last executing test programs: 3m53.357588914s ago: executing program 1 (id=1999): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x64, 0x0, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x30, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x6c}}, 0x8000002) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x21, '\x00', r3, @sk_msg}, 0x94) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r7, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20048011) sendmsg$inet(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)='L', 0x1}], 0x1}, 0xc4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}, 0x42) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0) 3m53.014426177s ago: executing program 1 (id=2006): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002a00)=""/4114, 0x1012}, {&(0x7f0000001440)=""/4108, 0x100c}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3}, 0x3) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48011}, 0x200088d4) 3m52.751598424s ago: executing program 1 (id=2009): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x3}}, 0xfffffded) socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x2, 0x4}, 0xfffffff9}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x2, 0x4}, 0xfffffff9}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) bind$tipc(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0xff07, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000600)={'bond_slave_0\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x3, 0xfe, 0xe, 0x40, 0x6, 0x6, 0x4, 0x59, 0x4, [0x8, 0x3, 0x20ef, 0x8, 0x10000, 0x5, 0x9]}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000600)={'bond_slave_0\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x3, 0xfe, 0xe, 0x40, 0x6, 0x6, 0x4, 0x59, 0x4, [0x8, 0x3, 0x20ef, 0x8, 0x10000, 0x5, 0x9]}}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0xfdff, 0x4, 0x1, 0xd4, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @remote}, 0x10) 3m52.388616332s ago: executing program 1 (id=2013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x19}}]}}]}, 0x40}}, 0x4c800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3f}, 0x80, 0x0}, 0x8004) 3m52.034309489s ago: executing program 1 (id=2018): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) sendmsg$802154_dgram(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) (async) sendmsg$802154_dgram(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) sendmsg$802154_dgram(r1, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x270, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001400090527bd7000fc045e3d23d7df25", @ANYRES32, @ANYBLOB="0800040064010104080008000001000008000200"], 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001400090527bd7000fc045e3d23d7df25", @ANYRES32, @ANYBLOB="0800040064010104080008000001000008000200"], 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r4, &(0x7f0000001280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r7, 0x25, 0x0, @val=@netkit}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r7, @ANYBLOB="000000002c12070008000400a1"], 0x28}}, 0x4004090) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x9c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1000}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x58}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c4}, 0x1) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dd4603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa89f69c47a63133708cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa84fcd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfde5f05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de1594b75e5371a81c2c32d0c4a028a5aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4d0948a6e219b5769480e6d0a9bf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff8261c63790a91ee2c5ff9a21677b4bc7e73ddf2d0e46807c57bf64b0b9df7fc67ecba6521767dcc7d4299c740e73bc49cbcf0049faf222c48896378497c0a7be6238217f85c83a2c45376ddf1a8f631c22c8cf453e8a4fe7bf8160a82bd069be9a9e163724a7412bbc30b68bb31bd571f0571297726a309691408af62ecfc77ea52718c39e802f00a726aaa625407f3b18fd4f66db2bbd05dfd62e448fc6bb9fc51960e12b67c5d42e82df55f5d87428137874e27db5cc", 0x37d}, {&(0x7f0000000dc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9d", 0x1cb}, {&(0x7f0000002200)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eaf", 0x28}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dd4603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa89f69c47a63133708cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa84fcd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfde5f05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de1594b75e5371a81c2c32d0c4a028a5aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4d0948a6e219b5769480e6d0a9bf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff8261c63790a91ee2c5ff9a21677b4bc7e73ddf2d0e46807c57bf64b0b9df7fc67ecba6521767dcc7d4299c740e73bc49cbcf0049faf222c48896378497c0a7be6238217f85c83a2c45376ddf1a8f631c22c8cf453e8a4fe7bf8160a82bd069be9a9e163724a7412bbc30b68bb31bd571f0571297726a309691408af62ecfc77ea52718c39e802f00a726aaa625407f3b18fd4f66db2bbd05dfd62e448fc6bb9fc51960e12b67c5d42e82df55f5d87428137874e27db5cc", 0x37d}, {&(0x7f0000000dc0)="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", 0x1cb}, {&(0x7f0000002200)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eaf", 0x28}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) socket(0x10, 0x803, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty=0xe0000001}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523c02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) 3m51.712868539s ago: executing program 1 (id=2024): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xfc, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6e3aed29}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x472c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f2}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24008810}, 0x8004) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, &(0x7f0000000140)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="6ff7479d", @ANYRES16=r5, @ANYBLOB="000126bd7000fcdbdf252b000000040046001e00940000201d0010000000000000060005001f00000001003e000000080000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002700010027bd70000040000006000000b80aa38f0d19eb23cd07c1a62aaeaeaa8089bbc8"], 0x14}}, 0x24004080) 3m36.643187395s ago: executing program 32 (id=2024): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xfc, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6e3aed29}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x472c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f2}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24008810}, 0x8004) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, &(0x7f0000000140)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="6ff7479d", @ANYRES16=r5, @ANYBLOB="000126bd7000fcdbdf252b000000040046001e00940000201d0010000000000000060005001f00000001003e000000080000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002700010027bd70000040000006000000b80aa38f0d19eb23cd07c1a62aaeaeaa8089bbc8"], 0x14}}, 0x24004080) 2m42.682717963s ago: executing program 3 (id=2775): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) bind(r1, &(0x7f0000000300)=@generic={0x1f, "0000000000000100"}, 0x9) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x4}, {0x8}}]}, 0x20}}, 0x0) listen(r1, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) (async) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) (async) bind(r1, &(0x7f0000000300)=@generic={0x1f, "0000000000000100"}, 0x9) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x4}, {0x8}}]}, 0x20}}, 0x0) (async) listen(r1, 0x1) (async) 2m42.295284635s ago: executing program 3 (id=2779): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x20050800) 2m41.993905742s ago: executing program 3 (id=2781): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18e417d3793121d54b8fc2d55b16d00000020000000000000000000000006112"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020"], 0x38, 0x4855}, 0x24000052) clock_gettime(0x0, &(0x7f0000001800)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000017c0)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f0000000300)=""/238, 0xee}, {&(0x7f0000000400)=""/218, 0xda}, {&(0x7f0000000500)=""/248, 0xf8}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x5, &(0x7f0000001680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}], 0x1, 0x40000001, &(0x7f0000001840)={r1, r2+10000000}) 2m41.206068466s ago: executing program 3 (id=2799): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000090600010015"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0x3c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={r5, 0x4}, 0x8) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-arm64\x00'}, 0x58) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m40.117656562s ago: executing program 3 (id=2804): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00000011000f14001100020000120002000000200000", 0x17) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000002100)=""/4111, &(0x7f0000000000)=0x100f) 2m39.063307287s ago: executing program 3 (id=2813): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_names='ip6_vti0\x00'}) ioctl$sock_proto_private(r0, 0x8b2c, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd27, 0x4000, {0xe}}, 0x14}}, 0x0) 2m24.014094441s ago: executing program 33 (id=2813): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_names='ip6_vti0\x00'}) ioctl$sock_proto_private(r0, 0x8b2c, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd27, 0x4000, {0xe}}, 0x14}}, 0x0) 34.154997647s ago: executing program 4 (id=3396): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32, @ANYBLOB="80007f0a0a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) write(r0, &(0x7f0000000000)="4c00000011000e14000300020001100002000000200000", 0x17) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r8, {0x9, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6c7, 0x7, 0x99, 0x6, 0xf17, {0xb, 0x0, 0x5, 0x805, 0x0, 0x2}, {0x4, 0x0, 0x8, 0xfff, 0x3, 0x9}, 0x3, 0x1, 0x8001}}, @TCA_POLICE_RATE={0x404, 0x2, [0xb9e, 0x2, 0x2, 0xffff214b, 0x6, 0x612e, 0x101, 0x8, 0x5, 0xa6, 0x6, 0x10001, 0x3, 0x3b, 0x5, 0x6d, 0x5, 0x7, 0xc, 0x1, 0x1ff, 0x9, 0x5, 0x80000001, 0x3, 0x7, 0x80000001, 0x8, 0x3c0, 0x4, 0xe7, 0x7, 0x3, 0xfffffff9, 0x2, 0x4, 0xc7, 0x2, 0x9, 0x1, 0xd, 0x2, 0x7, 0x3, 0x8, 0x0, 0xfff8, 0x6, 0xd, 0x0, 0x8, 0x8, 0x6, 0x36, 0x17, 0x5, 0xfff, 0xb, 0xffff, 0x793, 0xff, 0x8, 0x2, 0x6, 0x7f, 0x800, 0x800, 0x2, 0x7, 0x3, 0xa, 0x5c, 0xffff711a, 0xffffebf5, 0x400, 0x10, 0xf405, 0xff, 0x1ff, 0x10000, 0x6, 0x8, 0x6, 0x7, 0x6, 0x9, 0x7fff, 0x5, 0x6, 0x10000000, 0xff, 0x5, 0x1, 0xfffffffe, 0x8, 0x0, 0x1000, 0xfffffffd, 0x5f0, 0xfff, 0x4, 0x7, 0x3800000, 0xffffffff, 0xfffffffd, 0x3, 0x4, 0x2, 0xfb, 0xfffff8b8, 0x6, 0x0, 0xffffffff, 0x1, 0x8, 0x8001, 0xacb, 0x40, 0x5, 0xd, 0x3, 0x782, 0x101, 0xfffffcc6, 0xfffffff8, 0xa, 0x800, 0x4, 0xe223, 0x2, 0x8, 0x8000, 0xfffffffc, 0x4, 0x1, 0xb986, 0xb, 0x400, 0x3, 0xfffffffd, 0x0, 0xd, 0x2, 0x3, 0x1, 0x2, 0x5, 0x7ff, 0x0, 0x4, 0xa3ca, 0xffffffff, 0x1000, 0xf, 0x9, 0xfff, 0x1, 0x7, 0x9, 0x40, 0x5, 0x1, 0x6, 0x1, 0x1000, 0x9, 0xe, 0x80000001, 0x8, 0xd, 0x5, 0x7, 0x8000, 0xd, 0x0, 0x3ff, 0xb, 0x8000, 0x2, 0x8, 0xffffffff, 0x7, 0x8001, 0x9, 0xfff, 0xf06, 0x7c0000, 0xff, 0x9, 0x7ff, 0x65, 0x1, 0x5, 0x6, 0x50, 0x4, 0x8001, 0x6, 0xb7, 0xc327, 0x1, 0x0, 0x3ff, 0x510cfea8, 0x0, 0x0, 0x1, 0x3, 0xb, 0x8, 0x7, 0xffffffbf, 0x1ff, 0x9, 0x7, 0xffff, 0x5, 0x7, 0xe, 0xffff0001, 0x6, 0x3ff, 0x3, 0xff, 0x1, 0x100, 0x3ae, 0xdbf, 0x1, 0x4, 0x100, 0x8054, 0xffff, 0x0, 0xffff, 0x26, 0x4, 0x24f, 0x2, 0x0, 0x3, 0x7f, 0x7, 0x3800000, 0x5, 0x8, 0x7, 0x2, 0x3, 0x9, 0x8, 0x1, 0x2, 0x5, 0x908, 0xb]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x94000000, 0x7, 0x7, 0xe2e, 0x3, 0xf, 0xff, 0x565b, 0x5, 0x87, 0x2, 0x6, 0x9, 0x3, 0xe2, 0x2, 0x10, 0xbd, 0xf3a3, 0x2, 0x1, 0x100, 0x5, 0x0, 0x8, 0x6, 0x6, 0xb, 0x9, 0xfffffffe, 0x8001, 0x5, 0x7, 0x1ff, 0x5, 0xffffffff, 0x800, 0x9, 0x9c98, 0x8, 0x0, 0x76, 0x8, 0x7, 0x9, 0xa, 0x9, 0x0, 0xa, 0xf8e, 0x2, 0x7f, 0x514, 0xfff, 0x2, 0x8, 0xe, 0x1, 0x2, 0xfffffffc, 0x400000, 0x41, 0x401, 0x1, 0xad53, 0xc09, 0x2, 0x2, 0xd4c, 0x8, 0x5, 0x4, 0x81, 0x2, 0x9, 0x3, 0x9, 0x8e, 0x5, 0x9, 0xb5, 0x1ff, 0x8, 0x3, 0x0, 0x0, 0x401, 0x8, 0x7, 0x7ff, 0x8, 0x2f, 0x6695, 0x9, 0x3ff, 0x702, 0x2, 0x0, 0x7, 0x4, 0xffffff19, 0x8e, 0xdb, 0x0, 0x498d2829, 0x4, 0x6, 0x1, 0x0, 0x7ff, 0x2, 0x5, 0xd, 0x3, 0x9a1, 0xa, 0x101, 0xfff, 0x1, 0x9, 0xeb, 0x800, 0xec8, 0x4, 0x5, 0x5, 0x9, 0xab9d, 0x8, 0xca2, 0x0, 0x3783, 0xffffffff, 0xce, 0x89e7, 0x80000001, 0x3, 0x4, 0x0, 0x400, 0x2, 0x800, 0x6, 0x8, 0x7fffffff, 0x10001, 0x5, 0x6b5d, 0x8, 0x9, 0x8001, 0xf6, 0x7, 0x800, 0xfffffff8, 0x83, 0xc, 0xe, 0x7fffffff, 0x0, 0x5b43c274, 0x1233, 0x8, 0xffff359d, 0x1, 0x6fc, 0xe1c, 0x1, 0x8d, 0x800, 0x3, 0x0, 0x2, 0xfff, 0xa093, 0xf25, 0xc013, 0xa, 0x5, 0x800, 0x1, 0x8b, 0x9, 0x40, 0x8, 0x7, 0x5, 0x5, 0xa, 0x6, 0x6, 0x6, 0x1, 0x6, 0x81, 0xc31a, 0x5, 0x6850, 0x9, 0x8, 0x2, 0x8, 0x8c6200, 0x3, 0xb, 0x8c5, 0x3, 0x5769, 0x400, 0xfff, 0x0, 0x3, 0x6, 0x7f, 0x80000001, 0xac2, 0x1, 0x8, 0x700, 0x3, 0x435ecf35, 0xfffff197, 0x6, 0x10001, 0x6, 0x401, 0x1, 0x7, 0x80000000, 0x3, 0x4, 0x101, 0x52, 0xfffffffd, 0x6, 0x8, 0x2, 0x6, 0x80000000, 0x0, 0x7f, 0x78d0, 0x2, 0x6, 0x0, 0x5, 0x1, 0x2e0e3f1c, 0x95, 0xbbf, 0x9, 0x0, 0x5e1, 0x68b3, 0x100, 0x7]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000001ac0), 0x6) ioctl$sock_bt_hci(r9, 0x400448dc, 0x0) sendmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x40) 31.562131084s ago: executing program 5 (id=3401): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640a", 0x3}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="180000"], 0x18}, 0x8080) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) 31.288229012s ago: executing program 4 (id=3402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21d62}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffe01}}]}]}]}, 0x50}}, 0x20084084) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21d62}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffe01}}]}]}]}, 0x50}}, 0x20084084) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}}, 0x0) (async) 30.474502408s ago: executing program 5 (id=3403): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x240040c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x6, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100100086dd624bc7fb001021000000000000000000000000000000000000000000000000000000ffff000000004e204e22043190780cc8fd14070ebb69"], 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) 29.980105818s ago: executing program 4 (id=3404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_NH_ID={0x8, 0x1e, 0x3}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x40104) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1a0, r6, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc822ad6b4018d917}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x5c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x5c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x1a0}}, 0x50) 29.721969731s ago: executing program 5 (id=3405): r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16, 0x9}]}, 0x10) sendto$inet(r0, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r0, 0xda8c) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) 28.787443802s ago: executing program 4 (id=3408): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) read(r0, &(0x7f00000000c0)=""/190, 0xbe) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) 28.739358821s ago: executing program 5 (id=3409): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) socket(0x10, 0x3, 0x0) (rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", "88318644", "a915950f158d5a6b"}, 0x28) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8803ec", "de0000006deed7f21d74bc440900", "9884f958", "060000000000f8c7"}, 0x28) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) (async, rerun: 32) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0x1}], 0x1) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xd50, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000100100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) (rerun: 64) 27.107743492s ago: executing program 4 (id=3412): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x4, @none, 0xfffe, 0x1}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) r2 = socket$inet_sctp(0x2, 0x0, 0x84) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000001980)=@get={0x1, &(0x7f00000002c0)=""/62, 0x80000001}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000206050400000000000000000a00000005000100070000000900020073797a30000000000d000300686173683a6e6574000000000500040000000000050005000a000000a5ae6054e57ecf18d091ca351ec6366815"], 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x4, @none, 0xfffe, 0x1}, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) (async) socket$inet_sctp(0x2, 0x0, 0x84) (async) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000001980)=@get={0x1, &(0x7f00000002c0)=""/62, 0x80000001}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000206050400000000000000000a00000005000100070000000900020073797a30000000000d000300686173683a6e6574000000000500040000000000050005000a000000a5ae6054e57ecf18d091ca351ec6366815"], 0x48}}, 0x0) (async) sendmsg$IPSET_CMD_DEL(r3, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 25.603509175s ago: executing program 4 (id=3417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f00000007c0)=0x2) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 25.560090894s ago: executing program 0 (id=3418): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x128}, 0x4000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r5, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r7) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd700000100000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00010028010000000000007104baf9e9260570f1539facea93b34858023a7b46af9a1190c109ff2b99f29d7e2dfd981de5ac5b0afd747e8ac7ac94819bfbc5eaede5ba168b05b19121d0073a9ee37daf03f84875d6a68afa161b689aa87040950fd0d3872639ae86bee695037c4a1bce3c9dbd65eb81662e74d10702c893825ee74b461b15b20e4ec7d7c3c3af1678a9589c37097d99bc26a78f96b910612e9162d17c475a922e9c37b3c114c8d12739bf68a5489ff6ddcd8ccc9e5bc1bbd9aa9abacf889306fcc7348cd3"], 0x48}}, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) 25.063886932s ago: executing program 2 (id=3419): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000080010000280012800b00010067656e6576650000180002801400070500000000000000000000000000000001"], 0x48}, 0x1, 0x2, 0x0, 0x8000}, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1) (async) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 24.246339127s ago: executing program 5 (id=3421): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x164, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0xa}, {0x7}, {0x7, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0x1}, {0x3}, {0x2}, {0x1}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x9, 0x7, 0x3ff, 0x9, 0x2, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x1b, 0x3, 0x36, 0xb, 0x60, 0x18, 0x1b, 0xb, 0x37, 0x4, 0x16, 0x30, 0x24, 0x60, 0x6c, 0x7dd00b4b2c9a6208, 0x6c, 0x4, 0x30, 0x6, 0x24, 0xc, 0x2, 0xc, 0x6c, 0x8, 0x15]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0x48, 0x5, 0xf850474a43452ec9, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x3}, {0x5, 0x7}, {0x7, 0x5}, {0x1, 0x8}, {0x0, 0x9}, {0x6, 0x9}, {0x6, 0x2}, {0x3, 0x7}, {0x4, 0x4}, {0x6, 0x1}, {0x7, 0x2}, {0x6, 0x9}, {0x1, 0x3}, {0x7, 0x1}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x1}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x6}, {0x0, 0x2}, {0x6, 0x5}, {0x4, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x1, 0x3}, {0x7, 0x3}, {}, {0x6, 0x7}, {0x5, 0x2}, {0x0, 0x7}, {0x0, 0x3}, {0x1, 0x4}, {0x3}, {0x2, 0xa}, {0x5, 0x4}, {0x0, 0x7}, {0x1, 0x4}, {0x4, 0x3}, {}, {0x4, 0x3}, {0x0, 0x4}, {0x0, 0xa}, {0x3, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x7, 0x8}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x2}, {0x6, 0x9}, {0x3, 0x6}, {0x4, 0x4}, {0x7, 0x3}, {0x5, 0xa}, {0x2, 0x1}, {0x0, 0x4}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x400, 0x40, 0x80, 0xb4bf, 0x1000, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff8, 0x5, 0xe, 0x8001, 0xf, 0x2, 0x3]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x9, 0x35]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x8}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x9, 0x8000, 0x7, 0x1, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x9, 0x30, 0x2, 0x4, 0x9, 0x2, 0x16, 0x0, 0x2, 0x4, 0xc, 0x1b, 0x30, 0x0, 0x1b, 0x30, 0x36, 0x12, 0x1, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xf, 0xf000, 0x9, 0x80, 0x5, 0x2, 0xf2]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x18, 0x2, [0x8, 0xfff]}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x5, 0x3, 0x5, 0x8, 0x2e, 0x80000001, 0x6}, &(0x7f0000000400)=0x9c) getsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000440)=""/115, &(0x7f00000004c0)=0x73) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000500), 0x10) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000540)="72af4ef20bb5b284c1f43770fa0bf89361cdb552ed541a305d937e55ed62e1ddc77912917cef157c83e74682ae4f6896c95393862175b223d2cb651af102487fcdda06e706d6062f736b277b22b4ff4a8d31321fd703c6b5e14372e0bafa975387e4e92ef246fbda5363bfef409e6ab2f80abe8231183ad81283f4b50e022ba7526d858b19ac779aefd5288972d3034bfb911bfed234d70f51f3653143e1f3cac2ed43d3489d6c3e", 0xa8) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1ec, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x1d8, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5a74b92c9be86cc3d79b84342e4c8d72627e8a649d05b18dfa66303b4201e838"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010100}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a791c43226e53b2088d7e65cc2902e939f1466dfd494400610464943cc77f01d"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x80001}, 0x588c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000980)={@remote, 0x0}, &(0x7f00000009c0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={r0, 0x58, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x94, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffff8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}, @ETHTOOL_A_RINGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x125}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xe0e}]}, 0x94}}, 0x40) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x50, r8, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x8}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4040) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x2, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1c0}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000f40)={'gre0\x00', &(0x7f0000000ec0)={'ip_vti0\x00', r6, 0x8, 0x7, 0x8, 0xd15, {{0xf, 0x4, 0x0, 0x10, 0x3c, 0x64, 0x0, 0x12, 0x6, 0x0, @broadcast, @empty, {[@ra={0x94, 0x4}, @end, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x35, 0x0, 0x2, [0x6]}, @timestamp={0x44, 0x14, 0xd6, 0x0, 0x7, [0x5d, 0x4, 0x4a, 0x401]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000f80)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000001100)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80001820}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xf4, r5, 0x702, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd4c3d8ae31f5b4ac}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x81}, 0x4000) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x88, r8, 0x10, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x200688c4}, 0x4890) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001400), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0xa4, r11, 0x300, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x18880}, 0x4000) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000001580)=""/221, &(0x7f0000001680)=0xdd) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001700), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000001880)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0xec, r12, 0x800, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7}}]}, 0xec}, 0x1, 0x0, 0x0, 0x8080}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f00000035c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003580)={&(0x7f0000001940)={0x1bf8, r1, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x9e04, 0x38}}}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0x95, 0x2}}]}, @NL80211_ATTR_IE={0x142, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x9, @void, @val=0xf, @val="289833d9384e6021ba133e5e0ec39742"}}, @cf={0x4, 0x6, {0x3, 0x6, 0x0, 0x8}}, @challenge={0x10, 0x1, 0x89}, @random={0x61, 0x48, "bd872ec4a0cef3fe5347a004189f36d86854219c181da9893206f28ff83522458a5e640466995b177802a80f9d1def63e4eb1d640cf7863d14aa883622e11925557d5999c9c90203"}, @perr={0x84, 0x88, {0x3, 0x8, [{{}, @device_a, 0x0, @void, 0x15}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x16}, {{}, @broadcast, 0xba, @void, 0xe}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x1c}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x22}, {{0x0, 0x1}, @device_b, 0x400, @value, 0x2e}, {{}, @broadcast, 0x3, @void, 0x37}, {{0x0, 0x1}, @device_a, 0x101, @value=@broadcast, 0x16}]}}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0x2, 0x9, @device_b, 0x7, 0x5, 0x3ff}}, @link_id={0x65, 0x12, {@random="635e7c4c9782", @device_b, @device_b}}, @ht={0x2d, 0x1a, {0x800, 0x1, 0x5, 0x0, {0x7, 0xb, 0x0, 0x9, 0x0, 0x0, 0x1, 0x3, 0x1}, 0xf01, 0x1, 0x1}}]}, @NL80211_ATTR_IE={0xdb, 0x2a, [@fast_bss_trans={0x37, 0xb7, {0x5, 0x7, "bc4dc9634b56ab4c5f41fcd91393727f", "80ba3528dfffdaf0461d3d562e2674e26bb9d08159f599c8b5a1b04e5db57b66", "a38b1864645c602c8b8867628e33d941ea668cb65fb7b63244a447ae6ee92132", [{0x2, 0x1a, "8ad953445574f3c93d236325378825a08b913aa5de354681a08d"}, {0x4, 0xe, "92d04c3b4b5afdee90ec05a01b72"}, {0x2, 0x6, "ec39bf76c945"}, {0x4, 0xd, "ca832e77a3d53a196280af4254"}, {0x3, 0x9, "fea366621b56122c2f"}, {0x4, 0x4, "cbd13169"}, {0x3, 0xf, "e616d9cc76f9331f07fc29e7e739ee"}]}}, @peer_mgmt={0x75, 0x8, {0x0, 0x10, @val=0x9, @val=0x25, @void}}, @link_id={0x65, 0x12, {@from_mac, @device_b}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x2c, 0xfa, "cad346cf62bfdb6382494db463888cf4eff363721bef450e3b79185fb94b42d715eb87042237ff49"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xd}, @NL80211_ATTR_FILS_ERP_REALM={0x57, 0xfa, "f2980cfa40fd277c36d761082009db48ed16a07e19e357523b07bb1f73a4cf2a404829a3c0914b43e36378382ed5221aca596171c65d83aa70d8916ba7371f1aa73f95f9e3ae53ffd52decacded60a69026f19"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "8c15982e4c3e"}, @NL80211_ATTR_FILS_ERP_RRK={0xd4, 0xfc, "33a357f521dc93bffa2ef6f810e17a67b9101de360e6cd143d98b6460220717c2d7c2912a76deb47f2a9f61ad8af1590383c958bd7a7425fecc42332422f528d22a5115d4b976a49460c396c7a4dadaa5a731ef3e5ca6b96103799000796e73e536f207f0db1d373b2b8bca0d9d6e3a2f0d4cc2c024ad55b27809b129f965aafad4f119f27547530f02cff0c9c125ad7e7a992bd7f61f1a92ad21bb582e87c7fe3412388397aa1fe20d2c57173a8c8c0b75ca516d63cf86726189f1b3d1460859c27d495fd55e728457f799dfda50942"}, @NL80211_ATTR_FILS_ERP_RRK={0xe1, 0xfc, "9d8b354ea552c0c3fff936c594d66448ca5fed525f4c874367ccd086e3eefc39d0ca29d7ab16f845058a0b3860a8bd80ded552b0641a23d8c3ae616d48352b675e344d92de989a4a1e7ad743c1d776303208609796a5d6ee2612979f53bf279354bab12159799fc5e8d50702829b233e2284fdbf73a6fcc55dca31f8e02abfcb46ad9d8916cd3dd1ba30ed2177306ee36dd2f92b8eac2d367c9f45eba62ea0d74e9e45e3222c99a620b4e72775c3af4f30eb34f4f79446bf9e57d994374a8d2403ff74b6b5bfd0be609d968829ed9beba43251b9bd0b42c9684bd5bd90"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xd0, 0xfc, "d04c66be98e9822fece539fcd4cba862edcfa09cec798c1b370718442c3781f891fdb6f14c1a7cd36d739e149cd506154105dd5bea71729ecd7b8a550ab2dfea6c46c8418e49075e45f61c43ab1316ee4b9412295cdc47401bc73024ae0092f88dbee36a0ff144d1c16e5a3d814e17ec400a60a7a224471b52421e68522308d72b9eba9d79126dcd406b05695e23b39072019ef7cdf05a4a0fb0bb6c6ec3e15b25c91f96916e89ed0106538b40dc948226aeb83873410b05d8163bf8ab6aaf7190cd9fb3aa1c6efe4d9c8b1e"}, @NL80211_ATTR_FILS_ERP_REALM={0xdf, 0xfa, "af3759f17cb34d6bf1ae1db058263ac3994cc1fceaf183e1f86e4a0bae232f0c7d69ba10b57b0fb70681b56aebb9c5a12907bcbaf63d9eb7c952f8b4f7d9a5a72f09ae6cb5ae3137bb94245466bb0284294f4a3c8b2b438c7d493559378d95a3588ed8f6ac3952cf64473e6ef0bb9829815d3e2b94fbd8471c8876dd78515d150f89f9ebef1d3481ee8469c4b3312b5ff597c684b0dc3e71ae596a2d792ff633c826d1f7d8b44d9f0ce673cff46aad030959de67b81e809a0d7d55a582545e6f06866e00f55cca7a3cd09236ceca89b8062803065002078f8f91bf"}, @NL80211_ATTR_FILS_ERP_RRK={0x91, 0xfc, "cdf7ffb7bf19696587d8d3ba2d1c70cd3310b702e27b09494459420154487ff3b14b4a702e26e0f045d062a1b59dbfc4843e5b7318d78c8d75acdd23fe23ff21647db9dc14b14e28a60cd4217b6100c7ae57dc88e6e9f225d97ae0f897e7fb1ec94da86025de75056897dcd724734cc8e4f0d6e2785e8168a7c8184cfb02c1228029de74d5b968907cbeeb0ef6"}, @NL80211_ATTR_FILS_ERP_REALM={0x65, 0xfa, "1f9ad43d749799f82cfbfe6192cd33fcbc9af2b78d19c4afa9499dc4d3a7727b1bdb036e7ec24f1227a001cbfce21153a0e8e357b5da91eb260a2dad2414404dcb4627ebb3a8bb79e5356f8a5ff3ca5006869a0bf01730358fee9b26b195d0755e"}, @NL80211_ATTR_FILS_ERP_REALM={0xe8, 0xfa, "a9241a5f9be262054a466cc938b43d915117b5ba62679dbf3cd0782e74a6e6d6f0c0fa377c186f5858d355259a729c6761192cf3021d6dc3b917b0992b4a4f6983f314b63bb6927599a683c893f9fc398d3849c84296b2d207a7dd1b04da6982a056482a19393aef62e261fc25ebd0442a52896486afc9e6bca7aec1699447b0d3dad100228322d56d8a30e4502f8557213f86be9b0ee37d13cff7b7b2d6da876d0f3e03dcbdbf06dadd2e51dbbf290284b2f19d28694e87293a5b51bb0986cdbc894ff0cdcd8214272a4d13be02a217b5ce2a242b1b471e9c7fe37461a1ea34c879bbae"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}], @NL80211_ATTR_IE={0x10d, 0x2a, [@peer_mgmt={0x75, 0x4, {0x1, 0xc284, @void, @void, @void}}, @erp={0x2a, 0x1, {0x1}}, @perr={0x84, 0x15, {0x6, 0x1, [{{0x0, 0x1}, @device_a, 0xfffffff7, @value=@device_b, 0x12}]}}, @ibss={0x6, 0x2, 0x1ff}, @mic={0x8c, 0x10, {0x16b, "0ebfb9b8f585", @short="a60004c59a36f6be"}}, @random_vendor={0xdd, 0x9b, "52c5d67182d54652e7195734992dfc67ab57d2ea795a676980bd0d7c749de8787fcdb9491eb2cbe763592023ae79895cde2b28995826cd480fc6768e74d2447bf1caf97bcc711225d3cb3d3bb67f4e38a63b3b93d9789a4f50e69b4ad6cd8792d1d1fdd476857ab2d3093f8b544e631845e6a0982eac9b7bbd65a0c4f7a8ed332e3449ec1a9867ae0afcc6d04110227209ba98bb9930bdf015b463"}, @mic={0x8c, 0x10, {0x80d, "aadc28e79128", @short="ef22f668581537b1"}}, @gcr_ga={0xbd, 0x6}, @peer_mgmt={0x75, 0x14, {0x1, 0x7, @void, @void, @val="0ecfa82072b9ba8690e9f516ebfa2d1c"}}, @chsw_timing={0x68, 0x4, {0x200, 0xbba}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x10}, @NL80211_ATTR_FILS_ERP_REALM={0xd0, 0xfa, "b22de07a1abb89e85971a8e864fc414f37dc5524a184843698989d1574178a15a6b9d3197dd8e5ba3771b8cae93840507f3b5a338c28a8a6541c32fe7c6151e077e03d275a8d1fd9222012f99fa0ee62a2fd40e4881ba23680911688b4ddb9a6ed7c6d6db726cae887173c6fb0666a709149de2bad06cc001b4925661fbb35d0316a893462a44e2bb827377e5768b8e6128498c0535091613e57fca7037c0e4fc8722caa850d8794c66bf4f30a1971964c63ca6468b15ad334f28a14f271e0cfffa77005de662bbd0db222bd"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "435395b0ee64850380721438f0eba6"}, @NL80211_ATTR_FILS_ERP_RRK={0x6e, 0xfc, "98e778a72bd33b26b3c6573f9bcabe97ee38c9fe6f6a88588854bc20d39b1ab8cc9c1a5c3d469335886357b6a7f4cc61357c3227f2d12f4e9d4639523d3d31087deaefd2ae73784291c187be6cb6089331d1472acca6dc37449b1e12215636675f0d11b861e4fe818777"}, @NL80211_ATTR_FILS_ERP_REALM={0xe1, 0xfa, "2c276fb54b647660e4784393cca272d6cfad8e7e340cafa41f48e3d7ed7533465d2500b5ee7e20b48e4314c68f0726efaf95d281444be3cf285838d243291bdc9f8a6cb36f226233b38496bd931e8ecd17bea5354d3fb7a229400d7bfa6ca8d16a94f287c5db16460cd2de7c3872f0e5278356a359d91279feac42ecc34406efb5b59f55ec8bd9f9e6f1958a4d4f5c813075a7758a2cacf4891b6470dfdd9a7d21bf325773ceb93ca95ea380262cf23fbc697db82165d2e06ebf05d95a80d35e6a5c8693e7e0fccc6baafc6cdd73cdfc1ef704bdaf321b3d1d4667ac0b"}], @NL80211_ATTR_IE={0x63, 0x2a, [@supported_rates={0x1, 0x5, [{0x18, 0x1}, {0x16, 0x1}, {0xb, 0x1}, {0x3}, {0x60}]}, @sec_chan_ofs={0x3e, 0x1}, @random_vendor={0xdd, 0x47, "565ef36161b0d32f6bb815efe9ed2fcfa0efe977a1ee38ad7b0ce2944fe3962b5ab0657f925f62033efdb2840b535e840531f3691fd835540f5f2e465a1207e5a51f97adc4a2c5"}, @ibss={0x6, 0x2, 0x18}, @mesh_chsw={0x76, 0x6, {0x10, 0xef, 0x26}}]}]}, 0x1bf8}, 0x1, 0x0, 0x0, 0x4085}, 0x24048080) 22.296366643s ago: executing program 0 (id=3422): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4020}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000200000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000520038bb1b9b0000000000001c0000000c00010002000000000000ed", @ANYRES64=r0, @ANYRES32=r0], 0x20}}, 0x0) 21.787456997s ago: executing program 5 (id=3423): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, r0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c69bc06}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cf38e9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67c70614}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x426ad4ce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c195403}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a53acfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xabccf20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e39af5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0xe8}, 0x1, 0x0, 0x0, 0xbf2b34c430a4b4ea}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8140}, 0x48000) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00'}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f00000003c0)="0ebce4b1de10045ffcc8286dbb26a62cdfb29eb7bca1fa580be1571bfd3884e055dad9add6ca67a6eaca80fa6ae9f895d28c90760c9374eeae4f6ad3c788", &(0x7f0000000400)=@udp=r4, 0x4}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r5) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41804}, 0x1) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r5, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r8, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000900)={r3, &(0x7f0000000880), &(0x7f00000008c0)=@tcp6=r10, 0x2}, 0x20) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000940)={0x0, 0x8, 0xffff, 0x7, 0x0}, &(0x7f0000000980)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f00000009c0)={r12, 0x5}, &(0x7f0000000a00)=0x8) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r13, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x120, r0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xec, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b342557}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c37e371}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a486faf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15f696f6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56435306}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x320ba6c6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63045bdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53c7eff4}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6082bf4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5072c746}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39090168}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r14, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r6, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'wlan1\x00'}) (async) r15 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r15, 0x8983, &(0x7f0000000d80)={0x7, 'ip6gretap0\x00', {0x5}, 0xf}) (async) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000e80)=@bridge_dellink={0x170, 0x11, 0x20, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x1000, 0x6b7c62908ac50115}, [@IFLA_LINKMODE={0x5, 0x11, 0x6}, @IFLA_LINK={0x8}, @IFLA_PORT_SELF={0x50, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "ab70edca7e21edca854ec583f6e5d7b2"}, @IFLA_PORT_VF={0x8, 0x1, 0xffffffff}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "af7749d0aa842487c34751a0c065bdee"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "146a9308b0abc7545427a2576d9acd25"}]}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_VFINFO_LIST={0x78, 0x16, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x59, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0x3}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x587, 0x100000000}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x100}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x51, 0x8}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'ip6erspan0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x80}, @IFLA_PHYS_PORT_ID={0x13, 0x22, "ae47144f759f2a9a31cdef400ab722"}, @IFLA_MAP={0x24, 0xe, {0xd42, 0x29d8, 0x59a3, 0x9, 0x5, 0x6}}, @IFLA_PHYS_SWITCH_ID={0x15, 0x24, "2294b1fb0e5b3bd08ef4ae694200e01989"}]}, 0x170}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) 20.68747764s ago: executing program 2 (id=3424): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="64000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a8a1000000000000140003006e657464657673696d30000000000000300016802c0001802800010001000000aaaaaaaaaaaa00000000347d2061456da1cd17e90000000000000000000000000000000000000000000009458e707c9e2fed4ef41a610c205d3ec1ad0e6a040000008271a2ffabd1466d237ecd27ad5e63f7beb1c6801fd7fdbe381f26cedec5663e9e049c350fddc88d1c7a264b"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 20.608633042s ago: executing program 0 (id=3425): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000003c0)={{0xffffffffffffffff, &(0x7f0000000000)='bridge\x00', 0x880, &(0x7f0000000040)={@_ha_fsid={[0x3, 0x20f]}, {0x9a, 0xb, 0x9, 0x6}}, 0x5, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x100}, {[0x6b8, 0x7, 0x2]}, 0x8, 0xf9, &(0x7f00000002c0)=""/249}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4812161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20008840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f00000003c0)={0x2c, 0x18, r9}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r10, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="05002dbd7000ffdbdf254400000008000300", @ANYRES32=r6, @ANYBLOB="6400238006000c000a00000005001f000100000006001b000200000008001a0003000000050005000a0000000600120007003a0f060003005c0000000600190009000000050006000900000006000400f400000006000c0008000000060016"], 0x80}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 20.073147941s ago: executing program 6 (id=3426): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x108, r3, 0xf13, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1400000}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x88}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x108}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 19.15175114s ago: executing program 6 (id=3427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), 0x0, 0x0, 0x0, 0x5, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000fbff9a16ea250cfd0000050000000100484a16a8bf3b7b946af29a8547dff07db3ff960f440aeb1d03b183ec222bd6bfdb0e5bfcaf748e1331c5735b260123f5046b4ffcaec0900d925574f3f377a2a4e4532db2cc2913b346da00b0a0a729b72aa133ee45", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r1}, 0x38) 18.580472619s ago: executing program 6 (id=3428): syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000002680)={&(0x7f0000000180)=@l2={0x1f, 0x4, @any, 0x6, 0x2}, 0x80, &(0x7f0000002600)=[{&(0x7f0000000380)="e444501e67a5bbf53bb2e28e11102380b556006738e10d2dd06584ce35ac020b8651867b8715517ce80ec0c95cb183886a891b4439d764f5993f324e03bbb26be81d0819bb4c6300fe0670a017ba943b973763b23fac717bcb766fe98ca14aa354a07161bc4879a73645fd21115155ce53c23e247c34d4a1e2228ecd9ab5e2aa14837e9de22ffb26e6b060912b4f4c423d093ce6269b11ff2d4dc0990a81e616446663ebff90aa90208009c298c27fdf7d1434c3cdfb38d9c331e24668a6db3062242d56799940fc3499c80ba8cf89b345b2a7b6b48b9dd3ebca97927148ba777428ba1d992512014d172e7d43a2394b3fb3de137208d05db8727261fc9b35ba81441ea73fa9de8fb90c8630877dc68c797efa56c9cdb3b3ad87d596cc63c3a1ce9cfb9c3081c0cfbd3460297199d0c4fd45a8276c3b08c82505868c045ff1f5982ce845823801008f2b5fdc077331054179f0971baba304427b841a4ed8d2547f20cdf893a1add08ad4a8e9c8d6b541448a984d248b0ae4abc6708eeff9575ddfb46601a54f99772aaa9ca154e6d7ef0f57d2285fa7a7cebcc7833b4996a6eb733cd435ff52da9816773de07c8df537fdda90a8aa5512c75c1e0564fbcfa5126f2376ab293ba7b6bb2a7afa0275fdd5cb42fdf8619788f35ab9a6a39a830a329300db380abd501391d0ceee6b74c1fa820522de01924bd8f38929566a2f2743a2adbc2a0f981eb38682641e9a2702209254d3e012196f8a0dc4bd2aa74f5b52de600366084584c7b4707b37c2ba630c0e8624ca4d1a15039973e36e8cbd03ad90efe72dd20c186ccc9c766cbcd0e3a38541a7b900cfddb2a07599b4c3697c16499197573dd7a1deb7250a952a715988ab808705d9a0ce7e350fa2dd95cae13c93cb051f627508f2f36c8fcd407382c1e6fbf9a0d80a4432b65cf8a05c0752bf0c18718d75c3a7a5d52c679af5ded13d22d6ef14e170cda60e8661ca81c73149d86f3b4cf123fc480c594016b5509ef9d5ad48f2dffedd8ad849f715afe420115849e0e0275cbe6ea4bb4ad1f3e6c5483ccfe701d41bbd7d605169d870528b0561e6f0226fac236b58fc4bc118e90fa457d67089254772e2e468c9cdc575576544c0aa4c795316a423d6d065fa3002a1048517b7f2a5186f924b02ec807d31d734c9a4beef601b621bc8f12610c50843606e025935a369d0de3efe7307f18a64e8a3e9e663df5e96be26a5203189f6f69544e86024f08b4e668dbbd7f9ee132724a61db8879a708bb396381477658fde813cf2725a6b3e2ef779f9932d31681beecf417bd9da0bd35d1538ff138e0d9338fcaf8d3918c8ea205947b573c832515ef0cf83b58f40577ab7702aa0370975d370bc5fd8fb08a80e7de72f100dad7ead3cafee427875073475eb4cfc86d430692a724088ce2b7a3527f6946899d239841005e753afb4d4f59d32e666658989dff18f9b7781737f8a5d614791befc7ec8ce829ac5ccfe2d0c5f62cc43c24a22a842b90be30246705dca796ae8056395a2e0bd217542b9aa40603a6e614177b4dd57a8a5513b380fec441e5b563808abf11c9812f25456f053435d989a09121db9bb83fc00d3696c5b7b514d6f8ddcd45798aaf1a6a9b83fbee1c57e925cfa22ad49706bd29d9d0aff9605c4d27b131fce6869c57e72d80bca6ee5b56410d5ee5d9588414ab68cab49f7c9fb6990a45625d054ed64daf77f102bee7127cc50ddd2e6f5a924830d76661d9506f581749c40d9901fd5e0edfb149e4b27a293ce9479a7dc88f886ab2c632c1547544e46e148dab8e703307400a79dc2ec7239d7f4107424e6572155c35b5767b4ad97af61f81b3e80bf74ca7fd8ca7417972fb7d12c10c06198a256d677047412b063d4a36c8822e068a171eb2ca89c6d51ae4d9f658ae2923d33c019fbaa39aac0ec47d99bcd79175174a7900c3705374465dc608162a6bd5a64363b581c11230ef16f56de6307fd4f16778d422ce14c7d712ee15a6e509d97bf194a8bc1ce45fbc4342eeb520860cbee00b9d2f0bd168adbbe738ed1c29f69e843b74ac8e2eda7ef75bd91467cec20a94d4ad2ee17fb8560863a9a0d3179ddf0295d0ccb02e75f3af37584ef9e7d43950fc00d9f320c6c8460f6d9334bea8b140ee5740d3278590baebd63bb23b563045a09419b2c29d661e17edef867f200cb1a9459ee5336b4a58b35e4dff8da759878d07acb8107ecb60d83d2b47a177bc71cd9fdc0f9852445ad650ddcfe02da0da98b4c6251719885933dcedec8abaf931ca713223d040623e8d2b06a713641f207b6b72e919f104a7626cb2a69f098c4f431ee6d7e96f541e4a42e03fc6b8a5892429bbbe954e658141799976febff9687d558bc96ca51e007d1c11890c5df50695aabc62f2f877378118593f7599c03fdecfdf04b134e9386af9026e3b5f3bfd897faa7617cf6b90c2e7915437cbf8a15a9c6233b86886135ddd245ffd722952fe83fd24a9543595da1bef55a701ae19f0e56126405887fa42e5e42f8ca5d631fd9545ac297892ef90b53ecfc6e6cefafa3000b9795b97bb8064f32e5ccccf84b2bc047607a0204835d1bda881c5d830fdfee0fd1768860534e5c62d450f769c2307748e89b18f2da270cea64f78986390cb761aaa5bfde66dc1786c6ccdb2493c444d50eb03edd18f846d451c95797b5620d1ee23e36c0ac6e4109aa28656344cdfb638416c6ad1311b5ef65940ee12f094610cd9ab8bafc809fbb78d78d7081b37df529e8789e806c5ba4aacdf8a06a6504e471ef1cce4c13dfffab48ce43930a24032890792bf3081137e43d1929fb31b40bcb6f6d6510ea9281129393371857d5a770b9f8b7438f4c23e296963ce0bba90d174659778848f3c656255e1a9a71ff1429eee047f232ff21e261b2a11a69a236476a86feec8a52cfd81d17b93a819217061cf540b5531480acc2bcf65658f7c32fbfb5f67a074db957ccb16d431c7e211c3dfbe8562c81a84d5f65064f373eaac042a6c7b03de22fa0c7fbe38f7ba7e38b8007a15d44d47f78c797f6b9ecb3980bc355ca13fdd83faec761d067302e8f26cef543437e23bc2026ef813c428df5e8a85c741320edb3f240a2b76c7b6b9881661f4cf7ca5f6867286ba91894d6bbf92f0b607130d7ccdaebbf005621939684813a92f4173e48ef430dc2748278a39a1dd25ecf210c0da36e95ac6c97ed9d60b1c7827da981016c122a1a0c71136c71c19a008805a7dce8c2e700968c81d83d9ebad1880edbeb20f2285c0698624a27778167f68359e3d6d5218b38151103b23e23932d65a0964c98a82c6200a5cd9e8f7e2a1e88991458cf58ecde952a41587219129839fda72a71ad507c992fe226a5bca017b56f7a72abc384dfa39101424a70a0d3032adf9d0cb7ab8790873f7945fbc0a8ac77b94c45bfe221793413130ec8d9272ed7615b0c4a71af563fff06af2e4991a0e1f70c1890b2b2b48a7691019b369c1f0b52ab7bc7dbc424dd163d414485280f512634434cfe6e5c6ae56b380d2459b805289632827562643f76d5ba41e6013621e97055a7528f70e5fcba60cbe56f841072a2b150c4b6b3a7bb37186bc3031c65fad8f983accd8a663d54ea601a6ce4a951a9e16351659b71f2c85a6c06e5680d8634ee35bc672a9b8adba1a2757008ba3d20f0fe1dbded21dc7220a4337dc0e6b32adfcfc08437a715879746c1ba6aab7caaef0b39a888a34187b1eaa15b8cff53cd898b47c27bad58d107ecafd317d751db254cdeee81d9d96bc8485d2b25d203fcb5c5f12c19a88e5b6f85b013bc2d237c083c163b183c63d2c80542e074e82e2d0c7a8d8d2d775c3d0198857513482e57721edfe9f15f4bb837c84c747e4fac1aa75f57576c08689645e2a1cafd8ecaedcc3905eb21f576a8c002202131f7b4eff802eaa590f36644cafd856524f2421060d6e3941d66cea516d5de065c3802b34469bc40214b28215664638e6285cc2243a39b41a345606d604bd14b44b0843d69e1ba72f932f57402ed611e24b0fdca41b0aa3edfce36a8adff72967d165eacb69d6bb4aa8a818e3aa221dcffc153c554f9dc3298a319d72197cec66247943f92efa2c62961e1e0418373af36771f45f5e692df24c6d5d0536fe3332cfaad27fdb085f300858c178e5b76c2cbbc1f9ca5e228f2d1e7471dda9aa439acd186f2d5f51bac655a95d6ebdb9d7bde1c12a0da5df627bc109e01f9a1af3ae58dbada1af7fe827bf2a19529d89b4f9f5eedb8d252e6e7deab81ad91058a4e41b6da10adaf5b7e20340885709a2a4ff89252c03a69b140e590f91573148f25461bff5aa01289971f93f7cf414d71fe11afe47e7a202de11d38896966dc8d72df88b90f6e4211f8ab89b0987a84a48a506c47b6bfde441eb26f07b0b6e9ee97400d215272943f1b24dc889773926ef7a7efb90ffc7b531e5b65c299f9fea53e41f99a4d4900c76698d5f803383c04b26fb4f175a2e3553e371c293c4d4869dbbcbdab0e7bb24dbd7baea27773c8dfebee6a1b9e261a6d7314ddf7acbbc1d936a97ee6fe6c66666099e76ede639b540fe4297b75fe0e9da34fa7e246c18c36297b31e99c2c221f72d515e1a5eda974c6113769df27f9e5805c545d69de8603c122a25ba37ec37e008f6c06f0334219477c6533e34cc3ea73bb8406d18ab37b9f3827c05f3bc7f6dfb841cdfbadf989a26d7573727980fb7af66a4b2f988dc1f04ebdc98bddd17799e985cece4c08a78a01a9768548732e32ed2231719b9ba5d581055c3fb9aa83d51218b4d2ae3b4e128a821e822855285c81f2819e6c5198cb30a9a3fd78b9bb7569848719fe5c8c08c30d1cdef0e5416aabf842584e0a884863f4f15a575c564f702d912c29ae678d8cb988ecbe26f12c8bb1564f76e65e5c024c17d23b91cf18fe966b314fdd9ed9f8fc443af74898fe03b3be8f753261b65679680e65a0d5c705318824ca353c6da09b77df82be024339abe53415d1dca1c0bf5e6690adece605e86bebc55548ce7d413e0085a7b550e7d68ae08bd87cc618025808d8676f50cd505af2ac272e59bb4bc89abc31efb3f05643c79d5c346f30284f8e697802776c9800740734dd614e3b769bddc4b956446b3360d4d757e941dbb92434a3f24e66f5a7a20bc5eb9e68d4c696a86aea68660c2e28e63d60952e8addbe94b2ed47f078c1c3ebdd50aa7b14281d1da69ad9adf3eeedf68bcf6b917d1d8a2102ddedf45c91bddcf294d9b5aaabb1399c7a08be77dd47161846a79bae0bfa81fe4115081348c9e2e5dd054cbb5c134d8eaf2b7ec02f642ff51bdfd392498d3abeae30d4fcb7f6cc7ae4d16a48ee0af1bbde0de32e6dd56c3310f92b4ba9f391cf7b7df2db2259fcf5bdca0cdb5e8481fe2001c3fd9427ad9e8cf14d633faa66eb074f3855b5ed7cdfe761ef94785617750bbff7af971c7fe351aa8ba4e7f4bddca4c4c9d1fc3170122346a6990876874ff95ecbca01dffa0af6ff03a9dff55f5cc448c34b5c67a3ed1ed34e74bf05e71f17add26dc63155866423c62833015e9e4aa3aa3307db2170e0ce0aa1fc563e902de4b23ba75a50adcd9e68449f05ef953f845f7bc13af69d16d015080366fe4f35ca0f25cd2c5982c815de11e9645bbc718d2173498b82652ad12ab9303450a95ac2078ab1b41b7bb00dafefb9d4cd090319af06d92ec1bbfedfedef713a727c295a291754050054c248c65ca24666470a4f3a745b9784d4c19db3b438671982fb072e482b983f5b51bf16", 0x1000}, {&(0x7f0000001380)="1550161e982e2ee4054c7784ee919e37f3feea0b03f6e52b1fdd963eda57a2def7ec3c10f080d36151bb50f145028369b3bf1fdd6fae0611024cb3e30505ff98237435ff4637b6c73443d9734142a9649c15acab1f4d2ce73f1fb337d6a67d986d576fe5fe2d5f735984e01f6f8ec3f0334d523af9edfaa53855df10f75a2f65cf41079a7cb3b0af8e2d0e1cdadee07ccaa8eb83ef92dc9511", 0x99}, {&(0x7f0000001440)="acce2c370af09d9cc0b6c8d9f2452131e9a4a892cf4625d7994f9b2fc9e3fa595b0778c5e73df14b3bc94d9d926b252b22d70dd77b67e3b10c9df3d0ba90278f5c0b79923d50691db6bbd531f8952d77f3710ddbe2e150", 0x57}, {&(0x7f00000014c0)="bc72afca7c5d4bbfafb9655a98041a77120d7d1d619e7b", 0x17}, {&(0x7f0000001500)="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", 0xfb}, {&(0x7f0000001600)="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", 0x1000}], 0x6}, 0x2000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4004000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000000)=0x9, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x2b}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800feea, [0x1]}}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000300)=""/82, 0x32c000, 0x1000}, 0x20) sendmmsg$inet6(r2, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, 0x0}}], 0x1, 0x0) 10.3634018s ago: executing program 34 (id=3417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f00000007c0)=0x2) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 6.87638762s ago: executing program 2 (id=3430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x58, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x400}, @NL80211_ATTR_PMK={0x14, 0xfe, "97ae321513c061e3dc84ed05f90651f7"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4e54}, @NL80211_ATTR_PMKID={0x14, 0x55, "17be39af0fb2eb806a20fadf6e7d2028"}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c011}, 0x20000010) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xc, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) splice(r3, 0x0, r4, &(0x7f00000002c0), 0x6, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000002300090025bd7000ffd3df2501000000080001007f00000108000b"], 0x24}, 0x1, 0x0, 0x0, 0x24000811}, 0x8410) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0xfffffffd}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0xfffffffffffffcbe) bind$tipc(r7, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="481faf000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b000100697036746e6c00001000028004001300050009000400000008000400ff0f0000"], 0x48}}, 0x0) 6.416226743s ago: executing program 35 (id=3423): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, r0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c69bc06}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cf38e9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67c70614}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x426ad4ce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c195403}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a53acfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xabccf20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e39af5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0xe8}, 0x1, 0x0, 0x0, 0xbf2b34c430a4b4ea}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8140}, 0x48000) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00'}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f00000003c0)="0ebce4b1de10045ffcc8286dbb26a62cdfb29eb7bca1fa580be1571bfd3884e055dad9add6ca67a6eaca80fa6ae9f895d28c90760c9374eeae4f6ad3c788", &(0x7f0000000400)=@udp=r4, 0x4}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r5) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41804}, 0x1) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r5, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r8, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000900)={r3, &(0x7f0000000880), &(0x7f00000008c0)=@tcp6=r10, 0x2}, 0x20) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000940)={0x0, 0x8, 0xffff, 0x7, 0x0}, &(0x7f0000000980)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f00000009c0)={r12, 0x5}, &(0x7f0000000a00)=0x8) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r13, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x120, r0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xec, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b342557}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c37e371}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a486faf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15f696f6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56435306}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x320ba6c6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63045bdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53c7eff4}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6082bf4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5072c746}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39090168}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r14, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r6, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'wlan1\x00'}) (async) r15 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r15, 0x8983, &(0x7f0000000d80)={0x7, 'ip6gretap0\x00', {0x5}, 0xf}) (async) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000e80)=@bridge_dellink={0x170, 0x11, 0x20, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x1000, 0x6b7c62908ac50115}, [@IFLA_LINKMODE={0x5, 0x11, 0x6}, @IFLA_LINK={0x8}, @IFLA_PORT_SELF={0x50, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "ab70edca7e21edca854ec583f6e5d7b2"}, @IFLA_PORT_VF={0x8, 0x1, 0xffffffff}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "af7749d0aa842487c34751a0c065bdee"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "146a9308b0abc7545427a2576d9acd25"}]}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_VFINFO_LIST={0x78, 0x16, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x59, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0x3}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x587, 0x100000000}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x100}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x51, 0x8}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'ip6erspan0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x80}, @IFLA_PHYS_PORT_ID={0x13, 0x22, "ae47144f759f2a9a31cdef400ab722"}, @IFLA_MAP={0x24, 0xe, {0xd42, 0x29d8, 0x59a3, 0x9, 0x5, 0x6}}, @IFLA_PHYS_SWITCH_ID={0x15, 0x24, "2294b1fb0e5b3bd08ef4ae694200e01989"}]}, 0x170}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) 6.373849899s ago: executing program 0 (id=3432): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63", 0x8}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="110000006a"], 0xfe33) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0x4}, {0xd, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008801}, 0x20048054) 6.082336469s ago: executing program 6 (id=3433): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x41}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x66}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x2, r4, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010"], 0x18}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002740)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getrule={0x1c, 0x22, 0x2, 0x70bd2d, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x2, 0x5, 0x0, 0x0, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x5) 5.488084861s ago: executing program 2 (id=3434): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000003600010306007000fcffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) 3.949949784s ago: executing program 0 (id=3435): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$inet6(0xa, 0x5, 0x0) (rerun: 32) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) (async) listen(r1, 0x50) (async, rerun: 64) sendmsg$inet(r1, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000) (rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8c024000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x10}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8000}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x200008c4}, 0x10010) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040880}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000072013d00007e00009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 3.592116086s ago: executing program 6 (id=3436): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = socket(0x2b, 0x80801, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r4, r1, 0x0, r3}, 0x10) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000380)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@getneigh={0x14, 0x1e, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) close(r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f0000000180)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) 1.276025358s ago: executing program 6 (id=3437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x84, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@empty, 0x3502}]}]}, 0x13c}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000140)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x4, 0x8, 0x5, 0xffffffffffffffe0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ldst={0x3, 0x3, 0x2, 0xb, 0x6, 0x0, 0xfffffffffffffff0}], &(0x7f0000000180)='GPL\x00', 0x0, 0x53, &(0x7f0000000340)=""/83, 0x41100, 0x18, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000004c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000500)=[{0x0, 0x5, 0x0, 0xa}, {0x2, 0x2, 0xc, 0x9}, {0x2, 0x4, 0x7, 0x1}, {0x1, 0x2, 0xb, 0x4}], 0x10, 0x80000001}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010425bd7000ffdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="420033001094"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0xc054) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d000000000005000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006640)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x3, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) 1.141412448s ago: executing program 0 (id=3438): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r11, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r12, r12, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6, 0x20}}, 0x20) r13 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r15 = socket$kcm(0x11, 0x3, 0x0) r16 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x4, 0x8, 0xb, 0xdc}, 0x2, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r15, 0x107, 0xf, &(0x7f0000000600), 0x56) 784.579083ms ago: executing program 2 (id=3439): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x120, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x230, 0x20a, 0x278, 0x230, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@unspec=@state={{0x28}, {0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [0x0, 0xffffff00, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x40, 0x7fffffff, 0x0, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="e3006d98ae0d4e60d307bae84f33950000000000001500000008000070e2550000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32=r0, @ANYRES32=r0], 0x44}}, 0x0) (async) r2 = socket(0x28, 0x800, 0x3) connect$bt_sco(r2, &(0x7f0000000040), 0x8) 0s ago: executing program 2 (id=3440): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4b0, 0x0, 0x250, 0x2e8, 0x380, 0x418, 0x1b8, 0x250, 0x2e8, 0x380, 0x418, 0x6, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x510) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000300)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r3, 0x1, 0x22, 0x0, &(0x7f00000002c0)) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x8, 0x0, 0x4, 0x50, 0x4}], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x1c, &(0x7f0000000380)=""/28, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x7, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r1, r1, r1, r1, r2], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004440)={r4, 0x0, 0xe2, 0x6b, &(0x7f0000000740)="36b164910cf8582ce9ae96358c3fcc502d721fc6bf4f711057c8782737370da74fac0c45ede60396ec0e4b3fcc0fc7c471cd3314898916940bb5f2c38f4e32a5966dbefe9a72416525691a039fa678088b7209aa0043a06e8a9346bb5d1c0ac42435bec5e8cdc1d5c77a2676bb973f673de34f3bee1df7033ce745ef9d8807ac7ff3bb8c9c7b83698652b5ca531efd01833c2891d60aa135da776353f0bcf085455f0b1f60356c486dda9e01dbdfb8b83d48f0e5bda8e7d6744bb422fc21895c2da669c60f62ac69f31c31b74942ac06ff99b0cac0e19d60cfe1115134c626051e9c", &(0x7f0000000840)=""/107, 0x81, 0x0, 0xf9, 0x74, &(0x7f00000008c0)="dc4015bab491a42331286682159dd46763dd514cefbef62517b2aeed5b19aee63e1acc042547ab1fe737e55db0b86af7255c30b0afc398d56bb65131648f2c0f7d40ba0432a0d2a16cd76934559957197a7f2f80325360a039b53785dd83a141c5e845271ee70a4253d23e586e8cfb5d3c660bcef430793469175ef8d0115897babfc0ccbdd25112440a19e0d8b7c84b2d00a6bb73ae8b18d0c2f81c72a90a2192522a3887fd3fe4fa80560578a35851c71054b175c4b423ef2740bbea13db13cd4d32f1a650444d50fe762f1dd2798fb042a8f3209139b8f75f61cd8e55466168899190c10eb9d02a2b2a77437127679250af9d46912c5d6f", &(0x7f00000009c0)="2fc26189a6d9c75eec32a3330211381cc6d719eaf535ef326951de0aba585036c0c95061e40ea357d4157f7ba6ac49cea88038910ae1c871ab4408e3e861071ee0b4669ed31490cb4edf19a7f02a1136748aad0d8ff139515f412f1e438b4161a7dd03ed2380f62c2b799afe1a334acd244c6acb", 0x4, 0x0, 0x5}, 0x50) (async, rerun: 32) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) (async, rerun: 32) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x38000000, @rand_addr=' \x01\x00', 0x80}, 0x1c) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}]}, 0x18}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f500080016800400018008001b0f7856efeace74b9730222356be68fe0823da3d2161b0000000000"], 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 32) sendmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000004380)=[{&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)="c897dab14ad3c4a4417af8459b5295f1155c2ca9006cf3fa1d4eafab08c8e60614e45dd79ad6db8896ab95661e1d82c6b301b2efbef4a14eb71659a6573253683828777c03e2270b35b1ef72f6a43fa1d8d5810aa2bf4c9e724a998912d29882b073e0f6f25284a5bec48ca2536ec8715649cf080d88874b748a48e3e50a7d45670444df740d300332836b55f0dd373aab95cfc48a8f068c0cd5825229e1af475710ecadff04c6cdd95bf7423129f74e38285c0b59b9003baf3704c56ea6dbcef4dcdb62cda97e100ba94b33726bc33ab10df21f649d643148c56aa4e9b48f67002c06743b85013115a705f5cd4a", 0xee}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f00000030c0)="2a2a7b1a9f7270f78e98cfd3fd7f23bfe7a08d9c6d2dbef41a09b94f9b75300c323f073c26e7ca5865b130424247d169194552c7250debea8bb2558911eaa9b4d0ac7a83b736be4183d3188c63cd8adad2d9cb919534ff0f6a11f7aef3ca8a15a411ef082d986d41cbb5521ea494b7c660676b95d9196c632be9dc7b2075c9d02157acdbdd512c50f415d9a8452407479a699e8e06e71be97bcb6da3f165ca3e3d46529efd631717967550d76f09392e3efe7c34d30a", 0xb6}, {&(0x7f0000003180)="55998608fdcf3f3b2113a8a1e7ed6ade6500918113b4c74d272b8d719aa5d0a30236e40d22ee98bfd1e59f661f8fab29938cfa9d2c24fedb1becdf1f524a328f34bbe7d2f2f54fbd5c4a7e7ec7a0131707dbcbc966543a0b2adecb6e8b26d32d87f4844b24a3c24f40b4493917a89e14286c1f1a0632c3b264de415616e56b72b47c97b4537f0576ca209020f4f7b47b94d27fe4a38f908011cd7aac55b64a4f474f3b185df622bcaf146848e08a4a81800dca4e7dfa00d8d3c36d02d80c7b92b28a766ee47f8b7fcd1891708efeea0e83a67a198062687772fb368115dfd62ca4b74aab3e5c5dd580cc4400ed7f0a8ff71e00701682c05a655978ddf6a34fc6ae51157d9903a977d2ca5e423492d884bfc764674987a7b57edd9c15818395d3aa810c33ec35983444d011aa1373f102949dea282a2268d4d0f204f692d691d5ccc2ce7d29d938b004b8ad1eb0f1f5ba9651ddd7b50169aa0996de87542bc6b6184a3c48490c12e0aac21826c6d4bb30336a13ed034d4f4d8555c361c4f6d11469ada236669557d6bbc485d01213c96a4d82e1a833716a7426e57d39749cd21272fa9377dc59b9bafc2b6ded1d4d44e31f1b4dba3c1ddec34a4b829506d5a4533bd0a93f7f892d3fe010e955cc30722dc3f4ccbd3f4e98d1d2953d9e5b78899c640cb864c2353215f1f5b36c3f5662aa44301b1835182e36a011627900fcea1c86a612cbfa2c26d14a6e86104a386f0518cdf5aa345f6410e268a478ae97bec2603ae7da3119a9ff615abbee42d277aaad52c6303b34cf01d3d2d7f9c5fceebc6f388e4ff2695fae276ef0670eaa6c0725a431d8b75818372d398cb7a635454a531d59daa6f53c8bbdb137c575bf092cb7aacb4ffd1159390b3733b3cb9678be67187836dc9b0d213324bbe3f0701f64a0644ace5a657073c29be3d71b45a2fe263454d49e822ec7bfa46344da88b3d9ee3ec3f9cb1665e399c799f813f07accd8a466715efe6d1f789484993ea5e9ccbf5bebaf72433b911e2166003a37a326a95aa8203d45c463f163b632960ff41d6fe3f15cf352b544e26ba2092289a6aafa7f49780e58d5dd4b085a42034a7e6a2951f48fc6fa04fa95b7705f1dc6cb218f8e3bda2abfdf312974d8327799a64169db53673d9a901bfa98dbd0cd19fe1b62f7fd058c980950ce18d3c478d08ce6db70a8a5d1b3c4c4079f4ce60b5d701b583b21cadb61cfea018b7cc04a7fb90411b884a2624daabb6959c7b9480a92b4aec3deb88495469d0a1de24726bc990c5b5140a3584470de14381b4eb98245ec266fe174a89315752b6fba94c910ff394f030b0ad5072d375d9d2cb870a03fcc232a870d06def70fa6b2ed60cccf21ae37eb9169bfad4cf2743cf549900fb9537962915144ca19f755a3f2791404a2f0a88b03db91a7b9ea486e9c2ace68226718025bcdb5ad0db26f4f58c056676dc5c5473a8595ed1b1f29cd9e6118a79db93ad3907419f33ae50a7f0d3c8f8ff48e155c4c7b28c390b1c7671334ab00350a4e2240169c70af8211ae041a2730c3424c7e0f331dbbcfaa613091d3c062ec138cee3ba2d1f8850e328eb0971f7a6289e84ee655294071b252a5042b5808411a3ef992b5bc0b4d0c152448098bc0b53f0675f41aed54971a70e216a84415790844eaa1320cb7f3974c059f29f8268a6b91574799ccc0ca43afb72660c90e5b5356a9deb1ff1292eae99562a1777acdf677ef7a841e5f180247da65b9f7448d89c6af226d05cdcf80172f1fe6b9b0745ab7c431ebb7b53ddb92397b0dbfb703c924fd5fa15ec06f798facb276b2824211a5dbfb27e41b91a77909486cb0d03345692cb99884030c93b3ad67dc0602745d14268203b7548558067180477432b69de9be7d89c0ed2681157d99a9449f1ea4ed3f7e346952b491eeb4b727a4cddbbdc295f61e8bf2991ab2bb73951d3ecd1664817e029dd6f21ac5a3edcd5eea9cf2182328101408729b272bd77bc4ff4aaaf69261cf504d2647a4f1f5152289dc1837047a81b2f6a4663243a78e78d0fb5579ed9072e5d07bfa3799ebab876941e2a6b22123fa9caacccf2b7870df83126d0bdb4b40ffaacdfb44b04eabac0a2e7bba56a7ff1a65fd23202a218b769051e9da06527ab275abe4b8327dd869ff9d9aca9938d97fcd2b684b4ccd441dbef152cc300835a88bf7cd16bb642217f14f653b2ce90206db2a3859676a143bd27f6a31fb957846d1f580cfa9f7f7ecc055eebfa677c7cdd04bdafbf8eb944c17235e29ec9a0f317ad76ff0b1a76812660636a7490d34e2770424e146740e8e1193a004fd1a8c0ba712c2e8511d8c3dbbf808e9f5f597f5d7bbfd9ad3df7d5d5278b14e659f51d3a5ba39023a60837cfa0999cc36a9fe3fffcf38f6a80b1c46e6cc28964637973d82a00697c41768f165e48844b58f616b6adeae89e7300b26e9f32a318c084b636b4ffd71d356d179219e51669e91084c4cb6e3208cbada6c614a34f0af709453b17f6d0636d266a1f09996d47c395f31a50df7e9585c76fef36a2ef2113204994a10da2071ad9752791148fbaae208473b76e162785ddc9ce5e8c754b6b107611fde7212be216159c95b451a53689b4516510dafef8fb1a7601a0cb2f0922e7c0aacde147605aa4c4fe0485c898df9cfa0f3671ba2285aea5477ac12a270f14f731e7e2d29b325dfc257fdccbd959f8f183bc5704f2e238eb1180d2e6bf8adec7a2fc26e1a1a54af13f06170cbee5f3ff927cfb69ce4a4229a9ff7d94a6b1251f491bdecaed0b0ea21a38fbe8d65c28ad79d53c20a5935a7bf7b480ac2b72d385d85a45176b58ff5c2db0b4e5a9c1d54d5077629494f1ad1c4cb94e4c76de15572945ad415a2dd63487981386b31238bf818b1b1adc54a379c45128364ef1f2fada04591d404e3e040d611e113352ca14416df0599e28d1a65e61c2347ebe2b21537bb91b12409e6cb60a31dfcb5cc6c5e42fe9d334a97f1abb2364c6ccd1b10f0fa0a402dc7f9b044fbe4a6ebca11fba873f72be1bb23693da2ac7865be3684c76e092280c5404c3ab9b3d9fba577cd7aac77e6973eeff75e2d88f86236dc7085980b6e67471be3e3a0d8b3a633c57d38552bba5aaf676cd372194e0adb20d9176817815e04f60b28d14641e67f4d895518730460bc5fc27dc1a88cd91a716a9c9985a5df9797f09fc8653d005aac04f45a1f7731f312e16d742a70edac70c20e0f0ab189cccb15db5d98cb8dc6ade025ab8b03e032e8c3307110c870036ea52cfeaf76c815b7b01b258ac713c65a8a0e5c292dc1df2acdd36a079de95f9898f04288b35c6b5baeb8b74cbab44f372f68f857484c8b906b300051528d91097eebcc49356f9aeb878a4187b286ccffc01ee8e3639ca4c5ed1b73edf6d8ef635b0c829469d9790e9c7b859e575b6d0572fba8d082805c622534010e698a030696abedbe3607f998b852a447db61fd7cf2c29348fafe19ee7bfef052c945d4afd02a1669a2c005fbb64c1bcea3dc03aac1cc7e84b9aab8ef4a83d5e3e9b2d8cec1a8d4469db8859c22197a8e662178aa89a5620ad5d402254809adf6d035ad462734b6c93a9286a325d1cfe4f65f4deb69e9dec5a6952def66b4d336e336a017a172e29739d3901c0967bf2f9d2d338e454280c0bad0fdbc762b632f4d7e40feb710b3aea0e250d5eda9dfb9623a07b36e9f676bd102773c1f7a4d9c142895a5aac3c3cd6deb29eed8e5b239bd84b11c01969d7ef6fabad188cd9dc5eba1a6fbac616479b867808405c32c54012b0491a871eb882d4c6693748298a8e5423d201ba9b73a81a689422d86d71e0b1f567065d8aa8af2819eea436b89f0b4a97c0e6dedccd376c1f7c93377e2963d9357d0584322424b5de46e3858f99334611288712fd6a1047feb04290436aedf8e29a6486d20badedba77dfa4fa172f19cfee82f21b0d0721cefe608e8e1609d03fb2b7e7c5f7123e9f9f27698eb1eefd1802602d2006023ab8b381837fa141d62832a6dbae5e7f8f633539acb104b08b79e9d2adfc8259f5167ee5c3f90a130a72b45f212302adf94f5324361d450a70eabc9c27da918f49ece8c177d12182adad676ca554ec6ad9fd3ed1f4af57aa9c0f25649ff4513460cb26aecad5864d8b1fb300a098a913b98924d5870cbca3e60c49d81eafa9ee599a8144c2bcf535d35796c88140100860c36f4732ed82aac9c28d45c3221dff98c6c267585f23b7780a83c2d56d02f6f1a86e5e5a664d96f2df7b2dcdad78c1bc46c80e9bdf650eea16785841a00582160e110392b13a038e294bf52352b56c1d77460d09f967dd3ee19f1aac26aabcf8b0b6be4f93baba672b3cb5595e6023129e4b03e91678efaf37c42f38056ba0adc9bd6bbed1ae3c6f53144d24100829f7d92556c145a766d816128428cea9efaa176b0f7093561d7ddee5279a9db6abd66371b031246cab0f4f914b3a04350ad228e3540ebb3f54ecaf278e8adec889a3ebcdd54de7a93a8dc4e3899c9bfffe444c8299650dda5e319b0b241bdb72b748c6d7ff637292d054513333de855cba15cd5c78e99c7e47bf2da232f4ce16febb0fb0fd9256795ae5db8296bf9b018dab35df5f3124adedd1d7c559e91d08897ef9e8ca811fb650574bf9f24c86305d88158e0038166dc922cc2822e3c5481ffaaa30f9611491ec08f52fa98fcc01dd760c2b8cb59904b274ffd86de7796e06cc7553fe2c790793ffd420c0f78d7315f15971d0937259bf00d7ced71ca225b39f5e1c5daf29bf971ef9b79b1f2fcdf5e47fb8da50e874b136c699149f35d5cbae9887f99d969d265d3086ccfd91aff53b758aeb3ef31359c301bfbe7b40067fc395aa66c3affd058d2f55f32cd95e57ecd9156a9652a834a4779791861ef5e504b33246826f20e4c0f5ea3c571e897bf69beb0e1ca88d13cb00fd5b1e6014a6a70e9ed45a1b1f1bf5268a5787e128f0ebf9d1a5acfa01055a1b40228b00df7248c1e4aa34c77238fd84e865e29220b20293df6fc74dc39c6c91140891e66489e8096a40bd3d5c3110c984b96303cdb8d369f163d6f3bf5bae864ae2cb9dcb9aa4486373dbe9507cbcf8c2adcaea605faf3ac3ae646a0ffa736b01fe6e604f3f5cb9681da0088143d57920008712243bc1b061af0ee93d4dc06aeedafdd49bdb6d3a7cb2c3c8b5b392c5d1454b39e2de8c6546c78d4851044199e5e02b5db4b28386897401a7e2b2918720f7c3e6e0b43970f1694871ec6c68916c7a0335034621023fe6a03db9704ac6fbc060200e900c7fb2a2d9e88c9eb3a62d84ca0dca5fdf685c2c3279538c635c5c276f437ae6cf8a52ad9f89700bcb1ca51526506adcdca9df2f8d46248eda4d94dcce8aff13cedb6b49b80f15b3c408b8f44165496988ea9342e26a2e17ed9fd4e29dfea08a57448253dd3b851b6ec2fc897789f288b8945793ca404ea537312cfa8ddd2b76d08397a4a889c722447252bbbac373ef5987f554ce1aca57466d5d5e74aebdd754eac9a0341dc1b40ffdac13c5cf322ee5f2b9d2b390c53642f0047ea6ffb211d788b7324bc87b2aa36b33b8bea940bf53d053733094ec40e8725add6dae73b61c05571cf65b56e39a506e4d99e99a801255cea092f818fb56203c8ba9c12ae7c5d9ec80cf24eef036e3eb9b0635fbad3894694049771ee9cf4a731b267a0305d55a538b2f45d3269e131ac76765b33e7c69f1165d8c9f0d2b111fd1ee74a847a5f2146572257ad90661df2afbb47003d6f111edb8e8f3d", 0x1000}, {&(0x7f0000004180)="50012cad1300573e8affb6f8de918eafae352a2955788f628dc7efc578a31e91a846a907aee729a39f49dcb55a8b07753b80b6d4f7448b53dcc6c1ab2c4b73ce8454ddb85767338f7bca281b726f85a75ff44e928a5d0cf2b76dd805ee27d84a71f2783881588e76680c672fc63cc8de2d01c729a565a4b0c931b9c4528237608fe932f08efea178eb7ed309f6fabea70c94dbcddd07f7423071577af3c6cba50f56fce256c4073f4dd89c045d956450b3a6045ac9812329ca04984d881c6082926d4f91478127f5bf6989a8b5073b53aae78eb2c868c5ece553301f864bdcf1aeeae5", 0xe3}, {&(0x7f0000004280)="f7dd3399839f8f79e979b1316e1cad959e5d8b4a33ba5c5a002323f4afa548c738993fbc64577a78cd7330f1ddd2aa0a851902b195efbe14575025a26dd9954d1eb93b865ef0812a6e6fe40d4d56d479841b9c74ac25a2fe6555412330a810e4fa3fee5db71de86dd602129aa87450e51067bda26c099a4c6cd4d13fde5738fea631308b2629bbdb56a1e1e991a0c30a9d07b30d1052833a4e98860ad37e96ae9f1efa51ce2ce99aa8621c3c2170e6267ef7c4cd2a797d5dd0938e567fb8432bb39245724e72bbf2a08de2", 0xcb}], 0x7}}], 0x1, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="110725bd7000fbdbdf25040000003212b586948cb485d4d247474e174c6bb76b0e65204c17b09fa37a2890ddb177b69f91b0290ba7e190d9330572f7bd96ed03438226cf342676f06d3dca9d399db5fca787148b2a764843195d91519096c13f7d8f5e502ab2caf4df8b641b83094b7eb99341b2487ffdec7f26ee8dfda912532e399c234ce5850ae173b08823105dacac474425ed1b912ec2423377b4d089f0b6d8a154fb"], 0x14}, 0x1, 0x0, 0x0, 0x24044894}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) kernel console output (not intermixed with test programs): 0x520 [ 343.070138][T13589] ? trace_irq_disable+0x3b/0x140 [ 343.070161][T13589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.070184][T13589] ? clear_bhb_loop+0x70/0xc0 [ 343.070213][T13589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.070244][T13589] RIP: 0033:0x7f7f0475e98e [ 343.070266][T13589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 343.070287][T13589] RSP: 002b:00007f7f056d7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 343.070311][T13589] RAX: ffffffffffffffda RBX: 00007f7f056d86c0 RCX: 00007f7f0475e98e [ 343.070328][T13589] RDX: 000000000000000f RSI: 00007f7f056d80a0 RDI: 0000000000000006 [ 343.070343][T13589] RBP: 00007f7f056d8090 R08: 0000000000000000 R09: 0000000000000000 [ 343.070358][T13589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.070372][T13589] R13: 00007f7f04a26038 R14: 00007f7f04a25fa0 R15: 00007ffc706c9188 [ 343.070409][T13589] [ 343.702315][T13605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2076'. [ 343.992076][T13617] netlink: 'syz.2.2079': attribute type 1 has an invalid length. [ 344.707981][T13660] xt_hashlimit: size too large, truncated to 1048576 [ 344.982319][T13678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.403975][T13688] bond9: entered promiscuous mode [ 345.403999][T13688] bond9: entered allmulticast mode [ 345.536470][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.536556][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.536634][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.536711][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.536818][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.536895][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.536971][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.537067][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.537154][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.538509][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.538598][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.538680][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.538786][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.538870][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.538951][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.539163][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.539247][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.539331][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.539411][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.539508][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.539594][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.539684][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.539795][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.539880][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.539967][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.545604][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.545693][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.545815][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.545897][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.545977][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.546084][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.691359][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.691701][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.691941][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.693704][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.694010][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.694515][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.694907][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.695140][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.695369][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.696317][T13701] tap0: tun_chr_ioctl cmd 1074025676 [ 345.696366][T13701] tap0: owner set to 0 [ 345.706568][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.706845][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.707084][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.707317][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.707990][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.719375][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.720082][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.720330][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.720590][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.722294][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.722648][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.722888][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.723095][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.723738][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.724784][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.725612][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.726274][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.726591][T13700] tap0: tun_chr_ioctl cmd 35108 [ 345.727553][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.727787][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.728009][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.735036][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.744403][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.744643][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 345.762329][T13698] tap0: tun_chr_ioctl cmd 1074025673 [ 346.332588][T13725] netlink: 'syz.3.2116': attribute type 9 has an invalid length. [ 346.361493][T13725] netlink: 'syz.3.2116': attribute type 9 has an invalid length. [ 346.743845][T13744] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 346.978747][T13759] netlink: 'syz.2.2126': attribute type 17 has an invalid length. [ 346.990775][T13760] netlink: 'syz.2.2126': attribute type 17 has an invalid length. [ 347.017589][T13759] gretap0: entered promiscuous mode [ 347.030083][T13759] gretap0: left promiscuous mode [ 347.096196][T13760] gretap0: entered promiscuous mode [ 347.113584][T13760] gretap0: left promiscuous mode [ 347.155646][T13761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.068744][T13804] __nla_validate_parse: 17 callbacks suppressed [ 348.068764][T13804] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2137'. [ 348.350039][T13816] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2140'. [ 348.350065][T13816] tc_dump_action: action bad kind [ 349.427001][T13867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.431999][T13867] netlink: 'syz.3.2153': attribute type 5 has an invalid length. [ 349.432024][T13867] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2153'. [ 349.657057][T13875] netlink: 'syz.3.2155': attribute type 3 has an invalid length. [ 349.657082][T13875] netlink: 'syz.3.2155': attribute type 1 has an invalid length. [ 349.657097][T13875] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2155'. [ 349.799303][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 349.926419][T13896] bridge3: entered allmulticast mode [ 349.973450][T13895] sctp: [Deprecated]: syz.0.2163 (pid 13895) Use of int in maxseg socket option. [ 349.973450][T13895] Use struct sctp_assoc_value instead [ 350.000150][T13895] netlink: 'syz.0.2163': attribute type 7 has an invalid length. [ 350.198831][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2169'. [ 350.198857][T13910] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2169'. [ 350.946718][T13945] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 350.983536][T13947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.323499][T13966] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 351.516017][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2189'. [ 351.516055][T13978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2189'. [ 352.243163][T14018] netlink: 'syz.0.2197': attribute type 10 has an invalid length. [ 352.246016][T14018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.433397][T14023] netlink: 'syz.0.2199': attribute type 4 has an invalid length. [ 352.434361][T14023] netlink: 'syz.0.2199': attribute type 4 has an invalid length. [ 352.518341][T14025] bond0: option lp_interval: invalid value (0) [ 352.518363][T14025] bond0: option lp_interval: allowed values 1 - 2147483647 [ 352.535366][T14025] bond0 (unregistering): Released all slaves [ 352.820102][T14041] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2205'. [ 352.820133][T14041] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2205'. [ 352.941484][T14047] sctp: Trying to GSO but underlying device doesn't support it. [ 353.064499][T14053] xt_check_table_hooks: 55 callbacks suppressed [ 353.064518][T14053] x_tables: duplicate underflow at hook 3 [ 353.104186][T14055] __nla_validate_parse: 2 callbacks suppressed [ 353.104207][T14055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2208'. [ 353.138416][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2208'. [ 353.205648][T14057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2211'. [ 353.205814][T14057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2211'. [ 353.235241][T14061] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2212'. [ 353.559367][T14074] veth0: entered promiscuous mode [ 353.696413][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2220'. [ 353.696438][T14080] block nbd0: Unsupported socket: should be TCP or UNIX. [ 353.982166][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2224'. [ 353.982188][T14094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2224'. [ 353.986948][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2224'. [ 353.986967][T14098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2224'. [ 354.137368][T14102] netlink: 'syz.4.2226': attribute type 4 has an invalid length. [ 354.321118][T14072] veth0: left promiscuous mode [ 354.482495][T14113] Cannot find map_set index 135 as target [ 354.594560][T14119] block nbd0: not configured, cannot reconfigure [ 354.623971][ T4932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 354.637615][ T4932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 354.645843][ T4932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 354.647354][ T4932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 354.648808][ T4932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.745434][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 354.755360][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 354.758249][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 354.764583][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 354.776511][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.474341][T14144] openvswitch: netlink: Multiple metadata blocks provided [ 356.176876][T14118] syzkaller0 speed is unknown, defaulting to 1000 [ 356.195661][T14118] netdevsim0 speed is unknown, defaulting to 1000 [ 356.778104][T14189] batman_adv: batadv0: Adding interface: syzkaller0 [ 356.778129][T14189] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.778396][T14189] batman_adv: batadv0: Interface activated: syzkaller0 [ 356.847357][ T5626] Bluetooth: hci5: command tx timeout [ 357.475984][T14213] bridge0: entered allmulticast mode [ 357.630545][T14118] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.630769][T14118] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.630909][T14118] bridge_slave_0: entered allmulticast mode [ 357.633024][T14118] bridge_slave_0: entered promiscuous mode [ 357.673570][T14118] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.673676][T14118] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.673905][T14118] bridge_slave_1: entered allmulticast mode [ 357.675929][T14118] bridge_slave_1: entered promiscuous mode [ 357.828581][T14220] bond10: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 357.842626][T14220] bond10 (unregistering): Released all slaves [ 358.078681][T14239] vlan5: entered allmulticast mode [ 358.078708][T14239] bridge0: entered allmulticast mode [ 358.097673][T14118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.113483][T14234] bridge0: port 1(erspan0) entered blocking state [ 358.113718][T14234] bridge0: port 1(erspan0) entered disabled state [ 358.113897][T14234] erspan0: entered allmulticast mode [ 358.151662][T14234] erspan0: entered promiscuous mode [ 358.154359][T14234] bridge0: port 1(erspan0) entered blocking state [ 358.154471][T14234] bridge0: port 1(erspan0) entered forwarding state [ 358.196242][T14118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.242922][T14118] team0: Port device team_slave_0 added [ 358.246055][T14118] team0: Port device team_slave_1 added [ 358.297328][T14118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.297347][T14118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.297394][T14118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.343435][T14118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.343455][T14118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.343484][T14118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.404527][T14249] __nla_validate_parse: 10 callbacks suppressed [ 358.404551][T14249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2261'. [ 358.405454][T14249] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2261'. [ 358.527063][T14118] hsr_slave_0: entered promiscuous mode [ 358.528270][T14118] hsr_slave_1: entered promiscuous mode [ 358.694820][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2263'. [ 358.723550][T14257] netlink: 'syz.3.2264': attribute type 11 has an invalid length. [ 358.919301][ T5626] Bluetooth: hci5: command tx timeout [ 359.302153][T14270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.353509][T14118] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 359.388263][T14118] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.397267][T14118] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 359.423971][T14118] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.424910][T14118] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 359.468859][T14118] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 359.477321][T14118] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 359.507506][T14118] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.677596][T14284] batman_adv: batadv0: Adding interface: syzkaller0 [ 359.677616][T14284] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.677650][T14284] batman_adv: batadv0: Interface activated: syzkaller0 [ 359.677667][T14284] batadv0: mtu less than device minimum [ 359.680472][T14284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 359.681695][T14284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 359.683131][T14284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 359.684525][T14284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 359.685998][T14284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 359.687444][T14284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 359.688905][T14284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 359.692158][T14284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 359.955166][T14118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.076298][T14118] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.140182][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.140293][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.188435][T14299] netlink: 'syz.4.2278': attribute type 1 has an invalid length. [ 360.198683][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2278'. [ 360.198712][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2278'. [ 360.198783][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2278'. [ 360.255149][T14299] 8021q: adding VLAN 0 to HW filter on device bond7 [ 360.257617][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.257715][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.318318][T14299] batman_adv: batadv0: Interface deactivated: dummy0 [ 360.329691][T14299] batman_adv: batadv0: Removing interface: dummy0 [ 360.443845][T14118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.883073][T14321] sch_fq: defrate 0 ignored. [ 360.978446][T14329] smbdirect: ib_dev[syz2] removed [ 361.000243][ T5626] Bluetooth: hci5: command tx timeout [ 361.066564][T14333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2286'. [ 361.335332][T14339] netlink: 384 bytes leftover after parsing attributes in process `syz.2.2288'. [ 361.698815][T14356] netlink: 'syz.2.2293': attribute type 9 has an invalid length. [ 361.698840][T14356] netlink: 'syz.2.2293': attribute type 4 has an invalid length. [ 361.847049][T14361] netlink: 'syz.0.2295': attribute type 5 has an invalid length. [ 361.847082][T14361] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2295'. [ 362.137101][T14118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.250990][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2296'. [ 362.310542][T14376] syzkaller0: left promiscuous mode [ 362.310565][T14376] syzkaller0: left allmulticast mode [ 362.312148][T14376] FAULT_INJECTION: forcing a failure. [ 362.312148][T14376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.312180][T14376] CPU: 1 UID: 0 PID: 14376 Comm: syz.3.2299 Not tainted syzkaller #0 PREEMPT(full) [ 362.312205][T14376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.312233][T14376] Call Trace: [ 362.312243][T14376] [ 362.312253][T14376] dump_stack_lvl+0xe8/0x150 [ 362.312291][T14376] should_fail_ex+0x410/0x560 [ 362.312322][T14376] _copy_from_user+0x2d/0xb0 [ 362.312352][T14376] kstrtouint_from_user+0xd6/0x180 [ 362.312378][T14376] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 362.312411][T14376] ? lock_acquire+0x115/0x350 [ 362.312438][T14376] proc_fail_nth_write+0x8e/0x210 [ 362.312461][T14376] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 362.312505][T14376] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 362.312540][T14376] vfs_write+0x296/0xba0 [ 362.312582][T14376] ? __pfx_vfs_write+0x10/0x10 [ 362.312627][T14376] ? __fget_files+0x2a/0x420 [ 362.312662][T14376] ? __fget_files+0x3a2/0x420 [ 362.312691][T14376] ? __fget_files+0x2a/0x420 [ 362.312732][T14376] ksys_write+0x150/0x270 [ 362.312769][T14376] ? __pfx_ksys_write+0x10/0x10 [ 362.312836][T14376] do_syscall_64+0x166/0x520 [ 362.312863][T14376] ? trace_irq_disable+0x3b/0x140 [ 362.312885][T14376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.312927][T14376] ? clear_bhb_loop+0x70/0xc0 [ 362.312956][T14376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.312980][T14376] RIP: 0033:0x7f7f0475e98e [ 362.313001][T14376] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 362.313022][T14376] RSP: 002b:00007f7f056d7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 362.313046][T14376] RAX: ffffffffffffffda RBX: 00007f7f056d86c0 RCX: 00007f7f0475e98e [ 362.313063][T14376] RDX: 0000000000000001 RSI: 00007f7f056d80a0 RDI: 000000000000000a [ 362.313078][T14376] RBP: 00007f7f056d8090 R08: 0000000000000000 R09: 0000000000000000 [ 362.313093][T14376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.313106][T14376] R13: 00007f7f04a26038 R14: 00007f7f04a25fa0 R15: 00007ffc706c9188 [ 362.313143][T14376] [ 363.080461][ T5626] Bluetooth: hci5: command tx timeout [ 363.249996][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 363.338424][T14118] veth0_vlan: entered promiscuous mode [ 363.416019][T14118] veth1_vlan: entered promiscuous mode [ 363.541821][T14418] netlink: 'syz.0.2310': attribute type 10 has an invalid length. [ 363.694151][T14422] __nla_validate_parse: 3 callbacks suppressed [ 363.694172][T14422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2313'. [ 363.736489][T14418] team0: Port device dummy0 added [ 363.736788][T14418] netlink: 'syz.0.2310': attribute type 10 has an invalid length. [ 363.737084][T14118] veth0_macvtap: entered promiscuous mode [ 363.886530][T14418] netlink: 'syz.0.2310': attribute type 10 has an invalid length. [ 363.911958][T14418] netlink: 'syz.0.2310': attribute type 10 has an invalid length. [ 363.912131][T14418] netlink: 'syz.0.2310': attribute type 10 has an invalid length. [ 363.912288][T14418] netlink: 'syz.0.2310': attribute type 10 has an invalid length. [ 363.918463][T14118] veth1_macvtap: entered promiscuous mode [ 364.106941][T14118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.160229][T14402] infiniband syz2: set active [ 364.160254][T14402] infiniband syz2: added ipvlan1 [ 364.182417][T14118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.335078][T14402] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 364.335121][T14402] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 364.335165][T14402] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 364.459287][ T6327] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.570422][ T6333] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.593656][ T1046] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.595978][ T6334] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.712274][T14402] RDS/IB: syz2: added [ 364.712930][T14402] smc: adding ib device syz2 with port count 1 [ 364.716994][T14402] smc: ib device syz2 port 1 has no pnetid [ 365.214478][ T6334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.214504][ T6334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.350529][T14442] net_ratelimit: 12 callbacks suppressed [ 365.350549][T14442] openvswitch: netlink: Unknown key attributes 1 [ 365.522897][ T6333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.522920][ T6333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.799187][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 366.935751][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2326'. [ 367.257116][T14486] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2328'. [ 367.292779][T14492] netlink: 5120 bytes leftover after parsing attributes in process `syz.3.2329'. [ 367.610912][T14499] erspan0: left allmulticast mode [ 367.610957][T14499] erspan0: left promiscuous mode [ 367.611193][T14499] bridge0: port 1(erspan0) entered disabled state [ 367.706773][T14499] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 368.192797][T14510] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2337'. [ 368.197570][T14510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2337'. [ 368.343530][T14519] lo: entered promiscuous mode [ 368.374004][T14519] tunl0: entered promiscuous mode [ 368.377163][T14519] gre0: entered promiscuous mode [ 368.421551][T14519] gretap0: entered promiscuous mode [ 368.456208][T14519] erspan0: entered promiscuous mode [ 368.476554][T14519] ip_vti0: entered promiscuous mode [ 368.915865][T14530] SET target dimension over the limit! [ 368.951392][T14534] validate_nla: 50 callbacks suppressed [ 368.951413][T14534] netlink: 'syz.5.2344': attribute type 15 has an invalid length. [ 368.992487][T14535] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2345'. [ 368.992520][T14535] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2345'. [ 369.483552][T14551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2351'. [ 369.622412][T14559] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2354'. [ 369.627412][T14559] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2354'. [ 369.897044][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 370.089326][T14571] netlink: 'syz.3.2355': attribute type 4 has an invalid length. [ 370.767945][T14600] netlink: 'syz.3.2365': attribute type 1 has an invalid length. [ 370.767968][T14600] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2365'. [ 370.767984][T14600] netlink: 'syz.3.2365': attribute type 1 has an invalid length. [ 370.983791][T14605] geneve2: entered promiscuous mode [ 370.983814][T14605] geneve2: entered allmulticast mode [ 371.021857][ T6327] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 371.022827][ T6327] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 371.022865][ T6327] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 371.022899][ T6327] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 371.153281][T14615] netlink: 'syz.4.2371': attribute type 1 has an invalid length. [ 371.245483][T14615] 8021q: adding VLAN 0 to HW filter on device bond8 [ 371.247893][T14612] veth1_to_bond: entered allmulticast mode [ 371.274972][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'. [ 371.313336][T14612] veth1_to_bond (unregistering): left allmulticast mode [ 371.415727][T14615] bond8: (slave geneve4): making interface the new active one [ 371.428976][T14615] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 371.700954][ T5626] block nbd0: Receive control failed (result -32) [ 371.814126][T14650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2379'. [ 371.814803][T14650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2379'. [ 371.840956][T14650] netlink: Invalid conntrack timeout [ 371.840986][T14650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.103788][T14661] tipc: Started in network mode [ 372.103841][T14661] tipc: Node identity aaaaaaaaaa17, cluster identity 4711 [ 372.103989][T14661] tipc: Enabled bearer , priority 0 [ 372.263894][T14670] syzkaller0: entered promiscuous mode [ 372.263917][T14670] syzkaller0: entered allmulticast mode [ 372.495690][ T5626] block nbd1: Receive control failed (result -32) [ 372.674977][T14695] bond0: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 372.676662][T14695] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 372.864433][T14703] syzkaller1: entered promiscuous mode [ 372.864457][T14703] syzkaller1: entered allmulticast mode [ 372.883565][T14703] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 372.883589][T14703] syzkaller1: Linktype set failed because interface is up [ 373.229120][T14169] tipc: Node number set to 12429994 [ 376.119390][T14731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.545819][T14762] __nla_validate_parse: 7 callbacks suppressed [ 376.545840][T14762] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2412'. [ 376.632070][T14767] tunl0: entered promiscuous mode [ 376.632277][T14767] netlink: 'syz.4.2414': attribute type 3 has an invalid length. [ 376.632295][T14767] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2414'. [ 376.791030][T14773] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.2418'. [ 376.795344][T14773] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 377.051781][ T31] audit: type=1800 audit(1789715311.396:7): pid=14788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2422" name=680B20 dev="tmpfs" ino=2489 res=0 errno=0 [ 377.176574][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2423'. [ 377.176606][T14792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2423'. [ 377.383346][T14803] nbd2: detected capacity change from 0 to 63 [ 377.388720][ T5626] block nbd2: Receive control failed (result -32) [ 377.436462][ T1760] block nbd2: Dead connection, failed to find a fallback [ 377.436488][ T1760] block nbd2: shutting down sockets [ 377.436592][ T1760] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.436691][ T1760] Buffer I/O error on dev nbd2, logical block 0, async page read [ 377.447206][ T1760] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.447286][ T1760] Buffer I/O error on dev nbd2, logical block 1, async page read [ 377.455691][ T1760] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.455837][ T1760] Buffer I/O error on dev nbd2, logical block 2, async page read [ 377.456255][ T1760] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.456340][ T1760] Buffer I/O error on dev nbd2, logical block 3, async page read [ 377.458365][ T1760] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.458439][ T1760] Buffer I/O error on dev nbd2, logical block 0, async page read [ 377.458831][ T1760] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.458907][ T1760] Buffer I/O error on dev nbd2, logical block 1, async page read [ 377.461644][ T1760] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.461768][ T1760] Buffer I/O error on dev nbd2, logical block 2, async page read [ 377.462186][ T1760] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.462255][ T1760] Buffer I/O error on dev nbd2, logical block 3, async page read [ 377.463412][ T1760] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.474590][ T1760] Buffer I/O error on dev nbd2, logical block 0, async page read [ 377.481523][ T1760] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 377.481610][ T1760] Buffer I/O error on dev nbd2, logical block 1, async page read [ 377.574625][T14727] ldm_validate_partition_table(): Disk read failed. [ 377.588973][T14727] Dev nbd2: unable to read RDB block 0 [ 377.624395][T14727] nbd2: unable to read partition table [ 377.715646][T14727] ldm_validate_partition_table(): Disk read failed. [ 377.725954][T14727] Dev nbd2: unable to read RDB block 0 [ 377.747932][T14727] nbd2: unable to read partition table [ 377.898695][T14819] sctp: [Deprecated]: syz.5.2430 (pid 14819) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.898695][T14819] Use struct sctp_sack_info instead [ 378.004290][T14819] vlan2: entered allmulticast mode [ 378.004315][T14819] veth1_virt_wifi: entered allmulticast mode [ 378.081446][T14827] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 378.155061][T14824] netlink: 'syz.0.2431': attribute type 1 has an invalid length. [ 378.208343][T14836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2431'. [ 378.256223][T14839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2434'. [ 378.256257][T14839] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2434'. [ 378.256591][T14840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2434'. [ 378.256611][T14840] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2434'. [ 378.504258][T14845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 378.507186][T14836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.607770][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.183079][T14870] netlink: 'syz.2.2439': attribute type 5 has an invalid length. [ 380.280912][T14884] macvtap3: entered promiscuous mode [ 380.282195][T14884] macvtap3: entered allmulticast mode [ 380.282214][T14884] veth1_vlan: entered allmulticast mode [ 381.066006][T14827] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.295926][T14889] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 381.380823][T14908] netlink: 'syz.5.2451': attribute type 1 has an invalid length. [ 381.389165][T14902] netlink: 'syz.3.2449': attribute type 11 has an invalid length. [ 381.407496][T14908] netlink: 'syz.5.2451': attribute type 1 has an invalid length. [ 381.409680][T14902] siw: device registration error -23 [ 381.432623][T14893] netlink: 'syz.2.2447': attribute type 28 has an invalid length. [ 381.432643][T14893] netlink: 'syz.2.2447': attribute type 3 has an invalid length. [ 381.716629][T14922] __nla_validate_parse: 13 callbacks suppressed [ 381.716649][T14922] netlink: 404 bytes leftover after parsing attributes in process `syz.4.2453'. [ 381.716665][T14922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2453'. [ 381.716683][T14922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2453'. [ 381.716698][T14922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2453'. [ 381.773456][T14922] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 381.773485][T14922] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 382.116498][T14959] netlink: 'syz.0.2458': attribute type 9 has an invalid length. [ 382.180970][T14962] pim6reg: left allmulticast mode [ 382.326261][T14967] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 382.358059][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2460'. [ 382.464112][T14969] 8021q: adding VLAN 0 to HW filter on device bond9 [ 382.718173][T14980] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2464'. [ 382.718199][T14980] nbd: illegal input index 65508 [ 382.754917][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2462'. [ 382.754942][T14976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2462'. [ 382.786503][T14970] netlink: 'syz.3.2462': attribute type 4 has an invalid length. [ 382.786528][T14970] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2462'. [ 383.256836][T15017] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2474'. [ 383.418474][T15027] team0 (unregistering): Port device team_slave_0 removed [ 383.440740][T15027] team0 (unregistering): Port device team_slave_1 removed [ 383.476321][T15024] syzkaller1: entered promiscuous mode [ 383.476343][T15024] syzkaller1: entered allmulticast mode [ 383.492657][T15029] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 383.492787][T15029] syzkaller1: linktype set to 823 [ 383.521249][T15026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.071758][T15085] netdevsim0 speed is unknown, defaulting to 1000 [ 385.148415][T15091] netdevsim0 speed is unknown, defaulting to 1000 [ 385.480627][T15116] netlink: 'syz.3.2500': attribute type 49 has an invalid length. [ 385.985162][ T6332] IPVS: starting estimator thread 0... [ 386.069525][T15138] IPVS: using max 31 ests per chain, 74400 per kthread [ 386.211668][T15149] netlink: 'syz.5.2509': attribute type 64 has an invalid length. [ 386.508798][T15158] ip_tables: iptables: counters copy to user failed while replacing table [ 386.864286][T15171] netlink: 'syz.3.2517': attribute type 1 has an invalid length. [ 386.986873][T15177] __nla_validate_parse: 19 callbacks suppressed [ 386.986895][T15177] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2520'. [ 387.216271][T15184] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2521'. [ 387.216299][T15184] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 387.515970][T15196] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 387.555996][T15197] netlink: 'syz.2.2524': attribute type 14 has an invalid length. [ 387.695991][T15196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2523'. [ 387.936354][T15204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2526'. [ 388.150159][T15226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2529'. [ 388.555132][T15240] netlink: 'syz.4.2536': attribute type 1 has an invalid length. [ 388.555157][T15240] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2536'. [ 388.555175][T15240] netlink: 'syz.4.2536': attribute type 1 has an invalid length. [ 388.557171][T15240] Bluetooth: ISO socket layer initialized [ 388.566512][T15248] tipc: Enabling of bearer rejected, already enabled [ 389.370482][ T6334] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.370540][ T6334] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 389.370569][ T6334] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.579952][T15274] netlink: 'syz.4.2544': attribute type 1 has an invalid length. [ 389.625759][T15279] netlink: 'syz.3.2547': attribute type 1 has an invalid length. [ 389.657265][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2544'. [ 389.708832][T15274] 8021q: adding VLAN 0 to HW filter on device bond10 [ 389.732196][T15282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2549'. [ 389.773464][ T31] audit: type=1800 audit(1789715324.116:8): pid=15274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2544" name=0A dev="tmpfs" ino=2629 res=0 errno=0 [ 389.827104][T15290] netlink: 'syz.0.2550': attribute type 1 has an invalid length. [ 390.014324][T15294] bond6: (slave geneve2): making interface the new active one [ 390.015231][T15294] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 390.040732][ T6334] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 390.110319][ T6333] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 390.110382][ T6333] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 390.115751][T15296] syzkaller0: entered promiscuous mode [ 390.115771][T15296] syzkaller0: entered allmulticast mode [ 390.168191][T15305] xt_hashlimit: size too large, truncated to 1048576 [ 390.190920][T15307] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2552'. [ 390.191882][T15309] syz_tun: entered promiscuous mode [ 390.363299][T15311] netlink: 'syz.0.2557': attribute type 62 has an invalid length. [ 390.735128][T15322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.879125][T15331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2562'. [ 391.048084][T15344] netlink: 'syz.0.2566': attribute type 1 has an invalid length. [ 391.095064][T15344] bond7: entered promiscuous mode [ 391.096076][T15344] 8021q: adding VLAN 0 to HW filter on device bond7 [ 391.192835][T15337] 8021q: adding VLAN 0 to HW filter on device bond7 [ 391.193248][T15337] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 391.193268][T15337] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 391.236940][T15337] bond7: (slave ip6gre1): making interface the new active one [ 391.236961][T15337] ip6gre1: entered promiscuous mode [ 391.238413][T15337] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 391.804488][T15375] netlink: 'syz.2.2575': attribute type 7 has an invalid length. [ 391.993722][T15388] __nla_validate_parse: 9 callbacks suppressed [ 391.993744][T15388] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2576'. [ 392.928908][T15429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2590'. [ 392.995678][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2591'. [ 392.995702][T15428] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2591'. [ 392.995775][T15428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2591'. [ 393.107888][T15428] macvtap1: entered promiscuous mode [ 393.109930][T15428] macvtap1: entered allmulticast mode [ 393.109983][T15428] veth1_vlan: entered allmulticast mode [ 393.117528][T15439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.366566][T15456] tls_set_device_offload_rx: netdev not found [ 393.394200][T15457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.519533][T15458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.743426][T15469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.821220][T15470] dvmrp1: entered allmulticast mode [ 393.853082][T15476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2601'. [ 393.906170][T15476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2601'. [ 393.994451][T15482] netlink: 'syz.5.2603': attribute type 10 has an invalid length. [ 394.012710][T15482] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 394.266664][T15486] netlink: 'syz.5.2605': attribute type 1 has an invalid length. [ 394.307206][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2606'. [ 394.330958][T15490] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2605'. [ 394.363069][T15491] netlink: 'syz.0.2606': attribute type 16 has an invalid length. [ 394.366573][T15486] bond1: entered promiscuous mode [ 394.368663][T15486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.523237][T15494] bond9: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 394.538243][T15491] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2606'. [ 394.547558][T15494] bond9 (unregistering): Released all slaves [ 394.927531][T15516] netlink: 'syz.3.2614': attribute type 10 has an invalid length. [ 395.099783][T15529] Cannot find add_set index 46338 as target [ 395.225389][T15537] Cannot find add_set index 46338 as target [ 395.514086][T15556] netlink: 'syz.3.2626': attribute type 10 has an invalid length. [ 395.556570][T15560] netlink: 'syz.2.2627': attribute type 8 has an invalid length. [ 395.575039][T15556] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.576845][T15556] .`: (slave team0): Enslaving as an active interface with an up link [ 395.577254][T15560] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.577959][T15560] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.735550][T15562] veth2: entered promiscuous mode [ 395.735573][T15562] veth2: entered allmulticast mode [ 395.862134][T15576] netlink: 'syz.0.2634': attribute type 12 has an invalid length. [ 395.886686][T15577] netlink: 'syz.4.2631': attribute type 5 has an invalid length. [ 396.725569][ T5626] block nbd3: Receive control failed (result -107) [ 396.739966][ T5626] block nbd4: Receive control failed (result -32) [ 396.931642][T15625] netlink: 'syz.2.2650': attribute type 1 has an invalid length. [ 397.010975][T15625] 8021q: adding VLAN 0 to HW filter on device bond10 [ 397.032931][T15628] vlan3: entered promiscuous mode [ 397.032947][T15628] gretap0: entered promiscuous mode [ 397.033114][T15628] vlan3: entered allmulticast mode [ 397.033124][T15628] gretap0: entered allmulticast mode [ 397.114439][T15625] bond10: (slave bridge6): making interface the new active one [ 397.128410][T15625] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 397.199172][T15633] netlink: 'syz.5.2652': attribute type 2 has an invalid length. [ 397.199211][T15633] __nla_validate_parse: 13 callbacks suppressed [ 397.199225][T15633] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2652'. [ 397.297514][T15639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2654'. [ 397.308692][T15639] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2654'. [ 397.321673][T15639] netlink: 756 bytes leftover after parsing attributes in process `syz.3.2654'. [ 397.511739][T15652] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2656'. [ 397.657408][T15656] 8021q: adding VLAN 0 to HW filter on device bond8 [ 397.666054][T15660] lo: left promiscuous mode [ 397.666219][T15660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.767744][T15656] bond8: (slave geneve3): making interface the new active one [ 397.786809][T15656] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 397.860398][T15670] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2665'. [ 397.890528][T15665] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 397.890562][T15665] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 398.216767][T15687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2672'. [ 398.439240][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 398.460003][T15702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2677'. [ 398.460958][T15702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2677'. [ 398.496015][T15703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2676'. [ 398.987971][T15725] bond9: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 399.008739][T15725] bond9 (unregistering): Released all slaves [ 399.173052][T15726] bond9: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 399.176239][T15726] bond9 (unregistering): Released all slaves [ 399.355395][T15748] validate_nla: 2 callbacks suppressed [ 399.355416][T15748] netlink: 'syz.2.2689': attribute type 83 has an invalid length. [ 399.761754][T15777] sctp: [Deprecated]: syz.2.2698 (pid 15777) Use of int in max_burst socket option. [ 399.761754][T15777] Use struct sctp_assoc_value instead [ 399.964609][T15780] bridge7: entered promiscuous mode [ 399.964652][T15780] bridge7: entered allmulticast mode [ 400.106817][ T31] audit: type=1800 audit(1789715334.446:9): pid=15799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2702" name="memory.events" dev="tmpfs" ino=2980 res=0 errno=0 [ 400.107562][ T31] audit: type=1800 audit(1789715334.446:10): pid=15799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2702" name="memory.events" dev="tmpfs" ino=2980 res=0 errno=0 [ 400.154744][ T31] audit: type=1800 audit(1789715334.456:11): pid=15799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2702" name="memory.events" dev="tmpfs" ino=2980 res=0 errno=0 [ 400.154801][ T31] audit: type=1800 audit(1789715334.456:12): pid=15799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2702" name="memory.events" dev="tmpfs" ino=2980 res=0 errno=0 [ 400.200435][ T31] audit: type=1800 audit(1789715334.516:13): pid=15799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2702" name="memory.events" dev="tmpfs" ino=2980 res=0 errno=0 [ 400.200494][ T31] audit: type=1800 audit(1789715334.546:14): pid=15799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2702" name="memory.events" dev="tmpfs" ino=2980 res=0 errno=0 [ 400.211276][ T31] audit: type=1800 audit(1789715334.546:15): pid=15799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2702" name="memory.events" dev="tmpfs" ino=2980 res=0 errno=0 [ 400.211425][ T31] audit: type=1800 audit(1789715334.546:16): pid=15799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2702" name="memory.events" dev="tmpfs" ino=2980 res=0 errno=0 [ 400.221705][ T31] audit: type=1800 audit(1789715334.546:17): pid=15799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2702" name="memory.events" dev="tmpfs" ino=2980 res=0 errno=0 [ 400.224998][ T31] audit: type=1800 audit(1789715334.566:18): pid=15799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2702" name="memory.events" dev="tmpfs" ino=2980 res=0 errno=0 [ 401.361522][T15858] xt_nfacct: accounting object `syz0' does not exist [ 401.678038][T15868] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 401.727393][T15868] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 401.728149][T14166] netdevsim0 speed is unknown, defaulting to 1000 [ 401.728185][T14166] syz1: Port: 1 Link DOWN [ 401.862170][T15887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 401.862188][T15887] IPv6: NLM_F_CREATE should be set when creating new route [ 401.862232][T15887] IPv6: NLM_F_CREATE should be set when creating new route [ 402.363355][T15917] __nla_validate_parse: 17 callbacks suppressed [ 402.363377][T15917] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2729'. [ 405.077929][T15902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 405.311796][T15936] netlink: 'syz.5.2731': attribute type 2 has an invalid length. [ 405.408591][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2736'. [ 405.408615][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2736'. [ 405.536513][T15949] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 405.556336][T15949] bridge_slave_0: left allmulticast mode [ 405.556363][T15949] bridge_slave_0: left promiscuous mode [ 405.556590][T15949] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.600305][T15949] bridge_slave_1: left allmulticast mode [ 405.600336][T15949] bridge_slave_1: left promiscuous mode [ 405.600580][T15949] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.646525][T15949] bond0: (slave bond_slave_0): Releasing backup interface [ 405.665240][T15949] bond0: (slave bond_slave_1): Releasing backup interface [ 405.684559][T15949] team0: Port device team_slave_0 removed [ 405.703645][T15949] team0: Port device team_slave_1 removed [ 405.705065][T15949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.705087][T15949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.707487][T15949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.707510][T15949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.716632][T15949] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 405.795378][T15951] team0: Port device xfrm0 added [ 405.846195][T15972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2742'. [ 405.846225][T15972] netlink: 'syz.2.2742': attribute type 12 has an invalid length. [ 405.846240][T15972] netlink: 'syz.2.2742': attribute type 11 has an invalid length. [ 405.857346][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2742'. [ 405.857411][T15975] netlink: 'syz.2.2742': attribute type 12 has an invalid length. [ 405.857648][T15975] netlink: 'syz.2.2742': attribute type 11 has an invalid length. [ 405.865232][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2742'. [ 405.865330][T15976] netlink: 'syz.2.2742': attribute type 12 has an invalid length. [ 405.865374][T15976] netlink: 'syz.2.2742': attribute type 11 has an invalid length. [ 405.994266][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2742'. [ 405.994298][T15976] netlink: 'syz.2.2742': attribute type 12 has an invalid length. [ 405.994313][T15976] netlink: 'syz.2.2742': attribute type 11 has an invalid length. [ 406.165246][T15993] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2745'. [ 406.201156][T15981] vlan3: entered allmulticast mode [ 406.201176][T15981] batadv_slave_0: entered allmulticast mode [ 406.415799][T16003] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 406.506592][T16007] xt_TCPMSS: Only works on TCP SYN packets [ 406.512092][T16007] netlink: 'syz.0.2747': attribute type 3 has an invalid length. [ 406.512157][T16007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2747'. [ 406.749406][T16016] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2751'. [ 406.882529][T16020] veth1_macvtap: left promiscuous mode [ 406.912889][T16020] veth1_macvtap: entered promiscuous mode [ 406.936133][T16020] .`: (slave macsec0): Enslaving as an active interface with an up link [ 406.980332][T16022] .`: (slave team0): Releasing backup interface [ 407.093119][T16022] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 407.152619][T16035] vlan0: entered promiscuous mode [ 407.242220][T14169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.319621][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.373991][T16045] __nla_validate_parse: 3 callbacks suppressed [ 407.374012][T16045] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2760'. [ 407.374840][T16045] netlink: 75 bytes leftover after parsing attributes in process `syz.4.2760'. [ 407.410854][ T1265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.413182][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.415531][T14169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.445805][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2760'. [ 407.703761][T16056] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 407.846146][T16065] tipc: Started in network mode [ 407.846170][T16065] tipc: Node identity 1001001, cluster identity 1518 [ 407.846183][T16065] tipc: Node number set to 16781313 [ 407.873227][T16065] tipc: Enabling of bearer rejected, failed to enable media [ 408.088057][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2771'. [ 408.151943][T16083] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.2769'. [ 408.217733][T16088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2773'. [ 408.342468][T16096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2774'. [ 408.342512][T16096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2774'. [ 408.342821][T16096] vlan0: entered promiscuous mode [ 408.396502][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.421149][T16056] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 408.421172][T16056] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 408.538539][T16104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.784035][T16113] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2780'. [ 408.871418][T16117] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2782'. [ 409.152347][T16096] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 409.282386][T16138] siw: device registration error -23 [ 409.530405][T16148] 8021q: adding VLAN 0 to HW filter on device bond11 [ 410.098026][T15617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 410.112222][T15617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 410.113468][T15617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 410.122384][T15617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 410.138769][T15617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 410.196190][ T4932] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 410.199534][ T4932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 410.199948][ T4932] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 410.201032][ T4932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 410.202474][ T4932] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 410.519420][T16182] macvlan0: left promiscuous mode [ 410.530801][T16182] validate_nla: 9 callbacks suppressed [ 410.530848][T16182] netlink: 'syz.2.2801': attribute type 2 has an invalid length. [ 410.558774][T16182] net_ratelimit: 14 callbacks suppressed [ 410.558803][T16182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.745642][T16187] netlink: 'syz.4.2803': attribute type 1 has an invalid length. [ 410.803202][T16187] 8021q: adding VLAN 0 to HW filter on device bond12 [ 411.046811][T16187] bond12: (slave bridge8): making interface the new active one [ 411.058116][T16187] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 411.147793][T16203] x_tables: unsorted entry at hook 4 [ 411.282077][T16207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.282323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.282547][T16207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.283273][ T6334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.315571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.481826][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.564943][T16206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.565145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.595380][T16192] Bluetooth: hci0: unsupported parameter 5135 [ 411.595410][T16192] Bluetooth: hci0: unsupported parameter 8192 [ 411.595425][T16192] Bluetooth: hci0: unsupported parameter 5135 [ 411.595437][T16192] Bluetooth: hci0: unsupported parameter 8192 [ 411.831073][T16229] openvswitch: netlink: Key type 1542 is out of range max 32 [ 411.872701][T16174] netdevsim0 speed is unknown, defaulting to 1000 [ 412.039117][T16240] netlink: 'syz.2.2812': attribute type 1 has an invalid length. [ 412.181138][T16240] 8021q: adding VLAN 0 to HW filter on device bond11 [ 412.279367][ T4932] Bluetooth: hci6: command tx timeout [ 412.656428][T16174] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.656545][T16174] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.656930][T16174] bridge_slave_0: entered allmulticast mode [ 412.658457][T16174] bridge_slave_0: entered promiscuous mode [ 412.667091][T16174] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.667529][T16174] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.667900][T16174] bridge_slave_1: entered allmulticast mode [ 412.673747][T16174] bridge_slave_1: entered promiscuous mode [ 412.735728][T16174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.748283][T16174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.788247][T16174] team0: Port device team_slave_0 added [ 412.795886][T16174] team0: Port device team_slave_1 added [ 412.828267][T16174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.828284][T16174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.828312][T16174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.834241][T16174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.834280][T16174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.834347][T16174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.951359][T16174] hsr_slave_0: entered promiscuous mode [ 412.952181][T16174] hsr_slave_1: entered promiscuous mode [ 412.952785][T16174] debugfs: 'hsr0' already exists in 'hsr' [ 412.952806][T16174] Cannot create hsr debugfs directory [ 413.125865][T16174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.125893][T16174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 413.125912][T16174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.125929][T16174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 413.238460][T16174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.238496][T16174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 413.243481][T16174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.243573][T16174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 413.288578][T16266] batman_adv: batadv0: Adding interface: syzkaller0 [ 413.288598][T16266] batman_adv: batadv0: Interface activated: syzkaller0 [ 413.343736][T16174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.343764][T16174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 413.343792][T16174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.343813][T16174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 414.359814][ T4932] Bluetooth: hci6: command tx timeout [ 415.164922][T16246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.196541][T16174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 415.223472][T16174] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.224679][T16174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 415.253425][T16174] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.266583][T16174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 415.304561][T16174] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.318069][T16174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 415.353793][T16174] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.417871][T16274] tipc: Failed to obtain node identity [ 415.417899][T16274] tipc: Enabling of bearer rejected, failed to enable media [ 415.547058][T16174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.580182][T16174] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.607462][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.607567][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.643093][ T5734] net_ratelimit: 4 callbacks suppressed [ 415.643111][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.648694][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.648843][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.695217][T16288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.695870][T16288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.719178][T16288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.719991][T16288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.720368][T16288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.762271][T16289] tunl0: left promiscuous mode [ 415.762437][T16289] gre0: left promiscuous mode [ 415.762577][T16289] gretap0: left promiscuous mode [ 415.762727][T16289] erspan0: left promiscuous mode [ 415.762847][T16289] ip_vti0: left promiscuous mode [ 415.998403][T16289] mac80211_hwsim hwsim29 wlan0: left promiscuous mode [ 415.998867][T16289] geneve2: left promiscuous mode [ 415.998879][T16289] geneve2: left allmulticast mode [ 416.009745][T16289] vlan2: left allmulticast mode [ 416.009808][T16289] veth1_virt_wifi: left allmulticast mode [ 416.033282][T16289] bond1: left promiscuous mode [ 416.034558][T16289] vlan3: left allmulticast mode [ 416.034570][T16289] batadv_slave_0: left allmulticast mode [ 416.091075][ T1265] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.091112][ T1265] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 416.091410][ T1265] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.091441][ T1265] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 416.142854][ T6333] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.142887][ T6333] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 416.170221][ T157] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.171037][ T157] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 416.368138][T16306] netlink: 'syz.4.2826': attribute type 11 has an invalid length. [ 416.439100][ T4932] Bluetooth: hci6: command tx timeout [ 416.489663][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 416.489683][ T31] audit: type=1107 audit(1789715350.826:42): pid=16316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 416.611545][T16323] __nla_validate_parse: 40 callbacks suppressed [ 416.611568][T16323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2831'. [ 416.752666][T16327] netlink: 'syz.4.2831': attribute type 1 has an invalid length. [ 416.968139][T16338] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 417.518173][T16174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.594116][T16373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2842'. [ 417.667704][T16174] veth0_vlan: entered promiscuous mode [ 417.676317][T16379] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2842'. [ 417.713621][T16382] netlink: 'syz.2.2843': attribute type 3 has an invalid length. [ 417.745010][T16174] veth1_vlan: entered promiscuous mode [ 417.803719][T16174] veth0_macvtap: entered promiscuous mode [ 417.815880][T16174] veth1_macvtap: entered promiscuous mode [ 417.870330][T16174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.894166][T16174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.925094][T16386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2844'. [ 417.940264][ T6332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.996066][ T6333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.996114][ T6333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.019630][ T6334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.097966][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.097988][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.216225][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.216248][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.375233][T16401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2796'. [ 418.375287][T16401] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 418.431138][T16402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2849'. [ 418.435850][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2849'. [ 418.514117][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2849'. [ 418.528314][ T4932] Bluetooth: hci6: command tx timeout [ 418.617164][T16412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2852'. [ 418.618329][T16412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2852'. [ 418.713174][T16414] xt_l2tp: missing protocol rule (udp|l2tpip) [ 418.732661][T16414] x_tables: duplicate underflow at hook 1 [ 419.382739][T16450] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 419.682364][T16469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.968381][T16479] netlink: 'syz.5.2873': attribute type 11 has an invalid length. [ 420.026008][T16479] bond2 (unregistering): Released all slaves [ 420.412095][T16503] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.412115][T16503] IPv6: NLM_F_CREATE should be set when creating new route [ 420.412159][T16503] IPv6: NLM_F_CREATE should be set when creating new route [ 420.412195][T16503] IPv6: NLM_F_CREATE should be set when creating new route [ 420.412823][T16503] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.551723][T16513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.474292][T16558] netlink: 'syz.4.2895': attribute type 30 has an invalid length. [ 421.734419][T16577] netlink: 'syz.0.2897': attribute type 10 has an invalid length. [ 422.124928][T16577] team0: Port device dummy0 added [ 422.776203][T16614] __nla_validate_parse: 16 callbacks suppressed [ 422.776223][T16614] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2905'. [ 422.784631][T16614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2905'. [ 422.784707][T16614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2905'. [ 422.786219][T16614] tipc: Enabling of bearer rejected, media not registered [ 423.022456][T16624] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2910'. [ 423.092839][T16628] ip_tunnel: non-ECT from 172.30.1.5 with TOS=0x3 [ 423.806737][T16659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2919'. [ 423.860137][T16659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2919'. [ 424.372834][T16676] netlink: 'syz.2.2923': attribute type 5 has an invalid length. [ 424.416598][T16685] vlan2: entered promiscuous mode [ 424.416615][T16685] bridge0: entered promiscuous mode [ 424.433406][T16685] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2926'. [ 424.623151][T16692] Cannot find del_set index 4 as target [ 424.911993][T16712] Bluetooth: hci0: unsupported parameter 5135 [ 424.912018][T16712] Bluetooth: hci0: unsupported parameter 8192 [ 424.912033][T16712] Bluetooth: hci0: unsupported parameter 5135 [ 424.912047][T16712] Bluetooth: hci0: unsupported parameter 8192 [ 425.004230][T16708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2932'. [ 425.004257][T16708] netlink: 'syz.2.2932': attribute type 1 has an invalid length. [ 425.234565][T16724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2935'. [ 425.433464][T16724] hsr_slave_0: left promiscuous mode [ 425.445723][T16724] hsr_slave_1: left promiscuous mode [ 425.569542][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2936'. [ 425.569576][T16720] netlink: 'syz.4.2936': attribute type 32 has an invalid length. [ 425.569831][T16720] netlink: 'syz.4.2936': attribute type 32 has an invalid length. [ 426.065164][T16768] nbd: must specify a size in bytes for the device [ 426.086820][T16772] netlink: 'syz.0.2944': attribute type 1 has an invalid length. [ 426.346174][T16763] openvswitch: netlink: Flow actions attr not present in new flow. [ 426.722877][T16796] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 427.035900][T16814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.055398][T16810] bond0: entered promiscuous mode [ 427.055418][T16810] bond_slave_0: entered promiscuous mode [ 427.055636][T16810] bond_slave_1: entered promiscuous mode [ 427.055824][T16810] team0: entered promiscuous mode [ 427.055839][T16810] team_slave_0: entered promiscuous mode [ 427.056040][T16810] team_slave_1: entered promiscuous mode [ 427.056237][T16810] dummy0: entered promiscuous mode [ 427.113824][T16810] bond7: entered promiscuous mode [ 427.115537][T16810] batadv0: entered promiscuous mode [ 427.116382][T16810] debugfs: 'hsr1' already exists in 'hsr' [ 427.116398][T16810] Cannot create hsr debugfs directory [ 427.116972][T16810] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 427.229262][T16818] netlink: 'syz.5.2956': attribute type 64 has an invalid length. [ 427.514534][T15617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.528555][T15617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.539359][T15617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.541800][T15617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.542478][T15617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 428.170678][T16861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.315777][T16870] __nla_validate_parse: 11 callbacks suppressed [ 428.315801][T16870] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2969'. [ 428.318409][T16870] dvmrp1: left allmulticast mode [ 428.505313][T16876] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2970'. [ 428.589256][T16883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 428.614547][T16881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2971'. [ 428.793632][T16827] netdevsim0 speed is unknown, defaulting to 1000 [ 429.316935][T16913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2982'. [ 429.353639][T16913] bond12: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 429.355651][T16913] bond12 (unregistering): Released all slaves [ 429.640140][ T4932] Bluetooth: hci1: command tx timeout [ 429.755221][ T31] audit: type=1804 audit(1789715364.096:43): pid=16929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2986" name="/newroot/598/cgroup.controllers" dev="tmpfs" ino=3090 res=1 errno=0 [ 429.755278][ T31] audit: type=1800 audit(1789715364.096:44): pid=16929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2986" name="cgroup.controllers" dev="tmpfs" ino=3090 res=0 errno=0 [ 430.113448][T16948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2990'. [ 430.432547][T16954] netlink: zone id is out of range [ 430.432563][T16954] netlink: zone id is out of range [ 430.432572][T16954] netlink: zone id is out of range [ 430.432580][T16954] netlink: zone id is out of range [ 430.432588][T16954] netlink: zone id is out of range [ 430.432596][T16954] netlink: zone id is out of range [ 430.432607][T16954] netlink: zone id is out of range [ 430.432615][T16954] netlink: zone id is out of range [ 430.432623][T16954] netlink: zone id is out of range [ 430.576134][T16827] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.580779][T16827] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.580932][T16827] bridge_slave_0: entered allmulticast mode [ 430.607830][T16827] bridge_slave_0: entered promiscuous mode [ 430.626207][T16827] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.627578][T16827] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.627723][T16827] bridge_slave_1: entered allmulticast mode [ 430.651543][T16827] bridge_slave_1: entered promiscuous mode [ 430.721921][T16827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.740998][T16827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.816089][T16827] team0: Port device team_slave_0 added [ 430.827163][T16827] team0: Port device team_slave_1 added [ 430.984768][T16827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.984788][T16827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.984845][T16827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.427834][T16827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.427855][T16827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.427885][T16827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.731205][ T4932] Bluetooth: hci1: command tx timeout [ 431.806879][T16827] hsr_slave_0: entered promiscuous mode [ 431.808028][T16827] hsr_slave_1: entered promiscuous mode [ 431.930136][T16975] netlink: 'syz.0.2998': attribute type 1 has an invalid length. [ 432.093204][T16985] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3000'. [ 432.140581][T16988] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3001'. [ 432.140971][T16988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3001'. [ 432.525422][T16827] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 432.555277][T16827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.556491][T16827] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 432.586936][T16827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.598200][T16827] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 432.621749][T16827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.622768][T16827] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 432.647303][T16827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 432.889336][T16827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.935707][T16827] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.958397][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.958543][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.025460][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.025572][ T6334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.145609][T17041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3009'. [ 433.147885][T17041] No such timeout policy "s" [ 433.335573][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3010'. [ 433.578074][T17054] batman_adv: batadv0: Interface activated: syzkaller0 [ 433.799837][ T4932] Bluetooth: hci1: command tx timeout [ 433.921706][T17070] ksmbd: Unknown IPC event: 1, ignore. [ 434.240383][T17083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3020'. [ 434.364830][T16827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.508345][T17096] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 434.547360][T17090] net_ratelimit: 1 callbacks suppressed [ 434.547381][T17090] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 434.547410][T17090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.841647][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3027'. [ 434.843734][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3027'. [ 434.874921][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3027'. [ 435.374806][T16827] veth0_vlan: entered promiscuous mode [ 435.413634][T16827] veth1_vlan: entered promiscuous mode [ 435.570268][T16827] veth0_macvtap: entered promiscuous mode [ 435.574637][T17143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3032'. [ 435.595610][T16827] veth1_macvtap: entered promiscuous mode [ 435.705055][T16827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.778794][T16827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.879683][ T4932] Bluetooth: hci1: command tx timeout [ 435.884788][ T6333] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.886971][ T6327] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.887013][ T6327] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.887067][ T6327] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.938864][T17155] tipc: Started in network mode [ 435.938891][T17155] tipc: Node identity 080211000001, cluster identity 4711 [ 435.958607][T17155] tipc: Enabled bearer , priority 0 [ 435.967931][T17155] syzkaller0: mtu less than device minimum [ 436.065494][T17156] netlink: 'syz.2.3035': attribute type 1 has an invalid length. [ 436.174524][T17156] 8021q: adding VLAN 0 to HW filter on device bond12 [ 436.208284][ T6334] IPVS: starting estimator thread 0... [ 436.238173][T17169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3039'. [ 436.289492][T17171] IPVS: using max 26 ests per chain, 62400 per kthread [ 436.337480][ T6327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.337501][ T6327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.371962][T17168] netlink: 'syz.5.3039': attribute type 12 has an invalid length. [ 436.444422][ T6327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.444443][ T6327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.566454][T17185] netlink: 'syz.2.3044': attribute type 3 has an invalid length. [ 436.578754][T17186] netlink: 'syz.2.3044': attribute type 3 has an invalid length. [ 436.758749][T17196] veth5: entered allmulticast mode [ 436.848171][T17196] veth7: entered allmulticast mode [ 437.051139][ T5735] tipc: Node number set to 134418688 [ 437.154604][T17220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3051'. [ 437.250063][T15617] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 437.253728][T15617] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 437.256177][T15617] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 437.275738][T15617] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 437.298724][T15617] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 437.527274][ T157] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.527305][ T157] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.697628][ T157] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.697658][ T157] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.832865][ T157] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.832901][ T157] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.999693][ T157] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.999750][ T157] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.112598][ T1265] smbdirect: ib_dev[syz1] removed [ 438.630516][ T157] bridge_slave_1: left promiscuous mode [ 438.632083][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.634773][ T157] bridge_slave_0: left allmulticast mode [ 438.634788][ T157] bridge_slave_0: left promiscuous mode [ 438.636976][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.692071][ T157] batman_adv: batadv0: Interface deactivated: gretap1 [ 439.002003][ T157] batman_adv: batadv0: Removing interface: gretap1 [ 439.106076][ T157] bond10 (unregistering): (slave bridge6): Releasing active interface [ 439.128825][ T157] bond0 (unregistering): left promiscuous mode [ 439.128851][ T157] bond_slave_0: left promiscuous mode [ 439.139328][ T157] bond_slave_1: left promiscuous mode [ 439.139841][ T157] team0: left promiscuous mode [ 439.139885][ T157] team_slave_0: left promiscuous mode [ 439.142475][ T157] team_slave_1: left promiscuous mode [ 439.153477][ T157] dummy0: left promiscuous mode [ 439.157355][ T157] bond7 (unregistering): left promiscuous mode [ 439.185172][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.198300][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.210697][ T157] bond0 (unregistering): (slave team0): Releasing backup interface [ 439.211008][ T157] tipc: Resetting bearer [ 439.213958][ T157] tipc: Resetting bearer [ 439.215453][ T157] bond0 (unregistering): (slave bond7): Releasing backup interface [ 439.216106][ T157] bond0 (unregistering): Released all slaves [ 439.234997][ T157] bond1 (unregistering): Released all slaves [ 439.271369][ T157] bond2 (unregistering): Released all slaves [ 439.286811][ T157] bond3 (unregistering): Released all slaves [ 439.306504][ T157] bond4 (unregistering): Released all slaves [ 439.326040][ T157] bond5 (unregistering): Released all slaves [ 439.342500][ T157] bond6 (unregistering): Released all slaves [ 439.358114][ T157] bond7 (unregistering): Released all slaves [ 439.376509][ T157] bond8 (unregistering): Released all slaves [ 439.396955][ T157] bond9 (unregistering): Released all slaves [ 439.402969][ T4932] Bluetooth: hci7: command tx timeout [ 439.421361][ T157] bond10 (unregistering): Released all slaves [ 439.436196][ T157] bond11 (unregistering): Released all slaves [ 439.468387][ T157] bond12 (unregistering): Released all slaves [ 439.538482][T17222] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.538672][T17222] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.538784][T17222] bridge_slave_0: entered allmulticast mode [ 439.565212][T17222] bridge_slave_0: entered promiscuous mode [ 439.574460][T17222] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.574618][T17222] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.574806][T17222] bridge_slave_1: entered allmulticast mode [ 439.576750][T17222] bridge_slave_1: entered promiscuous mode [ 439.669814][T17222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.670471][ T157] tipc: Disabling bearer [ 439.670857][ T157] tipc: Left network mode [ 439.674240][T17222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.674950][ T157] IPVS: stopping master sync thread 7292 ... [ 439.763429][T17208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 440.013356][T17222] team0: Port device team_slave_0 added [ 440.044082][T17260] netlink: 'syz.5.3058': attribute type 1 has an invalid length. [ 440.044105][T17260] netlink: 328 bytes leftover after parsing attributes in process `syz.5.3058'. [ 440.075951][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.177556][T17222] team0: Port device team_slave_1 added [ 440.310798][T17222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.310818][T17222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.310845][T17222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.527354][T17222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.527374][T17222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.527405][T17222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.054362][T17280] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3062'. [ 441.128540][T17222] hsr_slave_0: entered promiscuous mode [ 441.143581][T17222] hsr_slave_1: entered promiscuous mode [ 441.156594][T17222] debugfs: 'hsr0' already exists in 'hsr' [ 441.156617][T17222] Cannot create hsr debugfs directory [ 441.479264][ T4932] Bluetooth: hci7: command tx timeout [ 441.909472][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 441.910101][T17291] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 441.912047][T17294] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 442.230891][T17314] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3070'. [ 442.230920][T17314] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3070'. [ 442.309508][T17324] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3072'. [ 442.562790][T17334] netlink: 'syz.6.3076': attribute type 1 has an invalid length. [ 443.009862][T17348] ip_tables: iptables: counters copy to user failed while replacing table [ 443.101691][T17334] bond1: entered promiscuous mode [ 443.106142][T17334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.438065][ T157] batadv0: left promiscuous mode [ 443.559046][ T4932] Bluetooth: hci7: command tx timeout [ 443.709999][ T157] hsr_slave_0: left promiscuous mode [ 443.712146][ T157] hsr_slave_1: left promiscuous mode [ 443.716794][ T157] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 443.717010][ T157] batman_adv: batadv0: Removing interface: syzkaller0 [ 443.885090][T17372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3080'. [ 443.983466][ T157] veth1_vlan: left allmulticast mode [ 443.984406][ T157] veth1_vlan: left promiscuous mode [ 443.985703][ T157] veth0_macvtap: left promiscuous mode [ 444.578784][ T6327] smc: removing ib device syz2 [ 444.814426][ T157] team0 (unregistering): Port device team_slave_1 removed [ 444.867016][ T157] team0 (unregistering): Port device team_slave_0 removed [ 445.042326][ T157] team0 (unregistering): Port device dummy0 removed [ 445.213672][T14169] syz2: Port: 1 Link DOWN [ 445.215679][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 445.307350][T17387] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3082'. [ 445.400745][ T6327] smbdirect: ib_dev[syz2] removed [ 445.649623][ T4932] Bluetooth: hci7: command tx timeout [ 445.651713][T17394] netlink: Conntrack attr has 4 unknown bytes [ 445.651766][T17394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.019938][T17397] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3085'. [ 446.078194][T17397] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3085'. [ 446.258618][T17406] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3086'. [ 446.310337][T17406] netlink: 'syz.6.3086': attribute type 49 has an invalid length. [ 446.535722][T17409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 447.303282][T17435] x_tables: unsorted underflow at hook 1 [ 447.584916][T17437] Cannot find set identified by id 0 to match [ 447.703398][T17437] x_tables: unsorted underflow at hook 1 [ 447.923460][T17442] Cannot find set identified by id 0 to match [ 448.198054][T17471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3097'. [ 449.251924][T17501] tipc: Resetting bearer [ 449.255936][T17501] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 449.509774][T17486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.601299][T17508] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3103'. [ 450.171158][T17222] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 450.225519][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 450.238932][T17222] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 450.281158][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 450.283590][T17222] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 450.316390][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 450.318404][T17222] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 450.367831][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.740695][T17533] netlink: 'syz.4.3107': attribute type 1 has an invalid length. [ 450.924240][T17535] xt_hashlimit: size too large, truncated to 1048576 [ 451.063710][T17550] netlink: 'syz.0.3110': attribute type 10 has an invalid length. [ 451.165126][T17533] 8021q: adding VLAN 0 to HW filter on device bond13 [ 451.373929][T17550] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.374559][T17550] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.477234][T17550] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.477371][T17550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.477714][T17550] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.477846][T17550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.568772][T17550] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 451.598107][T17559] Bluetooth: hci0: unsupported parameter 5135 [ 451.598127][T17559] Bluetooth: hci0: unsupported parameter 8192 [ 451.598141][T17559] Bluetooth: hci0: unsupported parameter 5135 [ 451.598154][T17559] Bluetooth: hci0: unsupported parameter 8192 [ 451.693344][T17222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.836783][T17222] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.895471][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.895575][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.972059][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.972208][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.116450][T17570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3113'. [ 452.117226][T17570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3113'. [ 452.737009][T17587] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3116'. [ 452.767360][T17591] netlink: 344 bytes leftover after parsing attributes in process `syz.5.3117'. [ 453.153679][T17598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.509012][T17597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3118'. [ 454.141493][T17647] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3126'. [ 454.141531][T17647] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 454.267662][ T157] IPVS: stop unused estimator thread 0... [ 454.995678][T17663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3129'. [ 455.237124][T17671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 455.237154][T17671] IPv6: NLM_F_CREATE should be set when creating new route [ 455.416748][T17222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.927061][T17222] veth0_vlan: entered promiscuous mode [ 455.982114][T17222] veth1_vlan: entered promiscuous mode [ 456.026466][T17687] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3134'. [ 456.266923][T17687] bond2: Invalid ad_actor_system MAC address. [ 456.266945][T17687] bond2: option ad_actor_system: invalid value (1) [ 456.334735][T17687] bond2 (unregistering): Released all slaves [ 456.427554][T17703] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3137'. [ 456.592769][T17703] ip6tnl1: entered promiscuous mode [ 456.714991][T17222] veth0_macvtap: entered promiscuous mode [ 456.739589][T17711] netlink: 'syz.4.3138': attribute type 29 has an invalid length. [ 456.909738][T17222] veth1_macvtap: entered promiscuous mode [ 456.932553][T17719] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 456.932579][T17719] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 456.935646][T17722] netlink: 252 bytes leftover after parsing attributes in process `syz.6.3139'. [ 457.035772][T17222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.073876][T17222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.189714][ T6334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.198167][ T1265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.198272][ T1265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.198355][ T1265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.656185][ T6334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.656206][ T6334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.891265][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.891289][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.491999][T17771] __nla_validate_parse: 2 callbacks suppressed [ 458.492021][T17771] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3049'. [ 459.084946][T15617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 459.105663][T15617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 459.119530][T15617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 459.138448][T15617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 459.154539][T15617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 459.374950][T17791] netlink: 14207 bytes leftover after parsing attributes in process `syz.5.3153'. [ 460.016206][T17814] set match dimension is over the limit! [ 460.178934][T17814] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3157'. [ 461.187720][T17842] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3163'. [ 461.245742][T15617] Bluetooth: hci4: command tx timeout [ 461.965969][T17868] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3171'. [ 463.018866][T17891] x_tables: duplicate underflow at hook 1 [ 463.316070][T17793] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.316190][T17793] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.316344][T17793] bridge_slave_0: entered allmulticast mode [ 463.320496][T15617] Bluetooth: hci4: command tx timeout [ 463.341876][T17793] bridge_slave_0: entered promiscuous mode [ 463.496858][T17793] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.496957][T17793] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.497101][T17793] bridge_slave_1: entered allmulticast mode [ 463.518447][T17793] bridge_slave_1: entered promiscuous mode [ 463.765035][T17892] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 463.765060][T17892] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 463.827659][T17793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.885920][T17793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.992448][T17920] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3180'. [ 464.015242][T17920] netlink: 'syz.6.3180': attribute type 1 has an invalid length. [ 464.321500][T17892] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 464.321524][T17892] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 464.325242][T17793] team0: Port device team_slave_0 added [ 464.413689][T17793] team0: Port device team_slave_1 added [ 464.686305][T17892] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 464.686330][T17892] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 464.851623][T17793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.851643][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.851671][T17793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.986950][T17934] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3184'. [ 465.012676][T17793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.012693][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.012720][T17793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.127441][T17892] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 465.127466][T17892] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 465.451576][T17793] hsr_slave_0: entered promiscuous mode [ 465.455262][T17793] hsr_slave_1: entered promiscuous mode [ 465.457677][T17793] debugfs: 'hsr0' already exists in 'hsr' [ 465.457697][T17793] Cannot create hsr debugfs directory [ 465.538325][T17948] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3185'. [ 465.640735][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 466.579816][T17793] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.902575][T17793] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.179743][T17793] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.523118][T18013] ip6t_srh: unknown srh invflags 4000 [ 467.697406][T17793] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.796904][T18010] netlink: 'syz.2.3198': attribute type 8 has an invalid length. [ 467.796929][T18010] sch_fq: defrate 0 ignored. [ 468.098770][T18039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3202'. [ 468.330053][T18041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3203'. [ 468.463224][T17793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 468.487572][T17793] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.498045][T17793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 468.522808][T17793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.526033][T17793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 468.557660][T17793] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.579225][T17793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 468.606581][T17793] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.826566][T18057] netlink: 'syz.2.3206': attribute type 33 has an invalid length. [ 468.955363][T18057] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 468.976452][T18057] bond1 (unregistering): Released all slaves [ 469.580654][T17793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.681628][T17793] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.734489][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.734604][ T6333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.808516][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.808628][ T6333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.289667][T18098] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3216'. [ 470.522962][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3219'. [ 470.522986][T18143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3219'. [ 470.754099][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'. [ 470.902410][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'. [ 472.132833][T18235] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3227'. [ 472.132858][T18235] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3227'. [ 472.173814][T18234] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3228'. [ 472.173841][T18234] nbd: must specify at least one socket [ 472.644493][T18257] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3231'. [ 472.651009][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3230'. [ 472.889731][T17793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.786531][T18288] xt_hashlimit: overflow, try lower: 3/0 [ 473.787161][T18288] xt_hashlimit: overflow, try lower: 3/0 [ 473.787704][T18288] xt_hashlimit: overflow, try lower: 3/0 [ 473.808016][T18288] xt_hashlimit: overflow, try lower: 3/0 [ 473.808673][T18288] xt_hashlimit: overflow, try lower: 3/0 [ 473.827287][T18288] xt_hashlimit: overflow, try lower: 3/0 [ 473.827934][T18288] xt_hashlimit: overflow, try lower: 3/0 [ 473.828515][T18288] xt_hashlimit: overflow, try lower: 3/0 [ 473.848630][T18288] xt_hashlimit: overflow, try lower: 3/0 [ 473.856448][T18288] xt_hashlimit: overflow, try lower: 3/0 [ 474.637749][T17793] veth0_vlan: entered promiscuous mode [ 474.742549][T17793] veth1_vlan: entered promiscuous mode [ 475.102863][T17793] veth0_macvtap: entered promiscuous mode [ 475.196972][T17793] veth1_macvtap: entered promiscuous mode [ 475.713632][T17793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.848996][T18317] __nla_validate_parse: 4 callbacks suppressed [ 475.849077][T18317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3241'. [ 475.849099][T18317] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3241'. [ 476.112002][T17793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.112522][ T6333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.135687][ T1275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.165380][ T6334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.141192][ T6334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.363871][T18328] geneve2: entered promiscuous mode [ 478.364091][T18328] geneve2: entered allmulticast mode [ 478.579624][ T6334] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 478.579683][ T6334] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 478.579734][ T6334] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 478.579777][ T6334] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 478.904054][T18336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3245'. [ 480.909698][T18361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3247'. [ 481.822185][ T6334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.822211][ T6334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.667979][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.668003][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.649983][T18373] netlink: 'syz.6.3251': attribute type 2 has an invalid length. [ 483.706085][T18372] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3252'. [ 486.989804][T18383] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.320006][T18418] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3258'. [ 487.320035][T18418] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 487.915490][T18425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3260'. [ 488.031969][T18431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3260'. [ 489.204680][T18441] syzkaller0: entered promiscuous mode [ 489.204878][T18441] syzkaller0: entered allmulticast mode [ 490.011990][T18458] netlink: 'syz.0.3268': attribute type 11 has an invalid length. [ 490.088982][T18455] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3266'. [ 490.270386][T18465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3268'. [ 493.459898][T18495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.461166][T18495] batadv_slave_1: entered promiscuous mode [ 493.918649][T18494] Bluetooth: hci0: unsupported parameter 5134 [ 493.918673][T18494] Bluetooth: hci0: unsupported parameter 8192 [ 493.918686][T18494] Bluetooth: hci0: unsupported parameter 5134 [ 493.918698][T18494] Bluetooth: hci0: unsupported parameter 8192 [ 494.407827][T18504] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 494.407870][T18504] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 494.407912][T18504] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 494.635410][T18507] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20003 [ 494.635848][T18508] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20003 [ 496.721319][T18531] netlink: 'syz.4.3280': attribute type 12 has an invalid length. [ 496.721344][T18531] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3280'. [ 496.745811][T18531] netlink: 'syz.4.3280': attribute type 12 has an invalid length. [ 496.745876][T18531] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3280'. [ 497.884948][T18542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3285'. [ 497.967008][T18546] lo speed is unknown, defaulting to 1000 [ 497.967075][T18546] lo speed is unknown, defaulting to 1000 [ 497.967927][T18546] lo speed is unknown, defaulting to 1000 [ 498.011365][T18545] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.3282'. [ 498.172488][T18546] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 498.172532][T18546] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 498.172575][T18546] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 498.262441][T18546] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 498.970937][T18546] lo speed is unknown, defaulting to 1000 [ 498.973036][T18546] lo speed is unknown, defaulting to 1000 [ 499.090976][T18546] lo speed is unknown, defaulting to 1000 [ 499.120454][T18546] lo speed is unknown, defaulting to 1000 [ 499.141860][T18546] lo speed is unknown, defaulting to 1000 [ 499.167739][T18546] lo speed is unknown, defaulting to 1000 [ 499.218147][T18546] lo speed is unknown, defaulting to 1000 [ 499.252256][T18546] lo speed is unknown, defaulting to 1000 [ 499.273315][T18546] lo speed is unknown, defaulting to 1000 [ 499.580598][T18562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3288'. [ 499.743272][T18571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3288'. [ 500.622312][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3291'. [ 501.501760][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.582936][T18613] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 503.847029][T18628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.535428][T18617] pimreg: entered allmulticast mode [ 505.624471][T18649] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3304'. [ 506.083059][T18658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.158518][T18655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3305'. [ 507.299501][T18658] gre0: entered promiscuous mode [ 507.299742][T18658] gre0: entered allmulticast mode [ 509.449311][T18687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3317'. [ 509.793432][T18691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3317'. [ 509.900201][T18690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3319'. [ 509.934913][T18689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3319'. [ 511.154916][T18717] netlink: 'syz.5.3325': attribute type 1 has an invalid length. [ 511.154940][T18717] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3325'. [ 511.205571][T18718] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3323'. [ 512.739997][T18726] netlink: 'syz.2.3327': attribute type 4 has an invalid length. [ 512.746707][T18725] netlink: 'syz.2.3327': attribute type 97 has an invalid length. [ 512.746727][T18725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3327'. [ 512.746744][T18725] netlink: 'syz.2.3327': attribute type 97 has an invalid length. [ 512.746758][T18725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3327'. [ 513.047572][T18726] netlink: 'syz.2.3327': attribute type 4 has an invalid length. [ 513.048470][T18726] netlink: 'syz.2.3327': attribute type 4 has an invalid length. [ 513.049340][T18726] netlink: 'syz.2.3327': attribute type 4 has an invalid length. [ 513.050310][T18726] netlink: 'syz.2.3327': attribute type 4 has an invalid length. [ 513.083164][T18726] netlink: 'syz.2.3327': attribute type 4 has an invalid length. [ 513.084046][T18726] netlink: 'syz.2.3327': attribute type 4 has an invalid length. [ 514.381146][T18743] dvmrp0: entered allmulticast mode [ 514.540365][T18747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.775646][T18748] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3333'. [ 518.532446][ T6332] tipc: Subscription rejected, illegal request [ 518.602460][T18796] validate_nla: 8 callbacks suppressed [ 518.602497][T18796] netlink: 'syz.0.3348': attribute type 10 has an invalid length. [ 518.950031][T18784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3345'. [ 519.100911][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3348'. [ 520.015558][T18796] veth0_vlan: entered allmulticast mode [ 520.192189][T18796] team0: Device veth0_vlan failed to register rx_handler [ 521.718156][T18815] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3355'. [ 522.665924][T18826] xt_hashlimit: size too large, truncated to 1048576 [ 522.734909][T18828] netlink: 'syz.5.3358': attribute type 32 has an invalid length. [ 524.358057][T18843] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3363'. [ 524.507069][T18846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3364'. [ 525.524304][T18861] netlink: 'syz.5.3367': attribute type 8 has an invalid length. [ 526.485273][T18871] netlink: 'syz.4.3371': attribute type 4 has an invalid length. [ 527.188273][T18888] openvswitch: netlink: Missing key (keys=50, expected=80) [ 527.274261][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3376'. [ 527.447102][T18883] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 530.012016][T18927] netlink: 'syz.4.3382': attribute type 29 has an invalid length. [ 530.369843][ T1046] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.653731][T18933] tunl0: entered promiscuous mode [ 532.925459][T18933] netlink: 'syz.6.3384': attribute type 3 has an invalid length. [ 532.925486][T18933] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3384'. [ 532.953014][T13305] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.994587][ T6334] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.569453][ T157] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.990096][T18957] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3387'. [ 534.013033][T18956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3389'. [ 535.316113][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3391'. [ 536.212756][T18984] netlink: 'syz.4.3394': attribute type 2 has an invalid length. [ 536.593226][T18969] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.824957][T19004] Bluetooth: hci0: unsupported parameter 5134 [ 537.824980][T19004] Bluetooth: hci0: unsupported parameter 8192 [ 537.824993][T19004] Bluetooth: hci0: unsupported parameter 5134 [ 537.825005][T19004] Bluetooth: hci0: unsupported parameter 8192 [ 537.852194][T18969] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.928076][T18993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3396'. [ 537.939481][T19003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3396'. [ 537.942600][T19002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3399'. [ 538.050427][T18997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3397'. [ 538.761449][T18969] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.038480][T19017] ieee802154 phy0 wpan0: encryption failed: -22 [ 539.494710][T18969] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.132640][T19026] team0: entered promiscuous mode [ 540.132663][T19026] team_slave_0: entered promiscuous mode [ 540.136644][T19026] team_slave_1: entered promiscuous mode [ 540.213534][T19027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3402'. [ 540.260198][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3402'. [ 540.602663][T19006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.907083][T19031] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3403'. [ 540.907113][T19031] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3403'. [ 540.907132][T19031] netlink: 'syz.5.3403': attribute type 5 has an invalid length. [ 540.907146][T19031] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3403'. [ 541.772009][T19033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3404'. [ 542.041378][ T1046] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.043552][T13305] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.220659][ T1046] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.714672][T18969] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.162267][T18969] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.336823][T19055] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 543.345740][T19058] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 543.441834][T19058] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 543.526871][T19061] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3411'. [ 543.657734][T19061] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3411'. [ 543.754735][T18969] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.540620][T19090] netlink: zone id is out of range [ 545.540639][T19090] netlink: zone id is out of range [ 545.540648][T19090] netlink: zone id is out of range [ 545.540657][T19090] netlink: zone id is out of range [ 545.540667][T19090] netlink: zone id is out of range [ 545.540676][T19090] netlink: zone id is out of range [ 545.540689][T19090] netlink: zone id is out of range [ 545.540710][T19090] netlink: zone id is out of range [ 546.248703][T19098] syzkaller0: create flow: hash 3631933703 index 1 [ 546.401733][T19100] netlink: 'syz.0.3418': attribute type 1 has an invalid length. [ 549.825820][ T6334] syzkaller0: tun_net_xmit 76 [ 549.827890][ T6334] syzkaller0: tun_net_xmit 48 [ 549.851035][T14166] syzkaller0: tun_net_xmit 76 [ 549.879000][ C0] syzkaller0: delete flow: hash 3631933703 index 1 [ 557.809406][ C0] net_ratelimit: 1 callbacks suppressed [ 557.809521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.224547][ T4932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 561.381192][ T4932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 561.384290][ T4932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 561.386549][ T4932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 561.388015][ T4932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 562.989124][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.479116][ T4932] Bluetooth: hci3: command tx timeout [ 563.722704][T19125] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3425'. [ 564.872002][T19152] tipc: Can't bind to reserved service type 2 [ 565.384334][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3432'. [ 565.560157][ T4932] Bluetooth: hci3: command tx timeout [ 565.966171][T19154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.123864][T19154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.284645][T19154] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 566.352763][T19154] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.353019][T19154] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.539374][T19154] bond0 (unregistering): Released all slaves [ 566.670202][T15617] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 566.673249][T15617] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 566.687795][T15617] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 566.703266][T15617] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 566.704835][T15617] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 567.609541][T19169] bridge_slave_0: left allmulticast mode [ 567.609962][T19169] bridge_slave_0: left promiscuous mode [ 567.610994][T19169] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.642714][T15617] Bluetooth: hci3: command tx timeout [ 567.912583][T19169] bridge_slave_1: left allmulticast mode [ 567.913023][T19169] bridge_slave_1: left promiscuous mode [ 567.913975][T19169] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.189142][T19169] bond0: (slave bond_slave_0): Releasing backup interface [ 568.480557][T19169] bond0: (slave bond_slave_1): Releasing backup interface [ 568.759503][T15617] Bluetooth: hci8: command tx timeout [ 568.869755][T19169] team0: Port device team_slave_0 removed [ 568.998486][T19169] team0: Port device team_slave_1 removed [ 569.001135][T19169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.001318][T19169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.049812][T19169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.050016][T19169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.228863][T19169] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 569.230246][T19171] team0: Mode changed to "broadcast" [ 569.721214][T15617] Bluetooth: hci3: command tx timeout [ 570.340242][T19192] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3437'. [ 570.340494][T19192] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3437'. [ 570.395402][T19192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3437'. [ 570.467125][T19196] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 570.839002][T15617] Bluetooth: hci8: command tx timeout [ 571.269568][ T32] INFO: task syz.3.2813:16241 blocked for more than 143 seconds. [ 571.269616][ T32] Not tainted syzkaller #0 [ 571.269629][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.269640][ T32] task:syz.3.2813 state:D stack:27200 pid:16241 tgid:16231 ppid:5622 task_flags:0x400140 flags:0x00080002 [ 571.269713][ T32] Call Trace: [ 571.269798][ T32] [ 571.269872][ T32] __schedule+0x17db/0x58f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 571.270072][ T32] ? __pfx___schedule+0x10/0x10 [ 571.270136][ T32] ? schedule+0x90/0x2b0 [ 571.270165][ T32] schedule+0x164/0x2b0 [ 571.270194][ T32] schedule_preempt_disabled+0x13/0x30 [ 571.270219][ T32] __mutex_lock+0x7c1/0x1550 [ 571.270253][ T32] ? __mutex_lock+0x5d4/0x1550 [ 571.270285][ T32] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 571.270391][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 571.270430][ T32] ? net_generic+0x1e/0x240 [ 571.270457][ T32] ? net_generic+0x1e/0x240 [ 571.270491][ T32] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 571.270535][ T32] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 571.270574][ T32] ? rcu_is_watching+0x16/0xb0 [ 571.270636][ T32] ? trace_kmalloc+0x2a/0xf0 [ 571.270696][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 571.270723][ T32] ? __nla_parse+0x40/0x60 [ 571.270825][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 571.270929][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 571.270967][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 571.271004][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 571.271047][ T32] ? bpf_lsm_capable+0x9/0x20 [ 571.271089][ T32] ? security_capable+0x7e/0x2c0 [ 571.271175][ T32] genl_rcv_msg+0x614/0x7a0 [ 571.271211][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 571.271238][ T32] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 571.271284][ T32] netlink_rcv_skb+0x226/0x4a0 [ 571.271346][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 571.271376][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 571.271428][ T32] ? down_read+0x2be/0x330 [ 571.271464][ T32] genl_rcv+0x28/0x40 [ 571.271488][ T32] netlink_unicast+0x7bd/0x940 [ 571.271534][ T32] netlink_sendmsg+0x813/0xb40 [ 571.271581][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.271625][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 571.271685][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.271730][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 571.271843][ T32] ____sys_sendmsg+0x54e/0x850 [ 571.271881][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.271922][ T32] ? import_iovec+0x73/0xa0 [ 571.271989][ T32] ___sys_sendmsg+0x2a5/0x360 [ 571.272018][ T32] ? __lock_acquire+0x747/0x2de0 [ 571.272054][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.272089][ T32] ? futex_wait+0x2a2/0x390 [ 571.272172][ T32] ? __fget_files+0x2a/0x420 [ 571.272214][ T32] ? __fget_files+0x3a2/0x420 [ 571.329035][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 571.329154][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 571.329281][ T32] do_syscall_64+0x166/0x520 [ 571.329418][ T32] ? trace_irq_disable+0x3b/0x140 [ 571.329499][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.329585][ T32] ? clear_bhb_loop+0x70/0xc0 [ 571.329713][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.329782][ T32] RIP: 0033:0x7f7f0479e159 [ 571.329864][ T32] RSP: 002b:00007f7f05696028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.329958][ T32] RAX: ffffffffffffffda RBX: 00007f7f04a26180 RCX: 00007f7f0479e159 [ 571.330013][ T32] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 571.330054][ T32] RBP: 00007f7f0483506b R08: 0000000000000000 R09: 0000000000000000 [ 571.330092][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.330123][ T32] R13: 00007f7f04a26218 R14: 00007f7f04a26180 R15: 00007ffc706c9188 [ 571.330214][ T32] [ 571.330336][ T32] [ 571.330336][ T32] Showing all locks held in the system: [ 571.330392][ T32] locks held by kworker/u8:0/12: 6, on CPU#1: [ 571.330467][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.330628][ T32] #1: ffffc90000117c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.330688][ T32] #2: ffffffff90243ec8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 571.330805][ T32] #3: ffff8880255d5128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 571.330907][ T32] #4: ffff8880255d1258 (&devlink->lock_key#10){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 571.330974][ T32] #5: ffffffff90252740 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 571.331032][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 571.331118][ T32] #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 571.331267][ T32] #1: ffffffff9ad3a098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 571.442958][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 571.442979][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 571.443071][ T32] locks held by kworker/u8:4/59: 2, last CPU#1: [ 571.443087][ T32] #0: ffff888032975140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.443150][ T32] #1: ffffc9000200fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.443216][ T32] locks held by kworker/u8:5/157: 5, last CPU#1: [ 571.443232][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.443397][ T32] #1: ffffc90002e5fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.443567][ T32] #2: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 571.443733][ T32] #3: ffffffff8ee388a0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 571.443906][ T32] #4: ffffffff8ebff6a0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 571.444115][ T32] locks held by kworker/u8:7/1046: 3, last CPU#1: [ 571.444160][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.444341][ T32] #1: ffffc900051c7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.444503][ T32] #2: ffff888079fd7258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 571.444831][ T32] locks held by kworker/u8:10/1275: 2, on CPU#1: [ 571.444882][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.445047][ T32] #1: ffffc90005bf7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.445230][ T32] locks held by getty/5372: 2, on CPU#1: [ 571.445263][ T32] #0: ffff8880354850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 571.578860][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 571.579580][ T32] locks held by syz-executor/5605: 1, last CPU#1: [ 571.579673][ T32] #0: ffff88803523d038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 571.579882][ T32] locks held by kworker/u8:13/6332: 3, on CPU#0: [ 571.579924][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.580095][ T32] #1: ffffc900073ffc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.580264][ T32] #2: ffffffff90252740 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 571.580489][ T32] locks held by kworker/u8:15/6334: 2, on CPU#1: [ 571.580532][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.580698][ T32] #1: ffffc90007337c40 ((work_completion)(&sub_info->work) ** replaying previous printk message ** [ 571.580698][ T32] #1: ffffc90007337c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.580904][ T32] locks held by kworker/u8:16/13305: 3, last CPU#1: [ 571.580985][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.581126][ T32] #1: ffffc9000430fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.581283][ T32] #2: ffff88803337b258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 571.581437][ T32] locks held by syz.1.2024/13445: 2, on CPU#0: [ 571.581475][ T32] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 571.581614][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 571.581735][ T32] locks held by syz-executor/14118: 1, last CPU#1: [ 571.581759][ T32] #0: ffff88802ac260e8 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 571.581935][ T32] locks held by syz.3.2813/16241: 2, on CPU#1: [ 571.581983][ T32] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 571.582128][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 571.582316][ T32] locks held by syz.6.3437/19186: 4, on CPU#1: [ 571.582357][ T32] #0: ffff8880395d4180 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 571.582568][ T32] #1: ffffffff902c1648 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 571.582759][ T32] #2: ffff8880287688e0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x14b/0xe60 [ 571.582980][ T32] #3: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 571.583143][ T32] locks held by syz.6.3437/19187: 1, last CPU#1: [ 571.583183][ T32] #0: ffffffff90252740 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 571.583408][ T32] locks held by syz.6.3437/19190: 2, on CPU#1: [ 571.583449][ T32] #0: ffffffff907bf8a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 571.583627][ T32] #1: ffffffff90252740 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 571.583779][ T32] locks held by syz.6.3437/19192: 2, on CPU#0: [ 571.583818][ T32] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 571.583951][ T32] #1: ffffffff90252740 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 571.584191][ T32] locks held by syz.6.3437/19199: 1, on CPU#1: [ 571.584231][ T32] #0: ffffffff90252740 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 571.584387][ T32] locks held by syz.0.3438/19195: 1, last CPU#1: [ 571.584427][ T32] #0: ffff88802a65dcf8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 571.584579][ T32] locks held by syz.0.3438/19198: 2, on CPU#1: [ 571.584619][ T32] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 571.584782][ T32] #1: ffffffff90252740 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_set_doit+0x854/0x1080 [ 571.584958][ T32] locks held by syz.0.3438/19200: 1, on CPU#1: [ 571.585009][ T32] #0: ffffffff90252740 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_set_dstaddr+0xee/0x330 [ 571.585255][ T32] locks held by syz.0.3438/19204: 1, on CPU#1: [ 571.585297][ T32] #0: ffffffff90252740 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 571.585454][ T32] locks held by modprobe/19205: 2, last CPU#1: [ 571.585491][ T32] #0: ffff888029b35038 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 571.585645][ T32] #1: ffff8880344a0628 (&mapping->i_mmap_rwsem){++++}-{4:4}, at: vma_prepare+0x12e/0x470 [ 571.585795][ T32] locks held by modprobe/19206: 4, last CPU#1: [ 571.585838][ T32] #0: ffff88802bfcb1c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 571.586016][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 571.586213][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 571.586405][ T32] #3: [ 571.749657][T19208] ip_tables: iptables: counters copy to user failed while replacing table [ 572.080393][ T32] ffff8880b8724408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 572.080683][ T32] [ 572.080713][ T32] ============================================= [ 572.080713][ T32] [ 572.080745][ T32] NMI backtrace for cpu 1 [ 572.080798][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 572.080862][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.080896][ T32] Call Trace: [ 572.080925][ T32] [ 572.080946][ T32] dump_stack_lvl+0xe8/0x150 [ 572.081053][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 572.081220][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 572.081313][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 572.081411][ T32] sys_info+0x135/0x170 [ 572.081508][ T32] watchdog+0xfd7/0x1030 [ 572.081603][ T32] ? watchdog+0x1c7/0x1030 [ 572.081684][ T32] kthread+0x38b/0x480 [ 572.081760][ T32] ? __pfx_watchdog+0x10/0x10 [ 572.081817][ T32] ? __pfx_kthread+0x10/0x10 [ 572.081878][ T32] ret_from_fork+0x514/0xb70 [ 572.081939][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 572.082021][ T32] ? __switch_to+0xc89/0x1420 [ 572.082111][ T32] ? __pfx_kthread+0x10/0x10 [ 572.082169][ T32] ret_from_fork_asm+0x1a/0x30 [ 572.082292][ T32] [ 572.082312][ T32] Sending NMI from CPU 1 to CPUs 0: [ 572.082375][ C0] NMI backtrace for cpu 0 [ 572.082388][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 572.082409][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.082419][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 572.082444][ C0] Code: e8 fe 24 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef 24 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 572.082460][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 572.082476][ C0] RAX: 1ffffffff35a7400 RBX: 00000000000003fd RCX: 0000000000000000 [ 572.082489][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 572.082500][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 572.082512][ C0] R10: dffffc0000000000 R11: ffffffff8572a560 R12: dffffc0000000000 [ 572.082526][ C0] R13: 0000000000000000 R14: ffffffff9ad3a0c0 R15: 0000000000000000 [ 572.082539][ C0] FS: 0000000000000000(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 572.082554][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 572.082567][ C0] CR2: 00007faa06e29d58 CR3: 00000000322d6000 CR4: 00000000003526f0 [ 572.082584][ C0] Call Trace: [ 572.082590][ C0] [ 572.082598][ C0] wait_for_lsr+0x184/0x2f0 [ 572.082620][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 572.082650][ C0] serial8250_console_write+0xaa1/0x1200 [ 572.082669][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 572.082730][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 572.082749][ C0] ? __schedule+0x17f1/0x58f0 [ 572.082775][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 572.082803][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 572.082826][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 572.082853][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 572.082872][ C0] nbcon_kthread_func+0x679/0x880 [ 572.082895][ C0] ? nbcon_kthread_func+0x163/0x880 [ 572.082912][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 572.082934][ C0] ? __kthread_parkme+0x71/0x1f0 [ 572.082961][ C0] ? __kthread_parkme+0x199/0x1f0 [ 572.082990][ C0] kthread+0x38b/0x480 [ 572.083024][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 572.083042][ C0] ? __pfx_kthread+0x10/0x10 [ 572.083060][ C0] ret_from_fork+0x514/0xb70 [ 572.083078][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 572.083106][ C0] ? __switch_to+0xc89/0x1420 [ 572.083132][ C0] ? __pfx_kthread+0x10/0x10 [ 572.083150][ C0] ret_from_fork_asm+0x1a/0x30 [ 572.083187][ C0] [ 572.083395][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 572.861542][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 572.870668][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.880738][ T32] Call Trace: [ 572.884033][ T32] [ 572.886975][ T32] vpanic+0x56d/0xa60 [ 572.891004][ T32] ? __pfx_vpanic+0x10/0x10 [ 572.895538][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 572.901135][ T32] panic+0xc5/0xd0 [ 572.904916][ T32] ? __pfx_panic+0x10/0x10 [ 572.909359][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 572.914407][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 572.920592][ T32] watchdog+0x1030/0x1030 [ 572.924961][ T32] ? watchdog+0x1c7/0x1030 [ 572.929397][ T32] kthread+0x38b/0x480 [ 572.933522][ T32] ? __pfx_watchdog+0x10/0x10 [ 572.938210][ T32] ? __pfx_kthread+0x10/0x10 [ 572.942816][ T32] ret_from_fork+0x514/0xb70 [ 572.947424][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 572.952563][ T32] ? __switch_to+0xc89/0x1420 [ 572.957269][ T32] ? __pfx_kthread+0x10/0x10 [ 572.961883][ T32] ret_from_fork_asm+0x1a/0x30 [ 572.966689][ T32] [ 572.970328][ T32] Kernel Offset: disabled [ 572.974664][ T32] Rebooting in 86400 seconds..