last executing test programs: 3m54.592784031s ago: executing program 4 (id=724): sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x4, 0x70bd27, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5], 0x31) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x6, 0x0, 0xdad1124f55525050, 0x30}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff00fc040000000000000000000000000000ff02000000000000000000000000000100000000ff00000000002000000000000400"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001080)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000680)={&(0x7f0000000500), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r9, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4f, 0x2b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4c000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x1d, 0x1, 0x6, &(0x7f0000000b80)=[0x0], 0x1, 0x0, &(0x7f0000000200), &(0x7f0000000b80), &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000009c0)={0x150, 0x1, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x42}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x946}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}]}, @CTA_LABELS_MASK={0x4}, @CTA_NAT_SRC={0xb4, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x54}, 0x20000880) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000c00)={@void, @val={0x3, 0x4, 0xa614, 0x401, 0x800, 0x5}, @ipv6=@icmpv6={0x9, 0x6, "0db318", 0x1fa, 0x3a, 0x0, @local, @mcast1, {[@hopopts={0x2b, 0x3, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xbc}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xc}, @jumbo={0xc2, 0x4, 0x1}]}, @dstopts, @srh={0x2e, 0x12, 0x4, 0x9, 0x3, 0x20, 0x9, [@dev={0xfe, 0x80, '\x00', 0x20}, @empty, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @loopback, @mcast1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @routing={0x32, 0x2, 0x0, 0x4, 0x0, [@mcast1]}, @routing={0x21, 0xe, 0x1, 0x5, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @loopback]}], @ndisc_ns={0x87, 0x0, 0x0, @remote, [{0x19, 0x11, "ea05f70cd530abf6a3c5c061520505d6f45aeed654f36574c648d82904d3633c36b1d66d5eaf8174eac70db1d04704434e29595a718daed03c496a797d61cf23b2d74e5997a9450fdfc7ea7a34822c31b3afda860ce5efd8f366b63df86fac0b7c85e51713e1d989a0a0fda4f40dc51014cab5dc750c6377ed3be2ba94ddecf66ec3ced758402fa7a9a6b7b6"}]}}}}, 0x22c) sendmsg$NFC_CMD_START_POLL(r12, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000fc0)={0xffffffffffffff90, 0x0, 0x1, 0x70ad25, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x0, 0xd, 0x40}, @NFC_ATTR_TM_PROTOCOLS={0x0, 0xe, 0xa0}, @NFC_ATTR_IM_PROTOCOLS={0x0, 0xd, 0x2}, @NFC_ATTR_IM_PROTOCOLS={0x0, 0xd, 0x40}, @NFC_ATTR_TM_PROTOCOLS={0x0, 0xe, 0x84}, @NFC_ATTR_PROTOCOLS, @NFC_ATTR_DEVICE_INDEX, @NFC_ATTR_TM_PROTOCOLS={0x0, 0xe, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) 3m54.124682233s ago: executing program 4 (id=728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {0x0}], 0x3}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000240)=0x100, 0x4) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0xa00) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, r4) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, 0x0, &(0x7f00000000c0)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x4f5af99b}, 0x1c) sendmmsg$sock(r7, &(0x7f0000000100), 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010328bd70000000000001000000080001006300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x44) r8 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r4, 0x0, 0x0) write(r8, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), r8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="44010000f55af09e663560016a1ce253aef121ecb80ae0364c610a6787d4557d5d27a572b18a9889cde4011875c1032d3a5ba01e1812673529eccfe858d3b3fdeebb92fa9798b71a304d290a491865f28264f8d6ac261b20480a2c9715af08401305a43f00cb9efcc6e13deb6bfd00a860fdb3600979dafd", @ANYRES16=r9, @ANYBLOB="080026bd7000ffdbdf258800000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) 3m53.128967932s ago: executing program 4 (id=736): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x6720f15ce8555866) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) accept4(r3, 0x0, 0x0, 0x80000) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}]}, 0x28}}, 0x40000) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000840)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000800000000fedbdf251700000008000300", @ANYRES32=r9, @ANYBLOB="3000308014000400403a050c5baee2004ef2b6d713459a7a100001800800090000000000040003800500020000000000c24e85e04cf859be801287ccb31c6b75208f0b2764f9003105fa78dbe34e8644a20b7210dce304278e9f8f6424bf26ba9887734dddba41982a7df4ba654d6eff8cecc0394f0b309a28251e4930e15f414b92b19db9040d61ed7f5eb1682470436fed294e821e44f2fd865938b06985732074218be3b1a4197d1ef732"], 0x4c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x1, 0x46af, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40011}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000018b3bfba5373f1dcdaff00000a800000ff0300060000000014000100200100000000000000000000000000005320d752c67de4dd42ad5942a0dd993bb82199addc41b9b064921bcc70979458d8447f31b9d70cf085850f65dedcefe9d8491a724c35ef0ae9354f53dbbd808da3bc14ee868b36de22553593e58e4834a362bdbf26f31976634d7c69553f1787a9b3aefafbff02b9d7c95cf538da92ccdeacc0fa"], 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x125) 3m51.468177133s ago: executing program 4 (id=748): r0 = socket$kcm(0xa, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r5) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="030725bd7000000000001f"], 0x14}, 0x1, 0x0, 0x0, 0x2000c094}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x5, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x91) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newqdisc={0x180, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x21a, 0x3, 0xfffffffe, 0xe, 0x10, 0x7, 0x4, 0x1, 0x100, 0x5, 0x1c, 0x1d, 0x1b, 0x6, 0x9, 0x9}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x2, 0xf, 0x1, 0x8}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'veth0\x00', 0x0}) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r9], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r13, 0xa7, &(0x7f0000000100)}, 0xd) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r12, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) sendmsg$TIPC_NL_LINK_SET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000000) sendmmsg(r10, &(0x7f0000000000), 0x400000000000047, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x6, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000001000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x28}, 0x0) 3m47.290743402s ago: executing program 4 (id=763): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 3m47.043774244s ago: executing program 4 (id=767): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd2d, 0x25dfdbfe, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040030) 3m32.003686276s ago: executing program 32 (id=767): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd2d, 0x25dfdbfe, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040030) 2m28.555615394s ago: executing program 2 (id=1353): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000810000000000000004000630162000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0x3) syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000040)={@remote, r4}, 0x14) unshare(0x40000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 2m27.359785513s ago: executing program 2 (id=1359): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5", 0x5f}, {&(0x7f0000000780)="6144c338abfb60e94f608498bd0e32960c945aed3bc143d3f34fdbc3a3105cce44aa66696ef36edf4b8c25d7b3c8c3043d7f8028d026744b475b8bdd6abc194e74e30f789f6aa9fb3f91c2834187309b03813bd071b84dc58d6fb09360a845326960d8415c09d1d96109006569d7f5a557e906c41bb3910b63", 0x79}], 0x2, 0x0, 0x0, 0x2663}, 0x20000000) 2m27.147401111s ago: executing program 2 (id=1362): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000410007012bbd700000000000037c00000400c2800c000180060006fd"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c090) 2m26.946034609s ago: executing program 2 (id=1363): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="680b53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) 2m26.689563242s ago: executing program 2 (id=1366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000740e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2m26.622170239s ago: executing program 2 (id=1370): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r4, 0xba87317d461c07c9, 0x70bd2a, 0x25dfdbdb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4) syz_emit_ethernet(0xcc, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0xba, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0x9, [@multicast2, @loopback, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"28c9624ac4c776def5799525026ef73263831c67303671b02526506d68f7957aa244e929321d1642b2236994419199859b2b80e7240fe84b92ea295cffc010e65b9419b0f892a3a019761a2f67901bd50070f4a5be55f260761f0f35f401e46e0ab3ff09e0b30cee48c8b49d03205044d626151b57b834e7f22d4b6d3e45af82f2d6"}}}}}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x3000, 0x100000000000000d) r11 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000001480)=@int=0x7, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x11c, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8840}, 0x4000040) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) vmsplice(r3, &(0x7f00000004c0), 0x0, 0xf) write(r0, 0x0, 0x0) 2m11.403888134s ago: executing program 33 (id=1370): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r4, 0xba87317d461c07c9, 0x70bd2a, 0x25dfdbdb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4) syz_emit_ethernet(0xcc, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0xba, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0x9, [@multicast2, @loopback, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"28c9624ac4c776def5799525026ef73263831c67303671b02526506d68f7957aa244e929321d1642b2236994419199859b2b80e7240fe84b92ea295cffc010e65b9419b0f892a3a019761a2f67901bd50070f4a5be55f260761f0f35f401e46e0ab3ff09e0b30cee48c8b49d03205044d626151b57b834e7f22d4b6d3e45af82f2d6"}}}}}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x3000, 0x100000000000000d) r11 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000001480)=@int=0x7, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x11c, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8840}, 0x4000040) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) vmsplice(r3, &(0x7f00000004c0), 0x0, 0xf) write(r0, 0x0, 0x0) 2m2.41156459s ago: executing program 5 (id=1655): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) listen(r8, 0x0) close(r8) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfffe, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x100, 0x10000000, 0xf, 0x8}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x10000}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r11, 0x30}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1m58.047312525s ago: executing program 5 (id=1666): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="2e9b5b00ace03dd65193dfb6c5619a3d86dd6067060000140654034d069cdb99b4dcf74b5c85cd6db0c10000", 0x2c}, {&(0x7f0000000100)="0400e4eda7f6c173b552572f13f823c1", 0x10}, {&(0x7f0000002480)="37bcb3983785779df7392b7dca", 0xd}], 0x3) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b000000080000000c000000030000", @ANYRES32, @ANYBLOB="00000000000000b000"/21, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r8, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x400002, 0xc, 0x1400}, 0x50) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x30, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xc, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8884}, 0x24000840) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x721, 0x70bd25, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x45, 0x1, {0x0, 0x0, 0x3, 0x4, {@ip4=@local, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x4, {@in6_addr=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x7, 0x0, {@in6_addr=@remote, 0x9edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x1, {@ip4=@empty, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x24048060) 1m56.740574113s ago: executing program 5 (id=1677): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0x3, 0x5) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 1m56.549699005s ago: executing program 5 (id=1678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x2a, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x404401d}, 0x0) 1m56.320739145s ago: executing program 5 (id=1680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0x6e}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4091, 0xffb}], 0x3}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000240)=0x100, 0x4) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0xa00) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, r4) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, 0x0, &(0x7f00000000c0)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x4f5af99b}, 0x1c) sendmmsg$sock(r7, &(0x7f0000000100), 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x44) r8 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r4, 0x0, 0x0) write(r8, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), r8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="44010000f55af09e663560016a1ce253aef121ecb80ae0364c610a6787d4557d5d27a572b18a9889cde4011875c1032d3a5ba01e1812673529eccfe858d3b3fdeebb92fa9798b71a304d290a491865f28264f8d6ac261b20480a2c9715af08401305a43f00cb9efcc6e13deb6bfd00a860fdb3600979dafd", @ANYRES16=r9, @ANYBLOB="080026bd7000ffdbdf258800000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990005000000280000001c01330008140300080211000001080211000001dec14532fb1bf807ffffffffffff0802110000015f00e195fe9b00e6353de5ec083c137fbe2e73dc67d37e6b6a4fa1ea505a76c233a5263e358faaeb27d4f09a9530309e9a1b5a9f71e17289fe979e1af0f94c99045405e84dd9185f4b330cf8efae66b3ea1d7398df8568abd3a0a78517b7a1e87b000000ffffffffffff08021100000058006e1231212fa41d0dc62a199c11f470a13bd52108e06a2f526b9ce8873ccba18e4e2e300eddac9d1728b5a4b41ac2fd39abf041db0319ef90d6c5dd4cc718382fe50ac62cbb2ee8b9bd84525595d6883860762f0abaf535ed00000802110000010802110000011800444e6fe4640db3be185f7387978fe1bb80ab37bd69d5fb090000"], 0x144}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) 1m55.308525939s ago: executing program 5 (id=1691): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)="0589", 0x2}], 0x1) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r3, &(0x7f00000001c0)=""/237, 0xed, 0x40010162, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1e020000b3b200000000000000000000851000000140000095000000005f0e0000000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40}, 0x94) 1m40.153750253s ago: executing program 34 (id=1691): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)="0589", 0x2}], 0x1) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r3, &(0x7f00000001c0)=""/237, 0xed, 0x40010162, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1e020000b3b200000000000000000000851000000140000095000000005f0e0000000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40}, 0x94) 8.381464616s ago: executing program 3 (id=2337): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="4be88fa3027baaaaaaaaaabb86dd6012100000003a"], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.218279346s ago: executing program 7 (id=2339): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, &(0x7f0000000100), 0x48) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 7.760539577s ago: executing program 3 (id=2341): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) listen(r8, 0x0) close(r8) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfffe, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x100, 0x10000000, 0xf, 0x8}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x10000}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r11, 0x30}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="21100000030000000800"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 7.694817206s ago: executing program 7 (id=2344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRESOCT, @ANYBLOB='_'], 0x48) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet6(0xa, 0x4, 0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) write(0xffffffffffffffff, &(0x7f00000002c0)="29000000140005b7ff00000004ea", 0xe) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) unshare(0x26020480) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x38, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r8, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000000201030000000000000000000a0000040c0019800800020021000000300002802c00018014000300"], 0x50}, 0x1, 0x0, 0x0, 0x44008000}, 0x40008d2) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r8, 0x0) ioctl$PPPIOCGIDLE(r8, 0x8010743f, &(0x7f0000000300)) 7.275639275s ago: executing program 1 (id=2349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90c20000", 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d40), &(0x7f0000000240), 0x831f, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(0xffffffffffffffff) syz_emit_ethernet(0xd81, &(0x7f0000002340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "a4f293", 0xd4b, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@srh={0x5e, 0xa, 0x4, 0x5, 0x0, 0x28, 0x1, [@private0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x62, 0x17d, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0x3a, 0x6, [0xfffffffffffffffc, 0x8000, 0x100000000, 0x7, 0x9]}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x9, 0x1}}, @generic={0x8a, 0xba5, "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"}]}], {0x4e20, 0x4e21, 0xfb, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x100, @void}, "26bc4d426df105a1b58f88af5302632add03e74e52382f19361f1ac1f419c10d8b6bcf60e47c33ead5f2965f642051faafa26d8ebe6a0e0cace9ef28675a63eca98617a63b857c37b5785c467a08a996f9aa07fe5cab460e9de65bd9e2ad58279e4f028fc7a6b55dc1d00e27cb2ad9861d298078b453f5dbb2241454dc9b9bc17b74bdd8ad9bf50703c1d01160085441e3ea5a106541ac9d52358163e17b4702087136898c219933a98f9110629833a0c862f81772042367f47bf94d89459688ae2ecd90d87f258f6f821ae7b9b1ebf9d870f62da8c66c69fd85a5c1e297edea907ab62050183c7dd6ae1d16420da1"}}}}}}}, 0x0) 4.772240928s ago: executing program 7 (id=2353): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x6720f15ce8555866) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) accept4(r3, 0x0, 0x0, 0x80000) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000201010200000000000000000a0000073c0002800c00028005000100210000002c00018014620300fc01000000000000000000000000000114000400fe8000000000000000000000000000aa"], 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x40000) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000840)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000800000000fedbdf251700000008000300", @ANYRES32=r9, @ANYBLOB="3000308014000400403a050c5baee2004ef2b6d713459a7a100001800800090000000000040003800500020000000000c24e85e04cf859be801287ccb31c6b75208f0b2764f9003105fa78dbe34e8644a20b7210dce304278e9f8f6424bf26ba9887734dddba41982a7df4ba654d6eff8cecc0394f0b309a28251e4930e15f414b92b19db9040d61ed7f5eb1682470436fed294e821e44f2fd865938b06985732074218be3b1a4197d1ef732"], 0x4c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x1, 0x46af, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40011}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000018b3bfba5373f1dcdaff00000a800000ff0300060000000014000100200100000000000000000000000000005320d752c67de4dd42ad5942a0dd993bb82199addc41b9b064921bcc70979458d8447f31b9d70cf085850f65dedcefe9d8491a724c35ef0ae9354f53dbbd808da3bc14ee868b36de22553593e58e4834a362bdbf26f31976634d7c69553f1787a9b3aefafbff02b9d7c95cf538da92ccdeacc0fa"], 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x125) 4.723941428s ago: executing program 6 (id=2354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90c20000", 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d40), &(0x7f0000000240), 0x831f, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) r9 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r9) syz_emit_ethernet(0xd81, &(0x7f0000002340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "a4f293", 0xd4b, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@srh={0x5e, 0xa, 0x4, 0x5, 0x0, 0x28, 0x1, [@private0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x62, 0x17d, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0x3a, 0x6, [0xfffffffffffffffc, 0x8000, 0x100000000, 0x7, 0x9]}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x9, 0x1}}, @generic={0x8a, 0xba5, "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"}]}], {0x4e20, 0x4e21, 0xfb, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x100, @void}, "26bc4d426df105a1b58f88af5302632add03e74e52382f19361f1ac1f419c10d8b6bcf60e47c33ead5f2965f642051faafa26d8ebe6a0e0cace9ef28675a63eca98617a63b857c37b5785c467a08a996f9aa07fe5cab460e9de65bd9e2ad58279e4f028fc7a6b55dc1d00e27cb2ad9861d298078b453f5dbb2241454dc9b9bc17b74bdd8ad9bf50703c1d01160085441e3ea5a106541ac9d52358163e17b4702087136898c219933a98f9110629833a0c862f81772042367f47bf94d89459688ae2ecd90d87f258f6f821ae7b9b1ebf9d870f62da8c66c69fd85a5c1e297edea907ab62050183c7dd6ae1d16420da1"}}}}}}}, 0x0) 4.682822419s ago: executing program 3 (id=2355): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) sendto$inet6(r3, &(0x7f0000000000)="826b", 0x2, 0xffffffffffffffd6, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x33) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="7105b8060305007f0f400a6302cdb08e7e4afc612f7ebb302b22122ed7fcd20d0d99b3bdd6ab35522e16ea5bac817fc71044d1275307d2934d5d2564b506e3681773e90508f7f5e8bc2324152b06b893f16ad228608af9b0460540e147d13076960146391b1187bacb94c82df29347010c0e0300004509d85e5cd0c2d740484b962609e0656be06703b9d5400aa85bd247f1f24fa5efd635c500f64fb0289afd64bfcd15d2bbf47dbe376c516aa37afacb5fe21c861b4741914c17"], 0xbb) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r11, 0x3f}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e105000000890600001144ee1611", 0x1f}, {&(0x7f0000000f00)="0b676ae7ce0aa301d6ff23b6557b3e02be56268cb67cc8df76c62092c9dc73bf02e2fbfd0d14f594db9a8faca2d1ee15bc4c2c588479eb0b462fed8714ae90e42c4c1477864b7c37d96279e5c380cb5f53b2983f7e1ec1fb074a8d4be7374be1c9b65b8587e435b5dc319cd5d25258ed81710608c0331449192c63736d71c7fbb72bd9ef8a3be726b464f445638ea32879fe12b88ebe8e141ba4b0efe8ae02c225a3c07cbd1c65a5f9a57267f88213743ea2ab323a2f8f1c50ecca7b6ee9a0fea79147e75e0eca42d7cf6d4d9a1e658e44cd8dc36a7b91cca77237962b41d760dd6e3aed631486ad0f453ef4501e60f923d992103a3845a67fca331897cac2bd51790acf2661efa41d90eda2061ce1aa53cbeab80229844f3954fe9ac6447af516907739ea3e6bbb832770194e6e655ec3a7ab80374b17059080c1fa21970d0147401a1ca1e58e3c86d77d116f4208299d7a3665898b2009c3752c786e4b45042b51366a133974ec564c9d2f0d7cbad234223a19b52e0efeccd654fd2bdd57df81cd7b478ef2b59f8446075d812f9d62e63d1b38375765aa7d63965484ef4d9b0b90ec00b39ac0430cbfee05cd73c34ad9922f50292d69194220339e3c923a9121d0e5ab3b7fc0", 0x1c7}, {&(0x7f00000022c0)="03b08259909695eb5ca0294fba511a888314cac2cc4b8fcfa8a6395f98c9495276871c1415f144fc9b74b6be1832c68c5a06cd992e2fa712186cb328d237fb2b3daa49d29c7221005ae22dfd2fa279a3a0ebe73b3093e6f66d7ab7e24362e64a1bbd1f4e7a6e2f2cf522cf9b4437037aed5091737c0883648a89f0c8ad70436a97e52561c4ac61cc619e5cc62e9a9b0fec63", 0x92}], 0x3}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f00000002c0)={'dummy0\x00', @random="0100"}) 4.658389245s ago: executing program 1 (id=2357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90c20000", 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d40), &(0x7f0000000240), 0x831f, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) r9 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r9) syz_emit_ethernet(0xd79, &(0x7f0000002340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "a4f293", 0xd43, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@srh={0x5e, 0xa, 0x4, 0x5, 0x0, 0x28, 0x1, [@private0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x62, 0x17c, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0x3a, 0x6, [0xfffffffffffffffc, 0x100000000, 0x7, 0x9]}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x9, 0x1}}, @generic={0x8a, 0xba5, "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"}]}], {0x4e20, 0x4e21, 0xfb, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x100, @void}, "26bc4d426df105a1b58f88af5302632add03e74e52382f19361f1ac1f419c10d8b6bcf60e47c33ead5f2965f642051faafa26d8ebe6a0e0cace9ef28675a63eca98617a63b857c37b5785c467a08a996f9aa07fe5cab460e9de65bd9e2ad58279e4f028fc7a6b55dc1d00e27cb2ad9861d298078b453f5dbb2241454dc9b9bc17b74bdd8ad9bf50703c1d01160085441e3ea5a106541ac9d52358163e17b4702087136898c219933a98f9110629833a0c862f81772042367f47bf94d89459688ae2ecd90d87f258f6f821ae7b9b1ebf9d870f62da8c66c69fd85a5c1e297edea907ab62050183c7dd6ae1d16420da1"}}}}}}}, 0x0) 4.213494411s ago: executing program 0 (id=2359): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200d34d0000000000000000b7080000000000007b8af8ffa5910000b7080000040000ee7a8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2b, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) 4.161259849s ago: executing program 6 (id=2360): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 4.158145101s ago: executing program 1 (id=2361): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000000000000000efc800139cf128ac2e96091a1b2681e1f6cb4a918d03b53cd24fac92dac134169fd6c002278620b62fa0911fb01256ddc526d7ea1d50c00b02a70e0a18084f4f940cd86353b0fe601b8fa78bb398d23be8ac719ab0e7823dbf62db2aae04bae6f7b1b0770b0d5f26bcd3d8679fe84a1af2b6438b1eb5b4eaad63e10cd37103a0d12be365f060b2568525172a515ff2f82be3ab61d4f1dfc071794dc9322ed042279ac4027f49dc94b3de0f860eb7ebcc33254e021815a95212755f4e0f", @ANYRES32=0x1, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000300"/28], 0x50) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20800, 0x0) splice(r1, 0x0, r0, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pptp(0xffffffffffffffff, 0x0, 0xfffffffffffffd10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000080)=0x79) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x24004000}, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r6, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) unshare(0x4000400) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000d00)={'macvtap0\x00', &(0x7f0000000c80)=@ethtool_coalesce={0x1, 0x2, 0x115b, 0x2, 0x5, 0x2, 0x5, 0xb5, 0x7, 0x7, 0x2, 0xe464, 0x9, 0x9, 0xfffffff5, 0x6, 0x5, 0x400, 0x101, 0xa2, 0x8, 0x10000, 0xaa0}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5af"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x1}, 0x10}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) 4.078789138s ago: executing program 0 (id=2362): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="4be88fa3027baaaaaaaaaabb86dd6012100000003a"], 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02008dff0400"}) r3 = socket$netlink(0x10, 0x3, 0x6) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x22}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xffffffffffffff1e, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x100}, @IFLA_GRE_OFLAGS={0x0, 0x3, 0x7}, @IFLA_GRE_IKEY={0x8, 0x4, 0x662c}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_NUM_RX_QUEUES={0x0, 0x20, 0x1000}, @IFLA_GSO_MAX_SEGS={0x0, 0x28, 0x524e}, @IFLA_XDP={0x0, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD, @IFLA_XDP_FLAGS, @IFLA_XDP_EXPECTED_FD, @IFLA_XDP_FD, @IFLA_XDP_FD]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010001000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbffffffff000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c0000000a000000ac1414bb000000000000000000000000053500000301f90009000002030000000002e2ff000000000000"], 0x1ac}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d000030000", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000300)=ANY=[@ANYBLOB="482108fa070211000000080211000001505050505050c008"], 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 4.05504038s ago: executing program 6 (id=2363): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) sendto$inet6(r3, &(0x7f0000000000)="826b", 0x2, 0xffffffffffffffd6, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x33) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="7105b8060305007f0f400a6302cdb08e7e4afc612f7ebb302b22122ed7fcd20d0d99b3bdd6ab35522e16ea5bac817fc71044d1275307d2934d5d2564b506e3681773e90508f7f5e8bc2324152b06b893f16ad228608af9b0460540e147d13076960146391b1187bacb94c82df29347010c0e0300004509d85e5cd0c2d740484b962609e0656be06703b9d5400aa85bd247f1f24fa5efd635c500f64fb0289afd64bfcd15d2bbf47dbe376c516aa37afacb5fe21c861b4741914c17"], 0xbb) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r11, 0x3f}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e105000000890600001144ee1611", 0x1f}, {&(0x7f0000000f00)="0b676ae7ce0aa301d6ff23b6557b3e02be56268cb67cc8df76c62092c9dc73bf02e2fbfd0d14f594db9a8faca2d1ee15bc4c2c588479eb0b462fed8714ae90e42c4c1477864b7c37d96279e5c380cb5f53b2983f7e1ec1fb074a8d4be7374be1c9b65b8587e435b5dc319cd5d25258ed81710608c0331449192c63736d71c7fbb72bd9ef8a3be726b464f445638ea32879fe12b88ebe8e141ba4b0efe8ae02c225a3c07cbd1c65a5f9a57267f88213743ea2ab323a2f8f1c50ecca7b6ee9a0fea79147e75e0eca42d7cf6d4d9a1e658e44cd8dc36a7b91cca77237962b41d760dd6e3aed631486ad0f453ef4501e60f923d992103a3845a67fca331897cac2bd51790acf2661efa41d90eda2061ce1aa53cbeab80229844f3954fe9ac6447af516907739ea3e6bbb832770194e6e655ec3a7ab80374b17059080c1fa21970d0147401a1ca1e58e3c86d77d116f4208299d7a3665898b2009c3752c786e4b45042b51366a133974ec564c9d2f0d7cbad234223a19b52e0efeccd654fd2bdd57df81cd7b478ef2b59f8446075d812f9d62e63d1b38375765aa7d63965484ef4d9b0b90ec00b39ac0430cbfee05cd73c34ad9922f50292d69194220339e3c923a9121d0e5ab3b7f", 0x1c6}, {&(0x7f00000022c0)="03b08259909695eb5ca0294fba511a888314cac2cc4b8fcfa8a6395f98c9495276871c1415f144fc9b74b6be1832c68c5a06cd992e2fa712186cb328d237fb2b3daa49d29c7221005ae22dfd2fa279a3a0ebe73b3093e6f66d7ab7e24362e64a1bbd1f4e7a6e2f2cf522cf9b4437037aed5091737c0883648a89f0c8ad70436a97e52561c4ac61cc619e5cc62e9a9b0fec63", 0x92}], 0x3}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f00000002c0)={'dummy0\x00', @random="0100"}) 3.661647757s ago: executing program 1 (id=2364): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000080) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r8) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000500)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x44000) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0702000200000014000180060001000200000008180300ac2e000000000000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004886}, 0x20000000) 3.555000198s ago: executing program 6 (id=2365): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, &(0x7f0000000100), 0x48) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 3.52337993s ago: executing program 3 (id=2366): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) listen(r8, 0x0) close(r8) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfffe, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x100, 0x10000000, 0xf, 0x8}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x10000}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r11, 0x30}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYBLOB="211000000300000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 3.447391104s ago: executing program 6 (id=2367): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="016f080001002700000027000000450000400000270000849078ac1e0001ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba000000b0780018fe06e2d4c3d9050a00000000000000000008d58838068b833250b7a34b22236b1a9f5df74cd88f3fa32862337bb72e3f7fd31c189a7415fd91eba7da864d46d0103db90809e0"], 0x4e) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_proto_private(r0, 0x89e0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x41}, 0x8080) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000600"/28], 0x5c) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r12}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) r13 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000004c0), 0x0) getsockopt$sock_timeval(r13, 0x1, 0x43, &(0x7f0000000500), &(0x7f0000000540)=0x10) r14 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r14, &(0x7f00000003c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r6, 0x852dd6c070cd7e4d, 0x4, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r16}]}, 0x24}, 0x4, 0x700000000000000}, 0x4040000) 3.174041317s ago: executing program 7 (id=2368): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000080) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r8) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000500)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x44000) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0702000200000014000180060001000200000008180300ac2e000000000000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004886}, 0x20000000) 3.09508127s ago: executing program 0 (id=2369): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2.976748329s ago: executing program 0 (id=2370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90c20000", 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d40), &(0x7f0000000240), 0x831f, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) r9 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r9) syz_emit_ethernet(0xd79, &(0x7f0000002340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "a4f293", 0xd43, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@srh={0x5e, 0xa, 0x4, 0x5, 0x0, 0x28, 0x1, [@private0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x62, 0x17c, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0x3a, 0x6, [0xfffffffffffffffc, 0x8000, 0x100000000, 0x7]}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x9, 0x1}}, @generic={0x8a, 0xba5, "02dfc379e54dd6b7d4e5ee76890022c796909b70400fa6afa8550fe41c03806ddeac86b77c358c7b0e05b788f3f500caf1ce28106e0a06aedd03d01442011649e53abff0acb8901bfc927776884100350d65ce5bb6ee9217f4561ae0fc8f0ef9ab1a58ff875308bc1b46a8e3d1666f947bf9b9f2acdd0d47abd4c39c66242ba5a60ad9b54cb7484c1567d291d5bfc701e8e2ab8507665597e469b757832ddedb820e1b2f5a8834250fbdc43937299136e7675103f9e613faef663d22cce61c765ffd3c43c3ef4c8110cc354b8129edecbd21b4fdb5e49e7e3f398baab79240d069c3f1141976a597671ccfbdd0a88d34cbde188c5351a167558b5140aa71d53ed67b3af40a7d11a9e3f8b51587f94173fa43ee7def4e78dd184591a72073c253eec922578f9a6d27b6df197b81127b527292eae1292ba93599c3c66868be2f62c7508f543aa0c00666dcb53605d7b539297d77ea2b1bde43ce6f80a1d4c4d3ee2c96b2bfce54b382f3c85383e8631c87a13a6196a3378dddb6ee0734b9fd0d13860ed94d4a16d988f959466a8b3aa052573538a6cf7ab51b7e21a46c8d24812bebec95032c59d15ab9fdc263f679655d451eb191748537918966946788c89678123a805b174e9e9c9586fc33e36a3b96457b3699461321b23758beda25dacb68788ed08bcb0911e17022896f3effb6b6481e5ece5adc28f5ec0d7dc11df7a936c5c778429e03deb858d3e6ae42bfe792f5328baaa6bbf5dd8e854c2041737f183b2e5a674616e7fe50659b9190b91b8290c52ebbc09dde748a451297fcd7be5f31fc29663d842887550a55bffaf96e189260c24d7dfa96fb355945e8abcaa6b719ecf65c3702d3b229bce50aa1f78b697ec707f3cf75045bd802ac708668d1fb3427f2decc30b39ce36d77fb2abac8ffe1af1f475850c4b68cc96d886ca183858c1625e45f6096b1aef6972cad8e5a8e91ba474bf2bf71c5b1d4ddbff3057211789e1e39e57c4253d7324965cdf75c1171cc2c2d3924964a71592362570e0fe2a01f3082518e6036190aea949aeddbb34a2314d7f120a0f64b27790d9c1cda39c5644db8568e0238b3b046b5ebae2e909e16cb7229b2fdcd1e95f6b3945f35469032764e99f23d05aac3d1cd4a2e5f3c39f02c0f4ce4952637dc105224d089854682da4732653446915902e240890c893e49887db8deeb7e13a74aff31d0384493cd55cdca8fa479f3ea6fcce2ed3da0fb086ae6abafdfebf8ba63067d644a7933a11f978d3c9dba3bf17e2e8302bb448e1f091c0a76664c5faad5e0b95a1c8f5071035ae818572b934200726021dbad03040051003da464212e976cf1807c8625447916a0a541648e0557c623108d134cd935c271735af841de670363db0ae3204b1a764312ad8fa3b7c4af9cf8616617d8c600fd06a9df57be7678b91b19c7a0df274131c37b5af30e8b70860279205777f6c23e8e1f8c9e4817ce7d812740ca1f71e2c0c84e93541ac9da1dd0f57bc1c6cbbc62baa5755e699df7a81697d8cb097bf7195ec60548c14b4e52da87d2a4a45034235b5b21530f1b20dae9bfd151b68c278196974452fa558dbe18632e771e77fb89c06d32ff3f0ab040610578cf556fb0fc93ad2f51934cf4bf99e6db3e615ddf356cb127004e897a064162ec40b88646a133fdbc56b569d0da2772aff012be81557e148c85d82aac3d07d9f599f9613753d4f0cd21063839637ceafb4e2d37498ba4011a673b75de2ff40cc13b3eb701f2240f3d65b9d991bd2bdaec92409372c708c83a5910403050207dee7d3dbd256093b858d6efeb230613aaaa81e72b1900a2892c2fd1cd7f75f813f1bf75b0db3e80e1f7bee7ade5c6d992980df74cab065612c0ed787d21e82db2959bf1491c4ac2f1bf7f49fe38e484cae2fcdfe16c17b954112dc2cee86b2d144d37f15da7c326930fd29ac406ce087a5ee81c29b5d97e64b5d948adeaecf45ef360ed6d11edc6c617f6d10d54df9f9e3f68fb65bc9592b9e50c61e671c5491e2d5d18a990456ab243810330c90312cba036c8363f258db11163a1b59aa0126c067c45e08910f9f80777f4a50d997aa7d4fd04e00ce733bfe888850cb69daef51e9d6dc5c586285f3d0ce669f8e1ea389ae1445bc17858706fe83b9993ebd9ba2b5d959a7b8b1f345b7c5a83a1522cce80f27d8ebe6304f8d9876d5cdca4839ad0effbfdccbf410717318798f090020c60cbf437224f997823d525eb11c0d0bcb3e3276e90bdb3e6b578b12719194a94c96e62f14623f4a1487df5c1b753fd4b6ac12420133092144820b93255ebe44d6bc42db49c35e2b23157ea694187f649457d5afee97d2812b9d0a222cbbae17020b92ca9cfcc923c258094c8b56b76786a49e4f37e1a5b9702a657b0384c4d1bc2d1ad4dcceba08b05529c230ab3c3e41c57c2f0b7d5bcd1040bb92e74b30341e324f440694a7d2bf74782a4e56e9ff2762a6db4dda09463117cd579cc4f8489347ffb4dfa3137505f8b95606f3a43d77952688bfcf47614c725510b73bb5e88ab3e1c17eff99fabb934a706c0a82c22687a54b4e19253d21adfc0a7bf588f7ee8fd27448870c15c6f53a765c7e59cc4479e83f62a465fd7dedcafb7a83c9bbc4ef37799359985ed40c6b8e2783a963811062b8752dadb4c78386819c8cbfea8cd51ed3d20b6b9bf4319ed38a74effd60de17509f31d17da711905cf2f1a1a8e563cca05054090e8ff314dc30bf86c770b110248f492bd52bb6e7eccad39355875492b510b386f6dc5c475401b65609a53b42f5510f37faf5da016a3f2122d22cd398078c9353a72aa4db9a31b6911f6a2d192052e30119522c854d783850dde5b72902a496f59796f7362463f156db1e64d298b9265e37bd163bb5f648206e40d4289a7b089a6877768daecac86276405f01ea627e8f1a623aed9b4a03a50011f6c5a619b14513c5a9fec76446e4ead1c56c3eccab1d0fe6855bda047b21e36a68cfa446e82b7cebf197642a382f7c61ae48ef22454cde16a9a495a35a408172b8e95eaeb57d3b4d3e59444be4b65ce98c84fb9fd62bed1f1cab1dec8a95a5fa2011997598c963aaf9604169000d7ce727eaa5ac2b9264561b05867dc568c36e66d03496be83406cfb12f3620ab859f1a996a3f819e4db78d7ef6ca2b00b3cb5f8169cc8af3a5b0064709582be85c729f27376af6f248f3424d6f845dfdd932afce7a62d2c16c3615b7910942fafe77283f650e44a4075c20c7239a928c313083949af57732f1e9ce6e87c6122867233cd032407d6d5aaa9330974fa0afc80b89fa3088f0a514e9eda553bf233f2dc72c8d203701307763b82f19b9c5c9f7832d17a3be1e0201308afdb52cdb8a8997890e17f739e4967ff41124eafe010aa20436fb7decc300871511a10a0261c670917f43767c3f29ed94938c549d4eca4eccbf0dd82abfbe2d25983079c4646ea2fe25f743deb86374175f4ead532cbc26c2e917e0f347a7660c1993d0a2738e9d3d12f556244635ac3f37cbf7011f5452f007d78bf53a5d90d17bb69e182ad7c0add48b5ce9a2cd16ca0b1739734677b3af6a2c3daa86db472590107b7dca74e543b2176ff48f1328a494843e43775273c153907047b412cc2095073f00f22784e5b2e9abe9f6e24f8ae41179d93f4a345cbc48fc76b7df05f84cd4b2b8b2a66adc1b005fb8013a37b2427dd745301e8939bcb76aa75baae6d61b7558ce337aded056a23523027ed293465d1aafe16f96d912b5c881e06c0ee8cffdd1702565109323dc2366de6a2435efc541455362e6dcece1df8bce7b848d810ad1c3ebfce6a48facd789fabd2682e238772be29b142ef86a66c59687238e8da2f22f4af2d60b50dc3b35c12911015574c875aa8bba2cd2fce0adf7fb0991d37c8a4367edec1a40c1d4eeb30c4e5b83597f48738979c1c66ce4e880dc7dadcf22a7394a14e9315ac4eef6d0cc3cf87ef8edd109005b5347fb82582895e2dad4caa4e9c8166c0c2c92120e946c9f4a1760333fb3be86064e7e749e8fa6e897943d3d6235b2ea5b94263feebeab225268d032af91e45638577ed220253850ee434cbfd143a846c89fcbfc0faeb7cbadfab608e50063fe736b4c196815eb4c411a0c6f421704ab660c523335db8bff3f7f1e9d803930ef0bc4abccc87bc858ca88afe881721a8f74fd24e20f02"}]}], {0x4e20, 0x4e21, 0xfb, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x100, @void}, "26bc4d426df105a1b58f88af5302632add03e74e52382f19361f1ac1f419c10d8b6bcf60e47c33ead5f2965f642051faafa26d8ebe6a0e0cace9ef28675a63eca98617a63b857c37b5785c467a08a996f9aa07fe5cab460e9de65bd9e2ad58279e4f028fc7a6b55dc1d00e27cb2ad9861d298078b453f5dbb2241454dc9b9bc17b74bdd8ad9bf50703c1d01160085441e3ea5a106541ac9d52358163e17b4702087136898c219933a98f9110629833a0c862f81772042367f47bf94d89459688ae2ecd90d87f258f6f821ae7b9b1ebf9d870f62da8c66c69fd85a5c1e297edea907ab62050183c7dd6ae1d16420da1"}}}}}}}, 0x0) 2.71542765s ago: executing program 1 (id=2371): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="4be88fa3027baaaaaaaaaabb86dd6012100000003a"], 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02008dff0400"}) r3 = socket$netlink(0x10, 0x3, 0x6) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x22}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xffffffffffffff1e, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x100}, @IFLA_GRE_OFLAGS={0x0, 0x3, 0x7}, @IFLA_GRE_IKEY={0x8, 0x4, 0x662c}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_NUM_RX_QUEUES={0x0, 0x20, 0x1000}, @IFLA_GSO_MAX_SEGS={0x0, 0x28, 0x524e}, @IFLA_XDP={0x0, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD, @IFLA_XDP_FLAGS, @IFLA_XDP_EXPECTED_FD, @IFLA_XDP_FD, @IFLA_XDP_FD]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010001000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbffffffff000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c0000000a000000ac1414bb000000000000000000000000053500000301f90009000002030000000002e2ff000000000000"], 0x1ac}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d000030000", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000300)=ANY=[@ANYBLOB="482108fa070211000000080211000001505050505050c008"], 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 2.646144797s ago: executing program 7 (id=2372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001900)={&(0x7f0000001800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd1d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x898e}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}, 0x1, 0x0, 0x0, 0x8084}, 0x24008000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffdee}, 0xb}], 0x1, 0x40000021, 0x0) 254.847231ms ago: executing program 0 (id=2373): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 230.254062ms ago: executing program 1 (id=2374): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="4be88fa3027baaaaaaaaaabb86dd6012100000003a"], 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02008dff0400"}) r3 = socket$netlink(0x10, 0x3, 0x6) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x22}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xffffffffffffff1e, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x100}, @IFLA_GRE_OFLAGS={0x0, 0x3, 0x7}, @IFLA_GRE_IKEY={0x8, 0x4, 0x662c}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_NUM_RX_QUEUES={0x0, 0x20, 0x1000}, @IFLA_GSO_MAX_SEGS={0x0, 0x28, 0x524e}, @IFLA_XDP={0x0, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD, @IFLA_XDP_FLAGS, @IFLA_XDP_EXPECTED_FD, @IFLA_XDP_FD, @IFLA_XDP_FD]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010001000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbffffffff000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c0000000a000000ac1414bb000000000000000000000000053500000301f90009000002030000000002e2ff000000000000"], 0x1ac}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d000030000", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000300)=ANY=[@ANYBLOB="482108fa070211000000080211000001505050505050c008"], 0x18) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) 203.806975ms ago: executing program 3 (id=2375): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003b40)=@newtfilter={0x4a0, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x46c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x56, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x444, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x7, 0xff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xc4, 0xa117, 0x8, 0xab, 0xfffffffa, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x40200, 0x80, 0x1, 0x1, 0x0, 0x4, 0x7, 0x2, 0x1, 0x610, 0x2, 0xb, 0xfb, 0x4, 0xa29, 0x7f, 0x82, 0x200, 0x44, 0x2, 0x1, 0x2, 0x101, 0x10005, 0xdd, 0x5, 0x8, 0x431d3ae0, 0xc03, 0x9, 0x5, 0x9349, 0x1, 0x100, 0x7ff, 0x1, 0x0, 0x8, 0x401, 0x3, 0x6, 0x5, 0x6, 0x19e, 0x2, 0x2, 0xf, 0xc00000, 0x4003ff, 0x7, 0x3326ea0a, 0x8007, 0x80000001, 0x25, 0x1, 0x8, 0x8001, 0x9, 0x6, 0x54773818, 0x8, 0x8001, 0x6, 0x7f, 0x373, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x49e, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x10000, 0x3, 0x2, 0x9, 0x3, 0x7fffffff, 0x101, 0x3, 0xc42, 0x4, 0x6, 0x401, 0x5, 0x0, 0x4, 0x80000001, 0x8000, 0x5, 0x3, 0x5907, 0x8, 0x81, 0x7, 0x4, 0xfffffffc, 0xffff0001, 0x2, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x91e0000, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0x6, 0xdc, 0xd, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x6, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4342, 0xfa52, 0x4, 0x7fff, 0x7, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x1, 0x0, 0x5, 0xe, 0x0, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0x2, 0xf5f, 0x2, 0x0, 0x6, 0x1, 0x9, 0x80, 0x2, 0x0, 0x0, 0xfb, 0x3, 0x8, 0x0, 0x80000001, 0x5, 0x0, 0xb, 0x3159, 0x6, 0xfffffff7, 0xe4f7, 0x6, 0x1, 0xfffffffc, 0x8, 0x9, 0x1c15, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x80000001, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x6, 0x4, 0xfffffffd, 0x3, 0x7, 0x9, 0x7, 0x0, 0x0, 0x1, 0x9, 0x1, 0x3, 0x40, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x7f, 0x4, 0x9, {0x3, 0x1, 0x4, 0x17f, 0x0, 0x1ff}, {0x6, 0x0, 0xff, 0x7, 0x5}, 0x9, 0xe90, 0x6db5cd0}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xa5}}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x1}, 0x2404c084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newchain={0x144, 0x64, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x5, 0x6}, {0xc, 0xd}, {0xf, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xfb}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_u32={{0x8}, {0x100, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'xfrm0\x00'}, @TCA_U32_ACT={0x4}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_POLICE={0x28, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1b}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}, @TCA_U32_HASH={0x8, 0x2, 0x53ef}, @TCA_U32_SEL={0xa4, 0x5, {0x8, 0x4, 0x5, 0xddb8, 0x0, 0x8000, 0x0, 0x291, [{0x100, 0x7fffffff, 0x8001, 0xfffffffe}, {0x80, 0x5, 0x8, 0x5}, {0x0, 0x8a, 0x1, 0xff}, {0x80000000, 0x7, 0xfff, 0x5}, {0x8, 0xffff61c4, 0x40, 0x5}, {0x9, 0x64c3, 0x3, 0x80000001}, {0x2, 0x9, 0x5, 0x200}, {0xa, 0x0, 0x0, 0x6}, {0x81, 0x2, 0x80000001}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x2, 0xe}}]}}, @TCA_RATE={0x6, 0x5, {0x74, 0x40}}]}, 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="000100001600010028bd7000fcdbdf25e0070000000000000000000000000000000002000000000000000000000000004e2100034e220000020080a03b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d432000000200100000000000000000000000000003a3700000000000004000000000000000200000000000000b80a00000000000008000000000000000100000000000000040000000000000003000000000000002200000000000000d2000000000000000400000000000000030000000000000000000000ce000000070000002cbd7000ff340000b0e801002c00000000000000010000000200000008001e0007000000"], 0x100}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000280)=0x3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 134.521814ms ago: executing program 6 (id=2376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={0x1c, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x1c}}, 0x4000800) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@fallback=r4, r4, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0), 0x8) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r3, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 104.012756ms ago: executing program 7 (id=2377): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) sendto$inet6(r3, &(0x7f0000000000)="826b", 0x2, 0xffffffffffffffd6, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x33) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="7105b8060305007f0f400a6302cdb08e7e4afc612f7ebb302b22122ed7fcd20d0d99b3bdd6ab35522e16ea5bac817fc71044d1275307d2934d5d2564b506e3681773e90508f7f5e8bc2324152b06b893f16ad228608af9b0460540e147d13076960146391b1187bacb94c82df29347010c0e0300004509d85e5cd0c2d740484b962609e0656be06703b9d5400aa85bd247f1f24fa5efd635c500f64fb0289afd64bfcd15d2bbf47dbe376c516aa37afacb5fe21c861b4741914c17"], 0xbb) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r11, 0x3f}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e105000000890600001144ee1611", 0x1f}, {&(0x7f0000000f00)="0b676ae7ce0aa301d6ff23b6557b3e02be56268cb67cc8df76c62092c9dc73bf02e2fbfd0d14f594db9a8faca2d1ee15bc4c2c588479eb0b462fed8714ae90e42c4c1477864b7c37d96279e5c380cb5f53b2983f7e1ec1fb074a8d4be7374be1c9b65b8587e435b5dc319cd5d25258ed81710608c0331449192c63736d71c7fbb72bd9ef8a3be726b464f445638ea32879fe12b88ebe8e141ba4b0efe8ae02c225a3c07cbd1c65a5f9a57267f88213743ea2ab323a2f8f1c50ecca7b6ee9a0fea79147e75e0eca42d7cf6d4d9a1e658e44cd8dc36a7b91cca77237962b41d760dd6e3aed631486ad0f453ef4501e60f923d992103a3845a67fca331897cac2bd51790acf2661efa41d90eda2061ce1aa53cbeab80229844f3954fe9ac6447af516907739ea3e6bbb832770194e6e655ec3a7ab80374b17059080c1fa21970d0147401a1ca1e58e3c86d77d116f4208299d7a3665898b2009c3752c786e4b45042b51366a133974ec564c9d2f0d7cbad234223a19b52e0efeccd654fd2bdd57df81cd7b478ef2b59f8446075d812f9d62e63d1b38375765aa7d63965484ef4d9b0b90ec00b39ac0430cbfee05cd73c34ad9922f50292d69194220339e3c923a9121d0e5ab3b7f", 0x1c6}, {&(0x7f00000022c0)="03b08259909695eb5ca0294fba511a888314cac2cc4b8fcfa8a6395f98c9495276871c1415f144fc9b74b6be1832c68c5a06cd992e2fa712186cb328d237fb2b3daa49d29c7221005ae22dfd2fa279a3a0ebe73b3093e6f66d7ab7e24362e64a1bbd1f4e7a6e2f2cf522cf9b4437037aed5091737c0883648a89f0c8ad70436a97e52561c4ac61cc619e5cc62e9a9b0fec63", 0x92}], 0x3}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f00000002c0)={'dummy0\x00', @random="0100"}) 45.874295ms ago: executing program 0 (id=2378): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x6720f15ce8555866) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) accept4(r3, 0x0, 0x0, 0x80000) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000201010200000000000000000a0000073c0002800c00028005000100210000002c00018014620300fc01000000000000000000000000000114000400fe8000000000000000000000000000aa"], 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}]}, 0x20}}, 0x40000) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000840)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000800000000fedbdf251700000008000300", @ANYRES32=r9, @ANYBLOB="3000308014000400403a050c5baee2004ef2b6d713459a7a100001800800090000000000040003800500020000000000c24e85e04cf859be801287ccb31c6b75208f0b2764f9003105fa78dbe34e8644a20b7210dce304278e9f8f6424bf26ba9887734dddba41982a7df4ba654d6eff8cecc0394f0b309a28251e4930e15f414b92b19db9040d61ed7f5eb1682470436fed294e821e44f2fd865938b06985732074218be3b1a4197d1ef732"], 0x4c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x1, 0x46af, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40011}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000018b3bfba5373f1dcdaff00000a800000ff0300060000000014000100200100000000000000000000000000005320d752c67de4dd42ad5942a0dd993bb82199addc41b9b064921bcc70979458d8447f31b9d70cf085850f65dedcefe9d8491a724c35ef0ae9354f53dbbd808da3bc14ee868b36de22553593e58e4834a362bdbf26f31976634d7c69553f1787a9b3aefafbff02b9d7c95cf538da92ccdeacc0fa"], 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x125) 0s ago: executing program 3 (id=2379): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) listen(r10, 0x0) close(r10) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xfffe, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x100, 0x10000000, 0xf, 0x8}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x10000}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r13, 0x30}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) kernel console output (not intermixed with test programs): ys_seg 4 prio class 2 [ 298.846433][ T1591] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 298.849529][T10964] tipc: Enabled bearer , priority 10 [ 298.863288][ T1591] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 298.864747][ T1591] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 298.883024][ T1591] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 298.892416][ T1591] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 298.902449][ T5643] ldm_validate_partition_table(): Disk read failed. [ 298.902654][T10973] netlink: 'syz.1.1316': attribute type 1 has an invalid length. [ 298.919893][ T5643] Dev nbd5: unable to read RDB block 0 [ 298.928621][ T5643] nbd5: unable to read partition table [ 298.961779][ T5643] ldm_validate_partition_table(): Disk read failed. [ 298.978357][T10971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1315'. [ 298.987613][ T5643] Dev nbd5: unable to read RDB block 0 [ 298.997490][ T5643] nbd5: unable to read partition table [ 299.030871][T10964] netlink: 'syz.2.1315': attribute type 1 has an invalid length. [ 299.242982][T10964] bond6: entered promiscuous mode [ 299.270519][T10964] 8021q: adding VLAN 0 to HW filter on device bond6 [ 299.330249][T10964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1315'. [ 299.414963][T10984] xt_hashlimit: size too large, truncated to 1048576 [ 299.453250][T10988] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 299.462551][T10964] bond6: entered allmulticast mode [ 299.496865][T10994] bond6: (slave bridge2): making interface the new active one [ 299.518544][T10994] bridge2: entered promiscuous mode [ 299.532585][T10994] bridge2: entered allmulticast mode [ 299.549647][T10994] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 299.792837][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 299.904903][T11001] netlink: 'syz.3.1323': attribute type 1 has an invalid length. [ 299.975086][T11005] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1324'. [ 300.020053][T11005] netlink: 'syz.0.1324': attribute type 1 has an invalid length. [ 300.041644][T11008] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1325'. [ 300.096599][T11009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1322'. [ 300.293059][T11004] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 300.344509][T11012] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1326'. [ 300.687645][T11022] netlink: 'syz.2.1332': attribute type 1 has an invalid length. [ 300.922234][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1335'. [ 301.008539][T11033] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.208464][T11050] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1338'. [ 301.342215][T11047] netlink: 'syz.1.1338': attribute type 1 has an invalid length. [ 301.362724][T11033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.375671][T11033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.542347][ T1019] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.568429][ T1019] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.596090][ T1019] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.620105][ T1019] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.815461][T11056] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 301.855789][T11059] netlink: 'syz.1.1341': attribute type 1 has an invalid length. [ 302.224862][ T7703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.253231][ T7703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.491936][T11079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.802542][T11096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.931485][T11084] geneve0: left promiscuous mode [ 302.940628][T11084] macvlan2: left promiscuous mode [ 302.964094][T11084] bond4: left promiscuous mode [ 302.975841][T11084] bond4: left allmulticast mode [ 303.009684][T11084] bridge3: left promiscuous mode [ 303.024468][T11084] bridge3: left allmulticast mode [ 303.121385][ T5720] net_ratelimit: 70 callbacks suppressed [ 303.121405][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.137002][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.484045][T11094] bond3: left promiscuous mode [ 303.488967][T11094] gre2: left promiscuous mode [ 303.497572][T11094] bond5: left promiscuous mode [ 303.502904][T11094] bridge0: left promiscuous mode [ 303.508276][T11094] bridge1: left promiscuous mode [ 303.517308][T11094] bond6: left promiscuous mode [ 303.524796][T11094] bridge2: left promiscuous mode [ 303.532478][ T36] bond5: (slave bridge0): link status up again after 0 ms [ 303.544053][ T1019] netdevsim netdevsim0 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.561129][ T1019] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.575204][ T7703] bond5: (slave bridge0): link status up again after 0 ms [ 303.580864][ T1019] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.604689][T11110] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0 [ 303.622297][ T7703] bond5: (slave bridge0): link status up again after 0 ms [ 303.636476][ T1019] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.674168][ T7703] bond5: (slave bridge0): link status up again after 0 ms [ 303.707112][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 303.749512][T11112] IPv6: Can't replace route, no match found [ 303.787487][T11114] netlink: 'syz.5.1360': attribute type 1 has an invalid length. [ 303.891914][T11118] __nla_validate_parse: 2 callbacks suppressed [ 303.891936][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1362'. [ 303.917641][T11119] netlink: 'syz.3.1361': attribute type 1 has an invalid length. [ 303.934414][T11118] openvswitch: netlink: Key type 15622 is out of range max 32 [ 303.941701][ T7699] bond5: (slave bridge0): failed to get link speed/duplex [ 304.062332][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 304.463055][T11134] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1369'. [ 304.654321][T11136] nbd4: detected capacity change from 0 to 63 [ 304.693629][T11141] block nbd2: NBD_DISCONNECT [ 304.700581][T11141] block nbd2: Send disconnect failed -32 [ 304.708194][T11141] block nbd2: shutting down sockets [ 304.723077][ C0] blk_print_req_error: 114 callbacks suppressed [ 304.723096][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.738676][ C0] buffer_io_error: 138 callbacks suppressed [ 304.738696][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 304.762501][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 304.771784][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 304.779657][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 304.787558][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 304.796761][T11136] sctp: [Deprecated]: syz.2.1370 (pid 11136) Use of int in max_burst socket option deprecated. [ 304.796761][T11136] Use struct sctp_assoc_value instead [ 304.806106][ T1520] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 304.823178][ T1520] Buffer I/O error on dev nbd2, logical block 0, async page read [ 304.831392][ T1520] Buffer I/O error on dev nbd2, logical block 1, async page read [ 304.839386][ T1520] Buffer I/O error on dev nbd2, logical block 2, async page read [ 304.848580][ T1520] Buffer I/O error on dev nbd2, logical block 3, async page read [ 304.856693][ T13] wlan1: Trigger new scan to find an IBSS to join [ 304.865196][ T1520] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 304.874873][ T1520] Buffer I/O error on dev nbd2, logical block 0, async page read [ 304.883390][ T1520] Buffer I/O error on dev nbd2, logical block 1, async page read [ 304.891972][ T1520] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 304.903716][ T1520] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 304.914231][ T1520] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 304.924384][ T1520] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 304.935410][ T1520] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 304.945601][ T5629] ldm_validate_partition_table(): Disk read failed. [ 304.952829][ T1520] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 304.964038][ T5629] Dev nbd2: unable to read RDB block 0 [ 304.973053][ T5629] nbd2: unable to read partition table [ 305.017082][ T5629] ldm_validate_partition_table(): Disk read failed. [ 305.049008][ T5629] Dev nbd2: unable to read RDB block 0 [ 305.076244][ T5629] nbd2: unable to read partition table [ 305.178617][T11159] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1375'. [ 305.289044][ T4937] block nbd4: Receive control failed (result -104) [ 305.313630][T11157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.505559][T11168] netlink: 'syz.5.1380': attribute type 1 has an invalid length. [ 305.634856][T11176] netlink: 'syz.0.1383': attribute type 1 has an invalid length. [ 305.814898][T11185] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1387'. [ 305.847163][T11186] xt_hashlimit: size too large, truncated to 1048576 [ 305.980135][T11191] netlink: 'syz.5.1386': attribute type 4 has an invalid length. [ 306.104873][T11195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1391'. [ 306.256636][T11197] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1392'. [ 306.285326][T11200] netlink: 'syz.0.1393': attribute type 16 has an invalid length. [ 306.294119][T11200] netlink: 'syz.0.1393': attribute type 5 has an invalid length. [ 306.313339][T11197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.583896][T11210] netlink: 'syz.0.1398': attribute type 1 has an invalid length. [ 306.708687][T11215] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1400'. [ 306.978667][T11228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1407'. [ 307.086558][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1406'. [ 307.264235][T11241] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1413'. [ 307.488381][T11248] netlink: 'syz.1.1415': attribute type 1 has an invalid length. [ 307.661431][T11255] netlink: 'syz.5.1418': attribute type 1 has an invalid length. [ 307.753400][T11256] lo speed is unknown, defaulting to 1000 [ 307.891369][ T1019] wlan1: Trigger new scan to find an IBSS to join [ 308.131345][ C1] net_ratelimit: 37 callbacks suppressed [ 308.131365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.219636][ T13] bond5: (slave bridge0): failed to get link speed/duplex [ 308.351340][ T81] bond5: (slave bridge0): failed to get link speed/duplex [ 308.472106][ T81] bond5: (slave bridge0): failed to get link speed/duplex [ 308.591699][ T1019] bond5: (slave bridge0): failed to get link speed/duplex [ 308.692290][T11265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.721253][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 308.741566][T11275] debugfs: '1ù!^' already exists in 'ieee80211' [ 308.841897][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 308.981115][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 309.090917][T11301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.102480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.348021][T11313] __nla_validate_parse: 4 callbacks suppressed [ 309.348041][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1440'. [ 309.368435][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1440'. [ 309.567992][T11322] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1444'. [ 309.717179][T11324] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1445'. [ 309.767242][T11324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.038332][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 310.196916][T11352] netlink: 'syz.0.1456': attribute type 1 has an invalid length. [ 310.349977][T11362] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1462'. [ 310.455187][ T5629] block nbd3: NBD_DISCONNECT [ 310.469300][ T5629] block nbd3: Send disconnect failed -32 [ 310.476312][ T5629] block nbd3: Send disconnect failed -32 [ 310.482316][ T5629] block nbd3: Send disconnect failed -32 [ 310.489009][ T5629] block nbd3: shutting down sockets [ 310.762571][ T5629] udevd[5629]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 310.813586][T11380] syzkaller0: entered promiscuous mode [ 310.841317][T11380] syzkaller0: entered allmulticast mode [ 310.851330][ T7699] wlan1: Trigger new scan to find an IBSS to join [ 311.402081][T11373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.730292][T11407] netlink: 'syz.5.1477': attribute type 1 has an invalid length. [ 311.785503][ T7699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.897165][ T36] wlan1: Trigger new scan to find an IBSS to join [ 312.462675][ T4937] Bluetooth: hci5: link tx timeout [ 312.471482][ T4937] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 312.638653][T11446] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1488'. [ 312.789082][T11440] bridge2: left promiscuous mode [ 312.836235][T11440] bond4: left promiscuous mode [ 312.852137][T11440] bond0: left promiscuous mode [ 312.861283][T11440] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 312.869130][T11440] geneve1: left promiscuous mode [ 312.876058][T11440] bond5: left promiscuous mode [ 312.885178][T11440] veth0_to_bond: left promiscuous mode [ 313.076736][ T4937] Bluetooth: hci5: link tx timeout [ 313.082801][ T4937] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 313.123759][ T4937] Bluetooth: hci5: link tx timeout [ 313.129013][ T4937] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 313.187117][T11462] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1492'. [ 313.243969][ T36] net_ratelimit: 64 callbacks suppressed [ 313.243989][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 313.411182][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 313.487989][T11476] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1497'. [ 313.508077][T11473] netlink: 'syz.1.1496': attribute type 1 has an invalid length. [ 313.531163][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 313.601735][ T4937] Bluetooth: hci5: link tx timeout [ 313.607087][ T4937] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 313.655198][ T4937] Bluetooth: hci5: link tx timeout [ 313.660455][ T4937] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 313.671113][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 313.791210][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 313.867383][T11487] netlink: 'syz.5.1502': attribute type 1 has an invalid length. [ 313.892146][T11495] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1501'. [ 313.921342][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 313.949187][T11495] netlink: 'syz.1.1501': attribute type 1 has an invalid length. [ 314.041411][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 314.049318][T11499] xt_hashlimit: size too large, truncated to 1048576 [ 314.171679][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 314.337426][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 314.449593][ T4937] Bluetooth: hci5: link tx timeout [ 314.455437][ T4937] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.471759][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 314.499764][T11513] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1506'. [ 314.532842][ T4937] Bluetooth: hci5: command 0x0406 tx timeout [ 314.803699][T11523] netlink: 'syz.3.1511': attribute type 1 has an invalid length. [ 314.852819][ T13] wlan1: Trigger new scan to find an IBSS to join [ 314.925734][T11526] netlink: 'syz.0.1512': attribute type 4 has an invalid length. [ 314.977040][T11528] netlink: 'syz.0.1512': attribute type 4 has an invalid length. [ 315.451494][T11543] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1516'. [ 315.484299][T11543] netlink: 'syz.0.1516': attribute type 1 has an invalid length. [ 315.950249][T11567] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1525'. [ 316.229837][T11578] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1530'. [ 316.386827][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'. [ 316.493335][T11588] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 316.534493][T11590] syz.0.1535 (11590) used obsolete PPPIOCDETACH ioctl [ 317.174199][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.241595][T11609] netlink: 'syz.5.1542': attribute type 1 has an invalid length. [ 317.612734][T11630] syzkaller1: entered promiscuous mode [ 317.618479][T11630] syzkaller1: entered allmulticast mode [ 317.683075][T11628] netlink: 'syz.3.1552': attribute type 1 has an invalid length. [ 317.891244][ T7703] wlan1: Trigger new scan to find an IBSS to join [ 318.053538][T11650] netlink: 'syz.1.1562': attribute type 1 has an invalid length. [ 318.261570][ T7705] net_ratelimit: 1062 callbacks suppressed [ 318.261591][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 318.391975][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 318.506574][T11669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.519653][T11669] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.540373][T11669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.603497][T11669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.619900][T11669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.654337][T11669] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.665850][T11669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.694874][T11669] veth1_vlan: left promiscuous mode [ 318.702121][T11669] veth0_vlan: left promiscuous mode [ 318.709568][T11669] veth0_vlan: entered promiscuous mode [ 318.718250][T11669] veth1_vlan: entered promiscuous mode [ 318.732450][T11669] veth1_macvtap: left promiscuous mode [ 318.742473][T11669] veth0_macvtap: left promiscuous mode [ 318.749643][T11669] veth0_macvtap: entered promiscuous mode [ 318.767232][T11669] veth1_macvtap: entered promiscuous mode [ 318.779479][T11673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.790468][T11669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 318.803465][T11669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 318.813128][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.827115][T11669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 318.857489][T11669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 318.890253][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.897559][ T7705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.914911][T11675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.924203][ T7705] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.924516][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.931425][ T7705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.065578][ T7703] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.092291][ T7703] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.118403][ T7703] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.136586][ T7703] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.191166][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 319.313645][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 319.366565][T11693] netlink: 'syz.3.1580': attribute type 4 has an invalid length. [ 319.383687][T11687] netlink: 'syz.0.1577': attribute type 1 has an invalid length. [ 319.394125][T11693] netlink: 'syz.3.1580': attribute type 4 has an invalid length. [ 319.407167][T11689] netlink: 'syz.5.1578': attribute type 1 has an invalid length. [ 319.504562][ T13] bond5: (slave bridge0): failed to get link speed/duplex [ 319.621114][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 319.715113][T11701] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 319.722809][ T29] IPVS: starting estimator thread 0... [ 319.821090][T11705] IPVS: using max 36 ests per chain, 86400 per kthread [ 319.912839][ T4937] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 319.926308][ T4937] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 319.936680][ T4937] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 319.946534][ T4937] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 319.956812][ T4937] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 319.984394][T11703] "syz.5.1583" (11703) uses obsolete ecb(arc4) skcipher [ 320.399301][T11730] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1590'. [ 320.478655][T11739] netlink: 'syz.5.1592': attribute type 14 has an invalid length. [ 320.496823][T11735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.508546][T11739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1592'. [ 320.538016][T11739] netlink: 'syz.5.1592': attribute type 14 has an invalid length. [ 320.546814][ T81] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.551570][T11739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1592'. [ 320.557217][ T81] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.577759][ T81] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.594654][ T81] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.622181][T11710] lo speed is unknown, defaulting to 1000 [ 321.120149][T11710] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.147021][T11710] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.166243][T11710] bridge_slave_0: entered allmulticast mode [ 321.166253][T11764] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1595'. [ 321.204985][T11710] bridge_slave_0: entered promiscuous mode [ 321.226628][T11710] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.240606][T11757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.252217][T11710] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.269433][T11710] bridge_slave_1: entered allmulticast mode [ 321.302107][T11710] bridge_slave_1: entered promiscuous mode [ 321.385844][T11710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.399564][T11710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.451710][T11710] team0: Port device team_slave_0 added [ 321.460802][T11710] team0: Port device team_slave_1 added [ 321.500585][T11710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.508070][T11710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.537456][T11710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.553731][T11710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.560739][T11710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.601358][T11710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.686633][T11710] hsr_slave_0: entered promiscuous mode [ 321.702554][T11710] hsr_slave_1: entered promiscuous mode [ 321.719113][T11710] debugfs: 'hsr0' already exists in 'hsr' [ 321.726622][T11710] Cannot create hsr debugfs directory [ 321.879086][T11780] netlink: 'syz.0.1604': attribute type 1 has an invalid length. [ 322.051387][ T5627] Bluetooth: hci6: command tx timeout [ 322.300060][T11710] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 322.350583][T11710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 322.363923][T11710] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 322.394461][T11710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 322.406033][T11710] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 322.430922][T11710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 322.443334][T11710] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 322.467734][T11710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.486209][ T7701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.502538][ T7701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.522355][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1612'. [ 322.586824][T11793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1610'. [ 322.632549][T11808] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1613'. [ 322.694091][T11800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.715984][T11710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.759695][T11710] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.784589][ T7703] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.791772][ T7703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.828581][T11810] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.850372][T11810] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.919609][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.926934][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.313451][ T7703] net_ratelimit: 17 callbacks suppressed [ 323.313474][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 323.492115][ T13] bond5: (slave bridge0): failed to get link speed/duplex [ 323.499016][T11829] netlink: 'syz.5.1618': attribute type 3 has an invalid length. [ 323.631252][ T13] bond5: (slave bridge0): failed to get link speed/duplex [ 323.667713][T11837] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1619'. [ 323.683365][T11837] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1619'. [ 323.694720][T11837] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1619'. [ 323.763950][ T13] bond5: (slave bridge0): failed to get link speed/duplex [ 323.893409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.899421][ T7701] bond5: (slave bridge0): failed to get link speed/duplex [ 323.904573][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.919082][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.927509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.017244][T11710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.112841][ T81] bond5: (slave bridge0): failed to get link speed/duplex [ 324.136620][ T5627] Bluetooth: hci6: command tx timeout [ 324.301409][T11854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.897801][T11710] veth0_vlan: entered promiscuous mode [ 324.931697][ T36] wlan1: Trigger new scan to find an IBSS to join [ 324.985887][T11710] veth1_vlan: entered promiscuous mode [ 325.094351][T11710] veth0_macvtap: entered promiscuous mode [ 325.150773][T11710] veth1_macvtap: entered promiscuous mode [ 325.197310][T11880] netlink: 'syz.1.1630': attribute type 1 has an invalid length. [ 325.243095][T11710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.357992][T11710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.523673][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.544797][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.629022][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.677669][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.926085][ T7699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.978575][ T7699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.998920][T11915] syzkaller0: entered promiscuous mode [ 326.026704][T11915] syzkaller0: entered allmulticast mode [ 326.218952][ T5627] Bluetooth: hci6: command tx timeout [ 326.562679][T11909] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.850846][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.877990][T11928] netlink: 'syz.1.1640': attribute type 10 has an invalid length. [ 326.893892][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.962919][T11928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 327.026645][T11928] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 327.096056][T11934] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 327.199370][T11941] __nla_validate_parse: 4 callbacks suppressed [ 327.199390][T11941] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1644'. [ 328.294170][ T5627] Bluetooth: hci6: command tx timeout [ 328.531893][ T7705] net_ratelimit: 51 callbacks suppressed [ 328.531913][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 328.603603][T11976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.645449][T11976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.679706][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.695177][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 328.718886][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.742101][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.767335][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.797377][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.825350][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.852490][ T13] wlan1: Trigger new scan to find an IBSS to join [ 329.156381][T11989] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1658'. [ 329.963310][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.350712][T12057] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1671'. [ 334.160906][T12067] netlink: 'syz.6.1673': attribute type 1 has an invalid length. [ 334.171159][ T13] net_ratelimit: 125 callbacks suppressed [ 334.171180][ T13] bond5: (slave bridge0): failed to get link speed/duplex [ 334.345541][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 334.393888][T12082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1676'. [ 334.433209][T12082] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1676'. [ 334.471324][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 334.485172][T12082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.613551][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 334.646948][T12086] tipc: Enabling of bearer rejected, already enabled [ 334.731070][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 334.789112][T12093] netlink: 'syz.6.1682': attribute type 1 has an invalid length. [ 334.799868][T12093] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1682'. [ 334.809005][T12093] netlink: 'syz.6.1682': attribute type 2 has an invalid length. [ 334.817047][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1682'. [ 334.851486][ T7699] bond5: (slave bridge0): failed to get link speed/duplex [ 334.960626][T12099] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1684'. [ 334.973314][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 335.086022][T12103] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 335.102186][ T7699] bond5: (slave bridge0): failed to get link speed/duplex [ 335.118490][ T1520] block nbd4: Possible stuck request ffff8880279ae000: control (read@0,4096B). Runtime 30 seconds [ 335.279445][T12115] netlink: 'syz.0.1685': attribute type 10 has an invalid length. [ 335.289009][T12115] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1685'. [ 335.376443][T12103] 8021q: adding VLAN 0 to HW filter on device bond5 [ 335.436307][T12107] bond5: (slave dummy0): making interface the new active one [ 335.457232][T12107] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 335.466797][T12115] dummy0: entered promiscuous mode [ 335.483462][T12115] bond5: (slave dummy0): Releasing active interface [ 335.550396][T12116] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.569053][T12116] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.584790][T12123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1690'. [ 335.783515][T12123] bond6: entered promiscuous mode [ 335.805030][T12130] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1692'. [ 335.810718][T12123] 8021q: adding VLAN 0 to HW filter on device bond6 [ 335.914113][T12124] vlan3: entered allmulticast mode [ 335.935150][T12124] bond6: entered allmulticast mode [ 335.961104][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 336.107467][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 336.165920][T12136] netlink: 'syz.1.1694': attribute type 1 has an invalid length. [ 336.241359][T12142] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1697'. [ 336.330017][T12148] netlink: 'syz.0.1695': attribute type 1 has an invalid length. [ 336.691849][T12155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.886110][T12170] syzkaller0: entered promiscuous mode [ 336.920729][T12170] syzkaller0: entered allmulticast mode [ 337.500338][T12165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.544892][T12189] block nbd6: not configured, cannot reconfigure [ 337.602817][T12189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.007128][T12206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.631739][T12227] __nla_validate_parse: 11 callbacks suppressed [ 338.631760][T12227] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1716'. [ 338.650786][T12227] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1716'. [ 338.674017][T12227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.845093][T12233] syzkaller0: entered promiscuous mode [ 338.850652][T12233] syzkaller0: entered allmulticast mode [ 338.863132][T12233] tipc: Started in network mode [ 338.868069][T12233] tipc: Node identity 1ac2616d31b1, cluster identity 4711 [ 338.876044][T12233] tipc: Enabled bearer , priority 0 [ 338.884552][T12232] tipc: Resetting bearer [ 338.911511][T12232] tipc: Disabling bearer [ 339.143383][T12238] syzkaller0: entered promiscuous mode [ 339.148997][T12238] syzkaller0: entered allmulticast mode [ 339.251429][ T7705] net_ratelimit: 27 callbacks suppressed [ 339.251450][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 339.354901][T12243] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1721'. [ 339.371253][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 339.393955][T12245] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1722'. [ 339.481074][ T7701] bond5: (slave bridge0): failed to get link speed/duplex [ 339.593504][T12251] lo speed is unknown, defaulting to 1000 [ 339.661283][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 339.771215][ T7701] bond5: (slave bridge0): failed to get link speed/duplex [ 339.828106][T12235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.046215][T12261] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1724'. [ 340.091100][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 340.119583][T12258] netlink: 'syz.1.1725': attribute type 1 has an invalid length. [ 340.227381][ T7701] bond5: (slave bridge0): failed to get link speed/duplex [ 340.287151][T12269] netlink: 'syz.6.1727': attribute type 1 has an invalid length. [ 340.385097][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 340.502062][ T7701] bond5: (slave bridge0): failed to get link speed/duplex [ 340.515194][T12272] xt_hashlimit: size too large, truncated to 1048576 [ 340.573169][T12274] siw: device registration error -23 [ 340.691466][ T7699] bond5: (slave bridge0): failed to get link speed/duplex [ 340.916216][T12280] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1731'. [ 340.945022][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'. [ 341.020204][T12283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.205543][T12289] syzkaller0: entered promiscuous mode [ 341.211233][T12289] syzkaller0: entered allmulticast mode [ 341.295976][T12291] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1735'. [ 341.505484][T12298] netlink: 'syz.6.1738': attribute type 4 has an invalid length. [ 341.552891][T12298] netlink: 'syz.6.1738': attribute type 4 has an invalid length. [ 341.853017][T12304] netlink: 'syz.0.1740': attribute type 1 has an invalid length. [ 342.397301][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 342.460432][T12314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 342.815731][T12318] syzkaller0: entered promiscuous mode [ 342.837061][T12318] syzkaller0: entered allmulticast mode [ 342.873583][T12336] netlink: 'syz.6.1745': attribute type 1 has an invalid length. [ 342.924594][T12342] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1746'. [ 343.138213][T12349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1747'. [ 343.575163][T12337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.621314][T12352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.779443][T12358] netlink: 'syz.1.1749': attribute type 4 has an invalid length. [ 343.818471][ T5754] lo speed is unknown, defaulting to 1000 [ 343.827999][ T5754] syz2: Port: 1 Link DOWN [ 343.833653][T12358] netlink: 'syz.1.1749': attribute type 4 has an invalid length. [ 343.844731][ T5754] lo speed is unknown, defaulting to 1000 [ 343.853839][ T5754] syz2: Port: 1 Link ACTIVE [ 344.020651][T12365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1751'. [ 344.103223][T12365] 8021q: adding VLAN 0 to HW filter on device bond6 [ 344.117573][T12371] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1752'. [ 344.130375][T12370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.145712][T12370] bond6: (slave bond0): Enslaving as an active interface with an up link [ 344.163512][T12365] bond6: entered promiscuous mode [ 344.168799][T12365] bond6: entered allmulticast mode [ 344.174229][T12365] bond0: entered allmulticast mode [ 344.290783][T12372] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1753'. [ 344.301247][ T12] net_ratelimit: 27 callbacks suppressed [ 344.301270][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 344.409468][T12376] block nbd6: not configured, cannot reconfigure [ 344.439441][T12376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.450217][ T1019] bond5: (slave bridge0): failed to get link speed/duplex [ 344.488700][T12383] syzkaller0: entered promiscuous mode [ 344.494706][T12383] syzkaller0: entered allmulticast mode [ 344.645468][T12393] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1758'. [ 344.695863][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 344.828015][T12402] netlink: 'syz.1.1761': attribute type 1 has an invalid length. [ 344.844565][T12394] syzkaller0: entered promiscuous mode [ 344.856168][T12394] syzkaller0: entered allmulticast mode [ 344.892352][ T7699] bond5: (slave bridge0): failed to get link speed/duplex [ 344.947042][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'. [ 344.958226][T12407] netlink: 'syz.0.1762': attribute type 1 has an invalid length. [ 345.009488][T12407] bond7: (slave bridge5): Enslaving as a backup interface with an up link [ 345.021760][ T1019] bond5: (slave bridge0): failed to get link speed/duplex [ 345.038757][T12407] macvlan3: entered promiscuous mode [ 345.044520][T12407] macvlan3: entered allmulticast mode [ 345.050697][T12407] bond7: entered promiscuous mode [ 345.056456][T12407] bridge5: entered promiscuous mode [ 345.062668][T12407] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 345.070539][T12407] bond7: left promiscuous mode [ 345.075630][T12407] bridge5: left promiscuous mode [ 345.131435][ T7699] bond5: (slave bridge0): failed to get link speed/duplex [ 345.251591][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 345.261771][T12412] netlink: 'syz.0.1763': attribute type 4 has an invalid length. [ 345.273516][T12412] netlink: 'syz.0.1763': attribute type 4 has an invalid length. [ 345.361135][ T1019] bond5: (slave bridge0): failed to get link speed/duplex [ 345.471072][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 345.484142][T12396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 345.512243][T12417] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1764'. [ 345.631128][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 345.693997][T12420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1765'. [ 346.222679][ T5629] udevd[5629]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 346.282866][ T5629] udevd[5629]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 346.330659][T12445] tipc: Enabled bearer , priority 0 [ 346.351497][T12445] syzkaller0: entered promiscuous mode [ 346.367416][T12445] syzkaller0: entered allmulticast mode [ 346.443724][T12445] tipc: Resetting bearer [ 346.483218][T12444] tipc: Resetting bearer [ 346.511666][T12444] tipc: Disabling bearer [ 346.522977][T12443] syzkaller0: entered promiscuous mode [ 346.528589][T12443] syzkaller0: entered allmulticast mode [ 346.552447][T12454] syzkaller0: entered promiscuous mode [ 346.558056][T12454] syzkaller0: entered allmulticast mode [ 346.745245][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1773'. [ 346.976667][T12463] netlink: 'syz.6.1775': attribute type 4 has an invalid length. [ 347.014173][T12463] netlink: 'syz.6.1775': attribute type 4 has an invalid length. [ 347.045056][T12446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.798641][T12467] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 349.352957][ T7705] net_ratelimit: 32 callbacks suppressed [ 349.352980][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 349.473008][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 349.581266][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 349.693335][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 349.802838][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 350.050764][T12473] netlink: 'syz.6.1778': attribute type 1 has an invalid length. [ 350.351184][ T1019] bond5: (slave bridge0): failed to get link speed/duplex [ 350.683528][T12491] Cannot find del_set index 4 as target [ 350.734132][ T7701] bond5: (slave bridge0): failed to get link speed/duplex [ 350.852828][ T7701] bond5: (slave bridge0): failed to get link speed/duplex [ 350.991089][ T7701] bond5: (slave bridge0): failed to get link speed/duplex [ 351.103012][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.203693][ T4937] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 351.218821][ T4937] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 351.229509][ T4937] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 351.240352][ T4937] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 351.254314][ T4937] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 351.468859][T12509] netlink: 'syz.1.1789': attribute type 4 has an invalid length. [ 351.548811][T12514] netlink: 'syz.1.1789': attribute type 4 has an invalid length. [ 351.684668][ T29] lo speed is unknown, defaulting to 1000 [ 351.689674][ T5754] lo speed is unknown, defaulting to 1000 [ 351.940108][T12523] syzkaller0: entered promiscuous mode [ 351.959771][T12523] syzkaller0: entered allmulticast mode [ 351.989586][T12523] tipc: Enabled bearer , priority 0 [ 352.052678][T12523] tipc: Resetting bearer [ 352.093473][T12522] tipc: Resetting bearer [ 352.164008][T12522] tipc: Disabling bearer [ 352.316657][T12538] syzkaller0: entered promiscuous mode [ 352.340198][T12538] syzkaller0: entered allmulticast mode [ 352.426148][T12498] lo speed is unknown, defaulting to 1000 [ 352.474459][T12541] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1794'. [ 352.870986][T12527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.173972][T12548] syzkaller0: entered promiscuous mode [ 353.203668][T12548] syzkaller0: entered allmulticast mode [ 353.323760][T12498] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.333044][ T4937] Bluetooth: hci7: command tx timeout [ 353.344523][T12498] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.356922][T12498] bridge_slave_0: entered allmulticast mode [ 353.365799][T12498] bridge_slave_0: entered promiscuous mode [ 353.408958][T12559] tipc: Enabled bearer , priority 0 [ 353.429265][T12498] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.448481][T12498] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.463232][T12498] bridge_slave_1: entered allmulticast mode [ 353.471766][T12498] bridge_slave_1: entered promiscuous mode [ 353.479631][T12563] bridge0: port 1(syz_tun) entered blocking state [ 353.486729][T12563] bridge0: port 1(syz_tun) entered disabled state [ 353.493934][T12563] syz_tun: entered allmulticast mode [ 353.507314][T12563] syz_tun: entered promiscuous mode [ 353.569277][T12547] tipc: Resetting bearer [ 353.611986][T12547] tipc: Disabling bearer [ 353.618770][T12565] SET target dimension over the limit! [ 354.748188][T12580] netlink: 'syz.0.1802': attribute type 4 has an invalid length. [ 354.800181][T12584] netlink: 'syz.0.1802': attribute type 4 has an invalid length. [ 355.412090][ T4937] Bluetooth: hci7: command tx timeout [ 355.582885][ T5754] net_ratelimit: 12 callbacks suppressed [ 355.582903][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.264252][T12498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.277251][T12498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.301451][ T7701] bond5: (slave bridge0): failed to get link speed/duplex [ 356.470225][T12498] team0: Port device team_slave_0 added [ 356.496090][T12498] team0: Port device team_slave_1 added [ 356.510116][T12592] netdevsim netdevsim3 €Â: renamed from netdevsim0 (while UP) [ 356.548094][T12595] xt_hashlimit: size too large, truncated to 1048576 [ 356.589108][T12498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.596491][T12498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.644968][T12498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.668203][T12498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.682581][T12498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.737885][T12498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.762290][ T7701] bond5: (slave bridge0): failed to get link speed/duplex [ 357.010751][T12498] hsr_slave_0: entered promiscuous mode [ 357.027404][T12498] hsr_slave_1: entered promiscuous mode [ 357.041551][T12498] debugfs: 'hsr0' already exists in 'hsr' [ 357.055618][T12498] Cannot create hsr debugfs directory [ 357.102027][ T7699] bond5: (slave bridge0): failed to get link speed/duplex [ 357.341378][T12617] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1810'. [ 357.352049][T12608] syzkaller0: entered promiscuous mode [ 357.365838][T12608] syzkaller0: entered allmulticast mode [ 357.494132][ T4937] Bluetooth: hci7: command tx timeout [ 358.066774][T12614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 358.145438][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.157808][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.185265][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.195369][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.545311][T12618] syzkaller0: entered promiscuous mode [ 359.551808][T12618] syzkaller0: entered allmulticast mode [ 359.571071][ T4937] Bluetooth: hci7: command tx timeout [ 359.574976][ T1019] bond5: (slave bridge0): failed to get link speed/duplex [ 359.722392][T12637] netlink: 'syz.1.1812': attribute type 1 has an invalid length. [ 359.848677][T12634] bond7 (unregistering): Released all slaves [ 359.931295][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 360.462816][T12662] bridge3: entered promiscuous mode [ 360.473566][T12662] bridge3: entered allmulticast mode [ 360.692986][ T5754] net_ratelimit: 1 callbacks suppressed [ 360.693005][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.740868][T12676] netlink: 'syz.3.1819': attribute type 1 has an invalid length. [ 361.430223][T12684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1822'. [ 361.575554][T12687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.921775][ T13] bond5: (slave bridge0): failed to get link speed/duplex [ 363.031083][ T7699] bond5: (slave bridge0): failed to get link speed/duplex [ 363.044828][T12498] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 363.080801][T12498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.089903][T12498] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 363.136015][T12498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.165271][T12498] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 363.208394][T12498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.224444][T12498] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 363.258045][T12498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.331286][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 363.436262][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1826'. [ 363.464550][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 363.533250][T12498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.600180][T12498] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.657667][ T7699] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.664939][ T7699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.711347][T12727] netlink: 'syz.6.1829': attribute type 4 has an invalid length. [ 363.732201][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.739402][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.801291][T12728] netlink: 'syz.6.1829': attribute type 4 has an invalid length. [ 363.945562][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 364.072036][ T1019] bond5: (slave bridge0): failed to get link speed/duplex [ 364.216655][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 364.332473][T12743] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 364.358492][T12743] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 364.368855][T12745] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1832'. [ 364.388562][T12734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.399468][ T29] IPVS: starting estimator thread 0... [ 364.411039][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 364.499827][T12744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.514241][T12746] IPVS: using max 28 ests per chain, 67200 per kthread [ 364.718111][T12755] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1834'. [ 364.733498][T12754] netlink: 'syz.0.1835': attribute type 1 has an invalid length. [ 364.781714][T12755] netlink: 'syz.1.1834': attribute type 1 has an invalid length. [ 365.025215][T12498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.153745][T12763] ipip0: entered promiscuous mode [ 365.162796][T12771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1836'. [ 365.182694][ T1520] block nbd4: Possible stuck request ffff8880279ae000: control (read@0,4096B). Runtime 60 seconds [ 365.287350][T12761] nbd: couldn't find a device at index 3 [ 365.345861][T12761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.406675][T12780] netlink: 'syz.1.1839': attribute type 2 has an invalid length. [ 365.706041][T12498] veth0_vlan: entered promiscuous mode [ 365.733970][T12790] netlink: 'syz.1.1842': attribute type 4 has an invalid length. [ 365.745290][T12498] veth1_vlan: entered promiscuous mode [ 365.767670][ T5755] lo speed is unknown, defaulting to 1000 [ 365.776732][T12790] netlink: 'syz.1.1842': attribute type 4 has an invalid length. [ 365.786272][ T7699] net_ratelimit: 22 callbacks suppressed [ 365.786291][ T7699] bond5: (slave bridge0): failed to get link speed/duplex [ 365.799378][ T5755] syz2: Port: 1 Link DOWN [ 365.813556][ T5727] lo speed is unknown, defaulting to 1000 [ 365.820223][ T5727] syz2: Port: 1 Link ACTIVE [ 365.867795][T12498] veth0_macvtap: entered promiscuous mode [ 365.899846][T12498] veth1_macvtap: entered promiscuous mode [ 365.931166][ T1019] bond5: (slave bridge0): failed to get link speed/duplex [ 365.970425][T12498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.000765][T12498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.041747][ T1019] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.053905][ T1019] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.074139][ T1019] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.108836][ T1019] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.181957][ T1019] bond5: (slave bridge0): failed to get link speed/duplex [ 366.287502][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.305208][T12795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1843'. [ 366.327059][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.344259][ T13] bond5: (slave bridge0): failed to get link speed/duplex [ 366.387990][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.408105][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.472099][ T1019] bond5: (slave bridge0): failed to get link speed/duplex [ 366.502050][T12797] xt_hashlimit: size too large, truncated to 1048576 [ 366.604853][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 366.719715][T12810] syzkaller0: entered promiscuous mode [ 366.737384][T12812] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1846'. [ 366.782305][T12810] syzkaller0: entered allmulticast mode [ 366.831134][ T1019] bond5: (slave bridge0): failed to get link speed/duplex [ 366.859150][T12814] netlink: 'syz.6.1847': attribute type 1 has an invalid length. [ 366.911921][T12817] netlink: 'syz.1.1846': attribute type 1 has an invalid length. [ 366.951125][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 367.061140][ T1019] bond5: (slave bridge0): failed to get link speed/duplex [ 367.077897][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 367.192993][ T13] bond5: (slave bridge0): failed to get link speed/duplex [ 367.227261][T12824] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1849'. [ 367.349306][T12805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.629631][ T7699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.650698][ T7699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.784271][T12844] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1851'. [ 367.857060][T12845] netlink: 'syz.0.1854': attribute type 1 has an invalid length. [ 367.990010][T12853] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1853'. [ 368.018351][T12857] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1855'. [ 368.050151][T12830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.466250][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1856'. [ 368.820488][T12873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1859'. [ 370.616943][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1860'. [ 370.627570][T12888] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1862'. [ 370.875988][T12903] netlink: 'syz.6.1861': attribute type 1 has an invalid length. [ 370.896078][T12899] gretap0: entered promiscuous mode [ 370.968424][T12899] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.068440][ T36] net_ratelimit: 8 callbacks suppressed [ 371.068459][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.084657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.110855][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.122058][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.133259][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.143934][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.184998][T12899] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.195939][T12899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.210676][T12917] netlink: 'syz.3.1865': attribute type 1 has an invalid length. [ 371.227059][T12899] veth1_vlan: left promiscuous mode [ 371.234272][T12899] veth0_vlan: left promiscuous mode [ 371.245464][T12899] veth0_vlan: entered promiscuous mode [ 371.260751][T12899] veth1_vlan: entered promiscuous mode [ 371.290366][T12899] veth1_macvtap: left promiscuous mode [ 371.310208][T12899] veth0_macvtap: left promiscuous mode [ 371.327345][T12899] veth0_macvtap: entered promiscuous mode [ 371.352208][T12899] veth1_macvtap: entered promiscuous mode [ 371.369479][T12899] 8021q: adding VLAN 0 to HW filter on device €Â [ 371.377684][T12899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 371.386793][T12899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 371.396598][T12899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 371.407814][T12899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.421635][T12899] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.432274][T12899] 8021q: adding VLAN 0 to HW filter on device bond3 [ 371.446383][T12899] geneve0: entered promiscuous mode [ 371.454530][T12899] 8021q: adding VLAN 0 to HW filter on device bond4 [ 371.474250][T12899] 8021q: adding VLAN 0 to HW filter on device bond6 [ 371.484929][ T13] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 371.486450][T12899] 8021q: adding VLAN 0 to HW filter on device bond7 [ 371.591786][T12897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.592126][ T7701] bond7: (slave bridge5): link status up again after 0 ms [ 371.631283][ T1019] bond7: (slave bridge5): link status up again after 0 ms [ 371.652625][ T1019] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 371.998717][T12904] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 372.032307][T12904] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 372.076510][ T12] netdevsim netdevsim0 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.122543][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.137441][T12924] x_tables: duplicate underflow at hook 2 [ 372.165548][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.187009][T12925] __nla_validate_parse: 1 callbacks suppressed [ 372.187026][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1868'. [ 372.211605][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.650826][T12944] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1872'. [ 375.704120][T12970] netlink: 'syz.1.1879': attribute type 1 has an invalid length. [ 375.845541][ T4937] Bluetooth: hci5: link tx timeout [ 375.846212][T12983] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1881'. [ 375.850742][ T4937] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 375.880703][T12972] syzkaller0: entered promiscuous mode [ 375.894588][T12972] syzkaller0: entered allmulticast mode [ 375.903357][T12985] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1882'. [ 375.986177][T12990] netlink: 'syz.7.1883': attribute type 1 has an invalid length. [ 376.017657][T12990] 8021q: VLANs not supported on wg1 [ 376.032498][T12990] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1883'. [ 376.177497][ T13] net_ratelimit: 163 callbacks suppressed [ 376.177518][ T13] bond5: (slave bridge0): failed to get link speed/duplex [ 376.191786][ T13] bond7: (slave bridge5): failed to get link speed/duplex [ 376.212691][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1884'. [ 376.281529][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.291777][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 376.299434][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.311471][ T13] bond7: (slave bridge5): failed to get link speed/duplex [ 376.401127][ T13] bond5: (slave bridge0): failed to get link speed/duplex [ 376.421082][ T7699] bond7: (slave bridge5): failed to get link speed/duplex [ 376.483191][T12998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.489482][T12975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.493955][T12998] bridge0: port 3(bond1) entered blocking state [ 376.547436][T12990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.558029][T12998] bridge0: port 3(bond1) entered disabled state [ 376.599379][T12998] bond1: entered allmulticast mode [ 376.635271][T12998] bond1: entered promiscuous mode [ 376.642122][T12998] bridge0: port 3(bond1) entered blocking state [ 376.648563][T12998] bridge0: port 3(bond1) entered forwarding state [ 376.707680][ T1019] bridge0: port 3(bond1) entered disabled state [ 376.727001][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1887'. [ 376.733397][ T7699] bond5: (slave bridge0): failed to get link speed/duplex [ 376.818460][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1889'. [ 376.887360][T13005] 8021q: adding VLAN 0 to HW filter on device bond7 [ 376.901471][ T12] bond7: (slave bridge5): failed to get link speed/duplex [ 376.915852][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1888'. [ 376.970649][T13010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1888'. [ 377.198197][T13010] __nla_validate_parse: 14 callbacks suppressed [ 377.198219][T13010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1888'. [ 377.244299][T13010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1888'. [ 377.285488][T13010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1888'. [ 377.303857][T13010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1888'. [ 377.327680][T13010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1888'. [ 377.360191][T13010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1888'. [ 377.821704][T13010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1888'. [ 377.863535][T13010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1888'. [ 377.886586][T13010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1888'. [ 377.904952][ T5627] Bluetooth: hci5: command 0x0406 tx timeout [ 377.916771][T13010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1888'. [ 378.704188][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.887043][T13010] geneve0: left promiscuous mode [ 378.930593][T13050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.239709][ T7703] netdevsim netdevsim0 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.337693][T13027] tipc: Resetting bearer [ 379.415388][ T7703] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.439601][ T7703] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.569665][ T7703] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.104267][T13070] 8021q: adding VLAN 0 to HW filter on device bond8 [ 380.122815][T13084] syzkaller0: entered promiscuous mode [ 380.139606][T13084] syzkaller0: entered allmulticast mode [ 380.484053][T13093] 8021q: adding VLAN 0 to HW filter on device bond9 [ 380.497223][T13093] bridge0: port 3(bond9) entered blocking state [ 380.513161][T13093] bridge0: port 3(bond9) entered disabled state [ 380.534136][T13093] bond9: entered allmulticast mode [ 380.547838][T13093] bond9: entered promiscuous mode [ 380.557028][T13093] bridge0: port 3(bond9) entered blocking state [ 380.563518][T13093] bridge0: port 3(bond9) entered forwarding state [ 380.593633][ T13] bridge0: port 3(bond9) entered disabled state [ 380.625847][T13075] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.665564][T13068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.829690][T13099] 8021q: adding VLAN 0 to HW filter on device bond8 [ 381.042508][T13108] netlink: 'syz.6.1905': attribute type 1 has an invalid length. [ 381.237045][T13108] 8021q: adding VLAN 0 to HW filter on device bond2 [ 381.344594][T13115] vlan3: entered allmulticast mode [ 381.385821][T13115] bond2: entered allmulticast mode [ 381.557706][T13119] bond2: (slave geneve2): making interface the new active one [ 381.593779][T13119] geneve2: entered allmulticast mode [ 381.648586][T13119] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 381.838057][T13124] 8021q: adding VLAN 0 to HW filter on device bond10 [ 381.993512][T13161] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 382.041750][ T7707] net_ratelimit: 13 callbacks suppressed [ 382.041772][ T7707] bond5: (slave bridge0): failed to get link speed/duplex [ 382.362387][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 382.467499][T13170] __nla_validate_parse: 168 callbacks suppressed [ 382.467521][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1912'. [ 382.525901][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 382.648424][T13179] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1914'. [ 382.661184][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 382.792401][T13179] netlink: 'syz.1.1914': attribute type 1 has an invalid length. [ 382.801080][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 382.944932][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 382.987717][T13194] syzkaller0: entered promiscuous mode [ 383.022292][T13194] syzkaller0: entered allmulticast mode [ 383.222310][T13189] 8021q: adding VLAN 0 to HW filter on device bond11 [ 383.230084][T13189] bridge0: port 4(bond11) entered blocking state [ 383.236991][T13189] bridge0: port 4(bond11) entered disabled state [ 383.245119][T13189] bond11: entered allmulticast mode [ 383.253495][T13189] bond11: entered promiscuous mode [ 383.259526][T13189] bridge0: port 4(bond11) entered blocking state [ 383.266081][T13189] bridge0: port 4(bond11) entered forwarding state [ 383.282595][ T7705] bridge0: port 4(bond11) entered disabled state [ 383.311452][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 383.451257][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 383.462429][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1918'. [ 383.512152][T13184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.543174][T13208] 8021q: adding VLAN 0 to HW filter on device bond3 [ 383.592171][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 383.873475][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'. [ 383.956807][T13215] 8021q: adding VLAN 0 to HW filter on device bond12 [ 383.989643][T13215] bridge0: port 5(bond12) entered blocking state [ 384.015381][T13215] bridge0: port 5(bond12) entered disabled state [ 384.034260][T13215] bond12: entered allmulticast mode [ 384.058894][T13215] bond12: entered promiscuous mode [ 384.071903][T13215] bridge0: port 5(bond12) entered blocking state [ 384.078468][T13215] bridge0: port 5(bond12) entered forwarding state [ 384.146407][T13219] 8021q: adding VLAN 0 to HW filter on device bond7 [ 384.194019][T13229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.202375][T13229] bridge0: port 3(bond1) entered blocking state [ 384.214375][T13229] bridge0: port 3(bond1) entered disabled state [ 384.224910][T13229] bond1: entered allmulticast mode [ 384.258739][T13229] bond1: entered promiscuous mode [ 384.302564][T13229] bridge0: port 3(bond1) entered blocking state [ 384.309026][T13229] bridge0: port 3(bond1) entered forwarding state [ 384.372663][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.427927][ T7710] bridge0: port 5(bond12) entered disabled state [ 384.457251][ T7710] bridge0: port 3(bond1) entered disabled state [ 384.470204][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1925'. [ 384.560663][T13237] 8021q: adding VLAN 0 to HW filter on device bond9 [ 384.582704][T13237] bridge0: port 1(bond9) entered blocking state [ 384.589235][T13237] bridge0: port 1(bond9) entered disabled state [ 384.595810][T13237] bond9: entered allmulticast mode [ 384.617789][T13237] bond9: entered promiscuous mode [ 384.948177][T13270] netlink: 'syz.7.1928': attribute type 1 has an invalid length. [ 384.979771][T13276] netlink: 'syz.0.1927': attribute type 1 has an invalid length. [ 385.032777][T13276] 8021q: adding VLAN 0 to HW filter on device bond10 [ 385.106631][T13276] vlan4: entered allmulticast mode [ 385.116684][T13276] bond10: entered allmulticast mode [ 385.138000][T13282] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1927'. [ 385.315009][T13248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.363615][T13276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.516276][T13295] tipc: Resetting bearer [ 385.566269][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1933'. [ 385.699280][T13297] 8021q: adding VLAN 0 to HW filter on device bond4 [ 386.213852][T13311] 8021q: adding VLAN 0 to HW filter on device bond8 [ 386.220794][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1940'. [ 386.246570][T13311] bridge0: port 2(bond8) entered blocking state [ 386.283687][T13311] bridge0: port 2(bond8) entered disabled state [ 386.302529][T13311] bond8: entered allmulticast mode [ 386.342312][T13311] bond8: entered promiscuous mode [ 386.372694][T13311] bridge0: port 2(bond8) entered blocking state [ 386.379176][T13311] bridge0: port 2(bond8) entered listening state [ 386.518061][T13323] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.548087][T13323] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.673312][T13324] 8021q: adding VLAN 0 to HW filter on device bond5 [ 386.689991][ T12] bridge0: port 2(bond8) entered disabled state [ 386.698286][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1943'. [ 386.712019][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1942'. [ 386.955250][T13343] 8021q: adding VLAN 0 to HW filter on device bond9 [ 387.188189][T13350] 8021q: adding VLAN 0 to HW filter on device bond6 [ 387.233193][T13350] bridge0: port 4(bond6) entered blocking state [ 387.263918][T13350] bridge0: port 4(bond6) entered disabled state [ 387.278288][T13350] bond6: entered allmulticast mode [ 387.286802][T13350] bond6: entered promiscuous mode [ 387.293157][T13350] bridge0: port 4(bond6) entered blocking state [ 387.299626][T13350] bridge0: port 4(bond6) entered forwarding state [ 387.349901][ T7710] bridge0: port 4(bond6) entered disabled state [ 387.371444][ T7710] net_ratelimit: 11 callbacks suppressed [ 387.371463][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 387.531606][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 387.581724][T13377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1950'. [ 387.657122][T13381] netlink: 'syz.6.1952': attribute type 4 has an invalid length. [ 387.678039][ T12] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 387.707144][T13381] netlink: 'syz.6.1952': attribute type 4 has an invalid length. [ 387.716284][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 387.806237][T13388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1951'. [ 387.851051][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 387.991798][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 388.007344][T13379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.076528][T13391] 8021q: adding VLAN 0 to HW filter on device bond13 [ 388.093411][T13391] bridge0: port 6(bond13) entered blocking state [ 388.100865][T13391] bridge0: port 6(bond13) entered disabled state [ 388.108061][T13391] bond13: entered allmulticast mode [ 388.121559][T13391] bond13: entered promiscuous mode [ 388.127986][T13391] bridge0: port 6(bond13) entered blocking state [ 388.134535][T13391] bridge0: port 6(bond13) entered forwarding state [ 388.310807][T13397] 8021q: adding VLAN 0 to HW filter on device bond11 [ 388.345075][T13397] bridge0: port 2(bond11) entered blocking state [ 388.378051][T13397] bridge0: port 2(bond11) entered disabled state [ 388.400424][T13397] bond11: entered allmulticast mode [ 388.410683][T13397] bond11: entered promiscuous mode [ 388.419635][ T7703] bridge0: port 6(bond13) entered disabled state [ 388.461843][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 388.621308][ T48] bond5: (slave bridge0): failed to get link speed/duplex [ 388.751215][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 388.886225][T13424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 388.913975][T13424] bridge0: port 4(bond2) entered blocking state [ 388.939530][T13424] bridge0: port 4(bond2) entered disabled state [ 388.965458][T13424] bond2: entered allmulticast mode [ 388.992679][T13424] bond2: entered promiscuous mode [ 389.015107][T13424] bridge0: port 4(bond2) entered blocking state [ 389.021587][T13424] bridge0: port 4(bond2) entered forwarding state [ 389.046596][ T12] bridge0: port 4(bond2) entered disabled state [ 389.061413][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 389.272807][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 389.607492][T13454] netlink: 'syz.7.1966': attribute type 4 has an invalid length. [ 389.626656][T13454] netlink: 'syz.7.1966': attribute type 4 has an invalid length. [ 389.818021][T13460] netlink: 'syz.3.1968': attribute type 4 has an invalid length. [ 389.873927][T13460] netlink: 'syz.3.1968': attribute type 4 has an invalid length. [ 389.910223][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1967'. [ 389.947082][T13465] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 389.974405][T13458] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1967'. [ 390.019409][T13458] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1967'. [ 390.050586][T13458] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1967'. [ 390.076786][T13458] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1967'. [ 390.095326][T13458] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1967'. [ 390.119233][T13458] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1967'. [ 390.142004][T13458] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1967'. [ 390.892184][T13458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.943782][T13458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.505461][T13466] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.514904][T13466] bridge0: port 5(bond3) entered blocking state [ 391.529637][T13466] bridge0: port 5(bond3) entered disabled state [ 391.553984][T13466] bond3: entered allmulticast mode [ 391.570382][T13466] bond3: entered promiscuous mode [ 391.576897][T13466] bridge0: port 5(bond3) entered blocking state [ 391.583397][T13466] bridge0: port 5(bond3) entered forwarding state [ 391.712711][T13472] 8021q: adding VLAN 0 to HW filter on device bond10 [ 391.744020][T13472] bridge0: port 3(bond10) entered blocking state [ 391.772082][T13472] bridge0: port 3(bond10) entered disabled state [ 391.778948][T13472] bond10: entered allmulticast mode [ 391.789824][T13472] bond10: entered promiscuous mode [ 391.801511][T13472] bridge0: port 3(bond10) entered blocking state [ 391.808031][T13472] bridge0: port 3(bond10) entered listening state [ 391.844942][ T7703] bridge0: port 5(bond3) entered disabled state [ 391.893514][ T7703] bridge0: port 3(bond10) entered disabled state [ 391.919001][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.952874][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.120213][T13497] 8021q: adding VLAN 0 to HW filter on device bond4 [ 392.136500][T13497] bridge0: port 6(bond4) entered blocking state [ 392.144083][T13497] bridge0: port 6(bond4) entered disabled state [ 392.150621][T13497] bond4: entered allmulticast mode [ 392.159301][T13497] bond4: entered promiscuous mode [ 392.165864][T13497] bridge0: port 6(bond4) entered blocking state [ 392.172355][T13497] bridge0: port 6(bond4) entered forwarding state [ 392.182907][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.217121][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.312102][ T7710] bridge0: port 6(bond4) entered disabled state [ 392.430244][T13509] syzkaller0: entered promiscuous mode [ 392.459657][T13509] syzkaller0: entered allmulticast mode [ 392.511887][ T36] net_ratelimit: 9 callbacks suppressed [ 392.511916][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 392.580425][T13534] netlink: 'syz.0.1983': attribute type 1 has an invalid length. [ 392.649762][T13533] 8021q: adding VLAN 0 to HW filter on device bond11 [ 392.699111][T13534] 8021q: adding VLAN 0 to HW filter on device bond12 [ 392.741668][T13536] vlan5: entered allmulticast mode [ 392.750326][T13536] bond12: entered allmulticast mode [ 392.782899][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 392.874953][T13540] 8021q: adding VLAN 0 to HW filter on device bond5 [ 392.882486][T13540] bridge0: port 7(bond5) entered blocking state [ 392.888880][T13540] bridge0: port 7(bond5) entered disabled state [ 392.895386][T13540] bond5: entered allmulticast mode [ 392.904005][T13540] bond5: entered promiscuous mode [ 392.911707][T13540] bridge0: port 7(bond5) entered blocking state [ 392.918122][T13540] bridge0: port 7(bond5) entered forwarding state [ 392.925444][T13505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.938145][ T48] bridge0: port 7(bond5) entered disabled state [ 392.993267][ T48] bond5: (slave bridge0): failed to get link speed/duplex [ 393.242781][ T48] bond5: (slave bridge0): failed to get link speed/duplex [ 393.376204][T13562] __nla_validate_parse: 157 callbacks suppressed [ 393.376223][T13562] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1985'. [ 393.418403][T13564] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1987'. [ 393.472541][T13550] 8021q: adding VLAN 0 to HW filter on device bond6 [ 393.489286][T13550] bridge0: port 8(bond6) entered blocking state [ 393.503885][T13550] bridge0: port 8(bond6) entered disabled state [ 393.518053][T13550] bond6: entered allmulticast mode [ 393.536814][T13558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.553532][T13550] bond6: entered promiscuous mode [ 393.570816][T13550] bridge0: port 8(bond6) entered blocking state [ 393.577325][T13550] bridge0: port 8(bond6) entered forwarding state [ 393.592118][T13574] netlink: 'syz.3.1988': attribute type 1 has an invalid length. [ 393.603493][T13573] netlink: 'syz.0.1987': attribute type 1 has an invalid length. [ 393.681048][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 393.909867][ T81] bridge0: port 8(bond6) entered disabled state [ 394.001871][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.048399][T13582] 8021q: adding VLAN 0 to HW filter on device bond7 [ 394.072070][T13582] bridge0: port 5(bond7) entered blocking state [ 394.081239][T13582] bridge0: port 5(bond7) entered disabled state [ 394.107537][T13582] bond7: entered allmulticast mode [ 394.127081][T13582] bond7: entered promiscuous mode [ 394.151156][ T81] bond5: (slave bridge0): failed to get link speed/duplex [ 394.342722][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 394.397712][T13599] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1991'. [ 394.416536][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1993'. [ 394.456762][T13488] hid (null): unknown global tag 0xb4 [ 394.462387][T13488] hid (null): unknown global tag 0xd [ 394.464924][T13600] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1993'. [ 394.472961][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 394.490386][T13488] hid-generic 0005:0001:0040.0002: unexpected long global item [ 394.502652][T13488] hid-generic 0005:0001:0040.0002: probe with driver hid-generic failed with error -22 [ 394.601664][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 394.822938][T13603] 8021q: adding VLAN 0 to HW filter on device bond13 [ 394.839415][T13603] bridge0: port 3(bond13) entered blocking state [ 394.846553][T13603] bridge0: port 3(bond13) entered disabled state [ 394.854482][T13603] bond13: entered allmulticast mode [ 394.862916][T13603] bond13: entered promiscuous mode [ 394.927577][T13621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1999'. [ 394.960444][T13622] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1996'. [ 394.973489][T13615] 8021q: adding VLAN 0 to HW filter on device bond14 [ 394.999105][T13615] bridge0: port 7(bond14) entered blocking state [ 395.029321][T13615] bridge0: port 7(bond14) entered disabled state [ 395.051302][T13615] bond14: entered allmulticast mode [ 395.059550][T13615] bond14: entered promiscuous mode [ 395.067257][T13615] bridge0: port 7(bond14) entered blocking state [ 395.073819][T13615] bridge0: port 7(bond14) entered forwarding state [ 395.129939][T13613] 8021q: adding VLAN 0 to HW filter on device bond8 [ 395.138027][T13613] bridge0: port 6(bond8) entered blocking state [ 395.140612][T13629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.155737][T13613] bridge0: port 6(bond8) entered disabled state [ 395.162906][T13613] bond8: entered allmulticast mode [ 395.189178][T13613] bond8: entered promiscuous mode [ 395.215598][ T7710] bridge0: port 7(bond14) entered disabled state [ 395.251697][ T1520] block nbd4: Possible stuck request ffff8880279ae000: control (read@0,4096B). Runtime 90 seconds [ 395.482702][T13646] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2003'. [ 395.511386][T13646] netlink: 'syz.0.2003': attribute type 1 has an invalid length. [ 395.610443][T13653] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2005'. [ 395.646458][T13645] 8021q: adding VLAN 0 to HW filter on device bond9 [ 395.808707][T13661] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2008'. [ 396.337360][T13672] netlink: 'syz.0.2012': attribute type 1 has an invalid length. [ 396.351404][ T7710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.373575][ T7710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.530691][T13676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.795298][T13693] netlink: 'syz.6.2019': attribute type 1 has an invalid length. [ 397.009554][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.029269][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.090231][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.099976][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.190512][T13704] 8021q: adding VLAN 0 to HW filter on device bond10 [ 397.198107][T13704] bridge0: port 7(bond10) entered blocking state [ 397.208225][T13704] bridge0: port 7(bond10) entered disabled state [ 397.215109][T13704] bond10: entered allmulticast mode [ 397.228252][T13704] bond10: entered promiscuous mode [ 397.249448][T13713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.250702][T13712] block nbd7: not configured, cannot reconfigure [ 397.288710][T13712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.581705][ T7710] net_ratelimit: 18 callbacks suppressed [ 397.581729][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 397.676738][T13723] netlink: 'syz.1.2028': attribute type 1 has an invalid length. [ 397.711668][ T48] bond5: (slave bridge0): failed to get link speed/duplex [ 397.821389][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 397.942316][ T48] bond5: (slave bridge0): failed to get link speed/duplex [ 398.061223][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 398.180158][T13739] netlink: 'syz.1.2034': attribute type 1 has an invalid length. [ 398.181555][ T48] bond5: (slave bridge0): failed to get link speed/duplex [ 398.304662][T13741] 8021q: adding VLAN 0 to HW filter on device bond11 [ 398.312784][T13741] bridge0: port 8(bond11) entered blocking state [ 398.320070][T13741] bridge0: port 8(bond11) entered disabled state [ 398.327895][T13741] bond11: entered allmulticast mode [ 398.339589][T13741] bond11: entered promiscuous mode [ 398.361203][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 398.516656][T13745] 8021q: adding VLAN 0 to HW filter on device bond15 [ 398.543312][T13750] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 398.571694][T13750] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 398.590215][T13750] tipc: Resetting bearer [ 398.671682][ T48] bond5: (slave bridge0): failed to get link speed/duplex [ 398.707156][T13766] __nla_validate_parse: 9 callbacks suppressed [ 398.707176][T13766] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2039'. [ 398.823017][T13767] netlink: 'syz.7.2041': attribute type 1 has an invalid length. [ 398.833697][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 398.855112][T13763] block nbd6: not configured, cannot reconfigure [ 398.906375][T13763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.983514][T13770] 8021q: adding VLAN 0 to HW filter on device bond16 [ 399.095158][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 399.215629][T13781] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2045'. [ 399.265924][T13781] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2045'. [ 399.276677][T13785] netlink: 'syz.7.2047': attribute type 4 has an invalid length. [ 399.288796][T13785] netlink: 'syz.7.2047': attribute type 4 has an invalid length. [ 399.307612][T13788] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2046'. [ 399.348445][T13788] netlink: 'syz.1.2046': attribute type 1 has an invalid length. [ 399.495800][T13789] 8021q: adding VLAN 0 to HW filter on device bond14 [ 399.503720][T13789] bridge0: port 4(bond14) entered blocking state [ 399.510318][T13789] bridge0: port 4(bond14) entered disabled state [ 399.517322][T13789] bond14: entered allmulticast mode [ 399.525258][T13789] bond14: entered promiscuous mode [ 399.591309][ T7710] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 399.698697][T13795] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2049'. [ 399.799072][T13797] 8021q: adding VLAN 0 to HW filter on device bond12 [ 399.827063][T13812] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2050'. [ 399.843869][T13798] nbd: couldn't find a device at index 3 [ 399.855977][T13798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.891925][ T7703] wlan1: Trigger new scan to find an IBSS to join [ 399.898465][ T7710] wlan1: Trigger new scan to find an IBSS to join [ 399.958676][T13810] 8021q: adding VLAN 0 to HW filter on device bond15 [ 399.976220][T13812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.199257][T13821] syzkaller0: entered promiscuous mode [ 400.209874][T13821] syzkaller0: entered allmulticast mode [ 400.228641][T13825] netlink: 'syz.6.2057': attribute type 1 has an invalid length. [ 400.279623][T13827] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2059'. [ 400.573494][T13835] netlink: 'syz.0.2061': attribute type 4 has an invalid length. [ 400.597762][T13835] netlink: 'syz.0.2061': attribute type 4 has an invalid length. [ 400.617230][T13831] tipc: Resetting bearer [ 400.795500][T13834] syzkaller0: entered promiscuous mode [ 400.813121][T13834] syzkaller0: entered allmulticast mode [ 400.986933][T13849] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2065'. [ 401.047201][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2065'. [ 401.177875][T13853] netlink: 'syz.6.2067': attribute type 1 has an invalid length. [ 401.262999][T13860] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2070'. [ 401.316240][ T36] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 401.476926][T13867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.431478][T13875] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 403.441178][ T48] net_ratelimit: 13 callbacks suppressed [ 403.441199][ T48] bond5: (slave bridge0): failed to get link speed/duplex [ 403.573190][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.613165][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 403.648620][T13888] netlink: 'syz.6.2075': attribute type 4 has an invalid length. [ 403.676965][T13888] netlink: 'syz.6.2075': attribute type 4 has an invalid length. [ 403.751251][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 403.853845][T13892] 8021q: adding VLAN 0 to HW filter on device bond7 [ 403.862087][T13892] bridge0: port 9(bond7) entered blocking state [ 403.868573][T13892] bridge0: port 9(bond7) entered disabled state [ 403.875656][T13892] bond7: entered allmulticast mode [ 403.886584][T13892] bond7: entered promiscuous mode [ 403.903013][T13892] bridge0: port 9(bond7) entered blocking state [ 403.909434][T13892] bridge0: port 9(bond7) entered forwarding state [ 403.962269][T13902] __nla_validate_parse: 2 callbacks suppressed [ 403.962291][T13902] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2079'. [ 404.115885][ T36] bridge0: port 9(bond7) entered disabled state [ 404.130894][T13899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.151016][ T48] bond5: (slave bridge0): failed to get link speed/duplex [ 404.240830][T13915] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2083'. [ 404.270251][T13911] 8021q: adding VLAN 0 to HW filter on device bond16 [ 404.282824][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 404.304839][T13917] netlink: 'syz.7.2082': attribute type 4 has an invalid length. [ 404.320624][T13917] netlink: 'syz.7.2082': attribute type 4 has an invalid length. [ 404.421228][ T48] bond5: (slave bridge0): failed to get link speed/duplex [ 404.504564][T13924] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2085'. [ 404.551104][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 404.676523][T13926] 8021q: adding VLAN 0 to HW filter on device bond8 [ 404.684202][T13926] bridge0: port 10(bond8) entered blocking state [ 404.690800][T13926] bridge0: port 10(bond8) entered disabled state [ 404.698095][T13926] bond8: entered allmulticast mode [ 404.707425][T13926] bond8: entered promiscuous mode [ 404.713434][T13926] bridge0: port 10(bond8) entered blocking state [ 404.719926][T13926] bridge0: port 10(bond8) entered forwarding state [ 404.754440][ T7710] bridge0: port 10(bond8) entered disabled state [ 404.773811][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 404.792142][T13932] netlink: 'syz.3.2087': attribute type 1 has an invalid length. [ 404.820008][ T7710] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 404.911484][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 404.958016][ T12] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 404.967184][T13946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2090'. [ 405.094807][T13937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.170075][T13944] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2091'. [ 405.294322][T13949] block nbd7: not configured, cannot reconfigure [ 405.334926][T13949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.596927][T13961] syzkaller0: entered promiscuous mode [ 405.610655][T13961] syzkaller0: entered allmulticast mode [ 405.696424][T13971] 8021q: adding VLAN 0 to HW filter on device bond17 [ 405.706591][T13971] bridge0: port 8(bond17) entered blocking state [ 405.713697][T13971] bridge0: port 8(bond17) entered disabled state [ 405.720262][T13971] bond17: entered allmulticast mode [ 405.729797][T13971] bond17: entered promiscuous mode [ 405.736955][T13971] bridge0: port 8(bond17) entered blocking state [ 405.743462][T13971] bridge0: port 8(bond17) entered forwarding state [ 405.751935][ T48] bridge0: port 8(bond17) entered disabled state [ 405.759385][T13970] syzkaller0: entered promiscuous mode [ 405.766948][T13970] syzkaller0: entered allmulticast mode [ 405.905795][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2098'. [ 405.968618][T13987] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2099'. [ 406.228991][T13963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.336218][T13994] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2100'. [ 406.532137][T13993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.791263][T14006] 8021q: adding VLAN 0 to HW filter on device bond18 [ 406.819693][T14006] bridge0: port 9(bond18) entered blocking state [ 406.835946][T14010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2105'. [ 406.841475][T14006] bridge0: port 9(bond18) entered disabled state [ 406.852387][ T7710] wlan1: Trigger new scan to find an IBSS to join [ 406.861161][T14006] bond18: entered allmulticast mode [ 406.868721][T14006] bond18: entered promiscuous mode [ 406.874939][T14006] bridge0: port 9(bond18) entered blocking state [ 406.881490][T14006] bridge0: port 9(bond18) entered forwarding state [ 406.891670][ T36] bridge0: port 9(bond18) entered disabled state [ 406.946574][T14015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.039237][T14018] netlink: 'syz.7.2106': attribute type 1 has an invalid length. [ 407.148579][T14024] netlink: 'syz.6.2109': attribute type 4 has an invalid length. [ 407.160767][T14024] netlink: 'syz.6.2109': attribute type 4 has an invalid length. [ 407.251502][ T5627] Bluetooth: hci7: command 0x0405 tx timeout [ 407.293089][T14029] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2110'. [ 407.585087][ T7703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.607309][ T7703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.804747][T14044] nbd: must specify a device to reconfigure [ 407.823982][T14044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.982496][T14066] netlink: 'syz.1.2121': attribute type 1 has an invalid length. [ 409.460472][ T9063] NFSD: Failed to start, no listeners configured. [ 410.134734][ T7710] net_ratelimit: 18 callbacks suppressed [ 410.134755][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 410.249449][ T12] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 410.259184][T14072] netlink: 'syz.7.2124': attribute type 4 has an invalid length. [ 410.277517][T14070] __nla_validate_parse: 2 callbacks suppressed [ 410.277537][T14070] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2122'. [ 410.289360][T14072] netlink: 'syz.7.2124': attribute type 4 has an invalid length. [ 410.311179][ T81] bond5: (slave bridge0): failed to get link speed/duplex [ 410.367184][T14069] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2123'. [ 410.443306][ T81] bond5: (slave bridge0): failed to get link speed/duplex [ 410.485248][T14077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.571072][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 410.587622][T14084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2126'. [ 410.821846][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 410.980791][T14091] 8021q: adding VLAN 0 to HW filter on device bond12 [ 410.988970][T14091] bridge0: port 9(bond12) entered blocking state [ 410.996041][T14091] bridge0: port 9(bond12) entered disabled state [ 411.003478][T14091] bond12: entered allmulticast mode [ 411.011698][T14091] bond12: entered promiscuous mode [ 411.031210][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 411.172327][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 411.301088][ T81] bond5: (slave bridge0): failed to get link speed/duplex [ 411.421133][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 411.469888][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2135'. [ 411.531335][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 411.572559][T14118] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2137'. [ 411.602623][T14118] netlink: 'syz.6.2137': attribute type 1 has an invalid length. [ 411.842351][ T12] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 411.948196][T14122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2139'. [ 412.103541][T14136] nbd: must specify a device to reconfigure [ 412.127354][T14136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.129814][T14128] 8021q: adding VLAN 0 to HW filter on device bond9 [ 412.174055][T14128] bridge0: port 11(bond9) entered blocking state [ 412.180798][T14128] bridge0: port 11(bond9) entered disabled state [ 412.194087][T14128] bond9: entered allmulticast mode [ 412.217717][T14128] bond9: entered promiscuous mode [ 412.235539][T14128] bridge0: port 11(bond9) entered blocking state [ 412.242096][T14128] bridge0: port 11(bond9) entered forwarding state [ 412.265479][T14142] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2144'. [ 412.284452][ T7710] bridge0: port 11(bond9) entered disabled state [ 412.394209][T14146] block nbd6: not configured, cannot reconfigure [ 412.427194][T14146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.703104][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'. [ 412.791978][T14158] 8021q: adding VLAN 0 to HW filter on device bond17 [ 413.185217][T14172] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2153'. [ 413.244941][T14172] netlink: 'syz.0.2153': attribute type 1 has an invalid length. [ 413.656036][T14194] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2160'. [ 413.815867][T14195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.907283][T14201] tipc: Resetting bearer [ 413.933935][T14201] tipc: Resetting bearer [ 414.083850][ T48] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 414.128286][ T48] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 414.276507][T14218] nbd: must specify a device to reconfigure [ 414.295022][T14218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.318525][T14221] tipc: Resetting bearer [ 414.339321][T14219] block nbd7: not configured, cannot reconfigure [ 414.350698][T14219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.592116][T14228] 8021q: adding VLAN 0 to HW filter on device bond13 [ 414.933470][T14237] tipc: Resetting bearer [ 415.211111][ T48] net_ratelimit: 26 callbacks suppressed [ 415.211140][ T48] bond5: (slave bridge0): failed to get link speed/duplex [ 415.331153][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 415.441108][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 415.516107][T14241] netlink: 'syz.7.2174': attribute type 1 has an invalid length. [ 415.629655][T14245] netlink: 'syz.1.2176': attribute type 1 has an invalid length. [ 415.641142][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 415.731424][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.771159][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 415.796092][T14243] syzkaller0: entered promiscuous mode [ 415.825912][T14243] syzkaller0: entered allmulticast mode [ 415.888867][T14257] __nla_validate_parse: 6 callbacks suppressed [ 415.888887][T14257] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2179'. [ 415.904579][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 416.016352][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 416.134028][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 416.262337][ T81] bond5: (slave bridge0): failed to get link speed/duplex [ 416.421409][T14247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.726066][ T7710] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 416.752411][T14282] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2182'. [ 416.817116][ T81] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 416.874297][T14291] netlink: 'syz.1.2186': attribute type 4 has an invalid length. [ 416.902416][T14276] nbd: must specify a device to reconfigure [ 416.910367][T14293] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2183'. [ 416.925883][T14294] netlink: 'syz.1.2186': attribute type 4 has an invalid length. [ 416.945613][ T809] lo speed is unknown, defaulting to 1000 [ 416.954483][T14276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.972287][ T809] syz2: Port: 1 Link DOWN [ 416.994137][T14297] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2184'. [ 417.008430][ T809] lo speed is unknown, defaulting to 1000 [ 417.027010][ T809] syz2: Port: 1 Link ACTIVE [ 417.048315][T14299] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2187'. [ 417.067789][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2187'. [ 417.079219][T14281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.109812][T14287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.197733][T14301] 8021q: adding VLAN 0 to HW filter on device bond14 [ 417.207006][T14301] bridge0: port 4(bond14) entered blocking state [ 417.213770][T14301] bridge0: port 4(bond14) entered disabled state [ 417.220504][T14301] bond14: entered allmulticast mode [ 417.229769][T14301] bond14: entered promiscuous mode [ 417.236162][T14301] bridge0: port 4(bond14) entered blocking state [ 417.242685][T14301] bridge0: port 4(bond14) entered listening state [ 417.476812][T14311] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2192'. [ 417.512411][T14311] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2192'. [ 417.618206][T14318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2195'. [ 417.681411][ T36] bridge0: port 4(bond14) entered disabled state [ 417.697857][T14319] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2194'. [ 417.800748][T14322] netlink: 'syz.1.2196': attribute type 1 has an invalid length. [ 418.107185][T14327] syzkaller0: entered promiscuous mode [ 418.139952][T14327] syzkaller0: entered allmulticast mode [ 418.476263][T14355] netlink: 'syz.3.2206': attribute type 4 has an invalid length. [ 418.492906][T14355] netlink: 'syz.3.2206': attribute type 4 has an invalid length. [ 418.774762][T14330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.945874][ T7710] wlan1: Trigger new scan to find an IBSS to join [ 419.178136][ T36] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 419.454939][T14376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.706271][T14395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.892875][ T7710] wlan1: Trigger new scan to find an IBSS to join [ 419.903551][T14403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.009849][T14409] netlink: 'syz.1.2220': attribute type 4 has an invalid length. [ 420.034716][ T809] lo speed is unknown, defaulting to 1000 [ 420.040726][ T809] syz2: Port: 1 Link DOWN [ 420.046976][T14409] netlink: 'syz.1.2220': attribute type 4 has an invalid length. [ 420.057580][T13485] lo speed is unknown, defaulting to 1000 [ 420.063636][T13485] syz2: Port: 1 Link ACTIVE [ 420.137303][T14412] 8021q: adding VLAN 0 to HW filter on device bond10 [ 420.145113][T14412] bridge0: port 12(bond10) entered blocking state [ 420.151898][T14412] bridge0: port 12(bond10) entered disabled state [ 420.158474][T14412] bond10: entered allmulticast mode [ 420.166702][T14412] bond10: entered promiscuous mode [ 420.173173][T14412] bridge0: port 12(bond10) entered blocking state [ 420.179748][T14412] bridge0: port 12(bond10) entered forwarding state [ 420.194531][ T36] bridge0: port 12(bond10) entered disabled state [ 420.222531][ T7705] net_ratelimit: 30 callbacks suppressed [ 420.222552][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 420.315425][T14415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.371667][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 420.481121][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 420.589202][T14423] netlink: 'syz.6.2223': attribute type 4 has an invalid length. [ 420.600147][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 420.613552][T14423] netlink: 'syz.6.2223': attribute type 4 has an invalid length. [ 420.711138][ T48] bond5: (slave bridge0): failed to get link speed/duplex [ 420.821106][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 420.851221][ T7710] wlan1: Trigger new scan to find an IBSS to join [ 420.909749][T14431] netlink: 'syz.6.2226': attribute type 1 has an invalid length. [ 420.932355][ T48] bond5: (slave bridge0): failed to get link speed/duplex [ 421.066885][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 421.150530][T14439] __nla_validate_parse: 12 callbacks suppressed [ 421.150553][T14439] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2230'. [ 421.232078][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 421.294667][T14446] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2231'. [ 421.400185][T14443] nbd: must specify a device to reconfigure [ 421.415387][T14443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.426672][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 421.709602][T14467] netlink: 'syz.0.2236': attribute type 4 has an invalid length. [ 421.779592][T14470] netlink: 'syz.0.2236': attribute type 4 has an invalid length. [ 421.898098][ T36] wlan1: Trigger new scan to find an IBSS to join [ 422.155219][T14453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.851411][ T12] wlan1: Trigger new scan to find an IBSS to join [ 422.851721][ T7710] wlan1: Trigger new scan to find an IBSS to join [ 423.664143][T14478] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 423.702695][T14478] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 423.891666][T14485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2239'. [ 423.916014][ T81] wlan1: Trigger new scan to find an IBSS to join [ 423.924966][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2239'. [ 423.973922][T14483] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2237'. [ 424.056389][T14493] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2240'. [ 424.087480][T14492] nbd: couldn't find a device at index 3 [ 424.114717][T14492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.276511][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2242'. [ 424.362210][T14500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2243'. [ 424.393590][T14497] 8021q: adding VLAN 0 to HW filter on device bond13 [ 424.423537][T14502] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2244'. [ 424.665732][T14506] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2247'. [ 424.790854][T14517] block nbd6: not configured, cannot reconfigure [ 424.802830][T14514] 8021q: adding VLAN 0 to HW filter on device bond15 [ 424.842895][ T7710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.850796][T14517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.861327][ T81] wlan1: Trigger new scan to find an IBSS to join [ 425.278296][ T7705] net_ratelimit: 12 callbacks suppressed [ 425.278316][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 425.332191][ T1520] block nbd4: Possible stuck request ffff8880279ae000: control (read@0,4096B). Runtime 120 seconds [ 425.402042][ T81] bond5: (slave bridge0): failed to get link speed/duplex [ 425.553294][ T81] bond5: (slave bridge0): failed to get link speed/duplex [ 425.696097][T14549] 8021q: adding VLAN 0 to HW filter on device bond18 [ 425.706356][T14549] bridge0: port 5(bond18) entered blocking state [ 425.713512][T14549] bridge0: port 5(bond18) entered disabled state [ 425.720180][T14549] bond18: entered allmulticast mode [ 425.730369][T14549] bond18: entered promiscuous mode [ 425.753963][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 425.793459][ T7703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.836083][T14527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.897251][ T7710] wlan1: Trigger new scan to find an IBSS to join [ 425.914553][ T12] wlan1: Trigger new scan to find an IBSS to join [ 425.961319][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 426.161454][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 426.239360][T14565] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 426.270484][T14565] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 426.311440][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 426.443908][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 426.494038][T14581] __nla_validate_parse: 3 callbacks suppressed [ 426.494060][T14581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2265'. [ 426.602228][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 426.712528][T14584] 8021q: adding VLAN 0 to HW filter on device bond11 [ 426.731773][T14584] bridge0: port 13(bond11) entered blocking state [ 426.738490][T14584] bridge0: port 13(bond11) entered disabled state [ 426.761568][T14584] bond11: entered allmulticast mode [ 426.775662][T14584] bond11: entered promiscuous mode [ 426.793078][T14584] bridge0: port 13(bond11) entered blocking state [ 426.799791][T14584] bridge0: port 13(bond11) entered forwarding state [ 426.823458][T14601] netlink: 'syz.1.2269': attribute type 1 has an invalid length. [ 426.841064][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 426.881274][ T7705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.895323][T14597] syzkaller0: entered promiscuous mode [ 426.915027][T14597] syzkaller0: entered allmulticast mode [ 426.929035][ T81] bridge0: port 13(bond11) entered disabled state [ 427.053631][T14605] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2270'. [ 427.293025][T14580] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 427.592743][ T81] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 427.735890][T14625] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2273'. [ 427.784294][T14621] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2274'. [ 427.855331][T14619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.917085][T14631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.048040][T14629] 8021q: adding VLAN 0 to HW filter on device bond19 [ 428.066478][T14635] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2277'. [ 428.077798][T14629] bridge0: port 6(bond19) entered blocking state [ 428.089798][T14629] bridge0: port 6(bond19) entered disabled state [ 428.098166][T14629] bond19: entered allmulticast mode [ 428.106901][T14629] bond19: entered promiscuous mode [ 428.237609][T14639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2278'. [ 428.256483][T14639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2278'. [ 428.435271][T14648] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2282'. [ 428.603555][T14653] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2284'. [ 428.852147][ T7710] wlan1: Trigger new scan to find an IBSS to join [ 428.917742][T14657] netlink: 'syz.3.2286': attribute type 1 has an invalid length. [ 429.287156][T14669] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2289'. [ 429.704227][T14687] netlink: 'syz.0.2293': attribute type 1 has an invalid length. [ 429.864177][ T7705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.288930][T14699] netlink: 'syz.0.2296': attribute type 4 has an invalid length. [ 430.350058][T14700] netlink: 'syz.0.2296': attribute type 4 has an invalid length. [ 432.151277][ T81] net_ratelimit: 23 callbacks suppressed [ 432.151300][ T81] bond5: (slave bridge0): failed to get link speed/duplex [ 432.347432][T14708] netlink: 'syz.7.2299': attribute type 4 has an invalid length. [ 432.373222][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.381723][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 432.399019][T14704] netlink: 'syz.6.2297': attribute type 1 has an invalid length. [ 432.474454][T14710] netlink: 'syz.1.2300': attribute type 1 has an invalid length. [ 432.512902][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 432.602270][T14717] __nla_validate_parse: 2 callbacks suppressed [ 432.602292][T14717] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2302'. [ 432.751977][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 432.883085][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 433.021037][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 433.151027][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 433.271092][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 433.551659][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 433.798274][T14748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2309'. [ 434.041592][T14761] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2312'. [ 434.097180][T14756] syzkaller0: entered promiscuous mode [ 434.104573][T14756] syzkaller0: entered allmulticast mode [ 434.121884][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2311'. [ 434.143170][T14765] netlink: 'syz.0.2313': attribute type 1 has an invalid length. [ 434.331659][T14770] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2314'. [ 434.401683][T14769] netlink: 'syz.7.2314': attribute type 1 has an invalid length. [ 434.495500][T14751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 434.851682][T14778] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2316'. [ 434.924940][T14784] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2318'. [ 434.981969][T14787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.094270][T14789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.055788][T14801] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2323'. [ 437.081320][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2322'. [ 437.110811][T14801] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2323'. [ 437.181525][ T7701] net_ratelimit: 9 callbacks suppressed [ 437.181546][ T7701] bond5: (slave bridge0): failed to get link speed/duplex [ 437.306563][ T7701] bond5: (slave bridge0): failed to get link speed/duplex [ 437.541115][ T81] bond5: (slave bridge0): failed to get link speed/duplex [ 437.634347][T14822] __nla_validate_parse: 2 callbacks suppressed [ 437.634366][T14822] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2328'. [ 437.736723][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2327'. [ 437.775377][T14829] netlink: 'syz.0.2328': attribute type 1 has an invalid length. [ 440.015535][T14846] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2331'. [ 440.020406][T14835] syzkaller0: entered promiscuous mode [ 440.034701][T14835] syzkaller0: entered allmulticast mode [ 440.053358][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.977845][T13486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.148894][ T4937] Bluetooth: hci6: command 0x0406 tx timeout [ 442.531769][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 442.623732][T14860] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2335'. [ 442.646200][T14854] tipc: Resetting bearer [ 442.908839][T14872] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2340'. [ 443.068761][T14866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2338'. [ 443.144045][ T36] bond5: (slave bridge0): failed to get link speed/duplex [ 443.323335][T14883] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2342'. [ 443.444205][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 443.621478][ T7701] bond5: (slave bridge0): failed to get link speed/duplex [ 443.676198][T14893] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2344'. [ 443.751119][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 443.855813][T14908] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2350'. [ 443.871198][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 444.119018][T14914] netlink: 'syz.0.2351': attribute type 1 has an invalid length. [ 446.141317][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 446.272908][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 446.370192][ T7705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.392204][ T7705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.411623][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 446.551096][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 446.594240][T14941] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2353'. [ 446.660346][T14942] syzkaller0: entered promiscuous mode [ 446.685303][T14942] syzkaller0: entered allmulticast mode [ 446.721107][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 446.895562][T14951] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2361'. [ 447.026480][T14958] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2362'. [ 447.053790][T14958] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2362'. [ 447.133278][T14955] syzkaller0: entered promiscuous mode [ 447.139174][T14955] syzkaller0: entered allmulticast mode [ 447.223677][T14935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.247888][T14958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.651519][T14974] netlink: 'syz.6.2367': attribute type 1 has an invalid length. [ 448.455717][T14994] __nla_validate_parse: 2 callbacks suppressed [ 448.455733][T14994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2371'. [ 448.511942][T14996] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2371'. [ 448.526339][T14996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.744164][ T7701] net_ratelimit: 7 callbacks suppressed [ 450.744198][ T7701] bond5: (slave bridge0): failed to get link speed/duplex [ 450.871111][ T12] bond5: (slave bridge0): failed to get link speed/duplex [ 450.942980][ T31] INFO: task syz.2.1370:11135 blocked for more than 143 seconds. [ 450.945853][T15009] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2374'. [ 450.976965][ T31] Not tainted syzkaller #0 [ 450.982144][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 450.991093][ T31] task:syz.2.1370 state:D stack:27200 pid:11135 tgid:11132 ppid:5619 task_flags:0x400140 flags:0x00080002 [ 451.003519][ T31] Call Trace: [ 451.006872][ T31] [ 451.009845][ T31] __schedule+0x17d9/0x56c0 [ 451.015121][ T31] ? __lock_acquire+0x683/0x2cf0 [ 451.020387][ T31] ? __lock_acquire+0x683/0x2cf0 [ 451.029220][ T31] ? __pfx___schedule+0x10/0x10 [ 451.034783][ T31] ? schedule+0x90/0x2b0 [ 451.039186][ T31] schedule+0x164/0x2b0 [ 451.043920][ T31] schedule_preempt_disabled+0x13/0x30 [ 451.050055][ T31] __mutex_lock+0x7bf/0x1550 [ 451.055260][ T31] ? __mutex_lock+0x5d4/0x1550 [ 451.060177][ T31] ? nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 451.074240][T15013] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2374'. [ 451.081485][ T7701] bond5: (slave bridge0): failed to get link speed/duplex [ 451.088962][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 451.118142][ T31] ? net_generic+0x1e/0x240 [ 451.133841][ T31] ? net_generic+0x1e/0x240 [ 451.153655][ T31] ? net_generic+0x1e/0x240 [ 451.162565][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2376'. [ 451.185544][T15009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.196128][ T7703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.200176][ T31] ? net_generic+0x1e/0x240 [ 451.226131][ T31] nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 451.229541][ T7703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.241094][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 451.248408][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 451.259116][ T31] ? bpf_lsm_capable+0x9/0x20 [ 451.264719][ T31] ? security_capable+0x7e/0x2c0 [ 451.269818][ T31] genl_rcv_msg+0x614/0x7a0 [ 451.274522][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 451.279622][ T31] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 451.290939][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 451.301745][ T31] ? __asan_memcpy+0x40/0x70 [ 451.309462][ T31] ? __skb_clone+0x5c/0x6c0 [ 451.319641][ T31] netlink_rcv_skb+0x226/0x4a0 [ 451.320578][T15026] syzkaller0: entered promiscuous mode [ 451.329965][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 451.348198][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 451.360761][T15026] syzkaller0: entered allmulticast mode [ 451.365954][ T31] ? down_read+0x2be/0x330 [ 451.384349][ T31] genl_rcv+0x28/0x40 [ 451.398129][ T31] netlink_unicast+0x7bb/0x940 [ 451.411133][ T31] netlink_sendmsg+0x813/0xb40 [ 451.420970][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.431687][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 451.439501][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.445345][T15032] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2378'. [ 451.460173][ T7703] bond5: (slave bridge0): failed to get link speed/duplex [ 451.462827][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 451.476943][ T31] ____sys_sendmsg+0x54e/0x850 [ 451.484904][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.490991][ T31] ? import_iovec+0x73/0xa0 [ 451.496761][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2379'. [ 451.506561][ T31] ___sys_sendmsg+0x2a5/0x360 [ 451.511537][ T31] ? __lock_acquire+0x683/0x2cf0 [ 451.520804][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.534948][ T31] ? futex_wake+0x51b/0x5f0 [ 451.544223][ T31] ? __fget_files+0x2a/0x420 [ 451.553551][ T31] ? __fget_files+0x3a2/0x420 [ 451.564136][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 451.575841][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.582577][T13485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.599522][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.610674][ T31] do_syscall_64+0x174/0x580 [ 451.621546][ T31] ? trace_irq_disable+0x3b/0x140 [ 451.632322][ T31] ? clear_bhb_loop+0x40/0x90 [ 451.647090][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.656312][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 451.668704][ T31] RIP: 0033:0x7f5e3579de59 [ 451.681426][ T31] RSP: 002b:00007f5e339f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.704750][ T31] RAX: ffffffffffffffda RBX: 00007f5e35a25fa0 RCX: 00007f5e3579de59 [ 451.729531][ T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 451.750976][ T31] RBP: 00007f5e35833e6f R08: 0000000000000000 R09: 0000000000000000 [ 451.759032][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.770971][ T31] R13: 00007f5e35a26038 R14: 00007f5e35a25fa0 R15: 00007ffc138f3288 [ 451.771424][ T7710] bond5: (slave bridge0): failed to get link speed/duplex [ 451.786283][ T31] [ 451.786399][ T31] [ 451.786399][ T31] Showing all locks held in the system: [ 451.786414][ T31] 1 lock held by khungtaskd/31: [ 451.786430][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 451.786528][ T31] 2 locks held by getty/5377: [ 451.786542][ T31] #0: ffff88803284e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 451.786614][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 451.786681][ T31] 1 lock held by udevd/5643: [ 451.786695][ T31] #0: ffff888022bf6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 451.786771][ T31] 8 locks held by kworker/u8:16/7710: [ 451.786786][ T31] 2 locks held by syz.4.767/9063: [ 451.786799][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 451.786863][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b9/0xc30 [ 451.786940][ T31] 2 locks held by syz.2.1370/11135: [ 451.786953][ T31] #0: ffffffff9009cae8 ( [ 451.893083][T15012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.925367][T15034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.927240][ T81] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 451.946969][ T31] cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 451.953799][ T7705] bond5: (slave bridge0): failed to get link speed/duplex [ 451.971437][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 451.989145][ T31] 2 locks held by syz.5.1691/12127: [ 451.994747][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 452.003590][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 452.017675][ T31] 3 locks held by kworker/1:7/13484: [ 452.023360][ T31] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 452.034647][ T31] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 452.044312][ T31] #2: ffff88801ead80c0 (&ACCESS_PRIVATE(ssp->srcu_sup, lock)){-...}-{2:2}, at: srcu_reschedule+0x44/0x1d0 [ 452.059025][ T31] 1 lock held by syz.1.2374/15002: [ 452.065154][ T31] #0: ffff888058135880 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 452.075515][ T81] bond5: (slave bridge0): failed to get link speed/duplex [ 452.082965][ T31] 2 locks held by syz.1.2374/15003: [ 452.088221][ T31] #0: ffffffff9002fb40 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc2/0xf20 [ 452.099641][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 452.111137][ T31] 1 lock held by syz.7.2377/15026: [ 452.116277][ T31] #0: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 452.127882][ T31] 1 lock held by syz.0.2378/15016: [ 452.133307][ T31] #0: ffff8880770f0240 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 452.143679][ T31] 1 lock held by syz.3.2379/15017: [ 452.149171][ T31] #0: ffff8880580f8800 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 452.159607][ T31] [ 452.162102][ T31] ============================================= [ 452.162102][ T31] [ 452.170572][ T31] NMI backtrace for cpu 0 [ 452.170600][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 452.170623][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 452.170636][ T31] Call Trace: [ 452.170645][ T31] [ 452.170654][ T31] dump_stack_lvl+0xe8/0x150 [ 452.170692][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 452.170720][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 452.170755][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 452.170786][ T31] sys_info+0x135/0x170 [ 452.170810][ T31] watchdog+0xfd7/0x1030 [ 452.170843][ T31] ? watchdog+0x1c7/0x1030 [ 452.170877][ T31] kthread+0x388/0x470 [ 452.170911][ T31] ? __pfx_watchdog+0x10/0x10 [ 452.170934][ T31] ? __pfx_kthread+0x10/0x10 [ 452.170965][ T31] ret_from_fork+0x514/0xb70 [ 452.171000][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 452.171031][ T31] ? __switch_to+0xc89/0x1420 [ 452.171061][ T31] ? __pfx_kthread+0x10/0x10 [ 452.171093][ T31] ret_from_fork_asm+0x1a/0x30 [ 452.171131][ T31] [ 452.276679][ T31] Sending NMI from CPU 0 to CPUs 1: [ 452.282344][ C1] NMI backtrace for cpu 1 [ 452.282359][ C1] CPU: 1 UID: 0 PID: 81 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 452.282377][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 452.282389][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 452.282413][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0xd/0x40 [ 452.282441][ C1] Code: 8e 67 48 0f b9 3a 90 eb ca cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d 83 7c 88 04 00 <74> 1d 83 3d 5a ae 88 04 00 74 14 65 48 8b 0d 58 25 9d 07 31 c0 83 [ 452.282455][ C1] RSP: 0018:ffffc9000203f4d8 EFLAGS: 00000202 [ 452.282468][ C1] RAX: 0000000000000000 RBX: ffffffff899948ad RCX: 0000000000000001 [ 452.282480][ C1] RDX: 0000000056c371d3 RSI: ffffffff8e4b068c RDI: ffffffff8c4bd380 [ 452.282492][ C1] RBP: 1ffff92000407eb8 R08: ffffffff8176f27f R09: 0000000000000000 [ 452.282504][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: dffffc0000000000 [ 452.282516][ C1] R13: ffffffff8176f27f R14: ffffc9000203f588 R15: 1ffff92000407eb1 [ 452.282529][ C1] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 452.282544][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 452.282555][ C1] CR2: 00007fc587beb158 CR3: 00000000618d2000 CR4: 00000000003526f0 [ 452.282570][ C1] Call Trace: [ 452.282575][ C1] [ 452.282581][ C1] unwind_next_frame+0xb5/0x2550 [ 452.282603][ C1] ? skb_release_data+0x85e/0xab0 [ 452.282628][ C1] ? unwind_next_frame+0x8f/0x2550 [ 452.282646][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 452.282668][ C1] arch_stack_walk+0x11b/0x150 [ 452.282687][ C1] ? __kfree_skb+0x5d/0x210 [ 452.282713][ C1] stack_trace_save+0xa9/0x100 [ 452.282733][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 452.282755][ C1] ? __lock_acquire+0x683/0x2cf0 [ 452.282781][ C1] kasan_save_track+0x3e/0x80 [ 452.282802][ C1] ? kasan_save_track+0x3e/0x80 [ 452.282824][ C1] ? kasan_save_free_info+0x40/0x50 [ 452.282840][ C1] ? __kasan_slab_free+0x5c/0x80 [ 452.282860][ C1] ? kfree+0x1c5/0x640 [ 452.282876][ C1] ? skb_release_data+0x85e/0xab0 [ 452.282899][ C1] ? __kfree_skb+0x5d/0x210 [ 452.282950][ C1] kasan_save_free_info+0x40/0x50 [ 452.282966][ C1] __kasan_slab_free+0x5c/0x80 [ 452.282988][ C1] kfree+0x1c5/0x640 [ 452.283004][ C1] ? skb_release_data+0x85e/0xab0 [ 452.283037][ C1] skb_release_data+0x85e/0xab0 [ 452.283068][ C1] __kfree_skb+0x5d/0x210 [ 452.283092][ C1] nsim_dev_trap_report_work+0x7ac/0xb40 [ 452.283118][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 452.283137][ C1] process_scheduled_works+0xa8e/0x14e0 [ 452.283171][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 452.283193][ C1] ? assign_work+0x3cf/0x5d0 [ 452.283213][ C1] worker_thread+0xa47/0xfb0 [ 452.283247][ C1] kthread+0x388/0x470 [ 452.283270][ C1] ? __pfx_worker_thread+0x10/0x10 [ 452.283287][ C1] ? __pfx_kthread+0x10/0x10 [ 452.283311][ C1] ret_from_fork+0x514/0xb70 [ 452.283336][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 452.283377][ C1] ? __switch_to+0xc89/0x1420 [ 452.283400][ C1] ? __pfx_kthread+0x10/0x10 [ 452.283425][ C1] ret_from_fork_asm+0x1a/0x30 [ 452.283452][ C1] [ 452.600073][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 452.606958][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 452.616126][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 452.626219][ T31] Call Trace: [ 452.629543][ T31] [ 452.632513][ T31] vpanic+0x56c/0xa60 [ 452.636543][ T31] ? __pfx___schedule+0x10/0x10 [ 452.641447][ T31] ? __pfx_vpanic+0x10/0x10 [ 452.646011][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 452.652227][ T31] panic+0xc5/0xd0 [ 452.656003][ T31] ? __pfx_panic+0x10/0x10 [ 452.660467][ T31] ? preempt_schedule_common+0x82/0xd0 [ 452.665966][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 452.671395][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 452.677575][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 452.683756][ T31] watchdog+0x1030/0x1030 [ 452.688115][ T31] ? watchdog+0x1c7/0x1030 [ 452.692562][ T31] kthread+0x388/0x470 [ 452.696656][ T31] ? __pfx_watchdog+0x10/0x10 [ 452.701354][ T31] ? __pfx_kthread+0x10/0x10 [ 452.705985][ T31] ret_from_fork+0x514/0xb70 [ 452.710606][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 452.715749][ T31] ? __switch_to+0xc89/0x1420 [ 452.720451][ T31] ? __pfx_kthread+0x10/0x10 [ 452.725075][ T31] ret_from_fork_asm+0x1a/0x30 [ 452.729869][ T31] [ 452.733534][ T31] Kernel Offset: disabled [ 452.737877][ T31] Rebooting in 86400 seconds..