 0x5}], 0x10, 0xffffffff}, 0x94) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000001880)={0x7, 0x4, 0x5e, 0x81, 0x4c, 0x8b, 0x5}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x0, &(0x7f00000018c0), &(0x7f0000001900)='syzkaller\x00', 0x1, 0x46, &(0x7f0000001940)=""/70, 0x40f00, 0x24, '\x00', r3, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000019c0)={0x2, 0xe, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) ioctl(r0, 0x10f, &(0x7f0000001b00)="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") r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001c00)={r2, 0x20000000, 0x4947, 0x3}, &(0x7f0000001c40)=0x10) setsockopt(r4, 0x2, 0x2, &(0x7f0000001c80)="dbbe8a9a0907d4ce9d8f6d32d4db07452e277788b75418ea5e39af0e1462399d9552bbbe0df8d8bf74f84ea3a850bbd380e1021099005d5a8c14c26c363aeccbae0563cfedc7836fdc0a18b6d06cc0a2445569e370edebd8c73923ecfd40ac4700e39d191a417f0871f38b2cdb22f61012b31e0b9c5720bc5a68655bc490a73adff8f38f69f5a3681b130b46b8eb1079e5ed8a47c3d8b2a56fe61940dbfbb24bef05e1e2e2c2b9f237138fe4fccb4524c387c07643452e3000d21c32ee1711c0ad04bc4d80943ba97e", 0xc9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001d80)={@remote, 0x0, 0x1, 0x2, 0x2, 0x9, 0x4}, 0x20) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000001fc0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f80)={&(0x7f0000001e00)={0x150, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80000001, @private0, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x40, @mcast1, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xfd8}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xced}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9329}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffac60}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x878}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8042}, 0x8840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x18, 0x12, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3ff}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f00000020c0)='syzkaller\x00', 0x0, 0xb0, &(0x7f0000002100)=""/176, 0x41000, 0x8, '\x00', r3, 0x0, r0, 0x8, &(0x7f00000021c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000002200)={0x4, 0xd, 0xab7f, 0x4c6}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000002240)=[{0x4, 0x5, 0xb, 0x2}, {0x0, 0x5, 0x4, 0xa}, {0x3, 0x4, 0xb, 0x7}, {0x3, 0x2, 0xc, 0x6}, {0x81, 0x3, 0x9, 0xa}, {0x5, 0x4, 0xc, 0xc}, {0x4, 0x5, 0x2, 0x6}, {0x3, 0x1, 0x3, 0x1}, {0x3, 0x2, 0x4, 0x8}], 0x10, 0xfffffff8}, 0x94) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000023c0)={r1, 0x6}, &(0x7f0000002400)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000002440)={r5}, 0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000002580)={r0, &(0x7f0000002480)='\x00', 0x8240, &(0x7f00000024c0)={@align=0x7, {0x7fff, 0x7ff, 0x1, 0x339e6870}}, 0x2, &(0x7f0000002500), &(0x7f0000002540)=0x887c}) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000002640)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002600)={0xfffffffffffffffe}}, 0x41) r7 = syz_genetlink_get_family_id$team(&(0x7f00000026c0), r4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002780)={'syztnl0\x00', &(0x7f0000002700)={'ip_vti0\x00', r3, 0x1, 0x20, 0x5, 0x0, {{0xb, 0x4, 0x1, 0x8, 0x2c, 0x68, 0x0, 0x4, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xea, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @lsrr={0x83, 0xb, 0xd2, [@private=0xa010100, @empty]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000002c80)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002c40)={&(0x7f00000027c0)={0x448, r7, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r3}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6c}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfa7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x14}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0x28000}, 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000002cc0)={0xa, 0x4e21, 0x8, @local, 0x81}, 0x1c) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000002f00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002d40)={0x15c, 0xa, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5d}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x10}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x240}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8840}, 0x40000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000002f40)={r5, 0x844}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000002f80)={'netpci0\x00', @remote}) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000003300)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000032c0)={&(0x7f0000003040)={0x26c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf8d1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}]}, @TIPC_NLA_NODE={0x14c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb2, 0x3, "e6da6470d73aedafc9c34d79f370d9cd5962a333bd2cc5e7c355e84b16347cde4fe22d49449d4a43959078b67211dd5462358bb6229f24a4bcbfb46d17b18ef55218ad2c01c0575d00624b286b632bb347f9a3dec023baad5c4ebd9c575e4aecb65525d6b948f2196370ffaf2d1abaaab0c1c07b263eacd27629073cc3cac1ebf2e3036358c43b86ef62b435a7b556e2bf186336900c6b0c9688d5cd23f1b5d9aaa0a182fe707d02a9d11de66153"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "c6e4b6f304f2e317f4612b2b3aa4c87cf37e86151296e6992dc00e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x34, 0x3, "b07c8f489bbad30490382773599eaa40a275bd096508361b81604bad0a8726c7fc22a2af303925acdf9efb7ef2951529"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x736}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xba5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x30}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x4}]}, 0x26c}, 0x1, 0x0, 0x0, 0x10}, 0x20008080) 735.762362ms ago: executing program 9 (id=6303): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x10011, 0x2, 0x2, 0xc, 0xc}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000000)='wlan1\x00', 0x46202, &(0x7f0000000080)={@_ha_fsid={[0x2, 0x909b]}, {0x7, 0x0, 0x0, 0x1}}, 0x6, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x9}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$tipc(0x0, r3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x10011, 0x2, 0x2, 0xc, 0xc}, 0x20) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000000)='wlan1\x00', 0x46202, &(0x7f0000000080)={@_ha_fsid={[0x2, 0x909b]}, {0x7, 0x0, 0x0, 0x1}}, 0x6, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x9}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r2, 0x0, 0x0, 0x80800) (async) sendmmsg$alg(r3, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) syz_genetlink_get_family_id$tipc(0x0, r3) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl(r0, 0x8b32, &(0x7f0000000040)) (async) 735.257512ms ago: executing program 1 (id=6304): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x68}}, 0x4008014) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 689.885085ms ago: executing program 7 (id=6305): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) (async) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x2, 0x4) 636.159992ms ago: executing program 7 (id=6306): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 567.830072ms ago: executing program 3 (id=6307): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r2) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fbdb760567d956e2df253a"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x4, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x8, 0xf}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_EMATCHES={0x54, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x2, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe}, {0x5, 0x40, 0x2}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7f, 0x2, 0x38}, {0xde1, 0x8, 0x1, "2cc602b5aa661dae"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x6}, {0x2, 0x3, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3f, 0xa}}]}, 0x90}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="95", 0x1}], 0x1}, 0x0) 538.941465ms ago: executing program 9 (id=6308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 64) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0xf, 0x1}}]}, 0x28}}, 0x0) 508.330349ms ago: executing program 7 (id=6309): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x5}}]}}]}, 0x3c}}, 0x2004c840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000004c0)=[@in6={0xa, 0x3, 0x9, @mcast2, 0x9}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000004c0)=[@in6={0xa, 0x3, 0x9, @mcast2, 0x9}], 0x1c) 368.394005ms ago: executing program 1 (id=6310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001b00)={0x34, r1, 0x1, 0x1000000, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x34}}, 0x20004000) 366.76949ms ago: executing program 6 (id=6311): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) read(r3, &(0x7f00000003c0)=""/132, 0x84) (async) r4 = socket(0x10, 0x2, 0x0) sendto$inet6(r4, &(0x7f00000004c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0xc090, 0x0, 0x0) (async) recvfrom$l2tp(r4, &(0x7f0000001180)=""/4096, 0x1000, 0x100, &(0x7f0000000280)={0x2, 0x0, @empty}, 0x10) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_emit_ethernet(0x16f, &(0x7f0000000080)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @igmp={{0x35, 0x4, 0x0, 0x8, 0x161, 0x64, 0x0, 0x0, 0x2, 0x0, @local, @empty, {[@generic={0x88, 0xd, "8a659fd2a11b4a015b56a7"}, @timestamp={0x44, 0x18, 0xf4, 0x0, 0x2, [0x9, 0x4, 0x10001, 0x5, 0xc78]}, @ssrr={0x89, 0xb, 0xc4, [@private=0xa010101, @empty]}, @noop, @timestamp_addr={0x44, 0xc, 0xe0, 0x1, 0x3, [{@empty, 0x8}]}, @cipso={0x86, 0x82, 0x0, [{0x2, 0x9, "df96e427f32c3f"}, {0x0, 0xa, "279678e5e0bb35f7"}, {0x5, 0xc, "8d11d266b8c55f4dbff3"}, {0x2, 0xc, "1c698c88c541c74cbce7"}, {0x1, 0xa, "9320e171fbb53eae"}, {0x1, 0xf, "f343786779007c9b83debabb88"}, {0x0, 0xb, "1e5591485f7a697e95"}, {0x1, 0x10, "0d7f7990fcdd4f0e82ef51408b18"}, {0x7, 0x10, "8f2d827880cb030f36a79e3ba3ca"}, {0x0, 0xd, "ce7b0b50e1c943a128a3c5"}]}, @noop]}}, {0x14, 0x0, 0x0, @remote, "674eea5df3121494389b9987e955b2da2f046a78efa14a875dc9a288d133ffac09c9a5d97094b403ee91147ef56741c24460620373ed8e7bd3fbc415134a547f34bcfa6b7aaef57a824ecdc01d301d2406bf3a9c8e1bfa49d7e8d19bf32f3649d30569892231dca5618d1a8a1b429eedf8c6a9a935aa6ea0b556bdbcbdf8eeb3ccb232882a"}}}}}, &(0x7f0000000240)={0x0, 0x2, [0xa4b, 0xb87, 0x6e5, 0xd37]}) listen(r5, 0x0) listen(r5, 0x7f3d) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x1, 0x0, 0x0, 0xf, 0x2, [], "f841"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1ba4"}]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4}]}}}]}, 0x64}}, 0x0) 271.2485ms ago: executing program 7 (id=6312): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) (async, rerun: 64) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) (rerun: 64) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0xf0, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffffff4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xa6}}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_IFACE={0x14, 0x17, 'vxcan1\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb215}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r4, 0xe) (async) listen(r4, 0x80) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x880) 144.649545ms ago: executing program 1 (id=6313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e4099107323f5", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$can_j1939(r3, &(0x7f0000000300)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x1}, 0x3}, 0x18) 51.952646ms ago: executing program 9 (id=6314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000035c866c800000000000000558aa0231e7134f49306069679276bf2c8df0edefb0f75cd1b01d8befe2b0dbea0c5783aaa58656bffd9d30ba5f5752ab8b47fe6263f2732906a1446b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000007d2700000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000081}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x24, r5, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffff01}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x20008805) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22483, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x103000, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1ff}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1ff07}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x8802) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x24, r11, 0xf14, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}}, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r15, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c031500000000ff8800000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) connect$pppoe(r4, &(0x7f0000000200)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 'vlan0\x00'}}, 0x1e) 0s ago: executing program 1 (id=6315): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) r3 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r3, &(0x7f0000002bc0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0x52) sendto$inet6(r0, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) kernel console output (not intermixed with test programs): : command tx timeout [ 481.495033][T22407] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.510306][ T6676] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.517466][ T6676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.554047][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.561217][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.623496][T22407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.812508][T22550] netlink: 'syz.1.4512': attribute type 5 has an invalid length. [ 481.858734][T22555] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4513'. [ 481.930639][T22558] syzkaller0: entered promiscuous mode [ 481.946401][T22558] syzkaller0: entered allmulticast mode [ 481.984033][T22407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.373820][T22407] veth0_vlan: entered promiscuous mode [ 482.402195][T22407] veth1_vlan: entered promiscuous mode [ 482.485656][T22407] veth0_macvtap: entered promiscuous mode [ 482.515598][T22407] veth1_macvtap: entered promiscuous mode [ 482.563489][T22407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.603802][T22407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.640587][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.652312][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.683349][ T72] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.718885][ T72] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.861577][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.878005][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.934167][T22614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4531'. [ 482.956201][T22614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.969925][T22614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.993663][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.010276][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 483.029953][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.070966][T22623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4534'. [ 483.085260][T22623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4534'. [ 483.095951][T22623] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4534'. [ 483.148235][T22624] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4534'. [ 483.157929][T22623] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 483.250753][T22636] netlink: 'syz.3.4535': attribute type 21 has an invalid length. [ 483.567292][ T51] Bluetooth: hci4: command tx timeout [ 483.897318][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 483.905397][ C1] lec:lec_tx_timeout: lec0 [ 483.910606][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 484.054096][T22691] netlink: 'syz.6.4549': attribute type 1 has an invalid length. [ 484.108733][T22693] gretap0: entered promiscuous mode [ 484.231415][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 484.241780][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 484.251929][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 484.260567][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 484.271454][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 484.608142][T22729] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 484.767583][T22706] chnl_net:caif_netlink_parms(): no params data found [ 484.985339][T22763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.038697][T22706] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.046353][T22706] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.068499][T22706] bridge_slave_0: entered allmulticast mode [ 485.076926][T22706] bridge_slave_0: entered promiscuous mode [ 485.105549][T22706] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.116967][T22706] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.134837][T22706] bridge_slave_1: entered allmulticast mode [ 485.152784][T22706] bridge_slave_1: entered promiscuous mode [ 485.257605][T22706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.278350][T22775] syzkaller0: entered promiscuous mode [ 485.283853][T22775] syzkaller0: entered allmulticast mode [ 485.296456][T22706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.447135][T22706] team0: Port device team_slave_0 added [ 485.457098][T22706] team0: Port device team_slave_1 added [ 485.570779][T22706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.591074][T22706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.591206][T22782] netlink: 'syz.6.4569': attribute type 1 has an invalid length. [ 485.634771][T22706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.661020][ T51] Bluetooth: hci4: command tx timeout [ 485.675322][T22784] veth1_to_hsr: entered promiscuous mode [ 485.681979][T22784] veth1_to_hsr: entered allmulticast mode [ 485.692513][T22706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.705622][T22706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.732847][T22706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.746438][T22784] __nla_validate_parse: 9 callbacks suppressed [ 485.746453][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4570'. [ 485.812543][T22787] netlink: 'syz.1.4571': attribute type 1 has an invalid length. [ 485.900086][T22706] hsr_slave_0: entered promiscuous mode [ 485.912822][T22706] hsr_slave_1: entered promiscuous mode [ 485.925914][T22706] debugfs: 'hsr0' already exists in 'hsr' [ 485.954251][T22706] Cannot create hsr debugfs directory [ 486.011957][T17827] IPVS: starting estimator thread 0... [ 486.108766][T22801] IPVS: using max 36 ests per chain, 86400 per kthread [ 486.357476][ T5840] Bluetooth: hci7: command tx timeout [ 486.574330][T22706] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 486.586928][T22706] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 486.610532][T22706] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 486.642025][T22706] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 487.022317][T22706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.083506][T22706] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.120982][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.128198][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.156655][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.163845][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.330211][T22861] netlink: 'syz.3.4585': attribute type 10 has an invalid length. [ 487.372034][T22861] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 487.614612][T22706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.689936][T22876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4589'. [ 487.723841][ T5840] Bluetooth: hci4: command tx timeout [ 487.864306][T22883] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.018526][T22883] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.074036][T22898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.099589][T22903] netlink: 'syz.2.4596': attribute type 1 has an invalid length. [ 488.115546][T22883] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.118399][ T5840] Bluetooth: hci6: command 0x0406 tx timeout [ 488.206481][T22903] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 488.268907][T22883] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.314309][T22916] netlink: 'syz.2.4599': attribute type 12 has an invalid length. [ 488.369939][T22920] netlink: 'syz.3.4600': attribute type 1 has an invalid length. [ 488.370027][T22916] bond2: option primary_reselect: invalid value (255) [ 488.389575][T22916] bond2 (unregistering): Released all slaves [ 488.432536][T22706] veth0_vlan: entered promiscuous mode [ 488.438213][ T51] Bluetooth: hci7: command tx timeout [ 488.450562][T22706] veth1_vlan: entered promiscuous mode [ 488.482055][T22706] veth0_macvtap: entered promiscuous mode [ 488.522794][T22706] veth1_macvtap: entered promiscuous mode [ 488.549024][ T6676] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.580810][T22923] tipc: Enabling of bearer rejected, failed to enable media [ 488.590061][ T6676] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.629321][ T6676] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.659605][T22706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.695747][ T128] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.719158][T22706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.737096][ T6676] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.746495][ T6676] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.767748][ T6676] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.788742][ T6676] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.888182][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.896037][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.917528][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 488.925603][ C1] lec:lec_tx_timeout: lec0 [ 488.930227][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 489.091233][T22956] tls_set_device_offload_rx: netdev not found [ 489.155405][T22961] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4609'. [ 489.169503][T22961] netlink: 'syz.6.4609': attribute type 2 has an invalid length. [ 489.181573][T22961] 9: entered promiscuous mode [ 490.518060][ T51] Bluetooth: hci7: command tx timeout [ 491.801314][T22935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.873527][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.888975][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.092368][T22975] netlink: 'syz.1.4615': attribute type 1 has an invalid length. [ 492.116669][T22975] netlink: 'syz.1.4615': attribute type 1 has an invalid length. [ 492.240564][T22970] netlink: 'syz.3.4613': attribute type 10 has an invalid length. [ 492.260272][T22993] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4617'. [ 492.319975][T22998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4617'. [ 492.404638][T22970] macvtap0: left allmulticast mode [ 492.476793][T22998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4617'. [ 492.600578][ T51] Bluetooth: hci7: command tx timeout [ 493.937295][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 493.945320][ C1] lec:lec_tx_timeout: lec0 [ 493.949917][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 494.253343][T23033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4628'. [ 494.325643][T23033] veth0_to_hsr: entered promiscuous mode [ 494.351798][T23033] veth0_to_hsr: entered allmulticast mode [ 494.581134][T23060] netlink: 'syz.2.4634': attribute type 12 has an invalid length. [ 494.830458][T23075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4636'. [ 494.924613][T23081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4639'. [ 495.243566][T23106] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4646'. [ 495.257008][T23106] netem: invalid attributes len -24 [ 495.275378][T23106] netem: change failed [ 495.280581][T23106] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4646'. [ 495.298486][T23106] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4646'. [ 495.310242][T23101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4641'. [ 495.520006][T16187] IPVS: starting estimator thread 0... [ 495.577114][T23132] netlink: 'syz.1.4652': attribute type 1 has an invalid length. [ 495.667568][T23127] IPVS: using max 32 ests per chain, 76800 per kthread [ 495.677236][T23121] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.870549][T23138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.932388][T23146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.075382][T23156] wireguard0: entered promiscuous mode [ 496.081012][T23156] wireguard0: entered allmulticast mode [ 496.102922][T23156] team0: Device wireguard0 is of different type [ 496.508631][T23185] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 496.540090][T23185] syzkaller0: entered promiscuous mode [ 496.545597][T23185] syzkaller0: entered allmulticast mode [ 496.780236][T23211] netlink: 'syz.7.4675': attribute type 2 has an invalid length. [ 496.790102][T23215] netlink: zone id is out of range [ 496.799821][T23215] netlink: zone id is out of range [ 496.805005][T23215] netlink: zone id is out of range [ 496.853532][T23215] netlink: zone id is out of range [ 496.860776][T23215] netlink: zone id is out of range [ 496.873945][T23215] netlink: zone id is out of range [ 496.880426][T23215] netlink: zone id is out of range [ 496.885751][T23215] netlink: zone id is out of range [ 496.891926][T23215] netlink: zone id is out of range [ 496.897097][T23215] netlink: zone id is out of range [ 497.144547][T23239] syzkaller0: entered promiscuous mode [ 497.156501][T23239] syzkaller0: entered allmulticast mode [ 497.582210][T23264] __nla_validate_parse: 11 callbacks suppressed [ 497.582228][T23264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4696'. [ 497.621016][T23271] sit1: entered promiscuous mode [ 497.626100][T23271] sit1: entered allmulticast mode [ 497.791733][T23282] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4700'. [ 497.795504][T23284] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4701'. [ 497.822166][T23281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4700'. [ 497.877338][T23282] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4700'. [ 497.896556][T23285] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4700'. [ 497.907487][T23281] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4700'. [ 497.919020][T23285] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4700'. [ 498.041636][T23301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4709'. [ 498.122793][T23305] netlink: 'syz.2.4710': attribute type 21 has an invalid length. [ 498.163715][T23315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4711'. [ 498.252192][T23305] netlink: 'syz.2.4710': attribute type 1 has an invalid length. [ 498.437071][T23332] xt_hashlimit: size too large, truncated to 1048576 [ 498.623672][T23350] sctp: [Deprecated]: syz.1.4720 (pid 23350) Use of int in max_burst socket option. [ 498.623672][T23350] Use struct sctp_assoc_value instead [ 498.625160][T23345] netlink: 'syz.1.4720': attribute type 1 has an invalid length. [ 498.664634][T23353] pimreg: entered allmulticast mode [ 498.680784][T23353] netlink: 'syz.6.4722': attribute type 10 has an invalid length. [ 498.823948][T23359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 498.957305][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 498.973435][ C1] lec:lec_tx_timeout: lec0 [ 498.978356][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 499.006287][T23373] lo: Caught tx_queue_len zero misconfig [ 499.031550][T23375] netlink: 'syz.7.4728': attribute type 1 has an invalid length. [ 499.051648][T23375] netlink: 'syz.7.4728': attribute type 1 has an invalid length. [ 499.069172][T23375] netlink: 'syz.7.4728': attribute type 2 has an invalid length. [ 499.122057][T23378] netlink: 'syz.6.4730': attribute type 12 has an invalid length. [ 499.137899][T23380] netlink: 'syz.2.4731': attribute type 7 has an invalid length. [ 499.278422][T23395] netlink: 'syz.3.4738': attribute type 21 has an invalid length. [ 499.699031][T23421] gre0: entered promiscuous mode [ 499.704109][T23421] gre0: entered allmulticast mode [ 499.719638][T23429] gre0: entered allmulticast mode [ 499.999230][T23450] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 501.405564][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.457685][T23443] lo: entered promiscuous mode [ 502.669975][T23559] __nla_validate_parse: 17 callbacks suppressed [ 502.669991][T23559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4780'. [ 502.735800][T23559] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.743476][T23559] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.794316][T23559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4780'. [ 502.821382][T23559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4780'. [ 502.847922][T23559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4780'. [ 502.874413][T23559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4780'. [ 502.899675][T23559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4780'. [ 502.922034][T23559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4780'. [ 502.949593][T23559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4780'. [ 502.986014][T23559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4780'. [ 503.002064][T23559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4780'. [ 503.465243][T23604] bond5: option xmit_hash_policy: invalid value (64) [ 503.474309][T23604] bond5 (unregistering): Released all slaves [ 503.712139][T23613] bond2: entered promiscuous mode [ 503.718607][T23613] bond2: entered allmulticast mode [ 503.724090][T23613] 8021q: adding VLAN 0 to HW filter on device bond2 [ 503.781412][T23627] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 503.934072][T23635] syzkaller0: entered promiscuous mode [ 503.941464][T23635] syzkaller0: entered allmulticast mode [ 504.151624][T23647] geneve2: entered promiscuous mode [ 504.202107][T23651] syzkaller0: entered promiscuous mode [ 504.212338][T23651] syzkaller0: entered allmulticast mode [ 504.360097][ T51] Bluetooth: hci7: command tx timeout [ 504.757279][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 504.765371][ C1] lec:lec_tx_timeout: lec0 [ 504.770568][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 504.883063][T23711] veth0: entered promiscuous mode [ 504.947839][T23710] veth0: left promiscuous mode [ 505.640896][T23761] x_tables: duplicate underflow at hook 3 [ 505.899938][ T1148] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.938398][ T1148] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.957682][ T1148] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.997080][ T1148] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.063129][T23781] xt_recent: Unsupported userspace flags (000000b1) [ 506.155723][T23795] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 506.506351][T23822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.433928][T23841] x_tables: duplicate entry at hook 2 [ 508.057370][T23820] __nla_validate_parse: 56 callbacks suppressed [ 508.057390][T23820] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4859'. [ 508.132402][T23843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4863'. [ 508.165530][T23843] geneve2: entered promiscuous mode [ 508.317214][T23849] validate_nla: 4 callbacks suppressed [ 508.317234][T23849] netlink: 'syz.7.4866': attribute type 1 has an invalid length. [ 508.364464][T23849] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4866'. [ 508.378791][T23849] netlink: 'syz.7.4866': attribute type 1 has an invalid length. [ 508.389373][T23849] netlink: 'syz.7.4866': attribute type 8 has an invalid length. [ 508.417332][T23849] netlink: 582 bytes leftover after parsing attributes in process `syz.7.4866'. [ 508.432520][T23849] netlink: 1 bytes leftover after parsing attributes in process `syz.7.4866'. [ 508.496605][T23857] dvmrp6: entered allmulticast mode [ 508.602886][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 508.922458][T23881] syzkaller0: entered promiscuous mode [ 508.928512][T23881] syzkaller0: entered allmulticast mode [ 508.966763][T23894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4880'. [ 508.985564][T23895] IPVS: length: 8 != 1152 [ 509.144494][T23913] x_tables: duplicate underflow at hook 1 [ 509.801222][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 509.809302][ C1] lec:lec_tx_timeout: lec0 [ 509.814270][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 510.604489][T23904] netlink: 'syz.3.4880': attribute type 5 has an invalid length. [ 510.612508][T23904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4880'. [ 510.941860][T23931] netlink: 'syz.2.4889': attribute type 30 has an invalid length. [ 510.999315][ T5157] block nbd1: Possible stuck request ffff888026a40000: control (read@0,1024B). Runtime 60 seconds [ 511.010220][ T5157] block nbd1: Possible stuck request ffff888026a40200: control (read@1024,1024B). Runtime 60 seconds [ 511.021262][ T5157] block nbd1: Possible stuck request ffff888026a40400: control (read@2048,1024B). Runtime 60 seconds [ 511.032287][ T5157] block nbd1: Possible stuck request ffff888026a40600: control (read@3072,1024B). Runtime 60 seconds [ 511.285522][T23951] netlink: 'syz.1.4895': attribute type 3 has an invalid length. [ 511.374760][T23958] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4897'. [ 511.385472][T23958] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4897'. [ 511.509900][T23962] netlink: 'syz.1.4898': attribute type 13 has an invalid length. [ 511.609506][T23972] netlink: 'syz.7.4901': attribute type 1 has an invalid length. [ 511.653943][T23973] netlink: 'syz.2.4900': attribute type 1 has an invalid length. [ 511.751157][T23972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.782439][T23974] bond1: (slave gretap1): making interface the new active one [ 511.800854][T23974] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 511.838745][T23983] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4904'. [ 511.847978][T23983] net_ratelimit: 44 callbacks suppressed [ 511.847998][T23983] openvswitch: netlink: Flow key attr not present in new flow. [ 512.173827][T24008] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.178611][T24007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.193077][T24010] openvswitch: netlink: Flow key attribute not present in set flow. [ 512.240314][T24007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.515664][T24042] netlink: 'syz.3.4920': attribute type 1 has an invalid length. [ 512.645173][T24053] sctp: [Deprecated]: syz.3.4923 (pid 24053) Use of struct sctp_assoc_value in delayed_ack socket option. [ 512.645173][T24053] Use struct sctp_sack_info instead [ 512.692735][T24053] sctp: [Deprecated]: syz.3.4923 (pid 24053) Use of struct sctp_assoc_value in delayed_ack socket option. [ 512.692735][T24053] Use struct sctp_sack_info instead [ 512.721150][T24057] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 512.830191][T24062] syzkaller0: entered promiscuous mode [ 512.835768][T24062] syzkaller0: entered allmulticast mode [ 513.248658][T24099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4936'. [ 513.273788][T24099] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.284274][T24099] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4936'. [ 513.427228][T24007] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 513.485182][T24106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4938'. [ 513.495016][T24108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4939'. [ 513.603343][T24108] bond8: option lp_interval: invalid value (0) [ 513.618690][T24108] bond8: option lp_interval: allowed values 1 - 2147483647 [ 513.643284][T24108] bond8 (unregistering): Released all slaves [ 513.748867][T24117] syzkaller0: entered promiscuous mode [ 513.779418][T24117] syzkaller0: entered allmulticast mode [ 513.822578][T24121] syzkaller1: entered promiscuous mode [ 513.828851][T24121] syzkaller1: entered allmulticast mode [ 513.966366][T24140] validate_nla: 3 callbacks suppressed [ 513.966383][T24140] netlink: 'syz.1.4949': attribute type 10 has an invalid length. [ 514.360205][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 514.408879][T24181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4958'. [ 514.427772][T24183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4958'. [ 514.443109][T24181] syzkaller0: entered promiscuous mode [ 514.449977][T24181] syzkaller0: entered allmulticast mode [ 514.827329][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 514.835391][ C1] lec:lec_tx_timeout: lec0 [ 514.840525][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 516.899805][T24145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.102892][T24194] netlink: 'syz.3.4960': attribute type 1 has an invalid length. [ 517.148450][T24194] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4960'. [ 517.343971][T24218] netlink: 'syz.1.4969': attribute type 21 has an invalid length. [ 517.368722][T24218] netlink: 'syz.1.4969': attribute type 6 has an invalid length. [ 517.376650][T24218] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4969'. [ 517.456835][T24218] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 517.690096][T24212] lec:lec_atm_close: lec0: Shut down! [ 517.854739][T24241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.862003][T24241] IPv6: NLM_F_CREATE should be set when creating new route [ 517.871105][T24241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4974'. [ 517.888650][T24239] "syz.1.4973" (24239) uses obsolete ecb(arc4) skcipher [ 517.985483][T24251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4977'. [ 517.995417][T24251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.052545][T24251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.116847][T24249] syzkaller0: entered promiscuous mode [ 518.126508][T24249] syzkaller0: entered allmulticast mode [ 518.324260][T24260] team0: Port device team_slave_0 removed [ 518.548339][T24282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.576552][T24281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.614633][T24270] __nla_validate_parse: 2 callbacks suppressed [ 518.614672][T24270] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4981'. [ 518.666037][T24289] syzkaller1: entered promiscuous mode [ 518.698265][T24289] syzkaller1: entered allmulticast mode [ 518.734703][T24294] netlink: 'syz.1.4990': attribute type 1 has an invalid length. [ 518.769679][T24294] bond5: entered promiscuous mode [ 518.778028][T24294] bond5: entered allmulticast mode [ 518.785151][T24294] 8021q: adding VLAN 0 to HW filter on device bond5 [ 518.834300][T24294] bridge0: entered promiscuous mode [ 518.852495][T24294] bridge0: entered allmulticast mode [ 518.864553][T24294] bond5: (slave bridge0): Enslaving as a backup interface with an up link [ 518.879347][T24300] ip6gretap2: entered promiscuous mode [ 518.885185][T24300] ip6gretap2: entered allmulticast mode [ 518.891037][ T13] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 519.007743][ T72] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 519.393638][T24341] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5003'. [ 519.407116][T24340] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5003'. [ 519.940808][T24388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5014'. [ 520.075776][T24394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5016'. [ 520.113619][T24398] vxlan0: entered promiscuous mode [ 520.120172][T24398] vxlan0: entered allmulticast mode [ 520.126505][ T6676] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.144291][ T6676] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.172754][ T6676] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.219027][ T128] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.372093][T24409] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5020'. [ 520.985243][T24457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5032'. [ 521.047729][T24459] tipc: Started in network mode [ 521.059389][T24459] tipc: Node identity ac14140f, cluster identity 4711 [ 521.074362][T24459] tipc: New replicast peer: 255.255.255.255 [ 521.083331][T24459] tipc: Enabled bearer , priority 10 [ 521.365509][T24482] netlink: 'syz.6.5042': attribute type 33 has an invalid length. [ 521.375754][T24482] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5042'. [ 521.391886][T24482] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5042'. [ 521.676054][T24502] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5049'. [ 522.082325][ T9] tipc: Node number set to 2886997007 [ 522.124636][T24524] syzkaller0: entered promiscuous mode [ 522.130332][T24524] syzkaller0: entered allmulticast mode [ 522.371723][T24545] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 522.373485][T24547] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 522.395560][ T9] IPVS: starting estimator thread 0... [ 522.528510][T24550] IPVS: using max 30 ests per chain, 72000 per kthread [ 522.758187][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5070 ms [ 522.766244][ C1] lec:lec_tx_timeout: lec0 [ 522.771587][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 522.914303][T24592] netlink: 'syz.6.5073': attribute type 33 has an invalid length. [ 525.993663][T24600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.116147][T24632] netlink: 'syz.6.5084': attribute type 1 has an invalid length. [ 526.126478][T24632] __nla_validate_parse: 7 callbacks suppressed [ 526.126494][T24632] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5084'. [ 526.157973][T24632] netlink: 'syz.6.5084': attribute type 1 has an invalid length. [ 526.165723][T24632] netlink: 'syz.6.5084': attribute type 8 has an invalid length. [ 526.174242][T24632] netlink: 582 bytes leftover after parsing attributes in process `syz.6.5084'. [ 526.199463][T24632] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5084'. [ 526.227993][T24632] openvswitch: netlink: IP tunnel TTL not specified. [ 526.255267][T24639] syzkaller0: entered promiscuous mode [ 526.274259][T24639] syzkaller0: entered allmulticast mode [ 526.441690][T24647] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5089'. [ 526.778131][T24679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5094'. [ 526.925540][T24694] ip6gre3: entered promiscuous mode [ 527.244693][T24713] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5104'. [ 527.268506][T24713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5104'. [ 527.459957][T24726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5106'. [ 527.473749][T24726] lo: Caught tx_queue_len zero misconfig [ 527.631598][T24736] openvswitch: netlink: IP tunnel dst address not specified [ 527.679274][T24739] x_tables: duplicate underflow at hook 1 [ 527.781453][T24749] netlink: 'syz.7.5114': attribute type 83 has an invalid length. [ 527.797544][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 527.805609][ C1] lec:lec_tx_timeout: lec0 [ 527.810219][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 527.941832][T24764] ¾x9ÿ: left allmulticast mode [ 527.958021][T24764] ¾x9ÿ: left promiscuous mode [ 527.973070][T24764] bridge0: port 1(1¾x9ÿ) entered disabled state [ 527.991057][T24764] bridge_slave_1: left allmulticast mode [ 528.009807][T24764] bridge_slave_1: left promiscuous mode [ 528.015670][T24764] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.028216][T24764] bond0: (slave bond_slave_0): Releasing backup interface [ 528.038936][T24764] bond_slave_0: left promiscuous mode [ 528.045028][T24764] bond_slave_0: left allmulticast mode [ 528.053483][T24764] bond0: (slave bond_slave_1): Releasing backup interface [ 528.065754][T24764] bond_slave_1: left promiscuous mode [ 528.072398][T24764] bond_slave_1: left allmulticast mode [ 528.101334][T24764] team0: Port device team_slave_0 removed [ 528.116551][T24764] team0: Port device team_slave_1 removed [ 528.133363][T24764] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 528.457900][T24799] sctp: [Deprecated]: syz.6.5125 (pid 24799) Use of int in maxseg socket option. [ 528.457900][T24799] Use struct sctp_assoc_value instead [ 528.611279][T24807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5127'. [ 528.704060][T24818] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5130'. [ 528.801324][T24822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.320741][T24858] ip6tnl0: Caught tx_queue_len zero misconfig [ 529.755290][T24890] syzkaller0: entered promiscuous mode [ 529.774383][T24890] syzkaller0: entered allmulticast mode [ 530.134834][T24921] netlink: 'syz.3.5157': attribute type 3 has an invalid length. [ 530.162518][T24921] xfrm2: entered allmulticast mode [ 530.174167][T24928] netlink: 'syz.1.5159': attribute type 1 has an invalid length. [ 530.396990][T24943] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 530.449307][T24951] openvswitch: netlink: Key type 232 is out of range max 32 [ 530.672337][T24963] netlink: 'syz.1.5170': attribute type 1 has an invalid length. [ 530.723075][T24963] 8021q: adding VLAN 0 to HW filter on device bond6 [ 531.028202][T24993] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 531.143843][T25003] vlan2: entered allmulticast mode [ 531.149213][T25003] hsr0: entered allmulticast mode [ 531.154224][T25003] hsr_slave_0: entered allmulticast mode [ 531.160206][T25003] hsr_slave_1: entered allmulticast mode [ 531.180319][T25006] bond8 (unregistering): Released all slaves [ 531.199460][T25005] smc: net device team0 applied user defined pnetid SYZ2 [ 531.206754][T25008] smc: net device caif0 applied user defined pnetid SYZ2 [ 531.306680][T25015] __nla_validate_parse: 21 callbacks suppressed [ 531.306699][T25015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5186'. [ 531.325335][T25015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5186'. [ 531.387630][T25021] netlink: 'syz.6.5187': attribute type 1 has an invalid length. [ 531.395386][T25021] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5187'. [ 531.407465][T24958] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 531.417080][T25021] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5187'. [ 531.441399][T25021] netlink: 'syz.6.5187': attribute type 1 has an invalid length. [ 531.709917][T25040] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5195'. [ 532.073317][T25060] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5201'. [ 532.082549][T25060] openvswitch: netlink: Port 808464432 exceeds max allowable 65535 [ 532.106853][T25061] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5199'. [ 532.256757][T25070] netlink: 'syz.7.5203': attribute type 1 has an invalid length. [ 532.276071][T25074] netlink: 'syz.1.5205': attribute type 1 has an invalid length. [ 532.287451][T25070] netlink: 'syz.7.5203': attribute type 1 has an invalid length. [ 532.290437][T25075] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5202'. [ 532.305655][T25074] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5205'. [ 532.320694][ T51] Bluetooth: hci7: link tx timeout [ 532.326469][ T51] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 532.611700][T25094] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5210'. [ 532.817280][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 532.825338][ C1] lec:lec_tx_timeout: lec0 [ 532.830411][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 533.151509][T25126] syzkaller0: entered promiscuous mode [ 533.171988][T25126] syzkaller0: entered allmulticast mode [ 533.343105][ T51] Bluetooth: hci7: link tx timeout [ 533.349404][ T51] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 533.357074][ T51] Bluetooth: hci7: link tx timeout [ 533.363070][ T51] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 533.471859][T25136] netlink: 'syz.7.5221': attribute type 16 has an invalid length. [ 533.508916][T25143] macvtap1: entered promiscuous mode [ 533.514533][T25143] macvtap1: entered allmulticast mode [ 533.520441][T25143] veth1_vlan: entered allmulticast mode [ 533.531349][ T51] Bluetooth: hci7: link tx timeout [ 533.536478][ T51] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 533.562675][ T51] Bluetooth: hci7: link tx timeout [ 533.567937][ T51] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 533.579384][T25143] macvtap2: entered promiscuous mode [ 533.584700][T25143] macvtap2: entered allmulticast mode [ 534.043906][ T51] Bluetooth: hci7: link tx timeout [ 534.049220][ T51] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 534.280190][ T51] Bluetooth: hci7: link tx timeout [ 534.285347][ T51] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 534.357552][ T51] Bluetooth: hci7: command 0x0405 tx timeout [ 534.453557][T25211] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 534.466978][T25211] bond2 (unregistering): Released all slaves [ 534.496861][T25222] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 534.499271][T25218] pimreg: entered allmulticast mode [ 534.672326][T25231] netlink: 'syz.7.5246': attribute type 1 has an invalid length. [ 534.689036][T25231] netlink: 'syz.7.5246': attribute type 1 has an invalid length. [ 534.696946][T25231] netlink: 'syz.7.5246': attribute type 1 has an invalid length. [ 534.705258][T25231] netlink: 'syz.7.5246': attribute type 1 has an invalid length. [ 534.718628][T25231] netlink: 'syz.7.5246': attribute type 1 has an invalid length. [ 534.726454][T25231] netlink: 'syz.7.5246': attribute type 1 has an invalid length. [ 534.735182][T25231] netlink: 'syz.7.5246': attribute type 1 has an invalid length. [ 534.743180][T25231] netlink: 'syz.7.5246': attribute type 1 has an invalid length. [ 534.751760][T25231] netlink: 'syz.7.5246': attribute type 1 has an invalid length. [ 536.334259][T25297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.583010][T25297] veth1_vlan: left allmulticast mode [ 536.633438][ T72] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.642050][ T72] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.652221][ T72] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.661241][ T72] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.679952][ T72] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.690603][ T72] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.701379][ T72] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.724246][ T72] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.881681][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 536.891075][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 536.899528][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 536.909530][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 536.917145][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 537.063150][T25325] chnl_net:caif_netlink_parms(): no params data found [ 537.135519][T25325] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.142866][T25325] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.150202][T25325] bridge_slave_0: entered allmulticast mode [ 537.157886][T25325] bridge_slave_0: entered promiscuous mode [ 537.165559][T25325] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.172780][T25325] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.180090][T25325] bridge_slave_1: entered allmulticast mode [ 537.187093][T25325] bridge_slave_1: entered promiscuous mode [ 537.213901][T25325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.225325][T25325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.257165][T25325] team0: Port device team_slave_0 added [ 537.264876][T25325] team0: Port device team_slave_1 added [ 537.286998][T25325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.294012][T25325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.320995][T25325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.333296][T25325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.340260][T25325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.366298][T25325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.406358][T25325] hsr_slave_0: entered promiscuous mode [ 537.413104][T25325] hsr_slave_1: entered promiscuous mode [ 537.420224][T25325] debugfs: 'hsr0' already exists in 'hsr' [ 537.425951][T25325] Cannot create hsr debugfs directory [ 537.837316][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 537.845415][ C1] lec:lec_tx_timeout: lec0 [ 537.850006][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 538.869293][T25303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.894315][T25325] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 538.988361][T25341] netlink: 'syz.6.5267': attribute type 11 has an invalid length. [ 539.003779][T25325] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 539.010791][ T51] Bluetooth: hci8: command tx timeout [ 539.025081][T25341] __nla_validate_parse: 79 callbacks suppressed [ 539.025098][T25341] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5267'. [ 539.066764][T25346] bridge3: entered promiscuous mode [ 539.072302][T25346] bridge3: entered allmulticast mode [ 539.080540][T25346] team0: Port device bridge3 added [ 539.085745][T25325] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 539.099198][T25345] Bluetooth: MGMT ver 1.23 [ 539.117352][T25325] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 539.139279][T25352] netlink: 288 bytes leftover after parsing attributes in process `syz.1.5270'. [ 539.226625][T25357] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 539.250915][T25357] bond2 (unregistering): Released all slaves [ 539.307386][T25368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5274'. [ 539.376432][T25377] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5275'. [ 539.530503][T25384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5277'. [ 539.547992][T25385] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 539.563102][T25385] bridge0: entered allmulticast mode [ 539.576690][T25325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.646692][T25325] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.696754][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.704352][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.765917][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.773134][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.826695][T25399] netlink: 'syz.7.5283': attribute type 11 has an invalid length. [ 539.875014][T25399] netlink: 'syz.7.5283': attribute type 11 has an invalid length. [ 539.888002][T25399] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5283'. [ 539.907491][T25399] lo: entered promiscuous mode [ 539.942922][T25399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.435962][T25325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.930789][ T6677] nci: nci_ntf_packet: unknown ntf opcode 0x20 [ 541.080028][ T5840] Bluetooth: hci8: command tx timeout [ 541.086292][ T5157] block nbd1: Possible stuck request ffff888026a40000: control (read@0,1024B). Runtime 90 seconds [ 541.097426][ T5157] block nbd1: Possible stuck request ffff888026a40200: control (read@1024,1024B). Runtime 90 seconds [ 541.109885][ T5157] block nbd1: Possible stuck request ffff888026a40400: control (read@2048,1024B). Runtime 90 seconds [ 541.121632][ T5157] block nbd1: Possible stuck request ffff888026a40600: control (read@3072,1024B). Runtime 90 seconds [ 541.145355][T25325] veth0_vlan: entered promiscuous mode [ 541.157724][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 541.157870][T25325] veth1_vlan: entered promiscuous mode [ 541.169720][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 541.203525][T25325] veth0_macvtap: entered promiscuous mode [ 541.219269][T25325] veth1_macvtap: entered promiscuous mode [ 541.251798][T25489] syzkaller0: entered promiscuous mode [ 541.257549][T25489] syzkaller0: entered allmulticast mode [ 542.694762][T25325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.708396][T25325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.722329][ T993] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.731585][ T993] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.753435][ T993] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.773508][ T993] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.867313][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 542.875380][ C1] lec:lec_tx_timeout: lec0 [ 542.880244][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 543.157614][ T51] Bluetooth: hci8: command tx timeout [ 543.822137][T25460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 544.006179][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.039162][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.182267][T25514] sctp: [Deprecated]: syz.1.5307 (pid 25514) Use of int in max_burst socket option. [ 544.182267][T25514] Use struct sctp_assoc_value instead [ 544.206277][T25510] bridge_slave_0: left allmulticast mode [ 544.237330][T25510] bridge_slave_0: left promiscuous mode [ 544.243123][T25510] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.292977][T25510] bridge_slave_1: left allmulticast mode [ 544.313218][T25510] bridge_slave_1: left promiscuous mode [ 544.407565][T25510] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.453081][T25529] validate_nla: 57 callbacks suppressed [ 544.453099][T25529] netlink: 'syz.1.5309': attribute type 1 has an invalid length. [ 544.475817][T25510] bond0: (slave bond_slave_0): Releasing backup interface [ 544.521926][T25510] bond0: (slave bond_slave_1): Releasing backup interface [ 544.578094][T25510] team0: Port device team_slave_1 removed [ 544.606559][T25510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.647331][T25510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.669050][T25510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.676454][T25510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.714114][T25510] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 544.780979][T25529] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 544.801057][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.852421][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.059981][T25553] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 545.087677][T25561] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5316'. [ 545.241602][ T51] Bluetooth: hci8: command tx timeout [ 545.308329][T25571] netlink: 'syz.6.5320': attribute type 3 has an invalid length. [ 545.468782][T25582] netlink: 'syz.7.5323': attribute type 1 has an invalid length. [ 545.517836][T25582] netlink: 88 bytes leftover after parsing attributes in process `syz.7.5323'. [ 545.526833][T25582] netlink: 1 bytes leftover after parsing attributes in process `syz.7.5323'. [ 545.590783][T25582] netlink: 'syz.7.5323': attribute type 1 has an invalid length. [ 545.622873][T25582] netlink: 634 bytes leftover after parsing attributes in process `syz.7.5323'. [ 545.697792][T25558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.096458][T25627] tap0: tun_chr_ioctl cmd 1074025672 [ 546.118734][T25627] tap0: ignored: set checksum disabled [ 546.149339][T25632] tap0: tun_chr_ioctl cmd 1074025672 [ 546.168894][T25632] tap0: ignored: set checksum disabled [ 546.176109][T25634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5335'. [ 546.226333][T25638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5335'. [ 546.252074][T25638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5335'. [ 546.288743][T25638] macvtap2: entered promiscuous mode [ 546.294296][T25638] vlan0: entered promiscuous mode [ 546.301711][T25638] macvtap2: entered allmulticast mode [ 546.307633][T25638] vlan0: entered allmulticast mode [ 546.326014][T25638] veth0_vlan: entered allmulticast mode [ 546.433574][T25651] netlink: 'syz.7.5340': attribute type 3 has an invalid length. [ 546.478820][T25651] netlink: 'syz.7.5340': attribute type 3 has an invalid length. [ 546.496120][T25651] netlink: 'syz.7.5340': attribute type 3 has an invalid length. [ 546.675902][T25670] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5345'. [ 546.842992][T25680] netlink: 'syz.1.5348': attribute type 1 has an invalid length. [ 546.891500][T25680] bond7: entered promiscuous mode [ 546.898249][T25680] 8021q: adding VLAN 0 to HW filter on device bond7 [ 546.924950][T25686] bond7: (slave bridge6): making interface the new active one [ 546.937561][T25686] bridge6: entered promiscuous mode [ 546.955842][T25686] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 547.045580][T25680] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 547.091967][T25680] macvlan5: entered promiscuous mode [ 547.107701][T25680] macvlan5: entered allmulticast mode [ 547.119391][T25680] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 547.354547][T25705] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5356'. [ 547.469395][T25719] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5360'. [ 547.875247][T25744] syzkaller0: entered promiscuous mode [ 547.885708][T25744] syzkaller0: entered allmulticast mode [ 547.897312][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 547.905369][ C1] lec:lec_tx_timeout: lec0 [ 547.910036][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 547.971310][T25750] Cannot find del_set index 4 as target [ 548.104076][T25756] bond0 (unregistering): Released all slaves [ 548.150880][T25758] net veth1_virt_wifi ªªªªª2: renamed from virt_wifi0 [ 548.198697][T25764] bond0: (slave bond_slave_0): Releasing backup interface [ 548.210851][T25764] bond0: (slave bond_slave_1): Releasing backup interface [ 548.232854][T25764] team0: Port device team_slave_0 removed [ 548.242391][T25764] team0: Port device team_slave_1 removed [ 548.249496][T25764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.257137][T25764] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 548.914005][T25814] x_tables: duplicate underflow at hook 2 [ 549.045044][T25822] netlink: 'syz.3.5396': attribute type 1 has an invalid length. [ 549.080957][T25825] netlink: 'syz.8.5397': attribute type 1 has an invalid length. [ 549.098408][T25822] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 549.111862][T25822] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 549.122689][T25822] bond0: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 549.271571][T25827] bond0: (slave vcan0): The slave device specified does not support setting the MAC address [ 549.288151][T25827] bond0: (slave vcan0): making interface the new active one [ 549.310376][T25827] bond0: (slave vcan0): Enslaving as an active interface with an up link [ 550.083379][T25890] netlink: 'syz.8.5414': attribute type 11 has an invalid length. [ 550.111833][T25890] __nla_validate_parse: 8 callbacks suppressed [ 550.111852][T25890] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5414'. [ 550.163424][T25894] tipc: Started in network mode [ 550.169153][T25894] tipc: Node identity , cluster identity 4711 [ 550.175406][T25894] tipc: Failed to obtain node identity [ 550.181327][T25894] tipc: Enabling of bearer rejected, failed to enable media [ 550.191179][T25890] macvlan0: entered promiscuous mode [ 550.196714][T25890] macvlan0: entered allmulticast mode [ 550.203361][T25890] veth1_vlan: entered allmulticast mode [ 550.210973][T25890] netlink: 80 bytes leftover after parsing attributes in process `syz.8.5414'. [ 550.211321][T25893] syzkaller0: entered promiscuous mode [ 550.226058][T25893] syzkaller0: entered allmulticast mode [ 550.265411][T25890] bridge0: entered promiscuous mode [ 550.335387][T25899] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5418'. [ 550.351913][T25899] IPVS: length: 193 != 12884901912 [ 550.612031][T25916] validate_nla: 2 callbacks suppressed [ 550.612047][T25916] netlink: 'syz.6.5422': attribute type 1 has an invalid length. [ 550.775033][T25929] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5427'. [ 550.803451][T25930] netlink: 92 bytes leftover after parsing attributes in process `syz.6.5428'. [ 550.819790][T25928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5425'. [ 550.841601][T25930] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5428'. [ 550.867915][T25930] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5428'. [ 550.894154][T25930] netlink: 92 bytes leftover after parsing attributes in process `syz.6.5428'. [ 551.014522][T25944] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5432'. [ 551.150378][T25950] : entered promiscuous mode [ 551.200031][T25950] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 551.782346][T25988] netlink: 'syz.7.5444': attribute type 10 has an invalid length. [ 552.927503][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 552.935525][ C1] lec:lec_tx_timeout: lec0 [ 552.940268][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 553.130312][T25988] bridge_slave_1: left allmulticast mode [ 553.136491][T25988] bridge_slave_1: left promiscuous mode [ 553.160648][T25988] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.182037][T25988] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 553.330641][T26002] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 553.423993][T26013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.506810][T26019] openvswitch: netlink: Flow actions attr not present in new flow. [ 553.546820][T26021] bridge0: entered allmulticast mode [ 553.662779][T26027] netlink: 'syz.7.5461': attribute type 1 has an invalid length. [ 553.734589][T26027] 8021q: adding VLAN 0 to HW filter on device bond2 [ 553.786850][T26033] bond2 (unregistering): Released all slaves [ 553.843829][T26036] bond2: (slave veth3): Enslaving as an active interface with a down link [ 554.105769][T26056] bridge0: port 3(syz_tun) entered blocking state [ 554.122573][T26056] bridge0: port 3(syz_tun) entered disabled state [ 554.139944][T26056] syz_tun: entered allmulticast mode [ 554.149224][T26056] syz_tun: entered promiscuous mode [ 554.163474][T26056] bridge0: port 3(syz_tun) entered blocking state [ 554.170072][T26056] bridge0: port 3(syz_tun) entered forwarding state [ 554.397514][T26067] netlink: 'syz.1.5475': attribute type 21 has an invalid length. [ 554.422478][T26067] IPv6: NLM_F_CREATE should be specified when creating new route [ 555.144336][T26132] 8021q: VLANs not supported on lo [ 555.562598][T26150] __nla_validate_parse: 11 callbacks suppressed [ 555.562617][T26150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5497'. [ 555.712165][T26156] netlink: 'syz.8.5501': attribute type 1 has an invalid length. [ 555.809348][T26162] xt_time: unknown flags 0xf4 [ 555.944826][T26165] IPVS: Error connecting to the multicast addr [ 555.991521][T26168] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5504'. [ 556.048588][T26167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5505'. [ 556.509118][T26202] IPVS: Unknown mcast interface: vcan0 [ 557.017042][T26254] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5529'. [ 557.120526][T26261] netlink: 'syz.6.5530': attribute type 13 has an invalid length. [ 557.129018][T26261] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5530'. [ 557.138864][T26261] syz_tun: refused to change device tx_queue_len [ 557.160480][T26262] bond0: (slave gre0): Error: Device type is different from other slaves [ 557.947302][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 557.955361][ C1] lec:lec_tx_timeout: lec0 [ 557.960425][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 558.013411][T26313] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5550'. [ 558.045975][T26313] netlink: 'syz.6.5550': attribute type 1 has an invalid length. [ 558.057359][T26313] netlink: 'syz.6.5550': attribute type 1 has an invalid length. [ 558.065259][T26313] netlink: 'syz.6.5550': attribute type 2 has an invalid length. [ 558.082470][T26316] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5551'. [ 558.092983][T26313] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5550'. [ 558.241217][T26327] netlink: 'syz.3.5556': attribute type 29 has an invalid length. [ 558.242269][T26322] Cannot find add_set index 0 as target [ 558.249566][T26327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5556'. [ 558.325775][T26332] bpq0: left allmulticast mode [ 558.406906][T26335] netlink: 'syz.6.5557': attribute type 29 has an invalid length. [ 558.426141][T26335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5557'. [ 558.491743][T26336] can: request_module (can-proto-4) failed. [ 558.909762][T26373] openvswitch: netlink: IPv6 tunnel dst address is zero [ 559.107718][T26384] bond2 (unregistering): Released all slaves [ 559.139101][T26394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.146312][T26394] IPv6: NLM_F_CREATE should be set when creating new route [ 559.311230][T26391] syzkaller1: entered promiscuous mode [ 559.316842][T26391] syzkaller1: entered allmulticast mode [ 559.371885][T26412] netlink: 'syz.8.5579': attribute type 5 has an invalid length. [ 559.382719][T26405] xt_bpf: check failed: parse error [ 559.871888][T26448] SET target dimension over the limit! [ 560.199591][T26468] openvswitch: netlink: Multiple metadata blocks provided [ 560.366520][T26477] block nbd8: not configured, cannot reconfigure [ 560.906219][T26516] macvtap1: entered promiscuous mode [ 560.924971][T26516] macvtap1: entered allmulticast mode [ 560.931386][T26516] veth1_vlan: entered allmulticast mode [ 560.960946][T26516] macvtap2: entered promiscuous mode [ 560.966290][T26516] macvtap2: entered allmulticast mode [ 561.040301][T26530] netlink: 'syz.6.5617': attribute type 4 has an invalid length. [ 561.050821][T26529] netlink: 'syz.6.5617': attribute type 4 has an invalid length. [ 561.286350][T26550] __nla_validate_parse: 10 callbacks suppressed [ 561.286367][T26550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5622'. [ 561.350121][T26554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5624'. [ 561.513761][T26558] veth0: entered promiscuous mode [ 561.519524][T26558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5627'. [ 561.531887][T26550] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5622'. [ 561.542414][T26558] veth0 (unregistering): left promiscuous mode [ 561.928027][T26596] netlink: 'syz.6.5636': attribute type 7 has an invalid length. [ 561.936735][T26596] netlink: 'syz.6.5636': attribute type 7 has an invalid length. [ 561.938001][T26594] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5635'. [ 561.949809][T26596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5636'. [ 561.963002][T26594] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5635'. [ 562.036713][T26606] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5639'. [ 562.048667][T26607] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5637'. [ 562.066899][T26608] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5636'. [ 562.084192][T26599] bond8: option miimon: invalid value (18446744073709551585) [ 562.095982][T26599] bond8: option miimon: allowed values 0 - 2147483647 [ 562.106389][T26599] bond8 (unregistering): Released all slaves [ 562.129667][T26606] syz_tun: left allmulticast mode [ 562.137901][T26606] syz_tun: left promiscuous mode [ 562.142982][T26606] bridge0: port 3(syz_tun) entered disabled state [ 562.233473][T26606] bridge_slave_1: left allmulticast mode [ 562.250485][T26606] bridge_slave_1: left promiscuous mode [ 562.262433][T26606] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.304449][T26606] bridge_slave_0: left allmulticast mode [ 562.315765][T26606] bridge_slave_0: left promiscuous mode [ 562.331990][T26606] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.448818][T26624] netlink: 'syz.6.5643': attribute type 1 has an invalid length. [ 562.788090][T26630] delete_channel: no stack [ 562.967295][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 562.975399][ C1] lec:lec_tx_timeout: lec0 [ 562.980448][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 563.163461][T26652] netlink: 'syz.3.5651': attribute type 1 has an invalid length. [ 563.196082][T26652] 8021q: adding VLAN 0 to HW filter on device bond9 [ 563.291276][T26658] netlink: 'syz.7.5652': attribute type 7 has an invalid length. [ 563.359027][T26664] netlink: 'syz.1.5654': attribute type 1 has an invalid length. [ 563.481689][T26664] bond8: entered promiscuous mode [ 563.489050][T26664] 8021q: adding VLAN 0 to HW filter on device bond8 [ 563.496959][T26667] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 563.529455][T26667] team1: entered promiscuous mode [ 563.534499][T26667] team1: entered allmulticast mode [ 563.581512][T26672] bond8: (slave bridge7): making interface the new active one [ 563.590798][T26672] bridge7: entered promiscuous mode [ 563.596740][T26672] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 564.068610][T26715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.129454][T26715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.187098][T26717] ip6tnl0: entered promiscuous mode [ 564.734860][T26750] netlink: 'syz.3.5679': attribute type 1 has an invalid length. [ 564.750329][T26750] netlink: 'syz.3.5679': attribute type 1 has an invalid length. [ 565.014128][T26772] batadv_slave_0: Caught tx_queue_len zero misconfig [ 565.821345][T26828] team_slave_1: entered promiscuous mode [ 565.838373][T26828] team_slave_1: left promiscuous mode [ 565.935153][T26779] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 566.643161][T26857] syzkaller0: entered promiscuous mode [ 566.648838][T26857] syzkaller0: entered allmulticast mode [ 566.969755][T26870] validate_nla: 4 callbacks suppressed [ 566.969771][T26870] netlink: 'syz.8.5712': attribute type 10 has an invalid length. [ 567.098421][ T5840] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 567.112913][ T5840] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 567.121106][ T5840] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 567.148848][ T5840] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 567.156714][ T5840] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 567.387147][T26894] tipc: Started in network mode [ 567.418251][T26894] tipc: Node identity a62f30388861, cluster identity 4711 [ 567.442804][T26894] tipc: Enabled bearer , priority 0 [ 567.483891][T26905] syzkaller0: entered promiscuous mode [ 567.510355][T26905] syzkaller0: entered allmulticast mode [ 567.542914][T26908] __nla_validate_parse: 29 callbacks suppressed [ 567.542930][T26908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5724'. [ 567.560097][T26908] openvswitch: netlink: Missing key (keys=40, expected=80) [ 567.569377][T26908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5724'. [ 567.582818][T26908] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 567.631165][T26894] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5718'. [ 567.679066][T26905] tipc: Resetting bearer [ 567.723775][T26893] tipc: Resetting bearer [ 567.783481][T26893] tipc: Disabling bearer [ 567.802270][T26923] netlink: 576 bytes leftover after parsing attributes in process `syz.1.5725'. [ 567.856783][T26882] chnl_net:caif_netlink_parms(): no params data found [ 568.146991][T26942] netlink: 116 bytes leftover after parsing attributes in process `syz.7.5731'. [ 568.241743][T26951] netlink: 'syz.7.5731': attribute type 25 has an invalid length. [ 568.284864][T26951] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5731'. [ 568.369239][T26882] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.392014][T26882] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.408756][T26882] bridge_slave_0: entered allmulticast mode [ 568.438156][T26882] bridge_slave_0: entered promiscuous mode [ 568.446839][T26962] netlink: 'syz.1.5734': attribute type 75 has an invalid length. [ 568.470177][T26882] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.488927][T26962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5734'. [ 568.498070][T26962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5734'. [ 568.519030][T26882] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.526377][T26882] bridge_slave_1: entered allmulticast mode [ 568.535913][T26882] bridge_slave_1: entered promiscuous mode [ 568.624783][T26882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.653960][T26882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.765982][T26882] team0: Port device team_slave_0 added [ 568.771599][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 568.771625][ C1] lec:lec_tx_timeout: lec0 [ 568.780457][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 568.796277][T26882] team0: Port device team_slave_1 added [ 568.834673][T26882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.845378][T26882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.925809][T26882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.981906][T26882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.992905][T26882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.039195][T26882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.056574][T26988] netlink: 'syz.8.5745': attribute type 12 has an invalid length. [ 569.238983][ T5840] Bluetooth: hci9: command tx timeout [ 569.312697][T26882] hsr_slave_0: entered promiscuous mode [ 569.335783][T26882] hsr_slave_1: entered promiscuous mode [ 569.358497][T26882] debugfs: 'hsr0' already exists in 'hsr' [ 569.365837][T26882] Cannot create hsr debugfs directory [ 569.601002][T27015] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5751'. [ 570.057938][T27034] bond0: Caught tx_queue_len zero misconfig [ 570.161270][T26882] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.173465][T26882] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 570.250419][T27051] netlink: 144 bytes leftover after parsing attributes in process `syz.8.5761'. [ 570.316915][T26882] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.354094][T26882] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 570.451235][T27060] nbd: must specify a device to reconfigure [ 570.472839][T26882] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.492788][T26882] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 570.571235][T26882] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.583612][T26882] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 570.954385][T26882] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 570.980328][T26882] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 570.993091][T27091] netlink: 'syz.7.5772': attribute type 1 has an invalid length. [ 571.032535][T26882] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 571.054439][T26882] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 571.161761][ T5157] block nbd1: Possible stuck request ffff888026a40000: control (read@0,1024B). Runtime 120 seconds [ 571.173005][ T5157] block nbd1: Possible stuck request ffff888026a40200: control (read@1024,1024B). Runtime 120 seconds [ 571.184131][ T5157] block nbd1: Possible stuck request ffff888026a40400: control (read@2048,1024B). Runtime 120 seconds [ 571.195207][ T5157] block nbd1: Possible stuck request ffff888026a40600: control (read@3072,1024B). Runtime 120 seconds [ 571.272951][T27101] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 571.312934][T27101] bond3: entered promiscuous mode [ 571.318447][ T5840] Bluetooth: hci9: command tx timeout [ 571.324964][T27101] bond3: entered allmulticast mode [ 571.331237][T27101] 8021q: adding VLAN 0 to HW filter on device bond3 [ 571.401078][T26882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.466817][T26882] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.502473][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.509651][ T6677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.523711][T27122] syzkaller0: entered promiscuous mode [ 571.546793][T27122] syzkaller0: entered allmulticast mode [ 571.576547][ T6676] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.583716][ T6676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.052351][T27160] bond0: (slave gre0): Error: Device type is different from other slaves [ 572.112970][T26882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.186769][T26882] veth0_vlan: entered promiscuous mode [ 572.204204][T26882] veth1_vlan: entered promiscuous mode [ 572.278800][T26882] veth0_macvtap: entered promiscuous mode [ 572.314224][T26882] veth1_macvtap: entered promiscuous mode [ 572.351811][T26882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.389968][T26882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.426619][ T1148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.444963][ T1148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.470828][ T1148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.481127][ T1148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.620926][T27186] netlink: 'syz.7.5803': attribute type 1 has an invalid length. [ 572.641291][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.666911][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.719632][T27186] 8021q: adding VLAN 0 to HW filter on device bond4 [ 572.759907][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.780003][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.021490][T27212] __nla_validate_parse: 13 callbacks suppressed [ 573.021509][T27212] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5808'. [ 573.071743][T27212] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5808'. [ 573.107788][T27212] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5808'. [ 573.177019][T27218] syzkaller0: entered promiscuous mode [ 573.183097][T27218] syzkaller0: entered allmulticast mode [ 573.236021][T27222] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5811'. [ 573.264371][T27225] netlink: 'syz.1.5812': attribute type 1 has an invalid length. [ 573.332024][T27228] netlink: 'syz.7.5811': attribute type 1 has an invalid length. [ 573.385403][T27232] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5813'. [ 573.398104][ T5840] Bluetooth: hci9: command tx timeout [ 573.410926][T27228] syzkaller0: entered promiscuous mode [ 573.416653][T27228] syzkaller0: entered allmulticast mode [ 573.527501][T27239] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5816'. [ 573.551243][T27243] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 573.797480][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 573.805512][ C1] lec:lec_tx_timeout: lec0 [ 573.810215][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 574.001859][T27270] syzkaller1: entered promiscuous mode [ 574.008205][T27270] syzkaller1: entered allmulticast mode [ 574.171868][T27272] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5825'. [ 575.479915][ T5840] Bluetooth: hci9: command tx timeout [ 575.837552][T27295] netlink: 'syz.1.5832': attribute type 3 has an invalid length. [ 575.845540][T27295] netlink: 'syz.1.5832': attribute type 1 has an invalid length. [ 575.861323][T27295] netlink: 212 bytes leftover after parsing attributes in process `syz.1.5832'. [ 575.887434][T27295] NCSI netlink: No device for ifindex 813332851 [ 576.125298][T27315] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5837'. [ 576.485264][T27335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5843'. [ 576.555016][T27339] netlink: 'syz.1.5844': attribute type 10 has an invalid length. [ 577.591369][ T5192] udevd[5192]: worker [19949] /devices/virtual/block/nbd1 is taking a long time [ 577.862389][T27343] netlink: 'syz.7.5845': attribute type 1 has an invalid length. [ 578.014793][T27361] bridge_slave_1: default FDB implementation only supports local addresses [ 578.056233][T27362] __nla_validate_parse: 2 callbacks suppressed [ 578.056249][T27362] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.5849'. [ 578.109622][T27362] bridge_slave_1: default FDB implementation only supports local addresses [ 578.281745][T27375] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 578.319645][T27379] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5857'. [ 578.355653][T27381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.488619][T27390] veth0: entered promiscuous mode [ 578.501763][T27383] IPv6: sit1: Disabled Multicast RS [ 578.527652][T27390] sctp: [Deprecated]: syz.7.5861 (pid 27390) Use of int in maxseg socket option. [ 578.527652][T27390] Use struct sctp_assoc_value instead [ 578.817289][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 578.825357][ C1] lec:lec_tx_timeout: lec0 [ 578.830044][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 578.947852][T27404] netlink: 'syz.1.5864': attribute type 13 has an invalid length. [ 579.509360][T27387] veth0: left promiscuous mode [ 579.586710][T27421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5870'. [ 579.674096][T27428] netlink: 'syz.3.5871': attribute type 1 has an invalid length. [ 579.684411][T27430] netlink: 'syz.7.5869': attribute type 16 has an invalid length. [ 579.696022][T27430] netlink: 'syz.7.5869': attribute type 17 has an invalid length. [ 579.713427][T27428] netlink: 'syz.3.5871': attribute type 2 has an invalid length. [ 579.723734][T27430] lo: left promiscuous mode [ 579.731938][T27430] gre0: left allmulticast mode [ 579.732935][T27429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5871'. [ 579.741530][T27430] ip6tnl0: left promiscuous mode [ 579.755340][T27430] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.762550][T27430] bridge0: port 1(bridge_slave_0) entered listening state [ 579.782055][T27430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 579.787764][T27428] netlink: 'syz.3.5871': attribute type 2 has an invalid length. [ 579.827109][T27428] netlink: 'syz.3.5871': attribute type 1 has an invalid length. [ 579.861814][T27428] netlink: 'syz.3.5871': attribute type 2 has an invalid length. [ 579.870207][T27428] netlink: 'syz.3.5871': attribute type 1 has an invalid length. [ 579.941771][T27444] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5875'. [ 579.960766][T27445] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5875'. [ 579.995221][T27445] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5875'. [ 580.012396][T27445] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5875'. [ 580.039458][T27445] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5875'. [ 580.075753][T27445] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5875'. [ 580.194503][T27441] delete_channel: no stack [ 580.200758][T27441] delete_channel: no stack [ 580.205331][T27441] delete_channel: no stack [ 580.210539][T27441] delete_channel: no stack [ 580.222074][T27441] delete_channel: no stack [ 580.226644][T27441] delete_channel: no stack [ 580.231666][T27441] delete_channel: no stack [ 580.236222][T27441] delete_channel: no stack [ 580.244450][T27441] delete_channel: no stack [ 580.254592][T27441] delete_channel: no stack [ 580.264896][T27441] delete_channel: no stack [ 580.309217][T27441] delete_channel: no stack [ 580.313828][T27441] delete_channel: no stack [ 580.334229][T27441] delete_channel: no stack [ 580.349593][T27441] delete_channel: no stack [ 580.428607][T27441] delete_channel: no stack [ 580.433230][T27441] delete_channel: no stack [ 580.457550][T27441] delete_channel: no stack [ 580.463992][T27441] delete_channel: no stack [ 580.470223][T27441] delete_channel: no stack [ 580.479665][T27441] delete_channel: no stack [ 580.484273][T27441] delete_channel: no stack [ 580.494881][T27441] delete_channel: no stack [ 580.518315][T27441] delete_channel: no stack [ 580.524130][T27441] delete_channel: no stack [ 580.547812][T27441] delete_channel: no stack [ 580.552643][T27441] delete_channel: no stack [ 580.566763][T27441] delete_channel: no stack [ 580.576529][T27441] delete_channel: no stack [ 580.584375][T27441] delete_channel: no stack [ 580.600454][T27441] delete_channel: no stack [ 580.615214][T27441] delete_channel: no stack [ 580.654770][T27441] delete_channel: no stack [ 580.685290][T27499] hsr_slave_0: left promiscuous mode [ 580.694952][T27499] hsr_slave_1: left promiscuous mode [ 582.456777][T27600] x_tables: duplicate underflow at hook 3 [ 582.467796][T27600] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 582.616855][T27606] sctp: [Deprecated]: syz.7.5926 (pid 27606) Use of int in maxseg socket option. [ 582.616855][T27606] Use struct sctp_assoc_value instead [ 582.770503][T27613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 582.942212][T27623] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci9/hci9:200/input5 [ 583.020241][T27626] mac80211_hwsim hwsim70 wlan1: Caught tx_queue_len zero misconfig [ 583.509002][T27646] validate_nla: 6 callbacks suppressed [ 583.509018][T27646] netlink: 'syz.6.5938': attribute type 12 has an invalid length. [ 583.572022][T27659] __nla_validate_parse: 39 callbacks suppressed [ 583.572042][T27659] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5941'. [ 583.596214][T27657] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.616403][T27659] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5941'. [ 583.708147][T27657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.801985][T27657] veth1_vlan: left allmulticast mode [ 583.823536][ T993] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.844403][ T993] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.853331][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 583.853349][ C1] lec:lec_tx_timeout: lec0 [ 583.861454][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 583.891258][ T993] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.918211][ T993] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.370074][T27701] netlink: 'syz.3.5951': attribute type 12 has an invalid length. [ 584.378550][T27701] netlink: 'syz.3.5951': attribute type 29 has an invalid length. [ 584.388140][T27701] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5951'. [ 584.398904][T27701] netlink: 59 bytes leftover after parsing attributes in process `syz.3.5951'. [ 584.585003][T27713] netlink: 'syz.1.5954': attribute type 21 has an invalid length. [ 584.594952][T27713] ip6tnl0: Caught tx_queue_len zero misconfig [ 585.746513][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 585.755659][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 585.763483][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 585.773392][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 585.781772][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 585.907451][T27720] chnl_net:caif_netlink_parms(): no params data found [ 585.971639][T27720] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.978877][T27720] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.986074][T27720] bridge_slave_0: entered allmulticast mode [ 585.993659][T27720] bridge_slave_0: entered promiscuous mode [ 586.001328][T27720] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.008583][T27720] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.015722][T27720] bridge_slave_1: entered allmulticast mode [ 586.023289][T27720] bridge_slave_1: entered promiscuous mode [ 586.051439][T27720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.063929][T27720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.090741][T27720] team0: Port device team_slave_0 added [ 586.098426][T27720] team0: Port device team_slave_1 added [ 586.122076][T27720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.129340][T27720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.156927][T27720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.170324][T27720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.177505][T27720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.204977][T27720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.243415][T27720] hsr_slave_0: entered promiscuous mode [ 586.249751][T27720] hsr_slave_1: entered promiscuous mode [ 586.255906][T27720] debugfs: 'hsr0' already exists in 'hsr' [ 586.263027][T27720] Cannot create hsr debugfs directory [ 586.976102][T27668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 587.017980][T27720] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 587.063805][T27720] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 587.129001][T27720] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 587.201788][T27720] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 587.434849][T27762] bond0: entered allmulticast mode [ 587.527621][T27770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5965'. [ 587.547529][T27770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5965'. [ 587.604991][T27770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5965'. [ 587.664573][T27720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.680900][T27777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5966'. [ 587.723088][T27729] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 587.805613][T27720] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.817124][T27785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5968'. [ 587.841890][ T6676] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.849071][ T6676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.872263][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.879448][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.897132][ T5840] Bluetooth: hci0: command tx timeout [ 588.014887][T27794] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5971'. [ 588.213809][T27720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.597083][T27819] __nla_validate_parse: 1 callbacks suppressed [ 588.597103][T27819] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5976'. [ 588.867283][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 588.875392][ C1] lec:lec_tx_timeout: lec0 [ 588.881432][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 588.895610][T27720] veth0_vlan: entered promiscuous mode [ 588.933527][T27720] veth1_vlan: entered promiscuous mode [ 588.996413][T27720] veth0_macvtap: entered promiscuous mode [ 589.021189][T27850] netlink: 64985 bytes leftover after parsing attributes in process `syz.6.5984'. [ 589.211065][T27855] netlink: 'syz.7.5987': attribute type 1 has an invalid length. [ 589.219407][T27720] veth1_macvtap: entered promiscuous mode [ 589.287331][T27720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.309098][T27720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.342580][T27864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5989'. [ 589.366299][ T6677] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.392577][ T6677] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.425908][ T6677] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.446728][ T6677] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.690465][T27877] syzkaller0: entered promiscuous mode [ 589.695982][T27877] syzkaller0: entered allmulticast mode [ 589.714966][ T6676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.728370][ T6676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.742463][T27889] sctp: [Deprecated]: syz.7.5995 (pid 27889) Use of int in max_burst socket option. [ 589.742463][T27889] Use struct sctp_assoc_value instead [ 589.933919][T27898] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5997'. [ 589.957622][ T5840] Bluetooth: hci0: command tx timeout [ 590.224764][T27911] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6002'. [ 591.499558][ T6676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.527371][ T6676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.575348][T27918] x_tables: duplicate underflow at hook 2 [ 591.623702][T27923] netlink: 'syz.3.6006': attribute type 10 has an invalid length. [ 591.665138][T27925] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6007'. [ 591.667670][T27923] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 591.688594][T27919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.747168][T27925] bond9: option resend_igmp: invalid value (32767) [ 591.755232][T27925] bond9: option resend_igmp: allowed values 0 - 255 [ 591.779158][T27925] bond9 (unregistering): Released all slaves [ 591.952885][T27939] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6010'. [ 591.975960][T27939] geneve3: entered promiscuous mode [ 592.038450][ T5840] Bluetooth: hci0: command tx timeout [ 592.248112][T27946] veth3: entered allmulticast mode [ 592.289740][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 592.303552][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 592.311970][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 592.337496][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 592.380164][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 592.392843][T27956] veth1_macvtap: left promiscuous mode [ 592.399356][T27956] macsec0: entered promiscuous mode [ 592.405067][T27956] macsec0: entered allmulticast mode [ 592.420137][T27956] Bluetooth: MGMT ver 1.23 [ 592.456223][T27956] veth1_macvtap: entered promiscuous mode [ 592.476599][T27965] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6017'. [ 592.486120][T27956] veth1_macvtap: entered allmulticast mode [ 592.494002][T27956] macsec0: left promiscuous mode [ 592.501906][T27956] macsec0: left allmulticast mode [ 592.510294][T27956] veth1_macvtap: left allmulticast mode [ 592.633106][T27971] netlink: 'syz.9.6020': attribute type 8 has an invalid length. [ 592.645054][T27965] netlink: 'syz.6.6017': attribute type 1 has an invalid length. [ 592.658085][T27971] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6020'. [ 592.775987][T27983] delete_channel: no stack [ 592.867838][T27987] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6025'. [ 593.143821][T27952] chnl_net:caif_netlink_parms(): no params data found [ 593.402367][T27952] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.409738][T27952] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.417143][T27952] bridge_slave_0: entered allmulticast mode [ 593.426390][T27952] bridge_slave_0: entered promiscuous mode [ 593.437149][T27952] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.447763][T27952] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.455053][T27952] bridge_slave_1: entered allmulticast mode [ 593.463651][T27952] bridge_slave_1: entered promiscuous mode [ 593.510485][T27952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.522542][T27952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.553618][T27952] team0: Port device team_slave_0 added [ 593.574526][T27952] team0: Port device team_slave_1 added [ 593.623322][T27952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.630679][T27952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.659342][T27952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.675490][T27952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.682693][T27952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.709568][T27952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.782438][T27952] hsr_slave_0: entered promiscuous mode [ 593.788998][T27952] hsr_slave_1: entered promiscuous mode [ 593.798513][T27952] debugfs: 'hsr0' already exists in 'hsr' [ 593.804731][T27952] Cannot create hsr debugfs directory [ 593.897278][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 593.905291][ C1] lec:lec_tx_timeout: lec0 [ 593.909896][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 594.081100][T28050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6040'. [ 594.090236][T28050] openvswitch: netlink: nsh attr 255 is out of range max 3 [ 594.127869][ T5840] Bluetooth: hci0: command tx timeout [ 594.437464][ T5840] Bluetooth: hci10: command tx timeout [ 596.058036][ T5840] Bluetooth: hci7: link tx timeout [ 596.063192][ T5840] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 596.266929][T28017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 596.382979][T27952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 596.429753][T27952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 596.439195][T28055] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6042'. [ 596.476178][T27952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 596.499043][T27952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 596.518737][ T51] Bluetooth: hci10: command tx timeout [ 596.527151][T28064] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6042'. [ 596.594892][T28064] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.616346][T28075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6046'. [ 596.633468][T28064] bridge_slave_0 (unregistering): left allmulticast mode [ 596.662960][T28064] bridge_slave_0 (unregistering): left promiscuous mode [ 596.697499][T28064] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.736041][T28055] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6042'. [ 596.811473][T28054] delete_channel: no stack [ 596.815619][T28079] syzkaller0: entered promiscuous mode [ 596.822461][T28079] syzkaller0: entered allmulticast mode [ 596.959138][T27952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.959827][T28099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.991568][T27952] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.011836][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.019013][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.045225][T28106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6052'. [ 597.076068][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.083244][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.165696][T28099] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 597.350475][T28119] netlink: 'syz.9.6055': attribute type 10 has an invalid length. [ 597.378547][T28119] team0: Device ipvlan1 failed to register rx_handler [ 597.454629][T27952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.518907][T27952] veth0_vlan: entered promiscuous mode [ 597.556597][T27952] veth1_vlan: entered promiscuous mode [ 597.601431][T27952] veth0_macvtap: entered promiscuous mode [ 597.612534][T27952] veth1_macvtap: entered promiscuous mode [ 597.632243][T27952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.647765][T27952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.663085][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.673839][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.685033][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.694314][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.117390][ T51] Bluetooth: hci7: command 0x0405 tx timeout [ 598.597776][ T5840] Bluetooth: hci10: command tx timeout [ 598.927460][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 598.935525][ C1] lec:lec_tx_timeout: lec0 [ 598.940470][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 599.952703][T28100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 599.966061][T28117] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6054'. [ 600.144459][T28216] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6059'. [ 600.171303][T28219] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6058'. [ 600.185575][ T6676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.206543][ T6676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.326883][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.374559][T28240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 600.383660][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.664533][T28252] netlink: 'syz.1.6009': attribute type 2 has an invalid length. [ 600.709159][ T5840] Bluetooth: hci10: command tx timeout [ 600.728544][T28252] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6009'. [ 600.765406][T28252] nbd: socks must be embedded in a SOCK_ITEM attr [ 600.774477][T28261] tipc: Started in network mode [ 600.793324][T28261] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 600.846858][T28261] tipc: Enabled bearer , priority 10 [ 600.861822][T28270] FAULT_INJECTION: forcing a failure. [ 600.861822][T28270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.925437][T28270] CPU: 0 UID: 0 PID: 28270 Comm: syz.3.6068 Not tainted syzkaller #0 PREEMPT(full) [ 600.925468][T28270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 600.925482][T28270] Call Trace: [ 600.925489][T28270] [ 600.925496][T28270] dump_stack_lvl+0xe8/0x150 [ 600.925525][T28270] should_fail_ex+0x412/0x560 [ 600.925627][T28270] _copy_from_user+0x2d/0xb0 [ 600.925702][T28270] ___sys_sendmsg+0x1c6/0x360 [ 600.925763][T28270] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.925818][T28270] ? __fget_files+0x2a/0x420 [ 600.925840][T28270] ? __fget_files+0x3a0/0x420 [ 600.925871][T28270] __x64_sys_sendmsg+0x1bd/0x2a0 [ 600.925897][T28270] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 600.925929][T28270] ? __pfx_ksys_write+0x10/0x10 [ 600.925954][T28270] do_syscall_64+0x14d/0xf80 [ 600.926043][T28270] ? trace_irq_disable+0x3b/0x150 [ 600.926066][T28270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.926084][T28270] ? clear_bhb_loop+0x40/0x90 [ 600.926104][T28270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.926126][T28270] RIP: 0033:0x7f8c0cd9c629 [ 600.926143][T28270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.926157][T28270] RSP: 002b:00007f8c0db7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.926175][T28270] RAX: ffffffffffffffda RBX: 00007f8c0d016090 RCX: 00007f8c0cd9c629 [ 600.926188][T28270] RDX: 0000000020000040 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 600.926199][T28270] RBP: 00007f8c0db7a090 R08: 0000000000000000 R09: 0000000000000000 [ 600.926209][T28270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.926218][T28270] R13: 00007f8c0d016128 R14: 00007f8c0d016090 R15: 00007fff8662abd8 [ 600.926247][T28270] [ 601.250121][ T5157] block nbd1: Possible stuck request ffff888026a40000: control (read@0,1024B). Runtime 150 seconds [ 601.261362][ T5157] block nbd1: Possible stuck request ffff888026a40200: control (read@1024,1024B). Runtime 150 seconds [ 601.272945][ T5157] block nbd1: Possible stuck request ffff888026a40400: control (read@2048,1024B). Runtime 150 seconds [ 601.284190][ T5157] block nbd1: Possible stuck request ffff888026a40600: control (read@3072,1024B). Runtime 150 seconds [ 601.296230][T28291] netlink: 'syz.1.6070': attribute type 3 has an invalid length. [ 601.324736][T28291] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6070'. [ 601.493575][T28299] x_tables: duplicate underflow at hook 4 [ 601.528606][T28299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 601.535841][T28299] IPv6: NLM_F_CREATE should be set when creating new route [ 601.568279][T28299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6076'. [ 601.853511][T28326] FAULT_INJECTION: forcing a failure. [ 601.853511][T28326] name failslab, interval 1, probability 0, space 0, times 0 [ 601.905111][T28326] CPU: 0 UID: 0 PID: 28326 Comm: syz.1.6084 Not tainted syzkaller #0 PREEMPT(full) [ 601.905136][T28326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 601.905166][T28326] Call Trace: [ 601.905173][T28326] [ 601.905180][T28326] dump_stack_lvl+0xe8/0x150 [ 601.905209][T28326] should_fail_ex+0x412/0x560 [ 601.905235][T28326] should_failslab+0xa8/0x100 [ 601.905257][T28326] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 601.905284][T28326] ? __alloc_skb+0x186/0x7d0 [ 601.905416][T28326] ? __alloc_skb+0x1d0/0x7d0 [ 601.905434][T28326] ? __local_bh_enable_ip+0xd0/0x130 [ 601.905459][T28326] __alloc_skb+0x1d0/0x7d0 [ 601.905485][T28326] netlink_sendmsg+0x5d4/0xb40 [ 601.905541][T28326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.905564][T28326] ? aa_sock_msg_perm+0xf1/0x1b0 [ 601.905639][T28326] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 601.905659][T28326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.905677][T28326] ____sys_sendmsg+0xa68/0xad0 [ 601.905710][T28326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.905742][T28326] ? import_iovec+0x73/0xa0 [ 601.905768][T28326] ___sys_sendmsg+0x2a5/0x360 [ 601.905797][T28326] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.905854][T28326] ? __fget_files+0x2a/0x420 [ 601.905876][T28326] ? __fget_files+0x3a0/0x420 [ 601.905908][T28326] __x64_sys_sendmsg+0x1bd/0x2a0 [ 601.905935][T28326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 601.905964][T28326] ? __pfx_ksys_write+0x10/0x10 [ 601.905992][T28326] do_syscall_64+0x14d/0xf80 [ 601.906016][T28326] ? trace_irq_disable+0x3b/0x150 [ 601.906039][T28326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.906057][T28326] ? clear_bhb_loop+0x40/0x90 [ 601.906078][T28326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.906096][T28326] RIP: 0033:0x7f5ad459c629 [ 601.906112][T28326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.906126][T28326] RSP: 002b:00007f5ad53a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.906151][T28326] RAX: ffffffffffffffda RBX: 00007f5ad4815fa0 RCX: 00007f5ad459c629 [ 601.906163][T28326] RDX: 0000000020000040 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 601.906175][T28326] RBP: 00007f5ad53a5090 R08: 0000000000000000 R09: 0000000000000000 [ 601.906185][T28326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.906195][T28326] R13: 00007f5ad4816038 R14: 00007f5ad4815fa0 R15: 00007ffd53d16358 [ 601.906224][T28326] [ 602.147345][ T5898] tipc: Node number set to 4269801492 [ 602.164024][T28331] netlink: 'syz.7.6082': attribute type 29 has an invalid length. [ 602.174875][T28331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6082'. [ 602.286173][T28331] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 602.442911][T28331] bond5 (unregistering): Released all slaves [ 602.462533][T28341] netlink: 'syz.9.6085': attribute type 1 has an invalid length. [ 602.641214][T28359] netlink: 'syz.6.6091': attribute type 17 has an invalid length. [ 602.657018][T28358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6090'. [ 602.667792][T28359] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6091'. [ 602.683923][T28359] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6091'. [ 602.761672][T28359] gretap0: entered promiscuous mode [ 602.802714][T28359] gretap0: left promiscuous mode [ 603.332236][T28420] FAULT_INJECTION: forcing a failure. [ 603.332236][T28420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.346644][T28409] x_tables: duplicate underflow at hook 3 [ 603.349961][T28420] CPU: 1 UID: 0 PID: 28420 Comm: syz.7.6108 Not tainted syzkaller #0 PREEMPT(full) [ 603.349984][T28420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 603.349994][T28420] Call Trace: [ 603.350001][T28420] [ 603.350008][T28420] dump_stack_lvl+0xe8/0x150 [ 603.350035][T28420] should_fail_ex+0x412/0x560 [ 603.350059][T28420] _copy_from_iter+0x1d3/0x1670 [ 603.350084][T28420] ? rcu_is_watching+0x15/0xb0 [ 603.350111][T28420] ? __pfx__copy_from_iter+0x10/0x10 [ 603.350137][T28420] ? netlink_sendmsg+0x650/0xb40 [ 603.350156][T28420] ? skb_put+0x11b/0x210 [ 603.350180][T28420] netlink_sendmsg+0x6c0/0xb40 [ 603.350213][T28420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.350235][T28420] ? aa_sock_msg_perm+0xf1/0x1b0 [ 603.350256][T28420] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 603.350275][T28420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.350293][T28420] ____sys_sendmsg+0xa68/0xad0 [ 603.350323][T28420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.350353][T28420] ? import_iovec+0x73/0xa0 [ 603.350378][T28420] ___sys_sendmsg+0x2a5/0x360 [ 603.350405][T28420] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.350458][T28420] ? __fget_files+0x2a/0x420 [ 603.350479][T28420] ? __fget_files+0x3a0/0x420 [ 603.350509][T28420] __x64_sys_sendmsg+0x1bd/0x2a0 [ 603.350533][T28420] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 603.350564][T28420] ? __pfx_ksys_write+0x10/0x10 [ 603.350591][T28420] do_syscall_64+0x14d/0xf80 [ 603.350613][T28420] ? trace_irq_disable+0x3b/0x150 [ 603.350635][T28420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.350651][T28420] ? clear_bhb_loop+0x40/0x90 [ 603.350671][T28420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.350687][T28420] RIP: 0033:0x7f5df6f9c629 [ 603.350703][T28420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.350716][T28420] RSP: 002b:00007f5df7e2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.350734][T28420] RAX: ffffffffffffffda RBX: 00007f5df7216090 RCX: 00007f5df6f9c629 [ 603.350746][T28420] RDX: 0000000020000040 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 603.350757][T28420] RBP: 00007f5df7e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 603.350767][T28420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.350777][T28420] R13: 00007f5df7216128 R14: 00007f5df7216090 R15: 00007ffd446c73a8 [ 603.350804][T28420] [ 603.900905][T28448] warn_alloc: 1 callbacks suppressed [ 603.900922][T28448] syz.3.6118: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 603.929590][T28448] CPU: 1 UID: 0 PID: 28448 Comm: syz.3.6118 Not tainted syzkaller #0 PREEMPT(full) [ 603.929615][T28448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 603.929627][T28448] Call Trace: [ 603.929634][T28448] [ 603.929642][T28448] dump_stack_lvl+0xe8/0x150 [ 603.929672][T28448] warn_alloc+0x249/0x340 [ 603.929692][T28448] ? stack_trace_save+0xa9/0x100 [ 603.929715][T28448] ? __pfx_warn_alloc+0x10/0x10 [ 603.929742][T28448] ? kasan_save_track+0x4f/0x80 [ 603.929760][T28448] ? kasan_save_track+0x3e/0x80 [ 603.929776][T28448] ? __kasan_kmalloc+0x93/0xb0 [ 603.929794][T28448] ? __kmalloc_cache_noprof+0x31c/0x660 [ 603.929811][T28448] ? xskq_create+0x56/0x170 [ 603.929920][T28448] ? xsk_setsockopt+0x54c/0x990 [ 603.929938][T28448] ? do_sock_setsockopt+0x17c/0x1b0 [ 603.929960][T28448] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 603.929984][T28448] ? do_syscall_64+0x14d/0xf80 [ 603.930016][T28448] __vmalloc_node_range_noprof+0x132/0x1730 [ 603.930066][T28448] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 603.930092][T28448] ? __kasan_kmalloc+0x93/0xb0 [ 603.930118][T28448] vmalloc_user_noprof+0xad/0xe0 [ 603.930145][T28448] ? xskq_create+0xbf/0x170 [ 603.930171][T28448] xskq_create+0xbf/0x170 [ 603.930199][T28448] xsk_init_queue+0x8a/0xe0 [ 603.930226][T28448] xsk_setsockopt+0x54c/0x990 [ 603.930252][T28448] ? __pfx_xsk_setsockopt+0x10/0x10 [ 603.930275][T28448] ? __pfx_aa_sk_perm+0x10/0x10 [ 603.930299][T28448] ? aa_sock_opt_perm+0xff/0x1a0 [ 603.930323][T28448] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 603.930343][T28448] ? __pfx_xsk_setsockopt+0x10/0x10 [ 603.930369][T28448] do_sock_setsockopt+0x17c/0x1b0 [ 603.930400][T28448] __x64_sys_setsockopt+0x13d/0x1b0 [ 603.930432][T28448] do_syscall_64+0x14d/0xf80 [ 603.930458][T28448] ? trace_irq_disable+0x3b/0x150 [ 603.930485][T28448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.930504][T28448] ? clear_bhb_loop+0x40/0x90 [ 603.930526][T28448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.930544][T28448] RIP: 0033:0x7f8c0cd9c629 [ 603.930561][T28448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.930578][T28448] RSP: 002b:00007f8c0db9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 603.930598][T28448] RAX: ffffffffffffffda RBX: 00007f8c0d015fa0 RCX: 00007f8c0cd9c629 [ 603.930613][T28448] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 603.930625][T28448] RBP: 00007f8c0ce32b39 R08: 0000000000000004 R09: 0000000000000000 [ 603.930636][T28448] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.930647][T28448] R13: 00007f8c0d016038 R14: 00007f8c0d015fa0 R15: 00007fff8662abd8 [ 603.930678][T28448] [ 603.930693][T28448] Mem-Info: [ 603.950402][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 603.950431][ C1] lec:lec_tx_timeout: lec0 [ 604.253029][T28448] active_anon:8153 inactive_anon:0 isolated_anon:0 [ 604.253029][T28448] active_file:3148 inactive_file:40150 isolated_file:0 [ 604.253029][T28448] unevictable:768 dirty:108 writeback:0 [ 604.253029][T28448] slab_reclaimable:15227 slab_unreclaimable:146558 [ 604.253029][T28448] mapped:55218 shmem:1371 pagetables:1737 [ 604.253029][T28448] sec_pagetables:0 bounce:0 [ 604.253029][T28448] kernel_misc_reclaimable:0 [ 604.253029][T28448] free:1208090 free_pcp:10652 free_cma:0 [ 604.304942][T28448] Node 0 active_anon:32612kB inactive_anon:0kB active_file:12592kB inactive_file:160400kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:220872kB dirty:428kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18192kB pagetables:6520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 604.342461][T28448] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 604.373911][T28469] netlink: 'syz.9.6121': attribute type 1 has an invalid length. [ 604.374492][T28448] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 604.459734][T28448] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 604.474807][T28448] Node 0 DMA32 free:878608kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32612kB inactive_anon:0kB active_file:12592kB inactive_file:160400kB unevictable:1536kB writepending:428kB zspages:0kB present:3129332kB managed:2552852kB mlocked:0kB bounce:0kB free_pcp:35436kB local_pcp:14420kB free_cma:0kB [ 604.523160][T28448] lowmem_reserve[]: 0 0 0 0 0 [ 604.537367][T28448] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 604.587028][T28448] lowmem_reserve[]: 0 0 0 0 0 [ 604.601197][T28448] Node 1 Normal free:3938392kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7304kB local_pcp:0kB free_cma:0kB [ 604.654615][T28448] lowmem_reserve[]: 0 0 0 0 0 [ 604.695233][T28448] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 604.724186][T28448] Node 0 DMA32: 6558*4kB (UME) 6488*8kB (UME) 3415*16kB (UME) 117*32kB (UM) 40*64kB (UME) 21*128kB (UME) 217*256kB (U) 201*512kB (UM) 203*1024kB (UM) 85*2048kB (U) 48*4096kB (UM) = 878792kB [ 604.746939][T28448] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 604.761887][T28448] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 5*16kB (ME) 7*32kB (UME) 4*64kB (UM) 4*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 959*4096kB (M) = 3938392kB [ 604.779914][T28448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.807394][T28448] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 604.835727][T28448] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.877306][T28448] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 604.901070][T28448] 47749 total pagecache pages [ 604.905801][T28448] 0 pages in swap cache [ 604.928834][T28448] Free swap = 124996kB [ 604.939444][T28448] Total swap = 124996kB [ 604.951270][T28448] 2097051 pages RAM [ 604.960607][T28448] 0 pages HighMem/MovableOnly [ 604.975516][T28448] 427002 pages reserved [ 604.983536][T28448] 0 pages cma reserved [ 605.443154][T28494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.686552][T28523] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 605.714525][T28523] bond1 (unregistering): Released all slaves [ 605.873112][T28518] __nla_validate_parse: 17 callbacks suppressed [ 605.873132][T28518] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6140'. [ 605.878510][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 606.146081][T28536] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 606.813866][T28581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.191110][T28600] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6164'. [ 607.231554][T28602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6166'. [ 607.242465][T28606] netlink: 'syz.9.6168': attribute type 4 has an invalid length. [ 607.323813][T28613] netlink: 'syz.9.6168': attribute type 4 has an invalid length. [ 607.385616][T28606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.449393][T28617] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6170'. [ 607.551379][T28623] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6173'. [ 607.606970][T28627] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6174'. [ 607.610464][T28629] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6176'. [ 607.621655][T28630] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6173'. [ 607.648111][T28627] netlink: 'syz.6.6174': attribute type 7 has an invalid length. [ 607.674541][T28627] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6174'. [ 607.714015][T28632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6177'. [ 607.798530][T28627] gretap0: entered promiscuous mode [ 607.825331][T28627] gretap0: left promiscuous mode [ 607.873800][T28637] netlink: 'syz.3.6180': attribute type 29 has an invalid length. [ 607.895010][T28637] netlink: 'syz.3.6180': attribute type 29 has an invalid length. [ 608.295310][T28665] syzkaller1: entered promiscuous mode [ 608.310255][T28665] syzkaller1: entered allmulticast mode [ 608.322388][T28683] syzkaller1: left promiscuous mode [ 608.332287][T28683] syzkaller1: left allmulticast mode [ 608.421042][T28686] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 608.569783][T28702] syzkaller0: entered promiscuous mode [ 608.575559][T28702] syzkaller0: entered allmulticast mode [ 608.888078][T28718] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 609.054584][T28720] syzkaller0: entered promiscuous mode [ 609.072897][T28720] syzkaller0: entered allmulticast mode [ 609.226978][T28730] bond2: entered promiscuous mode [ 609.232123][T28730] bond2: entered allmulticast mode [ 609.241311][T28736] openvswitch: netlink: Tunnel attr 16 has unexpected len 1099 expected 0 [ 609.256487][T28730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 609.294004][T28735] macvlan3: entered promiscuous mode [ 609.308429][T28735] macvlan3: entered allmulticast mode [ 609.330741][T28735] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 609.786050][T28748] batadv_slave_0: entered promiscuous mode [ 609.843707][T28747] batadv_slave_0: left promiscuous mode [ 610.115826][T28772] netlink: 'syz.9.6223': attribute type 23 has an invalid length. [ 610.261171][T28776] veth0: entered promiscuous mode [ 610.799113][T28781] veth0: left promiscuous mode [ 610.937960][T28821] netlink: 'syz.7.6240': attribute type 1 has an invalid length. [ 610.954925][T28833] gre0: entered promiscuous mode [ 610.960727][T28833] gre0: entered allmulticast mode [ 610.967190][T28821] __nla_validate_parse: 15 callbacks suppressed [ 610.992751][T28821] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6240'. [ 611.022658][T28821] netlink: 658 bytes leftover after parsing attributes in process `syz.7.6240'. [ 611.033664][T28821] netlink: 1 bytes leftover after parsing attributes in process `syz.7.6240'. [ 611.244038][T28852] netlink: 120 bytes leftover after parsing attributes in process `syz.7.6250'. [ 611.247953][T28855] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6251'. [ 611.255937][T28852] netlink: 'syz.7.6250': attribute type 1 has an invalid length. [ 611.275019][T28852] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6250'. [ 611.329968][T28854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 611.402808][T28856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6248'. [ 611.718686][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 611.724944][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 611.770102][T28880] syzkaller0: entered promiscuous mode [ 611.775585][T28880] syzkaller0: entered allmulticast mode [ 611.794529][T28880] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6256'. [ 612.279159][T28922] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6268'. [ 612.388009][T28937] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6270'. [ 612.402712][T28937] gtp0: entered promiscuous mode [ 612.409463][T28937] gtp0: entered allmulticast mode [ 612.438715][T28938] bond0: (slave gre0): Error: Device type is different from other slaves [ 615.112955][T28904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 615.134673][T28929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 615.556452][T28967] geneve2: entered promiscuous mode [ 615.680470][T28989] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 615.945123][T29001] bond0: (slave gre0): Error: Device type is different from other slaves [ 616.144121][T29020] netlink: 'syz.6.6296': attribute type 1 has an invalid length. [ 616.152395][T29015] netlink: 'syz.9.6294': attribute type 3 has an invalid length. [ 616.164961][T29015] netlink: 'syz.9.6294': attribute type 1 has an invalid length. [ 616.172993][T29015] __nla_validate_parse: 8 callbacks suppressed [ 616.173007][T29015] netlink: 204 bytes leftover after parsing attributes in process `syz.9.6294'. [ 616.365189][T29020] bond3: (slave bridge5): Enslaving as a backup interface with an up link [ 616.386685][T29039] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6299'. [ 616.455584][T29020] bond3: (slave bridge6): Enslaving as a backup interface with a down link [ 616.542621][T29020] bond3: (slave bridge7): Enslaving as a backup interface with a down link [ 616.565724][T29033] netlink: 11 bytes leftover after parsing attributes in process `syz.7.6298'. [ 616.579374][T29033] netlink: 11 bytes leftover after parsing attributes in process `syz.7.6298'. [ 616.597537][T29046] netlink: 256 bytes leftover after parsing attributes in process `syz.9.6301'. [ 616.651921][T29020] bond3: (slave bridge8): Enslaving as a backup interface with a down link [ 616.726059][T29020] bond3: (slave bridge9): Enslaving as a backup interface with a down link [ 616.748343][T29020] bond3: (slave bridge10): Enslaving as a backup interface with a down link [ 616.819040][T29020] bond3: (slave bridge11): Enslaving as a backup interface with a down link [ 616.899652][T29020] bond3: (slave bridge12): Enslaving as a backup interface with a down link [ 616.948766][T29020] bond3: (slave bridge13): Enslaving as a backup interface with a down link [ 616.972826][T29059] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 617.001034][T29059] team0: Port device batadv1 added [ 617.021182][T29071] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6307'. [ 617.080814][T29020] bond3: (slave bridge14): Enslaving as a backup interface with a down link [ 617.288899][T29067] syzkaller0: entered promiscuous mode [ 617.297413][T29067] syzkaller0: entered allmulticast mode [ 619.172582][ T30] INFO: task syz.0.4247:21592 blocked for more than 143 seconds. [ 619.180712][ T30] Not tainted syzkaller #0 [ 619.185661][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 619.194868][ T30] task:syz.0.4247 state:D stack:25480 pid:21592 tgid:21591 ppid:16658 task_flags:0x400140 flags:0x00080002 [ 619.207070][ T30] Call Trace: [ 619.212185][ T30] [ 619.215121][ T30] __schedule+0x1585/0x5340 [ 619.220096][ T30] ? __pfx___schedule+0x10/0x10 [ 619.224954][ T30] ? schedule+0x90/0x360 [ 619.229266][ T30] schedule+0x164/0x360 [ 619.234769][ T30] schedule_preempt_disabled+0x13/0x30 [ 619.240776][ T30] __mutex_lock+0x7fe/0x1300 [ 619.245514][ T30] ? __mutex_lock+0x5ac/0x1300 [ 619.250389][ T30] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 619.256216][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 619.261372][ T30] ? __nlmsg_put+0xef/0x1b0 [ 619.265897][ T30] ? genlmsg_put+0x137/0x2e0 [ 619.270623][ T30] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 619.276192][ T30] ? kmem_cache_free+0x187/0x630 [ 619.281610][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 619.287826][ T30] ? dev_hard_start_xmit+0x802/0x870 [ 619.293282][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 619.298940][ T30] ? __asan_memcpy+0x40/0x70 [ 619.303603][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 619.309827][ T30] ? __dev_queue_xmit+0x274/0x38a0 [ 619.315008][ T30] genl_rcv_msg+0x61c/0x7a0 [ 619.320858][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.326022][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 619.332187][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 619.338539][ T30] netlink_rcv_skb+0x232/0x4b0 [ 619.343309][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.348490][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.353799][ T30] ? down_read+0x272/0x2e0 [ 619.358411][ T30] ? genl_rcv+0xd/0x40 [ 619.362491][ T30] genl_rcv+0x28/0x40 [ 619.366476][ T30] netlink_unicast+0x80f/0x9b0 [ 619.371334][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 619.376629][ T30] ? netlink_sendmsg+0x650/0xb40 [ 619.381675][ T30] ? skb_put+0x11b/0x210 [ 619.385939][ T30] netlink_sendmsg+0x813/0xb40 [ 619.390957][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.396262][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 619.404196][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 619.409589][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.414879][ T30] ____sys_sendmsg+0xa68/0xad0 [ 619.419722][ T30] ? futex_unqueue+0x211/0x240 [ 619.424502][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.429895][ T30] ? import_iovec+0x73/0xa0 [ 619.434420][ T30] ___sys_sendmsg+0x2a5/0x360 [ 619.440469][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.445695][ T30] ? futex_wait+0x29a/0x380 [ 619.450321][ T30] ? __fget_files+0x2a/0x420 [ 619.454919][ T30] ? __fget_files+0x3a0/0x420 [ 619.459677][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 619.464628][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.470180][ T30] ? rcu_is_watching+0x15/0xb0 [ 619.475048][ T30] do_syscall_64+0x14d/0xf80 [ 619.480187][ T30] ? trace_irq_disable+0x3b/0x150 [ 619.487691][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.493773][ T30] ? clear_bhb_loop+0x40/0x90 [ 619.498781][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.504669][ T30] RIP: 0033:0x7f8d2859c629 [ 619.509153][ T30] RSP: 002b:00007f8d2942d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.517806][ T30] RAX: ffffffffffffffda RBX: 00007f8d28815fa0 RCX: 00007f8d2859c629 [ 619.525795][ T30] RDX: 0000000024048000 RSI: 0000200000000000 RDI: 0000000000000007 [ 619.533871][ T30] RBP: 00007f8d28632b39 R08: 0000000000000000 R09: 0000000000000000 [ 619.543029][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.551072][ T30] R13: 00007f8d28816038 R14: 00007f8d28815fa0 R15: 00007fff15c84608 [ 619.562616][ T30] [ 619.574531][ T30] INFO: task syz.5.4335:21913 blocked for more than 143 seconds. [ 619.582371][ T30] Not tainted syzkaller #0 [ 619.588852][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 619.597771][ T30] task:syz.5.4335 state:D stack:26248 pid:21913 tgid:21909 ppid:16304 task_flags:0x400040 flags:0x00080002 [ 619.609940][ T30] Call Trace: [ 619.613212][ T30] [ 619.616152][ T30] __schedule+0x1585/0x5340 [ 619.620776][ T30] ? __pfx___schedule+0x10/0x10 [ 619.625641][ T30] ? schedule+0x90/0x360 [ 619.629928][ T30] schedule+0x164/0x360 [ 619.634092][ T30] schedule_preempt_disabled+0x13/0x30 [ 619.639698][ T30] __mutex_lock+0x7fe/0x1300 [ 619.645750][ T30] ? __mutex_lock+0x5ac/0x1300 [ 619.650621][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 619.656786][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 619.661883][ T30] ? stack_trace_save+0xa9/0x100 [ 619.666821][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 619.672243][ T30] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 619.678381][ T30] ? kasan_save_track+0x4f/0x80 [ 619.683236][ T30] ? kasan_save_track+0x3e/0x80 [ 619.688421][ T30] ? __kasan_kmalloc+0x93/0xb0 [ 619.693196][ T30] ? __alloc_skb+0x2c1/0x7d0 [ 619.697857][ T30] ? netlink_dump+0x1ef/0xe80 [ 619.702534][ T30] ? __netlink_dump_start+0x5cb/0x7e0 [ 619.707943][ T30] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 619.713846][ T30] ? genl_rcv_msg+0x5e8/0x7a0 [ 619.719630][ T30] ? netlink_rcv_skb+0x232/0x4b0 [ 619.724567][ T30] ? genl_rcv+0x28/0x40 [ 619.728797][ T30] ? netlink_unicast+0x80f/0x9b0 [ 619.733740][ T30] ? netlink_sendmsg+0x813/0xb40 [ 619.738728][ T30] ? ____sys_sendmsg+0xa68/0xad0 [ 619.743672][ T30] ? ___sys_sendmsg+0x2a5/0x360 [ 619.750091][ T30] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 619.755219][ T30] ? do_syscall_64+0x14d/0xf80 [ 619.760121][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.766201][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 619.772802][ T30] ? rcu_is_watching+0x15/0xb0 [ 619.777602][ T30] ? trace_kmalloc+0x2a/0x110 [ 619.782271][ T30] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 619.788911][ T30] genl_dumpit+0x10b/0x1b0 [ 619.793336][ T30] netlink_dump+0x722/0xe80 [ 619.808021][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 619.813089][ T30] ? genl_start+0x499/0x6c0 [ 619.817698][ T30] __netlink_dump_start+0x5cb/0x7e0 [ 619.822907][ T30] genl_family_rcv_msg_dumpit+0x213/0x310 [ 619.829380][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 619.835624][ T30] ? genl_get_cmd+0x4a8/0x930 [ 619.840410][ T30] ? __pfx_genl_start+0x10/0x10 [ 619.845263][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 619.851375][ T30] ? __pfx_genl_done+0x10/0x10 [ 619.856168][ T30] ? __dev_queue_xmit+0x274/0x38a0 [ 619.861407][ T30] genl_rcv_msg+0x5e8/0x7a0 [ 619.865926][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.871012][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 619.877732][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 619.882692][ T30] netlink_rcv_skb+0x232/0x4b0 [ 619.887582][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.892615][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.897960][ T30] ? down_read+0x272/0x2e0 [ 619.902381][ T30] ? genl_rcv+0xd/0x40 [ 619.906444][ T30] genl_rcv+0x28/0x40 [ 619.910453][ T30] netlink_unicast+0x80f/0x9b0 [ 619.915224][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 619.920632][ T30] ? netlink_sendmsg+0x650/0xb40 [ 619.925573][ T30] ? skb_put+0x11b/0x210 [ 619.929878][ T30] netlink_sendmsg+0x813/0xb40 [ 619.934651][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.940204][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 619.945302][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 619.952080][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.957947][ T30] ____sys_sendmsg+0xa68/0xad0 [ 619.962732][ T30] ? futex_unqueue+0x211/0x240 [ 619.967580][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.972892][ T30] ? import_iovec+0x73/0xa0 [ 619.977513][ T30] ___sys_sendmsg+0x2a5/0x360 [ 619.982202][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.987468][ T30] ? futex_wait+0x29a/0x380 [ 619.992011][ T30] ? __fget_files+0x2a/0x420 [ 619.996608][ T30] ? __fget_files+0x3a0/0x420 [ 620.001387][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 620.006318][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 620.011858][ T30] ? rcu_is_watching+0x15/0xb0 [ 620.016636][ T30] do_syscall_64+0x14d/0xf80 [ 620.021249][ T30] ? trace_irq_disable+0x3b/0x150 [ 620.026275][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.032476][ T30] ? clear_bhb_loop+0x40/0x90 [ 620.037162][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.043282][ T30] RIP: 0033:0x7fe2f679c629 [ 620.047970][ T30] RSP: 002b:00007fe2f49cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.057538][ T30] RAX: ffffffffffffffda RBX: 00007fe2f6a16090 RCX: 00007fe2f679c629 [ 620.065519][ T30] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000005 [ 620.073546][ T30] RBP: 00007fe2f6832b39 R08: 0000000000000000 R09: 0000000000000000 [ 620.081697][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.089751][ T30] R13: 00007fe2f6a16128 R14: 00007fe2f6a16090 R15: 00007ffd53758da8 [ 620.097903][ T30] [ 620.101067][ T30] [ 620.101067][ T30] Showing all locks held in the system: [ 620.109001][ T30] 1 lock held by khungtaskd/30: [ 620.114169][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 620.125192][ T30] 3 locks held by kworker/u8:6/993: [ 620.130491][ T30] #0: ffff888031d61148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 620.142180][ T30] #1: ffffc9000447fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 620.156239][ T30] #2: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 620.166123][ T30] 3 locks held by kworker/u8:8/1148: [ 620.171494][ T30] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 620.183250][ T30] #1: ffffc9000496fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 620.194371][ T30] #2: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 620.204210][ T30] 2 locks held by getty/5579: [ 620.208980][ T30] #0: ffff888032a780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 620.218839][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 620.229067][ T30] 6 locks held by kworker/u8:12/6665: [ 620.234445][ T30] 2 locks held by syz.4.2576/15454: [ 620.239697][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 620.248149][ T30] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 620.259893][ T30] 1 lock held by udevd/19949: [ 620.264590][ T30] #0: ffff88802697d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 620.274262][ T30] 2 locks held by syz.0.4247/21592: [ 620.280006][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 620.288464][ T30] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 620.298662][ T30] 3 locks held by syz.5.4335/21913: [ 620.303853][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 620.312101][ T30] #1: ffff888036b106f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 620.322593][ T30] #2: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 620.333136][ T30] 3 locks held by syz.2.5047/24498: [ 620.338399][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 620.346608][ T30] #1: ffff8880799ee6f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 620.357106][ T30] #2: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 620.369140][ T30] 3 locks held by syz.8.5762/27055: [ 620.374404][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 620.382823][ T30] #1: ffff8880570e86f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 620.393328][ T30] #2: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 620.403826][ T30] 2 locks held by syz.3.6307/29066: [ 620.409064][ T30] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 620.418168][ T30] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 620.429110][ T30] 1 lock held by syz.6.6311/29092: [ 620.434205][ T30] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newroute+0x12b/0x250 [ 620.447912][ T30] 2 locks held by syz.7.6312/29098: [ 620.453133][ T30] #0: ffffffff9011bf70 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 620.464039][ T30] #1: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 620.473165][ T30] 3 locks held by syz.9.6314/29105: [ 620.478399][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 620.486618][ T30] #1: ffffffff8fc39288 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 620.496614][ T30] #2: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_media_set+0x12/0x30 [ 620.506003][ T30] 2 locks held by syz.9.6314/29110: [ 620.511227][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 620.519884][ T30] #1: ffffffff8fc39288 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 620.529004][ T30] 1 lock held by syz.9.6314/29112: [ 620.534109][ T30] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 620.543514][ T30] 1 lock held by syz.9.6314/29114: [ 620.548668][ T30] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 620.558123][ T30] 1 lock held by syz.9.6314/29116: [ 620.563227][ T30] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 620.573435][ T30] 1 lock held by syz.9.6314/29118: [ 620.578609][ T30] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 620.587543][ T30] 2 locks held by syz.9.6314/29120: [ 620.592739][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 620.601358][ T30] #1: ffffffff8fc39288 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 620.610483][ T30] 1 lock held by syz.1.6315/29109: [ 620.615597][ T30] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 620.624962][ T30] 1 lock held by syz.1.6315/29122: [ 620.630127][ T30] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: ip6_mroute_setsockopt+0xb35/0xf90 [ 620.640081][ T30] 1 lock held by dhcpcd/29128: [ 620.644845][ T30] #0: ffff888055af35c8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 620.655253][ T30] [ 620.657963][ T30] ============================================= [ 620.657963][ T30] [ 620.667960][ T30] NMI backtrace for cpu 1 [ 620.667977][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 620.668002][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.668012][ T30] Call Trace: [ 620.668019][ T30] [ 620.668027][ T30] dump_stack_lvl+0xe8/0x150 [ 620.668054][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 620.668146][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 620.668171][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 620.668196][ T30] sys_info+0x135/0x170 [ 620.668213][ T30] watchdog+0xfd9/0x1030 [ 620.668243][ T30] ? watchdog+0x21a/0x1030 [ 620.668274][ T30] kthread+0x388/0x470 [ 620.668292][ T30] ? __pfx_watchdog+0x10/0x10 [ 620.668321][ T30] ? __pfx_kthread+0x10/0x10 [ 620.668338][ T30] ret_from_fork+0x51e/0xb90 [ 620.668361][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 620.668381][ T30] ? __switch_to+0xc7d/0x1450 [ 620.668403][ T30] ? __pfx_kthread+0x10/0x10 [ 620.668419][ T30] ret_from_fork_asm+0x1a/0x30 [ 620.668456][ T30] [ 620.668463][ T30] Sending NMI from CPU 1 to CPUs 0: [ 620.779708][ C0] NMI backtrace for cpu 0 [ 620.779724][ C0] CPU: 0 UID: 0 PID: 6665 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 620.779742][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.779752][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 620.779853][ C0] RIP: 0010:stack_trace_consume_entry+0x129/0x280 [ 620.779873][ C0] Code: 89 c5 e8 3a 04 7f 00 49 89 e8 4c 89 e2 48 89 de 49 89 37 41 8b 18 41 0f b6 44 15 00 84 c0 0f 85 34 01 00 00 41 3b 1e 0f 92 c0 <48> 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 [ 620.779886][ C0] RSP: 0018:ffffc9000faa6758 EFLAGS: 00000283 [ 620.779898][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000080000200 [ 620.779909][ C0] RDX: dffffc0000000000 RSI: ffffffff822f7c8e RDI: ffffc9000faa6860 [ 620.779920][ C0] RBP: 1ffff92001f54d0e R08: ffffc9000faa6870 R09: 0000000000000000 [ 620.779930][ C0] R10: ffffc9000faa67f8 R11: ffffffff81b0b130 R12: 0000000000000000 [ 620.779941][ C0] R13: 1ffff92001f54d0d R14: ffffc9000faa6868 R15: ffffc9000faa68f0 [ 620.779952][ C0] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 620.779964][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 620.779975][ C0] CR2: 0000555592d814e8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 620.779988][ C0] Call Trace: [ 620.779994][ C0] [ 620.780000][ C0] ? kasan_save_track+0x3e/0x80 [ 620.780017][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 620.780032][ C0] arch_stack_walk+0x10f/0x150 [ 620.780056][ C0] ? kasan_save_track+0x3e/0x80 [ 620.780072][ C0] stack_trace_save+0xa9/0x100 [ 620.780087][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 620.780104][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 620.780125][ C0] kasan_save_track+0x3e/0x80 [ 620.780138][ C0] ? kasan_save_track+0x3e/0x80 [ 620.780176][ C0] __kasan_kmalloc+0x93/0xb0 [ 620.780193][ C0] __kmalloc_noprof+0x35c/0x760 [ 620.780207][ C0] ? ieee802_11_parse_elems_full+0x159/0x2ab0 [ 620.780278][ C0] ? __kmalloc_noprof+0x1b8/0x760 [ 620.780294][ C0] ieee802_11_parse_elems_full+0x159/0x2ab0 [ 620.780316][ C0] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 620.780334][ C0] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 620.780348][ C0] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 620.780363][ C0] ? __kfree_rcu_sheaf+0x1ad/0x5d0 [ 620.780376][ C0] ? ret_from_fork+0x51e/0xb90 [ 620.780394][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 620.780416][ C0] ? cfg80211_update_known_bss+0x9bd/0x1590 [ 620.780457][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 620.780476][ C0] ? cmp_bss+0x8b3/0xe80 [ 620.780493][ C0] ieee80211_inform_bss+0x161/0x1160 [ 620.780534][ C0] ? __cfg80211_bss_update+0x1027/0x2110 [ 620.780550][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 620.780565][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 620.780588][ C0] ? __kmalloc_noprof+0x37d/0x760 [ 620.780604][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 620.780620][ C0] cfg80211_inform_single_bss_data+0xd08/0x1b70 [ 620.780640][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 620.780669][ C0] ? cfg80211_inform_bss_data+0x253/0x3c40 [ 620.780687][ C0] cfg80211_inform_bss_data+0x266/0x3c40 [ 620.780715][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 620.780749][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 620.780778][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x760 [ 620.780797][ C0] ? ieee80211_bss_info_update+0x316/0xa40 [ 620.780814][ C0] ieee80211_bss_info_update+0x794/0xa40 [ 620.780833][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 620.780848][ C0] ? sta_info_get+0x4f/0x300 [ 620.780894][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2cd0 [ 620.780934][ C0] ieee80211_ibss_rx_queued_mgmt+0x1901/0x2cd0 [ 620.780957][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 620.780980][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2cd0 [ 620.780996][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 620.781017][ C0] ? rcu_is_watching+0x15/0xb0 [ 620.781038][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 620.781057][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 620.781077][ C0] ? kcov_remote_start+0x17f/0x7a0 [ 620.781102][ C0] ieee80211_iface_work+0x84e/0x1340 [ 620.781125][ C0] cfg80211_wiphy_work+0x2ab/0x4a0 [ 620.781142][ C0] ? process_scheduled_works+0xa25/0x1830 [ 620.781161][ C0] process_scheduled_works+0xb02/0x1830 [ 620.781192][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 620.781213][ C0] ? assign_work+0x3d5/0x5e0 [ 620.781233][ C0] worker_thread+0xa50/0xfc0 [ 620.781263][ C0] kthread+0x388/0x470 [ 620.781278][ C0] ? __pfx_worker_thread+0x10/0x10 [ 620.781295][ C0] ? __pfx_kthread+0x10/0x10 [ 620.781309][ C0] ret_from_fork+0x51e/0xb90 [ 620.781328][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 620.781346][ C0] ? __switch_to+0xc7d/0x1450 [ 620.781364][ C0] ? __pfx_kthread+0x10/0x10 [ 620.781379][ C0] ret_from_fork_asm+0x1a/0x30 [ 620.781406][ C0] [ 621.264317][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 621.271183][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 621.280288][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 621.290334][ T30] Call Trace: [ 621.293605][ T30] [ 621.296524][ T30] vpanic+0x56c/0xa60 [ 621.300505][ T30] ? __pfx___schedule+0x10/0x10 [ 621.305351][ T30] ? __pfx_vpanic+0x10/0x10 [ 621.309856][ T30] ? __pfx_console_unlock+0x10/0x10 [ 621.315072][ T30] panic+0xc5/0xd0 [ 621.318794][ T30] ? __pfx_panic+0x10/0x10 [ 621.323207][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 621.328577][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 621.334725][ T30] watchdog+0x1023/0x1030 [ 621.339050][ T30] ? watchdog+0x21a/0x1030 [ 621.343462][ T30] kthread+0x388/0x470 [ 621.347516][ T30] ? __pfx_watchdog+0x10/0x10 [ 621.352183][ T30] ? __pfx_kthread+0x10/0x10 [ 621.356765][ T30] ret_from_fork+0x51e/0xb90 [ 621.361346][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 621.366462][ T30] ? __switch_to+0xc7d/0x1450 [ 621.371144][ T30] ? __pfx_kthread+0x10/0x10 [ 621.375729][ T30] ret_from_fork_asm+0x1a/0x30 [ 621.380504][ T30] [ 621.383866][ T30] Kernel Offset: disabled [ 621.388179][ T30] Rebooting in 86400 seconds..