last executing test programs: 2m48.666577785s ago: executing program 0 (id=507): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0x4) accept(r4, 0x0, 0x0) shutdown(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x165c, 0x3f, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x102}, @nested={0x163c, 0x4, 0x0, 0x1, [@nested={0x1638, 0x10, 0x0, 0x1, [@nested={0x587, 0xf, 0x0, 0x1, [@nested={0x3b3, 0xb2, 0x0, 0x1, [@nested={0x3b, 0xe2, 0x0, 0x1, [@typed={0x8, 0x2a, 0x0, 0x0, @fd=r2}, @generic="f6728a7605fa26992d4220608bb2eaf1973e578a7f9dc9e4d930cac18aaba06ef3e201f7e0d134e9e4c02108000000"]}, @typed={0x8, 0x71, 0x0, 0x0, @pid}, @typed={0x8, 0x143, 0x0, 0x0, @u32=0xf1}, @generic="1143055dcb322cdb40453d478b43e58797284a1e6e54cd2f7554df217f6553f8b3ed737f7b54cde21113cad5dc60ed50b7b162e5daf5030fb8cd80df65534e96fd1efc58a44ec68c278638ce675436a886b37f40b87320c3f3675ca39f115cebe08e471833a65c3cbcb9f5f6cf84afc66ae21b195573a93a3537d5aa52bd8ddbd15af2a58595ffbe0eacdfcbc1560e7163be32b66c747b9c538f96", @generic="3ff505f26be4cc19c405f3dd04547b4499220206ad670ee6e2620a6f2c3224f7e694a7f541540fe64394d2e8ecb777bbd446d83fb7e83dd243f80b736c872bd229b260ed3a96f62cd6c7b4eeb53f212d80fdea819bdd610f07a7fb51850b6c70d8358f08110e38ebfe28fa9fa2ec49706f27ac2d59914f33162078729bead472fec8f8b8bcab5af70ba59002edad4e511c8a05144ec0751b5767974292add8868c1308610400c714d1bffc83ea317d7b15a30eda11fc0d123269c5c82da6038a95a83bf3c8bd46c00131323c389f2a90a190d1e2cb7eab38", @nested={0xf5, 0x12d, 0x0, 0x1, [@typed={0x8, 0x13c, 0x0, 0x0, @fd=r1}, @generic="d4b69fea015425227aa08f966bed4733b1bdec05a02eb1253aaf07b764dd74bd0b72436fa556efa54af9f9a1190a2ad9ff1a5f47fcdecefe1d14bf0875dd06162507f5d864c4098c4ca83c6e975f04a412bdb8ed66e0f5d10f98f3521755cd355c2b5fd368b2866ca3eebc94200398acb30ed95ecfb8b2a0dfb3475d7dc320049fdbd9b39a16d0480cdb7843061c595ca2ab79f00d3ceade1982efbff65b0603e103b3e191e9b1c7f826141244ca15ec7e9d4fa8adeb326077961ef32f44c5603240d2e189296422bf558364df807a3683882924ace348b58e06d15b84458f86c7e9c322ec", @nested={0x4, 0xb5}]}, @nested={0x91, 0x158, 0x0, 0x1, [@generic="2beaa48248e3f94106aeb77ff5308f78883dc7137b8cb4dc711e9f7bd5ebc8e586500a2328df66f8e9c4c3edf1361be146f660549d3398cfb57e65e6183e6ccfea8f85226b1fab624bc80a97de68a3a9d17b9faa66112eaf096b2853fac6b6f926289e99dc195eb08e99de695418b6cb552d0d2b611ecbb734cc4a7297cbc1e89c4731cfb5", @nested={0x4, 0x87}, @generic, @nested={0x4, 0xa1}]}, @generic="31d84b0e2ed624f55c46222d2fb542f1ed778715888fac14ca5266f796e9691fea860ffb3a0773e7a4fe9cb49d96c248e3f0c214634bb9f4265129f1e95d30b682b6fb165ed506796d4558b78e4fc0a17fcd46d29ca0aa9d9762e70f4159e9b38958246db0d943b005c95eb277b78aa9e7f9091a7f767c791bc1f503526b21569db0ea835008409e186ee911e6b35f1ba8233eaac5f5202d6eba0bd797f02680ff167aed6c11114cdeac66afe464451b17f32af0e4d195b19e3b5cb6505549501382d52ce5c9e29132a44159d95c85e2ba8c62b4d38e710c7c934012387f6ed0c321a6da16446c38e5cb13", @typed={0x8, 0x12, 0x0, 0x0, @fd=r3}]}, @typed={0x8, 0xaa, 0x0, 0x0, @ipv4=@multicast2}, @generic="0bdab8e40bb2cc70c3b110471372ae7a003c5cb1ab849fdd0df1b20649d4a008faa649712237cc8c83a39badfeaa65e92cb0b7d844f5cb0e9b525d84332c5058fc0f216adb72b6d473fd1dde93b2587c9fc4aa3ca4e37ed8c4847643bad824eb0b7d548050d76fefd2fd7e96e3e611a0ffb0ebf0cd108b0d6185235857288810225277077fcd2e4b9ed69c790b1e904d1c4804ae0afbb887e14d2bd623df9f7d7dc61e7911bb204a0c429bb22f715c59884afd7c32541dc3e82691fb99ac7ae6ed1730566a36197dc440f59451553939a2ba9aef55819a9b8a7e01", @nested={0xeb, 0x16, 0x0, 0x1, [@typed={0x5, 0x28, 0x0, 0x0, @u32=0x9}, @generic="0aaa7b38979670301a8f4cb9dc9dc30f5908dbc866edd5523bdf1e10cc97e570164548e487fbb7d751a81bfafd1e92f7317bc83cbe5e035c19843536511045c5d31aa7fff26b30d5bf020b25ee05ec63f4b7f0bcea53de8443797203432cdd5c4ec3dac7a67dd2f1a1c8c938a59b8675d1c4448f5ee28f1dc9f02efb9535f8b9818439cf7fda4c00a599e4617338e7c0e16bbcd71e02625474427ddb0ad935b4fb24ef8dd8872a2aa212c987a9114a4fb99e507a388b2e0637952aad4493b93e6d32e20618af3714db3f2280d8570e02612a4892ba0632f1dc80be6a751c1f"]}]}, @nested={0x1034, 0x6a, 0x0, 0x1, [@typed={0x8, 0x14f, 0x0, 0x0, @fd=r4}, @generic="bdcf3f4a39894382d04681ec9dbbc803b919e1aaac8672de804362df2183eb79", @nested={0x1008, 0xec, 0x0, 0x1, [@typed={0x1004, 0x8d, 0x0, 0x0, @binary="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"}]}]}, @generic="d38edfa99160758a84e546f836df498ebee5b78a6c33115e2bd9d4fae1599b3b2c87db94450281f99f1157da9b225dfe70d8cf76810783b439c4609fd5c72cdfdbbb352cbd2f516eed99d9832dd20a960a322c473e5d1da1e270da012529267824cacce1fd2d84a174a7bab5ab76b9f54c7c013cebdba450"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r5}]}, 0x165c}, 0x1, 0x0, 0x0, 0x400c801}, 0x400c014) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000100)=""/175, 0xaf}], 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r3, 0x0, 0x14) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x64004081}, 0x0) 2m45.465184234s ago: executing program 0 (id=520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40) 2m45.302494788s ago: executing program 0 (id=523): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r1, 0x1, 0x0, 0x0, {{0x8}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}}, 0x20}}, 0x0) 2m45.110925924s ago: executing program 0 (id=527): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x91f2dcd3352e4495) 2m45.04635049s ago: executing program 0 (id=528): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f", 0x15}], 0x1}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 2m44.858768959s ago: executing program 0 (id=530): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf250200000008000100030000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 2m34.545850978s ago: executing program 4 (id=623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0xffffffffffffff18, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c405}, 0x0) 2m34.489519833s ago: executing program 4 (id=625): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000300)={@private2, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x1, 0x40, 0x7, 0x400, {{0x1a, 0x4, 0x2, 0x7, 0x68, 0x65, 0x0, 0x5, 0x4, 0x0, @multicast2, @private=0xa010101, {[@timestamp_addr={0x44, 0x34, 0x1b, 0x1, 0x5, [{@loopback, 0x9}, {@remote, 0x1}, {@loopback, 0x9}, {@empty, 0x3f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @ssrr={0x89, 0x1f, 0xe2, [@local, @private=0xa010100, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010100, @multicast1]}]}}}}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x7, 0x700, 0x9, 0x6, {{0x15, 0x4, 0x3, 0x8, 0x54, 0x64, 0x0, 0x8, 0xc006b5cb49cbb417, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0xe4, [@private=0xa010101, @multicast1]}, @ssrr={0x89, 0x23, 0x80, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010101, @empty, @local]}, @generic={0x86, 0x9, "b786cc6547867b"}, @generic={0x94, 0x5, "0bd582"}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'geneve0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000680)={@loopback, @local, 0x0}, &(0x7f00000006c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'syz_tun\x00', 0x0}) r15 = socket(0x400000000010, 0x3, 0x0) r16 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r17, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r17, {}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x56, &(0x7f0000000880)=[{}], 0x8, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000013c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001380)={&(0x7f0000001cc0)={0x8f4, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xd4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2981c37c}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x406, 0x55, 0x2}, {0x5, 0x2, 0xa8, 0x5}, {0x1, 0x3, 0xc, 0x1}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x4, 0x4, 0x8}, {0x7, 0x2, 0x8, 0x9}]}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x34e9e72e}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6f}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r13}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r17}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4193}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}]}}, {{0x8, 0x1, r19}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x8f4}, 0x1, 0x0, 0x0, 0x20004801}, 0x85) r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x38, r20, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r21}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0a, 0xfac04, 0x10f41b]}]]}, 0x38}}, 0x4000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) 2m34.070519776s ago: executing program 4 (id=629): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000000)=0x2, 0x4) (async) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xffffffff}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp=r3}, 0x20) (async) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480020b95edde67ee0bddef4e4daf2fc33be54b81500757f0d70002cbd7000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e658064657673696d300000000000fb13001680100001800c0007000400000010000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m33.973339761s ago: executing program 4 (id=632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r2, 0x8910, &(0x7f00000003c0)) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, &(0x7f0000000140), 0x0}, 0x20) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r6 = epoll_create(0x7) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r9) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="06020000d7af66a427799738551d"], 0x14}}, 0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x14, 0x1f, 0x1, 0x800000, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r7) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x24, r10, 0x86ea835c625bb021, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000000c0)={0x20000000}) close(r1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000000000500000a480000a6483d000c0a0101000000020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000011400000000000001ff000000000000000300000a0000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m33.810012869s ago: executing program 4 (id=635): ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000400000008000000ff03000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5}, 0x20) sendto$inet(r3, &(0x7f0000000080)="3320158f940a90e5904d2ac452c3d671", 0x10, 0x8001, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r6, 0x29, 0xc8, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) readv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000002580)=""/4106, 0x100a}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r7) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) accept4$tipc(r9, &(0x7f00000002c0), &(0x7f0000000300)=0x46, 0x80000) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$TUNSETFILTEREBPF(r11, 0x8008b705, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="acbc9b5d2f4b782c9c750b634ebbcfa8eebce104977e79d65652852f040a2059b83df72d3112b8fd00bf3cd078a873c794f72676f3259bec77dac91ddaa5448538d0c2ac66be38182ade5b7a630590102c134b7864f8bd890f9736daddf4f4215b83bcc7ad6fa88d9c2c985308c670653d5541ed1d7a56cfed6c5eebcc3f40561b21b6d784c5dfb865bcb6321d069eca590bf8cc5ff2e098cc9cafff392dd76a1aea3619eeead31f5c53a94687517915b6ab23b5fae5fe3bcbedb1f444a7d5d58b0c035960d5480750827417374b569183b7e0d22f55d7a4", @ANYRES32=r3, @ANYRESHEX, @ANYBLOB="bfd52889e772d625912032e6b6fd7a3b73bf820e000000000000000757d2ff030000c48578998adf20ebfd70296f7c5e908231bea8a709ae51b165a53a29a50c638708fbaba1e83dc6f1173464674b54122f98e7fe875406573f1bb85c725da6b5d53e330fd156e8398f7a66f2f17af568a9fe35daebf0db8ad28af05b9b75c245e54513ced67892c4d6b8f02ceaa6aec2bebbd430aba73078cd444b8be6de22655e0903bf026df8cc396cde8e4d08462cb2a0b4dd4aea0d0103f05bab0ccc970ad8b93a92e0f87a95a51aca1ad5", @ANYBLOB="7f81449746b1edf42de37bd498edbc3cc1c3", @ANYRES16=r3, @ANYRESDEC=r8, @ANYRESOCT, @ANYRES64=r2, @ANYRESOCT=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2m33.575783055s ago: executing program 4 (id=640): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008007}, 0x4000080) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018010000400cab1893a20b8d2090000000a04000280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m29.793028353s ago: executing program 32 (id=530): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf250200000008000100030000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 2m18.530151397s ago: executing program 33 (id=640): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008007}, 0x4000080) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018010000400cab1893a20b8d2090000000a04000280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 29.522106813s ago: executing program 6 (id=1791): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x20000004) close(0x3) (async, rerun: 32) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000000000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x40000000) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000010200012800b0001006272696467650000100002800c002e00000000001c"], 0x40}}, 0x0) 29.452259787s ago: executing program 6 (id=1792): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x301, 0x0) (async) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000b80)=""/4084, 0xff4}, {&(0x7f0000000140)=""/104, 0x68}, {&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f0000000000)=""/24, 0xf}, {&(0x7f00000001c0)=""/34}, {&(0x7f00000003c0)=""/52, 0x34}], 0x6) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1) (async) ioctl$PPPIOCSMAXCID(r1, 0x4004743c, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000006900)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0xfffffffffffffe6f}}], 0x2, 0x4008083) 29.201993127s ago: executing program 6 (id=1797): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e23, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000380)=ANY=[], 0x8) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x14, &(0x7f0000000280)=""/132, &(0x7f0000000100)=0x84) (async) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) (async) sendto$inet6(r1, 0x0, 0xffffffb4, 0x890, 0x0, 0x0) 28.993656527s ago: executing program 6 (id=1801): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x2f8, 0x40, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x9c}, @nested={0x2e0, 0x9, 0x0, 0x1, [@nested={0x2dc, 0xa7, 0x0, 0x1, [@generic="37dd37b5dcef7387785c1ca04ddc4fdbd60802a47300f16a52e08d701c5936ed522b08c6ebcf5c2fa6c28cf9acb6ffacf034f4ecc9dcb4ad30f7c57090f68f99e03550f1e8e9b60682f5d5736afd36a5e68959083c7a597f5a6d9ac3e5c1ce43eb58ae30aebeac5657c3f2ef7861d8193fb1eb076302c197b168836641ddc36033f93226052e30fc9802ec97a62aee21df710a3d7cef18b4f22e2cf752c930bcbcbf83e6e275c2c82ad900", @generic="7ef7c212035d298535aac140f9a0765198dfc882c847fd26f13af978d476465a859405edf7fbcc98ee699f12256132eba6b2e1fb49228b020878c48e32760c6ef3768cee2a96008dfb95cb6336a21e1c8de3296f5685237b037e70cade1db4fb0433830d272c639cd06ec0825c06edf99ec9f89082b520c8ecff0c7616d03ce441a6da3d101b23c8a359ba6b0bacfe94a9d6807ced4a1d18829f8f3c4b48635259", @generic="a8ea4dec3d7ba99803007951f2b31800276954793c5fa55c41065ed44f5fe715d73f5915ef1a66a61b9a6f3491f84a086c5b93821c4535093aff196352a1b4d9f7dceffb9a58ef63981083533e26fe992055dbcc51cc9f4c03dedb16d6420ae79ce6e0d6b093ca123ff82499eef3a629a68f9afad30d4015aca3349f03e087959d887b01c059e7ca6edbcae7528a8b2b68699a2a9b57e1e87733b4", @generic="d4b813ae8f54a44740645c061e214be8f8d46d3db4426b52a9900a4ad2869ed86286a925b5ee25ec7d5cfa81ddef0b890fe9bf6df67587a77a69db76f680c9635317dc03d2df86783891e0f8094a8a3ea4d3262925468fba6bdec7be3525569cb7bbc4acef607f4b92f06dd0ff08f7f6d7f94872967b49cc7903bea2385788a8900774aee2b195ddac82ab1ddd67d7f3d2e707419239a26037c0dd08ed9a3c57e31a649b01550e16f1eb08e7ef4d583e6a918da50ce6c00ae9e6f331f1b9a32f0f58a15dd0354cac393910e8a0aa59c29ab9174ba58d2c0756bc01b859fdb32ea4923109925cf16bbea99812e412626414"]}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) 28.825655049s ago: executing program 6 (id=1806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={r2, 0x2, 0x7}, 0x8) (async, rerun: 64) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000440)="1a425f3770b268af205c2096cf3a0b353c28019586fa75f943c682a9b3c128851c1c2fe1350a5b994766bce1e24b59d3262ec578e70cb8295b3cee57fb4c161429a2bff8fbf5647da75032c187832a049fea981c7b864465de6bce7661e604adc7fca93f6062578fb4719a710f8870b4586c893ae3d978e64922e14638584262c24a8af7b6ee9678504342", 0x3, r0, 0x4}, 0x38) (rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da", &(0x7f0000000100), 0x1003, r0}, 0x38) (async) r3 = socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket(0x23, 0x2, 0xfffffffa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@ipv6_newaddr={0x28, 0x14, 0x200, 0x70bd27, 0x25dfdbfd, {0xa, 0x1f, 0x80, 0xff, r7}, [@IFA_FLAGS={0x8, 0x8, 0x38}, @IFA_FLAGS={0x8, 0x8, 0xa0da27f3ddbf98e1}]}, 0x28}}, 0x0) (async, rerun: 32) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0xffffff59, 0x4) (async, rerun: 32) sendmmsg$inet(r3, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 28.414948534s ago: executing program 6 (id=1810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca892f", 0xe}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008007}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x11, 0x3, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca892f", 0xe}], 0x1}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008007}, 0x4000080) (async) 13.459463816s ago: executing program 34 (id=1810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca892f", 0xe}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008007}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x11, 0x3, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca892f", 0xe}], 0x1}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008007}, 0x4000080) (async) 5.141868047s ago: executing program 1 (id=2055): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x230, 0x10, 0x1, 0x0, 0x4000, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private1, 0x0, 0x6c}, @in=@remote, {0x5}, {0x9}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x135, 0x3, {{'deflate\x00'}, 0x768, "a04042f68100d41f21dedf40a6c1d55c3893dc4d502fe90981f86eec836254ae790d6eccd5bc5eac3e77f153cc79f3ad81f4ea3423762d2f052285aec4c2a78960f0e9acc22a73fb8cc03a04c84a42d107322adc8e930cb2b7ee3bb752dd836163c79b3aef549d4ee18967780cb3c24e2fe9067e292fcaa24af59aae27db533b2cdcf696f747e6344fc2ba78bae868cfbbd3e894537ad77fd8cdbbce05c62a51dc2d4610509350ca77b984497721b78532784d513abe726702ffea4ed611aa69e88088c40cbe32c88c5fcd543003fd576d824e367335b69d3876213753cd561498de3e9b9c0bc2cf12b42b5bd8"}}, @replay_thresh={0x8, 0xb, 0x81}]}, 0x230}}, 0x400c000) 5.056584402s ago: executing program 1 (id=2056): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) close(0x3) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 4.850130879s ago: executing program 1 (id=2058): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x380000, @mcast1, 0x100}, 0x1c) sendto(0xffffffffffffffff, &(0x7f0000000040)="12233a56cd2aeac781df61181e2f6c4af242f134a8f6", 0x16, 0x24004000, &(0x7f0000000140)=@rc={0x1f, @any, 0x7}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) nanosleep(&(0x7f00000001c0)={r4, r5+60000000}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) nanosleep(&(0x7f00000005c0)={r6, r7+60000000}, 0x0) nanosleep(&(0x7f0000000a40)={0x77359400}, 0x0) syz_80211_inject_frame(&(0x7f0000000c40)=@broadcast, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0xfb, &(0x7f0000000280)=""/251, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[r0], &(0x7f0000000400)=[{0x1, 0x5, 0x12, 0x9}, {0x4, 0x3, 0x4, 0x3}, {0x0, 0x6, 0xe, 0x2}, {0x3, 0x3, 0x49, 0x1}], 0x10, 0x1}, 0x94) sendto$inet(r1, &(0x7f0000000040)="29268b7a", 0x4, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r11, 0x29, 0x3a, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8}]}}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.78755255s ago: executing program 3 (id=2059): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042abd7000002d570a00000200", @ANYRES32=0x0, @ANYRESOCT=r1], 0x3c}}, 0x40800) r2 = socket$kcm(0x11, 0x3, 0x0) tee(r2, 0xffffffffffffffff, 0x8000000000000000, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x3fffff, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "c80b516dda5bee70", "74c289bfa825c781a1f1997da00a3345", "5ceff78f", "5ec36f40cf749574"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "0b6f05e5add60710", "a548ea4706e6db516e47c97e58fe1165", "09f75cc6", "cb27d580a8aa0cc2"}, 0x28) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r8, &(0x7f0000000080)="9f", 0x1, 0x10, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/174, 0xae, 0x0, 0x0}, &(0x7f0000000100)=0x40) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x2, 'batadv_slave_0\x00', {0x9}, 0x3}) unshare(0x2c020400) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(r9, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x2020) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="61050701fe038009030640050b04"], 0x44) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x80, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e35619bf2be9082cfcd8fba0cd0f2934efacde0a223b473fe77f3e5ba760d3793b2b3589c9fb23ff943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005"]}, @nested={0x1c, 0x6, 0x0, 0x1, [@typed={0x16, 0x14d, 0x0, 0x0, @binary="0f46f1849e80333a72c47c602d9970739272"}]}]}, 0x80}}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) 4.635494987s ago: executing program 7 (id=1969): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r1, 0x0, 0xc, 0x0, &(0x7f0000000780)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.707134493s ago: executing program 1 (id=2062): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a0007"], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000001010408000000ffffff8802000004"], 0x14}, 0x1, 0x600000000000000}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r5 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r5, 0x10e, 0x3, &(0x7f00000004c0)=""/192, &(0x7f0000000100)=0xc0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=@can_delroute={0x3c, 0x19, 0x1, 0x1000, 0x0, {0x1d, 0x1, 0x1}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "89543896f10eee1e"}, 0x2}}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffa, 0x0, 0xfffffffffffffff8}}]}, 0x3c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = accept(r1, &(0x7f0000000140)=@ax25={{0x3, @default}, [@bcast, @bcast, @null, @null, @bcast, @remote, @default, @bcast]}, &(0x7f00000000c0)=0x80) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r11, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r9, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="3001fea054c795fcca33040000004c0003800800030001000000080002000600000008000200050000000800010000000000080001000c000000080001000700000008000200060000000800010000000000080003000100ffff"], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r8, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr=' \x01\x00'}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) 1.59712831s ago: executing program 5 (id=2063): r0 = socket$isdn(0x22, 0x3, 0x1) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000000)=[0x0, 0xb21]) epoll_create1(0x0) (async) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x400, 0x3, 0x40c}) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000010c0)={&(0x7f00000000c0)=""/4096, 0x1000}) (async) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000001100)={0x11}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000001140)=0x20) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000001180)={0x0}, &(0x7f00000011c0)=0x8) (async, rerun: 64) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001240)=0x1c, 0x800) (rerun: 64) connect$inet6(r3, &(0x7f0000001280)={0xa, 0x4e23, 0x5, @remote, 0xff}, 0x1c) (async) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000001300)={&(0x7f00000012c0)=[{0x2, 0x0, 0x922, 0x10001, 0x6, 0x3, 0x0, 0x6f}], 0x1, 0x38, 0x1, 0x7}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000001440)={r3, &(0x7f0000001340)='\x00', 0x10201, &(0x7f0000001380)={@align=0x7, {0x81, 0x8, 0x4, 0x7}}, 0xa4, &(0x7f00000013c0), &(0x7f0000001400)=0x9}) (async, rerun: 64) socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000001480)={0x3ff, 0x200, 0x4, 0x4, 0x5, 0x0, [{0x7f, 0x4, 0x1, '\x00', 0xb}, {0x2, 0x40, 0xffffffff, '\x00', 0x3200}, {0x2, 0x6, 0x4, '\x00', 0x1000}, {0x7fffffffffffffff, 0xb, 0x8000, '\x00', 0x580}, {0xfffffffffffffffb, 0x7fffffff, 0x7, '\x00', 0x800}]}) (async, rerun: 32) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f00000015c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) (async, rerun: 32) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000001600)={r2, 0x7eb}, &(0x7f0000001640)=0x8) (async, rerun: 32) ioctl$IMGETVERSION(r4, 0x80044942, &(0x7f0000001680)) (async, rerun: 32) r5 = socket$l2tp6(0xa, 0x2, 0x73) pwritev(r5, &(0x7f0000001880)=[{&(0x7f00000016c0)="6ad62e5e69ab5cfc9447e399278f91113b4eada0d89c188fc5b555c8f9341c5ea5f3f60f9f4afed7b461c26dfb891b6122b49365704cccfc257b76765842ec9614030513b47d360abd29638be6159be15992ccdb6ec63be1a62fb2466c9a165e9ad768d0921bcf6e5aa8c21614b922eebad481978e1082d538c7e84729f5d51a656c396206416717c108adc985235280e1", 0x91}, {&(0x7f0000001780)="ee70b9ed92712d026c2b862eac79cb9e6ea6602914f826df364424986c2eb396985e78e1c72de5018bd6b6953c1ab4e899139ebb50eef9ab6ef4f8440e7e2fc6c4044e4bdfe2f63f07bacce131fc30a721b3891f79af8103c2758f11072c51d4eac4e7f1522df0f7c8b4eb832a41588d8def429f10d3b98ef9cdccf0309e3c71c741f99accab6177de851fc6b66267bfa67e3b542a0460b87aef4995b7a5ce9b80c66009508a8c48709a4d46ffba7dfcac9fde946ade03ebd5b4e15eb46104bcf0e76d06c27580f3ebe7907f6c93b6939a178cd2a83f0039", 0xd8}], 0x2, 0x1, 0x9) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000018c0)={r2, 0x6}, &(0x7f0000001900)=0x8) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000001b00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001ac0)={&(0x7f00000019c0)={0xe4, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:klogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:event_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x44000}, 0x800) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000001b40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000002b40)={{r8, 0x10001, 0x7, 0x3, 0x2, 0x2, 0x9, 0x40, 0xd7, 0x8, 0x4, 0x0, 0x5, 0xa, 0x1}, 0x10, [0x0, 0x0]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000002bc0), r4) 1.596685945s ago: executing program 7 (id=2064): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0x7ffffffe, 0x0, 0x1}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="24f81aaeb6d6510c149656f8f9000000020201020000000000000000000000000e0006006674702d0f30303030000000dbcae1089a3e9158a2aa6fa1616a993906ec7249d295605be649af88675d79ecb7f560f744e6bbcff0e1be1545aa834f70b986f9521e1b46e92770c4d4ca330a07e1f4cc18d0fde63cf1050000005e07000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x170, r6, 0xa00, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x30}}}}, [@NL80211_ATTR_TESTDATA={0x78, 0x45, "89f980a18daa1966c0241809533a65c8a3f188b17c4e38b5dd63652260957ff9d7dd45a829257907eb62db85fa40712cc102e544cc2d21948a1c2e7117bb173024702329236c28a8e1c8605e472bd8957f5e7fec1e29359c10ae8ab386014469ca9c3d0ae132b77e1063ba89fa3f588bfb4a4e40"}, @NL80211_ATTR_TESTDATA={0xd8, 0x45, "ca3dc88ce9d8d7e2e9c9dbe7c9e40a5835d4184148f94b6187e9a9cc66217bfe2e76dadae69847684a26bca8606964c5d286598ac702a7b5c87f56c6242014ef6c3f366578600a8f7cd13564cd81e53910dbf23374d746cbe1535a48594ad03a84d80445d5ae8016a0487e84658856d085d7a9a0e258641cf9b422b73bb7c26511ed4fc3199d02419150d54aee126dfe0d716718f0600f220feb23794c0d5be683ef47ea05fc776264b5c90f8abac809e278285a6807afd2598c320aac2aadfb85fd29371abbd850c1c16c1bdc665e5610bffb61"}]}, 0x170}, 0x1, 0x0, 0x0, 0x8004}, 0x8040) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000002700)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000027c0)="e5", 0x1}], 0x1}}], 0x1, 0x20008050) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000180)={0x0, 0xff0b, 0x2, [0x18b, 0xff4a]}, 0xc) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) r7 = socket(0x2b, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) close(r2) 1.596345141s ago: executing program 2 (id=2065): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0xe}, 0x50) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0xb}]}}]}, 0x44}}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x118, 0x118, 0xa, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x3}, {0xd, 0x4}, {0x2, 0x4}, {0x1, 0x3}, {0xa, 0x1}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x4}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x5}, @enum64={0xf, 0x6, 0x0, 0x13, 0x0, 0x1, [{0x1, 0x200, 0x101}, {0xa, 0xfffffff7, 0x3}, {0x4, 0x0, 0xfffffffa}, {0xd, 0x53e, 0x2}, {0x4, 0x200, 0x6a7e}, {0xf, 0x4, 0x9}]}, @fwd={0x7}, @enum={0x4, 0x6, 0x0, 0x6, 0x4, [{0x6, 0xfffffff2}, {0x2, 0x9}, {0x7, 0x5}, {0xc, 0x6}, {0xe, 0x5}, {0x3}]}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x5}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x30, 0x5f, 0x5f, 0x5f, 0x61, 0x61, 0x5f, 0xc2]}}, &(0x7f0000000000)=""/20, 0x13a, 0x14, 0x1, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="b1946a53b69cf19d0700c8b970ff100004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 1.501356242s ago: executing program 3 (id=2066): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c180002801400120000000000"], 0x48}}, 0x400400c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r2, 0x1, 0x400000, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x2000c050) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf250b00000008000100010000000c0000000001000000"], 0x28}, 0x1, 0x0, 0x0, 0xc008888}, 0x4000800) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r5, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "887d3b010000006d00dbe4712c3c1cb88f9180cfbe5e9c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.400102263s ago: executing program 2 (id=2067): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r4, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async, rerun: 64) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x70, r11, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x76}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xe, 0x13, [{0x1b, 0x1}, {0x48, 0x1}, {0x18}, {0x24}, {0x12, 0x1}, {0x12}, {0x5, 0x1}, {0x3, 0x1}, {0x12, 0x1}, {0x1b, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8, 0x5}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x117}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4088025}, 0x40800) (async) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.322046039s ago: executing program 5 (id=2068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020000000031000000000900010073797a30000000000800054000000021"], 0x98}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@newtaction={0x14, 0x76, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newlink={0x290, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25ded9f5, {0x0, 0x0, 0x0, 0x0, 0x911, 0x2c21}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @random="24d04fb0f6ae"}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="d0edcbfdfe07"}]}}}, @IFLA_VFINFO_LIST={0x208, 0x16, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1ff, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0x522, @multicast}}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7, 0xfffffffe}}]}, {0x138, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x81, 0x1af, 0x497}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9572, 0x2}}, @IFLA_VF_VLAN_LIST={0xcc, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7ff, 0x8d3, 0x1, 0x88a8}}, {0x14, 0x1, {0x0, 0x7, 0x7}}, {0x14, 0x1, {0xa, 0xe6f, 0x3, 0x88a8}}, {0x14, 0x1, {0x7f8, 0x49d, 0x4, 0x88a8}}, {0x14, 0x1, {0x6, 0x23d, 0xd, 0x8100}}, {0x14, 0x1, {0x0, 0xfb1, 0xaf4, 0x88a8}}, {0x14, 0x1, {0x4, 0x8b1, 0xffffffff, 0x8100}}, {0x14, 0x1, {0x2a, 0xc54, 0x5, 0x88a8}}, {0x14, 0x1, {0x6, 0x92f, 0x4, 0x88a8}}, {0x14, 0x1, {0x5ece, 0xef8, 0x8, 0x8100}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xb6a, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x0, 0xabf, 0x1ff}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0xaa51}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x7}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x9d7, 0x20000000}}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x200, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x4}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3fd, 0xb57d}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x2}}]}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x50a3}, @IFLA_GROUP={0x8, 0x1b, 0x2b21cd11}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_IFALIASn={0x4}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x290}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000ff050000200000000e0001006e657464657673696d0000000f0002006e657464657673696d3000003600"], 0x4c}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000040)=0x7, 0x4) 1.214858811s ago: executing program 3 (id=2069): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.154479171s ago: executing program 5 (id=2070): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0xffffffffffffffff, 0x12) sendfile(r1, r0, 0x0, 0xbdc4) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r1, &(0x7f0000000200)=0xffffffffffffffff, 0x12) (async) sendfile(r1, r0, 0x0, 0xbdc4) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(0xffffffffffffffff, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) 969.872224ms ago: executing program 7 (id=2071): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r0, 0x29, 0x1f, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) r2 = socket$tipc(0x1e, 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) recvfrom$inet6(r0, &(0x7f0000000140)=""/51, 0x33, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback, 0x100}, 0x1c) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x1}, 0x90) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xb1e6fe578938e960}, 0x4004000) 968.943856ms ago: executing program 2 (id=2072): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000000206010200000000000000000c0000000c0007800800124000060000050001000600e9b75d1b958a03b8000005ac79044eca00040000000000090002007379000d000320686167683a6e657400001c00000000"], 0x54}}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 766.254701ms ago: executing program 1 (id=2073): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000480)=""/4109, 0x100d}, {&(0x7f0000001700)=""/96, 0x60}], 0x3}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x20000000, 0x0, 0x1}, 0x9}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) 730.128211ms ago: executing program 7 (id=2074): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000007c0)="b49588044419ba1896493a", 0x1002, 0xffffffffffffffff, 0x4}, 0x38) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000300)=@generic={0x0, 0x2}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a8894fb96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000007c0)="b49588044419ba1896493a", 0x1002, 0xffffffffffffffff, 0x4}, 0x38) (async) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000300)=@generic={0x0, 0x2}) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) (async) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a8894fb96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) (async) 662.663016ms ago: executing program 3 (id=2075): sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1401, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000082}, 0xc044) syz_emit_ethernet(0x35, &(0x7f0000000040)={@local, @empty, @void, {@generic={0x809b, "8fe797bbd5a8503e2b79671a5f1ca6a0983fee8a29deb16fd5363c7027a21e720e1e37cb49b963"}}}, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff}) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x70bd28, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x810) (async) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r1, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DEST={0x70, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfb3c}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x189}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) 661.380093ms ago: executing program 5 (id=2076): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x8915, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, 0x180, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000006c0)="e8700e4419271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f110000000000000000000000000000000095bffa35985beb669eea626227897b67e7751eb4b228c678eff1fabf2098218bb7399f360a885fc0f9803493d2daa1546ccd367957bf7173db5d35a5f0705b7b6e1fd0de6d07c13558eb3a5c46cdf206e60a", 0x120}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a00000109f1000073797a31000000001c0004801800018008000100666962000c00028008000240000000010900020073797a3200000000140000001100010000000000000000000100000abc57d1950ccc6d35625c74f3087cb83497465372da07154037fd1d8e14f17c47617c1339cf311031443ebe94bd"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c740e0000000000000000000000000000000000000000000000000000000500"], 0x78) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000380ff0000000400030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000000680)={&(0x7f0000000300), 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x70, r11, 0x300, 0x70bd23, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0xfffffffffffffdbc, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '}^-..:{!\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) 607.632181ms ago: executing program 2 (id=2077): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 493.339612ms ago: executing program 1 (id=2078): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000680)=@delchain={0xf4, 0x2d, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_ACT={0x78, 0x9, 0x0, 0x1, [@m_tunnel_key={0x74, 0x0, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x1c, 0x6, "eb25946ddf95959b7f8d829c69274ff122e320ac9e1cd272"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_RSHIFT={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6}]}, 0xf4}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x18800, 0x0) 357.973956ms ago: executing program 2 (id=2079): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x36, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) listen(r6, 0x8001) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000003c0)={"2a8187a15b04462a4c21dda6873bf682", 0x0, r10, {0xfffffffffffffffd, 0x9d0}, {0x2, 0x6}, 0x7, [0x2ae, 0x9, 0x100, 0x81, 0x6, 0xaf0, 0x4, 0x0, 0x800, 0x1, 0xd, 0x9, 0x8001, 0x8, 0x9, 0x80000001]}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @random="4873d127238e"}, 0x8, {0x2, 0x4e24, @multicast2}, 'veth1_to_bond\x00'}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="f80000001a0007000000000000000000ac1414bb000000000000000000000000ff020000000000000000000000000001ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xf8}}, 0x20040000) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x1, 0x4, 0x6, 0x2, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 356.474957ms ago: executing program 7 (id=2080): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) unshare(0x20000400) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf2501000000340008803000008024000100000000000000000000000000000000000000000000000000000000000000000008000a002100000008000100", @ANYRES32=r4, @ANYBLOB="82a72a96b83835ea37cff231c82b256cde50b5f120917542ca464ceeba5a16362b5487b277157b3c9db6e7ec8e09a79f5aadb80a3f83e068c1335bebbd5a375cb29cf8bd43fd51d962d5db3be298dd92225bc7d302d9484a0b405222beceb374a8a003c94a6c58367550ead477148ab7417b41e507578439c8f4d55514c33cd37b9a129daa883cf6c26fe4d3c79c025242b102f2ad1e25749a752ab3eb4119267423a1661d1a29e9240e634454c924ef050688dc0183930c9022e5f9d42f3a37aa473d4afd97043ed2349d06e46bd24a7bb3efe0"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x30, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000030301080000000000000000001900000c0002000000000000000000"], 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000040000100fcff06ee04000000010000000400488014000180100010800c00008008001e80040001800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r8) (rerun: 64) sendmsg$NL80211_CMD_GET_SCAN(r10, &(0x7f0000000a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r11, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6d}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4850}, 0x4040060) (async) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newsa={0x2b8, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0x0, 0x100}, {@in=@remote, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @migrate={0x180, 0x11, [{@in=@multicast2, @in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x3f}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x2b, 0x3, 0x0, 0x3505, 0x0, 0xa}, {@in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x6c, 0x1, 0x0, 0x34ff, 0xa, 0x2}, {@in=@loopback, @in=@private=0xa010100, @in=@empty, @in6=@loopback, 0xff, 0x1, 0x0, 0x3506, 0xa, 0x2}, {@in6=@private1, @in=@local, @in6=@remote, @in6=@mcast1, 0x32, 0x4, 0x0, 0x3506, 0xa, 0xa}, {@in6=@private0, @in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x2e}, @in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x32, 0x2, 0x0, 0x3502, 0x2, 0x8}]}]}, 0x2b8}}, 0x0) (async, rerun: 64) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000000800000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) syz_emit_ethernet(0x152, &(0x7f0000001040)={@multicast, @link_local, @void, {@mpls_uc={0x8847, {[{0xe3b9e, 0x0, 0x1}], @ipv4=@icmp={{0x1c, 0x4, 0x3, 0x17, 0x140, 0x67, 0x0, 0x7, 0x1, 0x0, @empty, @local, {[@generic={0x83, 0xf, "a0c0623f37e5336143568ef26f"}, @lsrr={0x83, 0xb, 0xca, [@broadcast, @multicast1]}, @cipso={0x86, 0x9, 0x1, [{0x1, 0x3, ' '}]}, @generic={0x83, 0xd, "0cb5bfc4190496ee4b2045"}, @timestamp_addr={0x44, 0x2c, 0xbe, 0x1, 0x7, [{@private=0xa010100, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x34}, 0xf727}, {@broadcast, 0x7f}, {@broadcast, 0xfffffffe}, {@private=0xa010100, 0x200}]}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x32, 0x4, 0x1, 0x4, 0x9f17, 0x68, 0x253, 0xe, 0x88, 0x0, @local, @private=0xa010102, {[@timestamp_prespec={0x44, 0x4c, 0x77, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b2}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x80}, {@private=0xa010102, 0x3ff}, {@local, 0x9}, {@multicast1, 0x53}, {@local, 0x3}, {@empty, 0x32e4}, {@multicast1, 0x100}]}, @timestamp_prespec={0x44, 0x1c, 0x60, 0x3, 0x2, [{@multicast2, 0xfffffff9}, {@local, 0x1b5}, {@empty, 0x7}]}, @cipso={0x86, 0x1f, 0x0, [{0x6, 0x5, "284eeb"}, {0x5, 0xd, "8c3b5e16fb91dd38f5a60b"}, {0x7, 0x7, "fc8306a284"}]}, @timestamp={0x44, 0x1c, 0xf5, 0x0, 0x1, [0x2, 0x9, 0x123, 0xffffffff, 0x5b97, 0x6]}, @rr={0x7, 0xf, 0xf2, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x23}, @empty]}]}}}}}}}}, 0x0) (async, rerun: 64) pread64(r5, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x14, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) 339.98971ms ago: executing program 3 (id=2081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x168, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, "a8"}, @NL80211_ATTR_FILS_ERP_REALM={0x43, 0xfa, "a369e225084cc636eac13e3b38c83b0ee46ad3e9fb60bc372e5ae7b4208d34f891f6de318a3b124ee677cbcd85acfbcca0ca471379678afd4533b08fb2c8b5"}], @NL80211_ATTR_IE={0x3e, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @random_vendor={0xdd, 0x35, "e03f3ef1789e369b6b9d54b11046bbe83ff06058f63d626bda7fac06eca9c1147f227c99f5cd8abe081655f48289f45533fdc1da2d"}]}, @NL80211_ATTR_IE={0x3c, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @ht={0x2d, 0x1a, {0x40, 0x2, 0x4, 0x0, {0xb, 0x7c3, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x1, 0x34}}, @channel_switch={0x25, 0x3, {0x0, 0xb5, 0x8}}]}, @NL80211_ATTR_IE={0x8b, 0x2a, [@ht={0x2d, 0x1a, {0x800, 0x1, 0x4, 0x0, {0x4b1, 0x1, 0x0, 0x207}, 0x800, 0xa, 0x4}}, @mesh_chsw={0x76, 0x6, {0x0, 0x69, 0x8}}, @dsss={0x3, 0x1, 0x3c}, @channel_switch={0x25, 0x3, {0x0, 0x7c, 0x3d}}, @dsss={0x3, 0x1, 0x642d14f378c7899}, @gcr_ga={0xbd, 0x6}, @random_vendor={0xdd, 0x4e, "eab0fde50f9955ac607c2a2e529d18189ec2d1deb67a4962976f46cfb49d9372d8359e9807477d0fc6193bcbfdc96a4932e3544a79d989c4264e3171aa9dd5bfa156dac77b6d60db6df516d877bf"}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40001}, 0x40810) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) socket(0x6, 0x1, 0xc) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x7c, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x95}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48804}, 0x40000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) sendmsg$nl_route_sched_retired(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4008800) recvmmsg$unix(r4, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 265.672478ms ago: executing program 5 (id=2082): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f0000001340)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000000)="b88a000000f00000000000df8100", 0xe}], 0x1}, 0x20000811) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRES8=r1, @ANYRES32=0x41424344], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b00)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="980000b7d40df98e28a493e05e00000095"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e17}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xcff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x8, '\x00', 0x0, r3, 0x2, 0x1, 0x5}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000400206010200"/20], 0x14}}, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) (async) syz_extract_tcp_res$synack(&(0x7f0000001900)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x3, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x4e22, r7, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000580), 0xe698, 0x8) (async) syz_emit_ethernet(0xf6, &(0x7f00000019c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6a3f0afa00c00600fc02000000000000000000000000000000000000000000000000ffffe00000014e234e24", @ANYBLOB="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", @ANYRESOCT=r5, @ANYBLOB="e010ff0190780006040200220963e3c360d3dcfa220745bfcc3e2c000402fe06e2d4c3d92205256e250000005f007f060694d22187d9d93371a20f6f6f343278dd17dd6ed9a7902e6d7dd29ea41b47ae9d6231cc4cf09acb6e30a3504ecfca5323f3cce5880980a9b06054bed88493e6689e0be4a3ff5ac00d9fd79f912ff2f438b4d2de83e03809f428ee639aa67aa7e876782d323ba3da3b061cdcb335eb2599d2f42497e305e16f0582c992b86b5900000000"], 0x0) (async) socket(0x10, 0x3, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) splice(r5, 0x0, r6, &(0x7f00000002c0), 0x6, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000008000000010000008000000005b61f3a92f3637af182058943b61322c07fde6e584d1100b5aa0456e573022330d193658dff0c08aa95f41322a5ffe725a90d5c2bdd021bd772e00a46f632c2fb7d070aa4eac1f643e45584022bde2fc63f99f6856c510f81452072297f01b31093cea8cc6808953b0346a20e00c9d1f2b496dc778a9a907111bbe48ef5e33e1dc05d02c764b62f0b7ed60a209a8947c086f6209adcdf88b8d37ec0aad619f67ae8f5ef4cfd5c66b94064dc00c4367ac1925e5def", @ANYRES32=r4, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="02000000010000000400"/28], 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x4, 0x11}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000000480)="a102cb56146b659f7a89e6387ed5d2f6175852017a626a9c15ce94da6ceb52d27ef5f62e042377ddc6bfbc88e0861f5f46b5d00f9c6ab427a36de886598f7fbd57e7ec61c760ab9755047a26d38b9319020449b2cb588d25d381aeb5f7732357e6ddfcb46fc04afc7e63c57d7e74243bd850bae73e120033f4", 0x79}], 0x2, &(0x7f0000000500)="d82880f7477c3a01c77e01f2e0c1b4c88f52d91569d524e3c232e372e31a74c32f98", 0x22, 0x4008000}, 0x20000001) 62.033312ms ago: executing program 2 (id=2083): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x26, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0xd6, 0x0, &(0x7f0000000200)=""/214, 0x40, 0x0, 0x13, 0x4f, &(0x7f0000000140)="bd5eaa2edd2d2781ba6b2ad4c9e8876956cc7b", &(0x7f0000000300)="bf30d685f67e9c05d82bfc823f94734dd05c598b6bc542a8f16e5787e73f8df443db040e2226f576c9b05386d4153abf4022380f61e1c3653ec00b684b2e4aa8ccef437189ea0e678ec343f937670c", 0x2, 0x0, 0xc}, 0x50) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3811018020", @ANYRES32=0x0, @ANYBLOB="2b030000000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}}, 0x4008040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x26, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0xd6, 0x0, &(0x7f0000000200)=""/214, 0x40, 0x0, 0x13, 0x4f, &(0x7f0000000140)="bd5eaa2edd2d2781ba6b2ad4c9e8876956cc7b", &(0x7f0000000300)="bf30d685f67e9c05d82bfc823f94734dd05c598b6bc542a8f16e5787e73f8df443db040e2226f576c9b05386d4153abf4022380f61e1c3653ec00b684b2e4aa8ccef437189ea0e678ec343f937670c", 0x2, 0x0, 0xc}, 0x50) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3811018020", @ANYRES32=0x0, @ANYBLOB="2b030000000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}}, 0x4008040) (async) 43.548022ms ago: executing program 5 (id=2084): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x81, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6ed31ebc6e1f7ce7a537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r7, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r8, 0x25, 0x10, @void}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 3 (id=2085): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r4 = socket$inet(0x2, 0x2, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000200000000080000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f9", 0x55}], 0x1}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03084003158cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000200003"], 0x33fe0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev, @remote}, &(0x7f0000000240)=0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@cgroup, 0xffffffffffffffff, 0x9, 0x8}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r10) sendmsg$nl_generic(r10, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10) recvmmsg(r10, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xb, [@var={0x0, 0x0, 0x0, 0xe, 0x0, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2}]}, @fwd, @volatile, @volatile, @restrict={0x10, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x5da32920c3f0920d, 0x2e, 0x2e, 0x30, 0x0, 0x61, 0x30, 0x30, 0x71]}}, 0x0, 0x77, 0x0, 0x0, 0x0, 0x10000, @value=r3}, 0x28) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f00000006c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @exit, @jmp={0x5, 0x0, 0x9, 0x7, 0x9, 0x100, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) bind$packet(r3, &(0x7f0000000540)={0x11, 0xa, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) kernel console output (not intermixed with test programs): : batadv0: Removing interface: batadv_slave_0 [ 107.704512][ T6827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.736097][ T6827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.108483][ T6852] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.359596][ T6865] tap0: tun_chr_ioctl cmd 1074025678 [ 108.371469][ T6865] tap0: group set to 0 [ 111.191971][ T6863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.510583][ T6910] netlink: 'syz.3.277': attribute type 4 has an invalid length. [ 111.533781][ T6910] netlink: 'syz.3.277': attribute type 1 has an invalid length. [ 111.557737][ T6913] __nla_validate_parse: 5 callbacks suppressed [ 111.557758][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 111.610100][ T6910] netlink: 228 bytes leftover after parsing attributes in process `syz.3.277'. [ 111.821288][ T6924] sctp: [Deprecated]: syz.1.282 (pid 6924) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.821288][ T6924] Use struct sctp_sack_info instead [ 111.885278][ T6926] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 112.308623][ T6942] netlink: 10 bytes leftover after parsing attributes in process `syz.2.289'. [ 112.345820][ T6947] netlink: 'syz.0.291': attribute type 29 has an invalid length. [ 112.354848][ T6947] netlink: 'syz.0.291': attribute type 29 has an invalid length. [ 112.389815][ T6947] netlink: 'syz.0.291': attribute type 29 has an invalid length. [ 112.406225][ T6947] netlink: 'syz.0.291': attribute type 29 has an invalid length. [ 112.415938][ T6948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.435198][ T6947] netlink: 'syz.0.291': attribute type 29 has an invalid length. [ 112.474335][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 112.476298][ T6952] veth1_macvtap: left promiscuous mode [ 112.515717][ T6952] macsec0: entered promiscuous mode [ 112.531224][ T6952] macsec0: entered allmulticast mode [ 112.578018][ T6957] veth1_macvtap: entered promiscuous mode [ 112.604181][ T6957] veth1_macvtap: entered allmulticast mode [ 112.627869][ T6957] macsec0: left promiscuous mode [ 112.633062][ T6957] macsec0: left allmulticast mode [ 112.662310][ T6957] veth1_macvtap: left allmulticast mode [ 112.802969][ T6974] netlink: 'syz.1.297': attribute type 21 has an invalid length. [ 112.810925][ T6974] netlink: 152 bytes leftover after parsing attributes in process `syz.1.297'. [ 112.821743][ T6974] netlink: 48 bytes leftover after parsing attributes in process `syz.1.297'. [ 113.372873][ T7001] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 113.556084][ T7010] netlink: 576 bytes leftover after parsing attributes in process `syz.4.306'. [ 113.585364][ T7011] netlink: 576 bytes leftover after parsing attributes in process `syz.4.306'. [ 113.872220][ T7028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.112892][ T7037] netlink: 67 bytes leftover after parsing attributes in process `syz.3.313'. [ 114.200289][ T7037] netlink: 67 bytes leftover after parsing attributes in process `syz.3.313'. [ 114.356608][ T7051] PKCS7: Unknown OID: [4] (bad) [ 114.361731][ T7051] PKCS7: Only support pkcs7_signedData type [ 115.635019][ T7090] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 115.655643][ T7089] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20003 [ 116.220782][ T7115] vlan2: entered promiscuous mode [ 116.242970][ T7115] bridge0: entered promiscuous mode [ 116.359241][ T7127] netlink: 'syz.4.341': attribute type 1 has an invalid length. [ 116.730796][ T7143] trusted_key: syz.4.345 sent an empty control message without MSG_MORE. [ 116.791365][ T7146] __nla_validate_parse: 7 callbacks suppressed [ 116.791385][ T7146] netlink: 72 bytes leftover after parsing attributes in process `syz.4.345'. [ 116.845726][ T7146] netlink: 72 bytes leftover after parsing attributes in process `syz.4.345'. [ 116.887749][ T7145] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.346'. [ 117.124411][ T7159] netlink: 32 bytes leftover after parsing attributes in process `syz.2.349'. [ 117.171547][ T7159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.349'. [ 117.261586][ T7163] bond1: option min_links: invalid value (18446744073709551614) [ 117.269335][ T7163] bond1: option min_links: allowed values 0 - 2147483647 [ 117.280320][ T7163] bond1 (unregistering): Released all slaves [ 117.302278][ T7166] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.351'. [ 117.629370][ T7180] netlink: 'syz.3.357': attribute type 25 has an invalid length. [ 117.656631][ T7180] netlink: 'syz.3.357': attribute type 9 has an invalid length. [ 117.667488][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 117.703309][ T7183] openvswitch: netlink: Flow actions attr not present in new flow. [ 117.734148][ T7181] netlink: 40 bytes leftover after parsing attributes in process `syz.4.358'. [ 117.793563][ T7183] wg1: entered allmulticast mode [ 117.807347][ T7183] sctp: [Deprecated]: syz.2.356 (pid 7183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.807347][ T7183] Use struct sctp_sack_info instead [ 117.943588][ T7195] syzkaller0: entered promiscuous mode [ 117.952003][ T7195] syzkaller0: entered allmulticast mode [ 118.561221][ T7227] netlink: 60 bytes leftover after parsing attributes in process `syz.2.368'. [ 118.645158][ T7227] netlink: 60 bytes leftover after parsing attributes in process `syz.2.368'. [ 118.906070][ T5145] Bluetooth: hci1: command 0x0405 tx timeout [ 119.112805][ T7253] netlink: 'syz.2.375': attribute type 1 has an invalid length. [ 119.746354][ T7281] netlink: 'syz.2.384': attribute type 6 has an invalid length. [ 119.784134][ T7281] xt_ecn: cannot match TCP bits for non-tcp packets [ 119.896152][ T7290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.025048][ T7297] syzkaller0: entered promiscuous mode [ 120.053839][ T7297] syzkaller0: entered allmulticast mode [ 121.042837][ T7355] bridge0: port 3(gretap0) entered blocking state [ 121.052814][ T7355] bridge0: port 3(gretap0) entered disabled state [ 121.062242][ T7355] gretap0: entered allmulticast mode [ 121.079139][ T7355] gretap0: entered promiscuous mode [ 121.085401][ T7355] bridge0: port 3(gretap0) entered blocking state [ 121.092547][ T7355] bridge0: port 3(gretap0) entered forwarding state [ 123.253392][ T7312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.485894][ T7371] __nla_validate_parse: 4 callbacks suppressed [ 123.485916][ T7371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.411'. [ 123.554510][ T7375] netlink: 'syz.4.410': attribute type 62 has an invalid length. [ 123.624414][ T7379] netlink: 64 bytes leftover after parsing attributes in process `syz.2.411'. [ 123.681182][ T7383] netlink: 48 bytes leftover after parsing attributes in process `syz.2.411'. [ 123.809354][ T7390] netlink: 48 bytes leftover after parsing attributes in process `syz.4.414'. [ 123.956114][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'. [ 124.170355][ T7403] sock: sock_set_timeout: `syz.1.418' (pid 7403) tries to set negative timeout [ 124.199499][ T7403] netlink: 830 bytes leftover after parsing attributes in process `syz.1.418'. [ 124.298611][ T7413] tipc: Started in network mode [ 124.311405][ T7413] tipc: Node identity ac14140f, cluster identity 4711 [ 124.340746][ T7413] tipc: New replicast peer: 255.255.255.255 [ 124.367202][ T7413] tipc: Enabled bearer , priority 10 [ 124.381259][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'. [ 124.392285][ T7416] netlink: 'syz.2.423': attribute type 7 has an invalid length. [ 124.659741][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 124.902504][ T7445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.430'. [ 124.922877][ T7445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.430'. [ 124.961246][ T7445] erspan0: entered promiscuous mode [ 125.487403][ T5900] tipc: Node number set to 2886997007 [ 125.834474][ T5846] udevd[5846]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 126.169511][ T7502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.220391][ T7502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.240215][ T7510] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.342612][ T7514] netlink: 'syz.4.448': attribute type 1 has an invalid length. [ 126.377285][ T7515] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 126.874051][ T7534] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 126.902127][ T7534] bond1: (slave vcan1): Error -95 calling set_mac_address [ 127.681304][ T7582] netlink: 'syz.1.467': attribute type 1 has an invalid length. [ 127.791467][ T7588] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 128.110090][ T7605] netlink: 'syz.0.476': attribute type 8 has an invalid length. [ 128.143427][ T7605] bond0: entered promiscuous mode [ 128.162167][ T7605] bond_slave_0: entered promiscuous mode [ 128.174046][ T7605] bond_slave_1: entered promiscuous mode [ 128.198612][ T7605] bond0: left promiscuous mode [ 128.203757][ T7605] bond_slave_0: left promiscuous mode [ 128.210508][ T7605] bond_slave_1: left promiscuous mode [ 128.492210][ T7626] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 128.568126][ T7626] team1: entered promiscuous mode [ 128.592378][ T7626] team1: entered allmulticast mode [ 128.789408][ T7638] __nla_validate_parse: 15 callbacks suppressed [ 128.789431][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 128.996251][ T7651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.492'. [ 129.036019][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 129.093102][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 129.103070][ T7651] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 129.109491][ T7656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.494'. [ 129.157177][ T7651] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 129.233574][ T7663] netlink: 164 bytes leftover after parsing attributes in process `syz.3.492'. [ 129.245376][ T7663] netlink: 164 bytes leftover after parsing attributes in process `syz.3.492'. [ 129.296784][ T7663] netlink: 60 bytes leftover after parsing attributes in process `syz.3.492'. [ 129.857413][ T7695] netlink: 40 bytes leftover after parsing attributes in process `syz.4.505'. [ 129.908076][ T7695] ip6gre1: entered promiscuous mode [ 129.979056][ T7695] ip6gre1: entered allmulticast mode [ 130.131012][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 130.465014][ T7739] gretap0: entered promiscuous mode [ 132.910784][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.974100][ T7709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.024131][ T7791] netlink: 'syz.4.532': attribute type 29 has an invalid length. [ 134.472793][ T7807] netlink: 'syz.4.539': attribute type 17 has an invalid length. [ 135.386866][ T7821] netlink: 'syz.4.546': attribute type 29 has an invalid length. [ 135.526398][ T7823] netlink: 'syz.4.547': attribute type 10 has an invalid length. [ 135.544754][ T7823] __nla_validate_parse: 1 callbacks suppressed [ 135.544774][ T7823] netlink: 40 bytes leftover after parsing attributes in process `syz.4.547'. [ 135.577277][ T7823] batman_adv: batadv0: Adding interface: vlan1 [ 135.593897][ T7823] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.651814][ T7823] batman_adv: batadv0: Interface activated: vlan1 [ 135.910245][ T7765] syz.2.522 (7765) used greatest stack depth: 17784 bytes left [ 136.381206][ T7834] bridge_slave_0: left allmulticast mode [ 136.402985][ T7834] bridge_slave_0: left promiscuous mode [ 136.425285][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.462582][ T7834] bridge_slave_1: left allmulticast mode [ 136.485025][ T7834] bridge_slave_1: left promiscuous mode [ 136.509095][ T7834] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.571457][ T7834] team0: Port device team_slave_0 removed [ 136.614818][ T7834] team0: Port device team_slave_1 removed [ 136.638850][ T7834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.666273][ T7834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.697876][ T7834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.735738][ T7834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.761246][ T7834] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.168656][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 137.178012][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 137.332893][ T7854] Cannot find del_set index 1 as target [ 140.269621][ T7855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.281096][ T7863] netlink: 224 bytes leftover after parsing attributes in process `syz.2.560'. [ 140.292308][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 140.955189][ T7911] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 141.110546][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 141.279273][ T7918] veth3: entered promiscuous mode [ 141.292537][ T7918] veth3: entered allmulticast mode [ 141.452738][ T7944] netlink: 40 bytes leftover after parsing attributes in process `syz.2.583'. [ 141.573128][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 141.668453][ T7958] openvswitch: netlink: Duplicate or invalid key (type 0). [ 141.676913][ T7958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.710656][ T7960] tipc: Failed to remove unknown binding: 66,0,0/4:4179508579/4179508580 [ 141.723367][ T7960] tipc: Failed to remove unknown binding: 66,0,0/4:4179508579/4179508580 [ 141.800863][ T7966] openvswitch: netlink: Key type 244 is out of range max 32 [ 142.123819][ T7974] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 142.767210][ T8009] netlink: 'syz.2.601': attribute type 4 has an invalid length. [ 142.884096][ T8014] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 142.897808][ T8013] bond0: entered allmulticast mode [ 142.903885][ T8014] netlink: 224 bytes leftover after parsing attributes in process `syz.3.604'. [ 143.338179][ T8047] sctp: [Deprecated]: syz.3.609 (pid 8047) Use of int in max_burst socket option. [ 143.338179][ T8047] Use struct sctp_assoc_value instead [ 143.358142][ T8048] netlink: 'syz.2.613': attribute type 3 has an invalid length. [ 143.375929][ T8049] netlink: 'syz.2.613': attribute type 3 has an invalid length. [ 143.400469][ T8048] netlink: 224 bytes leftover after parsing attributes in process `syz.2.613'. [ 143.425652][ T8049] netlink: 224 bytes leftover after parsing attributes in process `syz.2.613'. [ 143.619411][ T8058] netlink: 132 bytes leftover after parsing attributes in process `syz.3.616'. [ 144.220791][ T8084] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.240361][ T8084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.625'. [ 144.250895][ T8084] netlink: 6 bytes leftover after parsing attributes in process `syz.4.625'. [ 144.298200][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 144.780394][ T8107] xt_l2tp: v2 tid > 0xffff: 1114244 [ 145.174600][ T8129] netlink: 'syz.2.641': attribute type 1 has an invalid length. [ 145.184117][ T8131] netlink: 'syz.1.642': attribute type 33 has an invalid length. [ 145.185444][ T8129] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 145.440162][ T8145] syzkaller1: entered promiscuous mode [ 145.455355][ T8145] syzkaller1: entered allmulticast mode [ 145.550196][ T8154] xt_policy: output policy not valid in PREROUTING and INPUT [ 145.659758][ T8162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.743615][ T8168] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 146.289411][ T8192] __nla_validate_parse: 8 callbacks suppressed [ 146.303495][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.661'. [ 146.422376][ T8194] tap0: tun_chr_ioctl cmd 2148553947 [ 146.682730][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 146.720011][ T8207] : entered promiscuous mode [ 146.753317][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 146.832367][ T8213] netlink: 'syz.1.669': attribute type 2 has an invalid length. [ 146.851841][ T8213] netlink: 48 bytes leftover after parsing attributes in process `syz.1.669'. [ 147.068204][ T8226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.836922][ T8258] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.683'. [ 147.846580][ T8258] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 147.893263][ T8261] netlink: 404 bytes leftover after parsing attributes in process `syz.2.684'. [ 147.910921][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.684'. [ 147.921011][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.684'. [ 147.933224][ T8261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.684'. [ 148.153262][ T8274] netlink: 'syz.2.689': attribute type 29 has an invalid length. [ 148.173031][ T8276] netlink: 'syz.3.690': attribute type 9 has an invalid length. [ 148.181936][ T8276] netlink: 'syz.3.690': attribute type 6 has an invalid length. [ 148.308627][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 148.980548][ T8324] syzkaller0: entered promiscuous mode [ 148.996048][ T8324] syzkaller0: entered allmulticast mode [ 149.052285][ T5145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.063922][ T5145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.073482][ T5145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.082439][ T5145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.091044][ T5145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.605430][ T8326] chnl_net:caif_netlink_parms(): no params data found [ 149.632571][ T8346] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 149.781802][ T8354] vcan1: entered promiscuous mode [ 149.806366][ T8354] vcan1: entered allmulticast mode [ 149.929801][ T8326] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.975765][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.990462][ T8326] bridge_slave_0: entered allmulticast mode [ 150.005434][ T8326] bridge_slave_0: entered promiscuous mode [ 150.049689][ T8326] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.059150][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.067692][ T8326] bridge_slave_1: entered allmulticast mode [ 150.111528][ T8326] bridge_slave_1: entered promiscuous mode [ 150.229867][ T8326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.243946][ T8326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.317534][ T8326] team0: Port device team_slave_0 added [ 150.329288][ T8326] team0: Port device team_slave_1 added [ 150.383238][ T8326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.391818][ T8326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.418476][ T8326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.431888][ T8326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.439271][ T8326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.489943][ T8326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.629226][ T8393] netlink: 'syz.1.718': attribute type 62 has an invalid length. [ 150.651177][ T8326] hsr_slave_0: entered promiscuous mode [ 150.660401][ T8326] hsr_slave_1: entered promiscuous mode [ 150.669016][ T8326] debugfs: 'hsr0' already exists in 'hsr' [ 150.674881][ T8326] Cannot create hsr debugfs directory [ 150.823439][ T8400] tls_set_device_offload: netdev not found [ 150.852552][ T8402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.991818][ T8326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 151.032365][ T8326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.072922][ T8326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.089975][ T8326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 151.122441][ T30] audit: type=1107 audit(1774024472.207:2): pid=8405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='uyq.ҴpVٖW_4%x (#-ϋaY, priority 0 [ 153.729646][ T8525] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 153.748434][ T8528] netlink: 60 bytes leftover after parsing attributes in process `syz.3.755'. [ 153.759430][ T8525] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 154.118478][ T8540] netlink: 32 bytes leftover after parsing attributes in process `syz.1.758'. [ 154.236421][ T8546] netlink: 40 bytes leftover after parsing attributes in process `syz.5.759'. [ 154.328353][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'. [ 154.366884][ T8551] netlink: 2 bytes leftover after parsing attributes in process `syz.1.761'. [ 154.400156][ T8555] bond0: option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3) [ 154.419468][ T8553] bond0: option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3) [ 154.675988][ T8569] netlink: 'syz.3.767': attribute type 12 has an invalid length. [ 154.806209][ T1072] tipc: Node number set to 3822526519 [ 155.097560][ T8598] ipt_REJECT: ECHOREPLY no longer supported. [ 155.100727][ T8589] bond3: entered allmulticast mode [ 155.306735][ T5145] Bluetooth: hci5: command tx timeout [ 156.611763][ T8679] __nla_validate_parse: 5 callbacks suppressed [ 156.611784][ T8679] netlink: 28 bytes leftover after parsing attributes in process `syz.5.787'. [ 156.683873][ T8679] netlink: 32 bytes leftover after parsing attributes in process `syz.5.787'. [ 156.922165][ T8692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.060133][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.794'. [ 157.163041][ T127] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.212251][ T127] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.247636][ T127] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.263148][ T127] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.390095][ T5145] Bluetooth: hci5: command tx timeout [ 157.453658][ T8724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.799'. [ 157.533153][ T8728] netlink: 60 bytes leftover after parsing attributes in process `syz.5.801'. [ 157.549005][ T8729] gre0: entered promiscuous mode [ 157.554531][ T8729] gre0: entered allmulticast mode [ 157.753488][ T8739] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.805'. [ 157.768242][ T8740] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.836021][ T8740] bridge_slave_0 (unregistering): left allmulticast mode [ 157.843118][ T8740] bridge_slave_0 (unregistering): left promiscuous mode [ 157.869647][ T8740] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.255971][ T8760] netlink: 40 bytes leftover after parsing attributes in process `syz.1.813'. [ 158.334435][ T8763] smc: net device wlan0 applied user defined pnetid SYZ0 [ 158.372895][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz.5.814'. [ 158.523194][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 158.575285][ T8775] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 158.616311][ T8777] openvswitch: netlink: IP tunnel dst address not specified [ 158.632974][ T8775] netlink: 32 bytes leftover after parsing attributes in process `syz.1.816'. [ 158.732956][ T8788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.745002][ T8788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.754269][ T8788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.763392][ T8788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.868179][ T8793] netlink: 'syz.2.822': attribute type 1 has an invalid length. [ 159.242138][ T8807] syzkaller0: entered promiscuous mode [ 159.249830][ T8807] syzkaller0: entered allmulticast mode [ 159.269707][ T8807] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 159.380314][ T8810] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 159.472702][ T8815] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 159.797374][ T8829] ip6t_rpfilter: unknown options [ 160.411944][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 160.421680][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 160.431160][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 160.440294][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 160.449014][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 160.544129][ T8872] bond0: entered promiscuous mode [ 160.557788][ T8872] bond0: left promiscuous mode [ 160.853878][ T8887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.012842][ T8895] TCP: TCP_TX_DELAY enabled [ 161.134319][ T8859] chnl_net:caif_netlink_parms(): no params data found [ 161.477971][ T8917] xt_l2tp: invalid flags combination: 8 [ 161.490565][ T8859] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.535889][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.543194][ T8859] bridge_slave_0: entered allmulticast mode [ 161.595742][ T8859] bridge_slave_0: entered promiscuous mode [ 161.612748][ T8859] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.620535][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.634150][ T8859] bridge_slave_1: entered allmulticast mode [ 161.644337][ T8859] bridge_slave_1: entered promiscuous mode [ 161.691470][ T8859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.712840][ T8859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.807622][ T8925] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 161.817728][ T8925] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 161.831514][ T8859] team0: Port device team_slave_0 added [ 161.868373][ T8859] team0: Port device team_slave_1 added [ 161.968404][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.977542][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.006794][ T8859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.028467][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.049023][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.103267][ T8859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.279912][ T8952] team0: No ports can be present during mode change [ 162.324935][ T8859] hsr_slave_0: entered promiscuous mode [ 162.332588][ T8859] hsr_slave_1: entered promiscuous mode [ 162.343484][ T8859] debugfs: 'hsr0' already exists in 'hsr' [ 162.353750][ T8859] Cannot create hsr debugfs directory [ 162.506763][ T51] Bluetooth: hci6: command tx timeout [ 162.848007][ T8976] xt_hashlimit: max too large, truncated to 1048576 [ 162.863511][ T8973] sctp: [Deprecated]: syz.1.874 (pid 8973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.863511][ T8973] Use struct sctp_sack_info instead [ 162.881981][ T8971] sctp: [Deprecated]: syz.1.874 (pid 8971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.881981][ T8971] Use struct sctp_sack_info instead [ 162.960149][ T8976] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.974309][ T1072] IPVS: starting estimator thread 0... [ 162.987035][ T8979] IPVS: ip_vs_add_dest(): server weight less than zero [ 163.018027][ T8979] syzkaller1: entered promiscuous mode [ 163.023595][ T8979] syzkaller1: entered allmulticast mode [ 163.076566][ T8980] IPVS: using max 49 ests per chain, 117600 per kthread [ 163.141835][ T8976] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.198125][ T8859] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 163.212603][ T8859] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 163.242066][ T8859] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 163.296299][ T8859] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 163.317311][ T8988] __nla_validate_parse: 11 callbacks suppressed [ 163.317334][ T8988] netlink: 32 bytes leftover after parsing attributes in process `syz.2.879'. [ 163.358619][ T8976] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.459293][ T8976] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.500097][ T9000] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.575347][ T9001] netlink: 'syz.1.881': attribute type 5 has an invalid length. [ 163.698272][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.763387][ T3554] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.826839][ T8859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.834947][ T73] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.891424][ T1157] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.910599][ T8859] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.948597][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.955914][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.033177][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.040427][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.132947][ T8859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.144344][ T8859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.343985][ T9038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.346142][ T9037] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 164.586254][ T51] Bluetooth: hci6: command tx timeout [ 164.629600][ T8859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.759860][ T9054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.091970][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 165.192608][ T9065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.262984][ T8859] veth0_vlan: entered promiscuous mode [ 165.293107][ T8859] veth1_vlan: entered promiscuous mode [ 165.357282][ T9073] netem: incorrect gi model size [ 165.374874][ T9073] netem: change failed [ 165.528505][ T8859] veth0_macvtap: entered promiscuous mode [ 165.553026][ T8859] veth1_macvtap: entered promiscuous mode [ 165.652816][ T8859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.709485][ T8859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.758443][ T140] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.779914][ T140] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.816814][ T9091] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 165.843425][ T9089] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 165.843483][ T140] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.880393][ T140] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.002662][ T9100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.907'. [ 166.020634][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.048784][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.081710][ T9104] gre2: entered promiscuous mode [ 166.111801][ T9104] gre2: entered allmulticast mode [ 166.176223][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.187139][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.222911][ T9108] veth1_vlan: entered allmulticast mode [ 166.363461][ T9117] sctp: [Deprecated]: syz.6.840 (pid 9117) Use of int in max_burst socket option deprecated. [ 166.363461][ T9117] Use struct sctp_assoc_value instead [ 166.412685][ T9109] veth1_vlan: left allmulticast mode [ 166.525235][ T9125] netlink: 'syz.1.915': attribute type 11 has an invalid length. [ 166.553089][ T9125] netlink: 224 bytes leftover after parsing attributes in process `syz.1.915'. [ 166.666747][ T51] Bluetooth: hci6: command tx timeout [ 166.876631][ T9151] netlink: 'syz.3.921': attribute type 1 has an invalid length. [ 166.901500][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.922'. [ 166.914721][ T9151] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.960338][ T9151] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 167.021870][ T9155] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.032021][ T9155] bond2: (slave bond3): Enslaving as an active interface with a down link [ 167.200733][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.926'. [ 167.340579][ T9181] netlink: 28 bytes leftover after parsing attributes in process `syz.6.928'. [ 167.354223][ T9173] netlink: 2 bytes leftover after parsing attributes in process `syz.3.925'. [ 167.369843][ T9176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.927'. [ 167.724598][ T9195] netlink: 40 bytes leftover after parsing attributes in process `syz.6.932'. [ 167.949285][ T9206] xt_hashlimit: size too large, truncated to 1048576 [ 168.185880][ T9223] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 168.385283][ T9209] syzkaller0: entered promiscuous mode [ 168.407144][ T9209] syzkaller0: entered allmulticast mode [ 168.583347][ T9229] pim6reg1: entered promiscuous mode [ 168.593550][ T9229] pim6reg1: entered allmulticast mode [ 168.717744][ T9242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.746654][ T51] Bluetooth: hci6: command tx timeout [ 168.975445][ T9256] __nla_validate_parse: 4 callbacks suppressed [ 168.975465][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.949'. [ 170.111176][ T9264] netlink: 16 bytes leftover after parsing attributes in process `syz.5.952'. [ 170.256353][ T9269] openvswitch: netlink: Flow actions attr not present in new flow. [ 170.977930][ T9277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.955'. [ 170.987198][ T9277] netlink: 32 bytes leftover after parsing attributes in process `syz.1.955'. [ 171.027880][ T9277] gretap1: entered promiscuous mode [ 171.033470][ T9277] gretap1: entered allmulticast mode [ 171.181352][ T9281] netlink: 'syz.5.957': attribute type 1 has an invalid length. [ 171.234714][ T9281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.250731][ T9287] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 171.292752][ T9287] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 171.594702][ T9309] netlink: 'syz.1.964': attribute type 1 has an invalid length. [ 171.709149][ T9320] netlink: 'syz.1.968': attribute type 29 has an invalid length. [ 171.718734][ T9320] netlink: 'syz.1.968': attribute type 29 has an invalid length. [ 171.730039][ T9320] netlink: 500 bytes leftover after parsing attributes in process `syz.1.968'. [ 171.740007][ T9320] unsupported nla_type 58 [ 171.745350][ T9320] netlink: 'syz.1.968': attribute type 4 has an invalid length. [ 171.948417][ T9333] netlink: 56 bytes leftover after parsing attributes in process `syz.3.972'. [ 172.002097][ T9333] bond4 (unregistering): Released all slaves [ 172.341242][ T9353] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 172.513889][ T9364] netlink: 48 bytes leftover after parsing attributes in process `syz.3.979'. [ 172.615920][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 172.707046][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.981'. [ 172.736762][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 173.024271][ T9392] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 173.037706][ T9392] netlink: 'syz.2.986': attribute type 3 has an invalid length. [ 173.147606][ T9394] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 173.160732][ T9394] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 173.197489][ T9394] netlink: 'syz.2.988': attribute type 1 has an invalid length. [ 173.383690][ T9410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.218489][ T9436] netlink: 'syz.1.1001': attribute type 23 has an invalid length. [ 174.296610][ T9454] __nla_validate_parse: 7 callbacks suppressed [ 174.296631][ T9454] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1006'. [ 174.443007][ T9461] netlink: 'syz.3.1008': attribute type 1 has an invalid length. [ 174.444606][ T9463] tipc: Enabling of bearer rejected, already enabled [ 174.460993][ T9463] syzkaller0: mtu less than device minimum [ 174.746434][ T9473] netlink: 'syz.6.1013': attribute type 29 has an invalid length. [ 175.042874][ T9487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1015'. [ 175.356683][ T9503] syzkaller0: entered promiscuous mode [ 175.362869][ T9503] syzkaller0: entered allmulticast mode [ 175.386108][ T9512] openvswitch: netlink: IPv4 tun info is not correct [ 175.411457][ T9513] veth0_macvtap: left promiscuous mode [ 175.436422][ T9513] macvtap0: entered allmulticast mode [ 175.457374][ T9513] macvtap0: refused to change device tx_queue_len [ 175.607146][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1025'. [ 175.635672][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1025'. [ 175.641899][ T9522] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20004 [ 175.677118][ T9527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1027'. [ 175.694430][ T9522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1026'. [ 175.789264][ T9528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1027'. [ 176.219294][ T9562] validate_nla: 21 callbacks suppressed [ 176.219317][ T9562] netlink: 'syz.1.1037': attribute type 58 has an invalid length. [ 176.234350][ T9562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1037'. [ 176.410089][ T9577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.278440][ T9616] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1049'. [ 178.881573][ T9657] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 178.900896][ T9658] lo speed is unknown, defaulting to 1000 [ 178.925426][ T9657] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 178.945640][ T9658] lo speed is unknown, defaulting to 1000 [ 178.957358][ T9657] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 178.970027][ T9657] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 178.980933][ T9657] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 178.997695][ T9657] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 179.020972][ T9657] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 179.052075][ T9657] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 179.053311][ T9658] lo speed is unknown, defaulting to 1000 [ 179.062568][ T9657] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 179.116407][ T9657] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 179.154726][ T9658] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 179.265231][ T9658] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 179.309261][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1065'. [ 179.340744][ T9677] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1065'. [ 179.448392][ T9658] lo speed is unknown, defaulting to 1000 [ 179.468673][ T9658] lo speed is unknown, defaulting to 1000 [ 179.545405][ T9658] lo speed is unknown, defaulting to 1000 [ 179.598179][ T9658] lo speed is unknown, defaulting to 1000 [ 179.631123][ T9658] lo speed is unknown, defaulting to 1000 [ 179.695345][ T9701] bond1 (unregistering): Released all slaves [ 179.789895][ T9658] lo speed is unknown, defaulting to 1000 [ 179.803192][ T9710] netlink: 'syz.2.1073': attribute type 9 has an invalid length. [ 179.829409][ T9658] lo speed is unknown, defaulting to 1000 [ 180.316595][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1083'. [ 180.418574][ T9747] netlink: 'syz.1.1084': attribute type 7 has an invalid length. [ 180.444185][ T9747] netlink: 'syz.1.1084': attribute type 8 has an invalid length. [ 180.790247][ T9762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1088'. [ 182.820284][ T9713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.953545][ T9776] netlink: 'syz.2.1091': attribute type 1 has an invalid length. [ 183.170206][ T9797] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096 [ 183.183909][ T9795] IPVS: set_ctl: invalid protocol: 92 10.1.1.0:20004 [ 183.246863][ T9788] netlink: 'syz.5.1093': attribute type 1 has an invalid length. [ 183.254767][ T9788] netlink: 'syz.5.1093': attribute type 1 has an invalid length. [ 183.829575][ T9827] xt_connbytes: Forcing CT accounting to be enabled [ 183.934861][ T9834] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1108'. [ 184.111747][ T9844] openvswitch: netlink: Key type 339 is out of range max 32 [ 184.130211][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1111'. [ 184.163163][ T9847] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1107'. [ 185.469349][ T9846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.487741][ T9846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.730857][ T9874] netlink: 211792 bytes leftover after parsing attributes in process `syz.6.1116'. [ 185.795193][ T9875] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 185.946434][ T9880] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1120'. [ 186.294983][ T9903] netlink: 'syz.1.1125': attribute type 21 has an invalid length. [ 186.331869][ T9903] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1125'. [ 186.332390][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 186.536921][ T30] audit: type=1804 audit(1774024507.617:3): pid=9911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1126" name="/newroot/58/cgroup.controllers" dev="tmpfs" ino=315 res=1 errno=0 [ 186.562277][ T30] audit: type=1800 audit(1774024507.627:4): pid=9911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1126" name="cgroup.controllers" dev="tmpfs" ino=315 res=0 errno=0 [ 189.118515][ T9893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.554973][ T9937] Cannot find set identified by id 3 to match [ 189.612264][ T9940] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1134'. [ 189.657671][ T9944] netlink: 'syz.1.1136': attribute type 21 has an invalid length. [ 189.666318][ T9944] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.703056][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1136'. [ 189.733593][ T9944] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 189.750911][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1135'. [ 189.820555][ T9950] netlink: 'syz.5.1138': attribute type 6 has an invalid length. [ 189.875802][ T9950] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1138'. [ 190.052255][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1143'. [ 190.123752][ T9967] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1144'. [ 190.226443][ T9970] syzkaller1: entered promiscuous mode [ 190.247255][ T9970] syzkaller1: entered allmulticast mode [ 190.983248][T10014] __nla_validate_parse: 3 callbacks suppressed [ 190.983267][T10014] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1160'. [ 191.018356][T10007] tunl0: entered promiscuous mode [ 191.024809][T10007] netlink: 'syz.1.1158': attribute type 3 has an invalid length. [ 191.045880][T10007] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1158'. [ 191.174050][T10026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.244387][T10026] netlink: 'syz.6.1162': attribute type 28 has an invalid length. [ 191.273071][T10026] netlink: 'syz.6.1162': attribute type 3 has an invalid length. [ 191.281970][T10026] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1162'. [ 191.282919][T10031] netlink: 'syz.2.1163': attribute type 1 has an invalid length. [ 191.395241][T10024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.423757][T10031] netlink: 'syz.2.1163': attribute type 3 has an invalid length. [ 191.459957][T10040] syzkaller0: entered promiscuous mode [ 191.480175][T10043] netlink: 'syz.1.1169': attribute type 1 has an invalid length. [ 191.490494][T10040] syzkaller0: entered allmulticast mode [ 191.647793][T10048] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 191.693765][T10051] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 191.756985][T10053] ip6t_srh: unknown srh invflags 4000 [ 191.763822][T10056] ip6t_srh: unknown srh invflags 4000 [ 191.766341][T10055] netlink: 'syz.2.1174': attribute type 12 has an invalid length. [ 191.778511][T10057] netlink: 'syz.2.1174': attribute type 12 has an invalid length. [ 191.787773][T10055] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1174'. [ 191.797486][T10057] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1174'. [ 191.848218][T10055] bond5: entered promiscuous mode [ 191.854712][T10055] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.920349][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 191.938460][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f4d6c00: rx timeout, send abort [ 192.438603][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f4d7c00: rx timeout, send abort [ 192.448861][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f4d6c00: abort rx timeout. Force session deactivation [ 192.609648][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 192.946936][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f4d7c00: abort rx timeout. Force session deactivation [ 192.967654][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1191'. [ 192.992732][T10118] tipc: MTU too low for tipc bearer [ 193.001390][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1191'. [ 193.040893][T10121] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1194'. [ 193.142420][T10126] team0: Port device dummy0 added [ 193.743084][T10162] nbd0: detected capacity change from 0 to 127 [ 193.787485][ T51] block nbd0: Receive control failed (result -32) [ 193.805850][ T5846] block nbd0: Dead connection, failed to find a fallback [ 193.836095][ T5846] block nbd0: shutting down sockets [ 193.841808][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.861663][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.893174][ T5846] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.904367][ T5846] Buffer I/O error on dev nbd0, logical block 1, async page read [ 193.913242][ T5846] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.962255][ T5846] Buffer I/O error on dev nbd0, logical block 2, async page read [ 193.997666][ T5846] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.035015][ T5846] Buffer I/O error on dev nbd0, logical block 3, async page read [ 194.049947][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.063033][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read [ 194.072121][ T5846] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.084731][ T5846] Buffer I/O error on dev nbd0, logical block 1, async page read [ 194.093092][ T5846] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.109029][ T5846] Buffer I/O error on dev nbd0, logical block 2, async page read [ 194.119005][ T5846] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.129598][ T5846] Buffer I/O error on dev nbd0, logical block 3, async page read [ 194.143170][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.154821][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read [ 194.169140][ T5846] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.206390][ T5846] Buffer I/O error on dev nbd0, logical block 1, async page read [ 194.218705][ T5846] ldm_validate_partition_table(): Disk read failed. [ 194.229861][ T5846] Dev nbd0: unable to read RDB block 0 [ 194.238236][ T5846] nbd0: unable to read partition table [ 194.274988][ T5846] ldm_validate_partition_table(): Disk read failed. [ 194.298505][ T5846] Dev nbd0: unable to read RDB block 0 [ 194.304711][ T5846] nbd0: unable to read partition table [ 194.357316][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.370778][ T9671] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 194.754962][T10216] nbd: socks must be embedded in a SOCK_ITEM attr [ 194.940104][T10225] bond4: (slave gre0): Device is not bonding slave [ 194.947653][T10225] bond4: option active_slave: invalid value (gre0) [ 194.958881][T10225] bond4 (unregistering): Released all slaves [ 195.517457][T10249] validate_nla: 6 callbacks suppressed [ 195.517477][T10249] netlink: 'syz.2.1224': attribute type 9 has an invalid length. [ 195.911628][T10255] pimreg: entered allmulticast mode [ 196.043451][T10262] __nla_validate_parse: 7 callbacks suppressed [ 196.043472][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1230'. [ 196.214618][T10262] bond1: option xmit_hash_policy: invalid value (64) [ 196.229271][T10262] bond1 (unregistering): Released all slaves [ 196.309811][T10271] veth0: entered promiscuous mode [ 196.325088][T10271] veth0: left promiscuous mode [ 196.388635][T10271] tipc: Resetting bearer [ 196.400123][T10271] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 196.551911][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 196.657270][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 196.679308][T10292] netlink: 'syz.1.1238': attribute type 5 has an invalid length. [ 196.687692][T10292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1238'. [ 196.810827][T10300] netlink: 'syz.6.1241': attribute type 13 has an invalid length. [ 196.839701][T10300] veth0_macvtap: left promiscuous mode [ 196.892893][T10300] macvtap0: entered allmulticast mode [ 196.914544][T10300] macvtap0: refused to change device tx_queue_len [ 197.292708][T10328] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1247'. [ 197.399302][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1250'. [ 197.488417][T10342] netlink: 'syz.3.1252': attribute type 21 has an invalid length. [ 197.495886][T10348] netlink: 'syz.6.1251': attribute type 1 has an invalid length. [ 197.498700][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1252'. [ 197.559391][T10342] netlink: 'syz.3.1252': attribute type 21 has an invalid length. [ 197.589328][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1252'. [ 197.590324][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1252'. [ 197.647596][T10348] bond1: entered promiscuous mode [ 197.649880][T10357] netlink: 'syz.5.1255': attribute type 3 has an invalid length. [ 197.653335][T10348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.683510][T10357] netlink: 'syz.5.1255': attribute type 1 has an invalid length. [ 197.705051][T10357] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1255'. [ 197.724101][ T9684] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.734348][ T9684] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.843139][ T9684] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.931068][ T9684] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.089816][T10371] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 198.098720][T10371] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 198.134688][T10380] tipc: Can't bind to reserved service type 1 [ 198.181014][T10380] bond2 (unregistering): Released all slaves [ 198.503584][T10396] lo speed is unknown, defaulting to 1000 [ 199.002979][T10433] openvswitch: netlink: Flow actions attr not present in new flow. [ 201.446017][T10401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.550175][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 201.550616][ T5841] Bluetooth: hci4: command 0x0401 tx timeout [ 201.556377][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 201.556430][ T5844] Bluetooth: hci1: command 0x0405 tx timeout [ 201.661451][T10457] __nla_validate_parse: 5 callbacks suppressed [ 201.661470][T10457] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1280'. [ 201.748607][T10457] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1280'. [ 201.789666][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1283'. [ 201.839723][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 202.043307][T10484] netlink: 'syz.1.1288': attribute type 3 has an invalid length. [ 202.057985][T10484] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 202.065379][T10484] tipc: Enabled bearer , priority 10 [ 202.205775][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 202.222585][T10490] netlink: zone id is out of range [ 202.235720][T10490] netlink: zone id is out of range [ 202.248012][T10490] netlink: zone id is out of range [ 202.258146][T10490] netlink: zone id is out of range [ 202.296577][T10490] netlink: zone id is out of range [ 202.301853][T10490] netlink: zone id is out of range [ 202.341487][T10490] netlink: zone id is out of range [ 202.529299][T10506] netlink: 'syz.1.1295': attribute type 3 has an invalid length. [ 202.549797][T10506] netlink: 'syz.1.1295': attribute type 1 has an invalid length. [ 202.550685][T10503] syzkaller0: entered promiscuous mode [ 202.561954][T10506] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1295'. [ 202.563371][T10503] syzkaller0: entered allmulticast mode [ 202.589468][T10511] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1297'. [ 202.648235][T10514] netlink: 'syz.1.1295': attribute type 4 has an invalid length. [ 202.687204][T10515] ip6gre1: entered promiscuous mode [ 202.694425][T10503] tipc: Started in network mode [ 202.703773][T10503] tipc: Node identity 16ba3234629b, cluster identity 4711 [ 202.716152][T10503] tipc: Enabled bearer , priority 0 [ 202.726432][T10505] netlink: 'syz.6.1294': attribute type 10 has an invalid length. [ 202.734647][T10503] netlink: 'syz.6.1294': attribute type 10 has an invalid length. [ 202.742605][T10521] xt_hashlimit: size too large, truncated to 1048576 [ 202.753168][T10505] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.761783][T10505] bridge_slave_1: left allmulticast mode [ 202.768143][T10505] bridge_slave_1: left promiscuous mode [ 202.774170][T10505] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.794629][T10505] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 202.904194][T10532] netlink: 'syz.3.1298': attribute type 1 has an invalid length. [ 202.986422][T10502] tipc: Resetting bearer [ 203.021486][T10502] tipc: Disabling bearer [ 203.148515][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'. [ 203.207959][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'. [ 203.218773][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'. [ 203.229678][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'. [ 203.320678][T10542] xfrm1: entered promiscuous mode [ 203.327195][T10542] xfrm1: entered allmulticast mode [ 203.532128][T10519] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.799174][T10564] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.025603][ C0] net_ratelimit: 4 callbacks suppressed [ 204.025625][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 204.127334][T10581] syzkaller0: entered promiscuous mode [ 204.132876][T10581] syzkaller0: entered allmulticast mode [ 204.174909][T10588] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 204.224112][T10585] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 204.249217][T10581] tipc: Enabled bearer , priority 0 [ 204.287291][T10579] tipc: Resetting bearer [ 204.356923][T10579] tipc: Disabling bearer [ 204.457859][T10599] netlink: 'syz.5.1321': attribute type 7 has an invalid length. [ 204.793435][T10610] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20004 [ 205.065748][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 205.159898][T10622] syzkaller1: entered promiscuous mode [ 205.196678][T10622] syzkaller1: entered allmulticast mode [ 205.260704][T10622] openvswitch: netlink: Unknown key attributes 2 [ 205.406724][T10631] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 205.657344][T10635] 0: renamed from hsr_slave_1 (while UP) [ 205.680426][T10635] 0: entered allmulticast mode [ 205.700205][T10635] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 205.897086][T10646] x_tables: duplicate underflow at hook 1 [ 205.927493][T10649] netlink: 'syz.3.1336': attribute type 12 has an invalid length. [ 206.105696][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 206.460745][T10680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.630253][T10684] syzkaller0: entered promiscuous mode [ 206.641501][T10684] syzkaller0: entered allmulticast mode [ 207.146150][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 207.204302][T10703] __nla_validate_parse: 75 callbacks suppressed [ 207.204324][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'. [ 207.221652][T10706] validate_nla: 1 callbacks suppressed [ 207.221670][T10706] netlink: 'syz.5.1354': attribute type 1 has an invalid length. [ 207.272274][T10706] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 207.347186][T10716] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1356'. [ 207.441102][T10725] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 208.185805][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.225717][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.314095][T10668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.521938][T10751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1362'. [ 209.533787][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1363'. [ 209.621788][T10751] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 209.880125][T10770] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1373'. [ 209.939859][T10770] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1373'. [ 209.948252][T10778] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 210.129316][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1376'. [ 210.181335][ T13] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.198429][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1376'. [ 210.209654][ T13] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.224038][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1377'. [ 210.242370][ T13] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.261399][ T13] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.269985][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 210.460980][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1380'. [ 210.923616][T10831] xt_HMARK: proto mask must be zero with L3 mode [ 210.944972][T10837] xt_HMARK: proto mask must be zero with L3 mode [ 210.963116][T10840] netlink: 'syz.6.1391': attribute type 58 has an invalid length. [ 211.128263][T10851] netlink: 'syz.2.1394': attribute type 11 has an invalid length. [ 211.224802][T10851] geneve3: entered promiscuous mode [ 211.242715][T10851] geneve3: entered allmulticast mode [ 211.252532][ T1094] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 211.262824][ T1094] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 211.281331][T10851] netlink: 'syz.2.1394': attribute type 1 has an invalid length. [ 211.302793][ T1094] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 211.313776][ T1094] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 211.315753][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 211.738285][T10873] bond5: entered promiscuous mode [ 211.750696][T10873] 8021q: adding VLAN 0 to HW filter on device bond5 [ 211.877160][T10875] tipc: Started in network mode [ 211.882149][T10875] tipc: Node identity , cluster identity 4711 [ 211.897558][T10875] tipc: Failed to obtain node identity [ 211.923845][T10875] tipc: Enabling of bearer rejected, failed to enable media [ 212.070083][T10882] syzkaller0: entered promiscuous mode [ 212.076855][T10882] syzkaller0: entered allmulticast mode [ 212.355745][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 212.748893][ T5838] Bluetooth: hci6: command 0x0405 tx timeout [ 213.395676][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 213.850347][T10906] __nla_validate_parse: 13 callbacks suppressed [ 213.850369][T10906] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1409'. [ 213.876506][T10912] tipc: Invalid UDP bearer configuration [ 213.876571][T10912] tipc: Enabling of bearer rejected, failed to enable media [ 214.094412][T10931] bond2: (slave bond_slave_1): Device is not our slave [ 214.101900][T10931] bond2: option active_slave: invalid value (bond_slave_1) [ 214.120099][T10931] bond2 (unregistering): Released all slaves [ 214.205096][T10933] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 214.217672][T10933] bond6 (unregistering): Released all slaves [ 214.263645][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1421'. [ 214.337604][T10951] netlink: 'syz.3.1424': attribute type 1 has an invalid length. [ 214.425733][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 214.435187][T10936] syzkaller0: entered promiscuous mode [ 214.441078][T10936] syzkaller0: entered allmulticast mode [ 214.527414][T10957] IPv6: addrconf: prefix option has invalid lifetime [ 214.712880][T10970] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 214.817369][T10975] openvswitch: netlink: Key 7 has unexpected len 4 expected 12 [ 215.470000][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 216.271640][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1428'. [ 216.499950][T10997] netlink: 'syz.6.1434': attribute type 1 has an invalid length. [ 216.515727][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 216.524443][T10997] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1434'. [ 216.937010][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1443'. [ 217.059916][T11019] IPVS: Scheduler module ip_vs_sip not found [ 217.087978][T11026] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1444'. [ 217.337712][T11036] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.498555][T11050] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1451'. [ 217.543088][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1451'. [ 217.555741][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 217.575434][T11057] block nbd1: Unsupported socket: should be TCP or UNIX. [ 217.606333][T11048] bridge_slave_1: left allmulticast mode [ 217.612043][T11048] bridge_slave_1: left promiscuous mode [ 217.621279][T11048] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.863118][T11071] bridge_slave_0: invalid flags given to default FDB implementation [ 217.959425][T11078] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1459'. [ 217.994108][T11078] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1459'. [ 218.014209][T11082] netlink: 'syz.3.1461': attribute type 1 has an invalid length. [ 218.025062][T11082] netlink: 'syz.3.1461': attribute type 2 has an invalid length. [ 218.038756][T11082] netlink: 'syz.3.1461': attribute type 1 has an invalid length. [ 218.083270][T11087] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002 [ 218.522981][T11110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.530624][T11110] IPv6: NLM_F_CREATE should be set when creating new route [ 218.585751][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 218.605019][T11119] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 218.685878][T11119] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 219.041102][T11097] tipc: Resetting bearer [ 219.095692][T11138] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 219.141354][T11138] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 219.175762][T11144] Cannot find add_set index 2 as target [ 219.540694][T11158] netlink: 'syz.1.1478': attribute type 3 has an invalid length. [ 219.600872][T11159] netlink: 'syz.6.1481': attribute type 15 has an invalid length. [ 219.625748][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 219.640098][T11159] __nla_validate_parse: 7 callbacks suppressed [ 219.640115][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1481'. [ 220.266876][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.454626][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1490'. [ 220.534684][T11194] gtp2: entered promiscuous mode [ 220.556455][T11194] gtp2: entered allmulticast mode [ 220.603092][T11196] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 220.655319][T11195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.665743][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.869646][T11213] tipc: Enabled bearer , priority 0 [ 220.967768][T11221] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1494'. [ 221.002787][T11213] syzkaller0: entered promiscuous mode [ 221.018328][T11221] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1494'. [ 221.044314][T11213] syzkaller0: entered allmulticast mode [ 221.095864][T11213] tipc: Resetting bearer [ 221.143076][T11212] tipc: Resetting bearer [ 221.228022][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.236995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.306625][ T1072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.713207][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 222.348448][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.522546][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.532010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.185020][T11212] tipc: Disabling bearer [ 223.194208][T11232] veth0: entered promiscuous mode [ 223.329200][T11242] veth3: entered allmulticast mode [ 223.345149][ T1072] tipc: Node number set to 1948332596 [ 223.417396][T11232] veth0: left promiscuous mode [ 223.629979][T11287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1503'. [ 224.023542][T11300] netlink: 'syz.2.1508': attribute type 1 has an invalid length. [ 224.055688][T11300] netlink: 'syz.2.1508': attribute type 1 has an invalid length. [ 224.063177][T11309] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1510'. [ 224.292172][T11329] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 224.825727][ C0] net_ratelimit: 5 callbacks suppressed [ 224.825746][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 224.925359][T11366] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1521'. [ 225.043312][T11378] netlink: 'syz.3.1524': attribute type 1 has an invalid length. [ 225.152504][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1524'. [ 225.220870][T11387] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1524'. [ 225.310258][T11378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.319072][T11385] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 225.344232][T11385] bond4: entered allmulticast mode [ 225.684168][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1528'. [ 225.830237][T11416] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1531'. [ 225.847270][T11416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1531'. [ 225.860317][T11416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1531'. [ 225.875678][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 225.939475][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1532'. [ 225.963607][T11418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.122229][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1534'. [ 226.506959][ T1072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.791428][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1538'. [ 226.915765][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 227.022390][T11442] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 227.034363][T11442] bond5 (unregistering): Released all slaves [ 227.546110][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.884157][T11363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.945793][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 228.268116][ T9684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.277488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.393846][ T5832] lo speed is unknown, defaulting to 1000 [ 228.588506][ T1072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.097617][T11504] vxcan2: entered allmulticast mode [ 229.233194][T11521] netlink: 'syz.3.1561': attribute type 1 has an invalid length. [ 229.370767][T11528] bond5: entered promiscuous mode [ 229.395957][T11528] bond5: entered allmulticast mode [ 229.402992][T11528] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.522111][T11521] bridge2: entered promiscuous mode [ 229.549997][T11521] bridge2: entered allmulticast mode [ 229.563920][T11521] bond5: (slave bridge2): Enslaving as a backup interface with an up link [ 229.661988][T11528] bridge3: entered promiscuous mode [ 229.685460][T11528] bridge3: entered allmulticast mode [ 229.694398][T11547] sctp: [Deprecated]: syz.6.1567 (pid 11547) Use of int in maxseg socket option. [ 229.694398][T11547] Use struct sctp_assoc_value instead [ 229.694747][T11528] bond5: (slave bridge3): Enslaving as a backup interface with a down link [ 230.009506][T11573] __nla_validate_parse: 13 callbacks suppressed [ 230.009528][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1568'. [ 230.035800][ C0] net_ratelimit: 4 callbacks suppressed [ 230.035820][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 230.118450][T11573] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 230.136496][T11573] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 230.145218][T11573] gretap2: entered promiscuous mode [ 230.151481][T11573] gretap2: entered allmulticast mode [ 230.564529][T11608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 230.583512][T11608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1580'. [ 230.596508][T11608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 230.605438][T11608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1580'. [ 230.676268][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.065751][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 231.364594][T11647] netlink: 'syz.1.1591': attribute type 1 has an invalid length. [ 231.587584][T11659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1594'. [ 231.658953][T11658] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 231.670140][T11658] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 231.706334][ T1072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.713352][T11665] netlink: 'syz.6.1593': attribute type 1 has an invalid length. [ 231.778979][T11670] IPVS: set_ctl: invalid protocol: 44 172.30.1.2:20002 [ 231.791393][T11670] x_tables: duplicate underflow at hook 3 [ 231.801158][T11670] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20001 [ 232.050165][T11681] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 232.066374][T11686] netlink: 'syz.5.1602': attribute type 1 has an invalid length. [ 232.081149][T11686] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1602'. [ 232.094281][T11688] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1603'. [ 232.106279][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 232.113842][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.545753][T11710] veth1_macvtap: renamed from veth0_vlan [ 232.643513][T11716] bond6: Removing last arp target with arp_interval on [ 232.701566][T11723] netlink: 'syz.5.1609': attribute type 14 has an invalid length. [ 232.750370][ T1072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.905948][T11733] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1614'. [ 232.949053][T11734] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1614'. [ 232.958638][T11725] "syz.1.1612" (11725) uses obsolete ecb(arc4) skcipher [ 233.013997][T11736] syzkaller0: entered promiscuous mode [ 233.020440][T11736] syzkaller0: entered allmulticast mode [ 233.031839][T11736] 0: reclassify loop, rule prio 0, protocol 800 [ 233.145803][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 233.173586][T11745] netlink: 'syz.1.1618': attribute type 1 has an invalid length. [ 233.408313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.649544][T11768] x_tables: duplicate entry at hook 3 [ 233.764893][T11765] netlink: 'syz.5.1623': attribute type 3 has an invalid length. [ 233.791403][T11773] netlink: 'syz.3.1622': attribute type 1 has an invalid length. [ 234.132431][T11800] syzkaller1: entered promiscuous mode [ 234.138735][T11800] syzkaller1: entered allmulticast mode [ 234.195547][ T5490] veth1_macvtap: left promiscuous mode [ 234.232740][ T5490] veth1_macvtap: entered promiscuous mode [ 234.418541][T11762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.023544][T11847] __nla_validate_parse: 72 callbacks suppressed [ 235.023567][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1644'. [ 235.056775][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1644'. [ 235.071171][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'. [ 235.114610][T11850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1643'. [ 235.196315][T11850] netlink: 'syz.2.1643': attribute type 14 has an invalid length. [ 235.204215][T11850] netlink: 'syz.2.1643': attribute type 13 has an invalid length. [ 235.225953][ C0] net_ratelimit: 5 callbacks suppressed [ 235.225973][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 235.305045][T11867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.408996][T11867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.491751][T11865] ip6gre1: entered allmulticast mode [ 235.866315][ T1072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.278482][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.911205][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.305733][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 237.368703][T11901] netlink: 16174 bytes leftover after parsing attributes in process `syz.6.1653'. [ 237.381713][T11901] netlink: 'syz.6.1653': attribute type 2 has an invalid length. [ 237.417868][T11901] 9: entered promiscuous mode [ 237.761508][T11929] can: request_module (can-proto-0) failed. [ 238.155820][T11955] bond2: option resend_igmp: invalid value (32767) [ 238.162529][T11955] bond2: option resend_igmp: allowed values 0 - 255 [ 238.178863][T11955] bond2 (unregistering): Released all slaves [ 238.345878][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 238.369384][T11958] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1667'. [ 238.509273][T11980] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1672'. [ 238.798299][T11990] team0: Port device dummy0 removed [ 238.837312][T11990] bond0: (slave bond_slave_0): Releasing backup interface [ 238.863509][T11990] bond0: (slave bond_slave_1): Releasing backup interface [ 238.907347][T11990] team0: Port device team_slave_0 removed [ 238.908879][T12002] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1680'. [ 238.936860][T11990] team0: Port device team_slave_1 removed [ 238.945199][T11990] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.984206][T11995] team0: Mode changed to "random" [ 239.202691][T12014] tipc: Enabling of bearer rejected, already enabled [ 239.228994][T12014] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1682'. [ 239.371777][T12027] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1685'. [ 239.385987][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 239.514228][T12037] netlink: 'syz.2.1686': attribute type 4 has an invalid length. [ 239.908157][T12053] tipc: Enabled bearer , priority 10 [ 239.949856][T12053] macvtap0: entered promiscuous mode [ 239.986438][T12057] delete_channel: no stack [ 240.014294][T12053] veth0_macvtap: left promiscuous mode [ 240.041386][T12062] __nla_validate_parse: 2 callbacks suppressed [ 240.041406][T12062] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1693'. [ 240.097328][T12064] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1693'. [ 240.186943][T12053] macvtap0 (unregistering): left promiscuous mode [ 240.323090][T12078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1697'. [ 240.401221][T12087] wlan0 speed is unknown, defaulting to 1000 [ 240.423962][T12087] wlan0 speed is unknown, defaulting to 1000 [ 240.436002][ C0] net_ratelimit: 1 callbacks suppressed [ 240.436022][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 240.444784][T12087] wlan0 speed is unknown, defaulting to 1000 [ 240.620050][T12087] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 240.632008][T12092] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 240.671784][T12096] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 240.758605][T12087] wlan0 speed is unknown, defaulting to 1000 [ 240.811502][T12087] wlan0 speed is unknown, defaulting to 1000 [ 240.869945][T12087] wlan0 speed is unknown, defaulting to 1000 [ 240.899906][T12107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1706'. [ 240.916569][T12087] wlan0 speed is unknown, defaulting to 1000 [ 240.933082][T12087] wlan0 speed is unknown, defaulting to 1000 [ 240.974325][T12087] wlan0 speed is unknown, defaulting to 1000 [ 241.002041][T12087] wlan0 speed is unknown, defaulting to 1000 [ 241.070631][T12117] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 241.475759][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.631625][T12135] SET target dimension over the limit! [ 241.724226][T12133] lo speed is unknown, defaulting to 1000 [ 241.733810][T12133] wlan0 speed is unknown, defaulting to 1000 [ 241.822795][T12118] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 241.835462][T12137] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1713'. [ 241.856617][T12118] CPU: 0 UID: 0 PID: 12118 Comm: syz.2.1709 Not tainted syzkaller #0 PREEMPT(full) [ 241.856651][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.856663][T12118] Call Trace: [ 241.856671][T12118] [ 241.856680][T12118] dump_stack_lvl+0xe8/0x150 [ 241.856715][T12118] sysfs_warn_dup+0x8e/0xa0 [ 241.856744][T12118] sysfs_do_create_link_sd+0xc0/0x110 [ 241.856776][T12118] device_add_class_symlinks+0x1cf/0x240 [ 241.856807][T12118] device_add+0x475/0xb70 [ 241.856836][T12118] wiphy_register+0x1d73/0x2d50 [ 241.856886][T12118] ? __pfx_wiphy_register+0x10/0x10 [ 241.856915][T12118] ? __pfx_netdev_run_todo+0x10/0x10 [ 241.856939][T12118] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 241.856973][T12118] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 241.857003][T12118] ieee80211_register_hw+0x3562/0x4200 [ 241.857044][T12118] ? ieee80211_register_hw+0x14c1/0x4200 [ 241.857082][T12118] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 241.857135][T12118] ? __hrtimer_setup+0x181/0x200 [ 241.857162][T12118] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 241.857193][T12118] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 241.857255][T12118] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 241.857278][T12118] ? kstrndup+0xbf/0x160 [ 241.857316][T12118] hwsim_new_radio_nl+0xf35/0x1bd0 [ 241.857371][T12118] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 241.857408][T12118] ? rcu_is_watching+0x15/0xb0 [ 241.857436][T12118] ? trace_kmalloc+0x2a/0x110 [ 241.857467][T12118] ? __nla_parse+0x40/0x60 [ 241.857493][T12118] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 241.857528][T12118] genl_family_rcv_msg_doit+0x22a/0x330 [ 241.857559][T12118] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 241.857600][T12118] ? bpf_lsm_capable+0x9/0x20 [ 241.857625][T12118] ? security_capable+0x7e/0x2c0 [ 241.857661][T12118] genl_rcv_msg+0x61c/0x7a0 [ 241.857693][T12118] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.857716][T12118] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 241.857741][T12118] ? __lock_acquire+0x6b5/0x2cf0 [ 241.857782][T12118] netlink_rcv_skb+0x232/0x4b0 [ 241.857841][T12118] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.857866][T12118] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.857916][T12118] ? down_read+0x272/0x2e0 [ 241.857939][T12118] ? genl_rcv+0xd/0x40 [ 241.857964][T12118] genl_rcv+0x28/0x40 [ 241.857985][T12118] netlink_unicast+0x80f/0x9b0 [ 241.858023][T12118] ? __pfx_netlink_unicast+0x10/0x10 [ 241.858047][T12118] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 241.858072][T12118] ? netlink_sendmsg+0x650/0xb40 [ 241.858106][T12118] ? skb_put+0x11b/0x210 [ 241.858133][T12118] netlink_sendmsg+0x813/0xb40 [ 241.858174][T12118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.858207][T12118] ? aa_sock_msg_perm+0xf1/0x1b0 [ 241.858237][T12118] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.858263][T12118] ____sys_sendmsg+0x972/0x9f0 [ 241.858297][T12118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.858331][T12118] ? import_iovec+0x73/0xa0 [ 241.858356][T12118] ___sys_sendmsg+0x2a5/0x360 [ 241.858386][T12118] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.858456][T12118] ? __fget_files+0x2a/0x420 [ 241.858482][T12118] ? __fget_files+0x3a0/0x420 [ 241.858521][T12118] __x64_sys_sendmsg+0x1bd/0x2a0 [ 241.858547][T12118] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.858567][T12118] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 241.858606][T12118] ? do_user_addr_fault+0xc6f/0x1340 [ 241.858646][T12118] do_syscall_64+0x14d/0xf80 [ 241.858666][T12118] ? trace_irq_disable+0x3b/0x150 [ 241.858691][T12118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.858712][T12118] ? clear_bhb_loop+0x40/0x90 [ 241.858737][T12118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.858756][T12118] RIP: 0033:0x7fc4d599c799 [ 241.858776][T12118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.858792][T12118] RSP: 002b:00007fc4d67ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.858813][T12118] RAX: ffffffffffffffda RBX: 00007fc4d5c16090 RCX: 00007fc4d599c799 [ 241.858827][T12118] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 241.858839][T12118] RBP: 00007fc4d5a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 241.858850][T12118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.858861][T12118] R13: 00007fc4d5c16128 R14: 00007fc4d5c16090 R15: 00007ffc3852e378 [ 241.858897][T12118] [ 242.338328][T12137] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1713'. [ 242.506621][T12140] xt_bpf: check failed: parse error [ 242.515829][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.840825][T12148] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1717'. [ 243.090646][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1722'. [ 243.115408][T12156] Bluetooth: MGMT ver 1.23 [ 243.153264][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'. [ 243.202988][T12164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1721'. [ 243.237210][T12165] xt_l2tp: v2 doesn't support IP mode [ 243.294444][T12165] : entered promiscuous mode [ 243.555649][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 244.027591][T12204] xt_cluster: node mask cannot exceed total number of nodes [ 244.100248][T12206] : renamed from hsr0 (while UP) [ 244.585663][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 244.757930][T12233] netlink: 'syz.5.1743': attribute type 1 has an invalid length. [ 244.776766][T12233] netlink: 'syz.5.1743': attribute type 1 has an invalid length. [ 245.087759][T12257] __nla_validate_parse: 11 callbacks suppressed [ 245.087783][T12257] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1752'. [ 245.147994][T12263] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1753'. [ 245.158526][T12262] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1753'. [ 245.264664][T12265] veth0: entered promiscuous mode [ 245.303397][T12266] veth0: left promiscuous mode [ 245.625804][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 246.665740][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 247.705793][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 248.745960][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 249.785778][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 250.825848][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 251.865838][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 252.905733][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 253.945792][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 254.985797][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 255.789860][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.025712][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 257.066094][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 258.105833][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 259.145741][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 260.185709][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 261.225718][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 262.265705][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 263.305701][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 264.345727][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.385826][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.425733][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 267.250540][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1760'. [ 267.465658][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 267.988310][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1773'. [ 268.014238][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1773'. [ 268.053953][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1773'. [ 268.229808][T12377] lo speed is unknown, defaulting to 1000 [ 268.255397][T12377] wlan0 speed is unknown, defaulting to 1000 [ 268.515717][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 268.623487][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1783'. [ 268.632710][T12401] netlink: 'syz.6.1783': attribute type 30 has an invalid length. [ 268.673713][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1783'. [ 268.700246][T12402] netlink: 'syz.1.1779': attribute type 1 has an invalid length. [ 268.715648][T12400] netlink: 'syz.6.1783': attribute type 30 has an invalid length. [ 268.810784][ T9684] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.870044][T12408] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 268.882263][T12408] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 268.891571][T12408] gretap3: entered promiscuous mode [ 268.897270][T12408] gretap3: entered allmulticast mode [ 268.904463][ T9684] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.938533][ T9684] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.949191][ T9684] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.230162][T12429] syz.6.1792 (12429) used obsolete PPPIOCDETACH ioctl [ 269.321889][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1795'. [ 269.494612][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1798'. [ 269.511358][T12444] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1798'. [ 269.545603][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 269.549417][T12451] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1800'. [ 269.673142][T12460] openvswitch: netlink: ufid size 732 bytes exceeds the range (1, 16) [ 269.685121][T12460] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 269.740375][T12465] netlink: 'syz.1.1802': attribute type 8 has an invalid length. [ 270.253044][T12498] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 270.262434][T12498] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 270.272251][T12498] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 270.292855][T12503] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 270.488397][T12515] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 270.505251][T12520] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 270.585606][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 270.679847][T12531] netlink: 'syz.5.1820': attribute type 12 has an invalid length. [ 270.960486][T12545] geneve3: entered promiscuous mode [ 270.973778][T12545] geneve3: entered allmulticast mode [ 270.992207][T12545] 0: renamed from hsr_slave_1 (while UP) [ 271.011029][T12545] 0: entered allmulticast mode [ 271.027909][T12545] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 271.306440][T12561] netlink: 'syz.2.1827': attribute type 1 has an invalid length. [ 271.380931][T12561] bond6: entered promiscuous mode [ 271.399557][T12561] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.433796][T12561] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 271.469031][T12561] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 271.481674][T12561] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 271.540080][T12565] bond6: (slave bridge1): making interface the new active one [ 271.548216][T12565] bridge1: entered promiscuous mode [ 271.556462][T12565] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 271.625678][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 271.780036][T12583] openvswitch: netlink: Message has 8 unknown bytes. [ 271.794067][T12583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.904421][T12597] xt_cgroup: xt_cgroup: no path or classid specified [ 271.999308][ T1072] IPVS: starting estimator thread 0... [ 272.097363][T12602] IPVS: using max 24 ests per chain, 57600 per kthread [ 272.119635][T12607] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 272.228203][T12614] netlink: 'syz.5.1843': attribute type 4 has an invalid length. [ 272.239219][T12614] netlink: 'syz.5.1843': attribute type 4 has an invalid length. [ 272.257123][T12617] netlink: 'syz.5.1843': attribute type 4 has an invalid length. [ 272.282456][T12617] netlink: 'syz.5.1843': attribute type 4 has an invalid length. [ 272.411721][ T1072] lo speed is unknown, defaulting to 1000 [ 272.450242][ T1072] lo speed is unknown, defaulting to 1000 [ 272.489956][T12632] __nla_validate_parse: 7 callbacks suppressed [ 272.489985][T12632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1848'. [ 272.675763][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 272.831786][T12646] bridge0: port 3(gretap0) entered disabled state [ 272.849383][T12646] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.862442][T12646] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.026660][ T9671] bond5: (slave bridge2): link status up again after 0 ms [ 273.036481][ T9671] bond5: (slave bridge2): failed to get link speed/duplex [ 273.155684][ T9671] bond5: (slave bridge2): failed to get link speed/duplex [ 273.228444][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 273.275715][ T49] bond5: (slave bridge2): failed to get link speed/duplex [ 273.406675][ T49] bond5: (slave bridge2): failed to get link speed/duplex [ 275.798422][T12653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 275.811712][T12664] netlink: 'syz.3.1855': attribute type 11 has an invalid length. [ 275.820503][T12664] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.1855'. [ 276.122819][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1863'. [ 276.194251][T12693] bridge0: port 1(ipvlan2) entered blocking state [ 276.206722][T12693] bridge0: port 1(ipvlan2) entered disabled state [ 276.213551][T12693] ipvlan2: entered allmulticast mode [ 276.223762][T12693] bridge0: entered allmulticast mode [ 276.234289][T12693] ipvlan2: left allmulticast mode [ 276.240121][T12693] bridge0: left allmulticast mode [ 276.324996][T12705] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1867'. [ 276.413983][ T49] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xfe [ 276.418898][T12706] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 276.432338][T12701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.835575][ C0] net_ratelimit: 26 callbacks suppressed [ 276.835599][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 277.875555][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 277.883979][ T1157] bond5: (slave bridge2): failed to get link speed/duplex [ 277.993332][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1874'. [ 278.017124][ T9675] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.028263][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1874'. [ 278.040135][ T9675] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.057367][ T1148] bond5: (slave bridge2): failed to get link speed/duplex [ 278.074817][ T9675] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.095418][ T9675] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.176314][ T49] bond5: (slave bridge2): failed to get link speed/duplex [ 278.193296][T12740] netlink: 'syz.5.1877': attribute type 11 has an invalid length. [ 278.287317][ T9675] bond5: (slave bridge2): failed to get link speed/duplex [ 278.409410][ T9675] bond5: (slave bridge2): failed to get link speed/duplex [ 278.527336][ T9675] bond5: (slave bridge2): failed to get link speed/duplex [ 278.528326][T12763] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1882'. [ 278.549482][T12763] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 278.560897][T12763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1882'. [ 278.636259][ T1157] bond5: (slave bridge2): failed to get link speed/duplex [ 278.682556][T12770] Bluetooth: MGMT ver 1.23 [ 278.755701][ T1148] bond5: (slave bridge2): failed to get link speed/duplex [ 279.000030][T12787] tipc: Enabled bearer , priority 0 [ 279.027372][T12786] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 279.073001][T12790] ip_vti0: entered promiscuous mode [ 279.094954][T12790] ip_vti0: entered allmulticast mode [ 279.983960][T12838] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1908'. [ 280.003059][T12838] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1908'. [ 280.143000][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1911'. [ 280.345046][T12862] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1917'. [ 280.369645][T12862] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1917'. [ 280.617491][T12873] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.1920'. [ 280.878726][T12884] validate_nla: 3 callbacks suppressed [ 280.878746][T12884] netlink: 'syz.5.1925': attribute type 83 has an invalid length. [ 280.908861][T12885] x_tables: unsorted underflow at hook 4 [ 281.186297][T12904] nbd: must specify a device to reconfigure [ 281.192676][T12905] nbd: must specify a device to reconfigure [ 281.201165][T12904] netlink: 'syz.2.1931': attribute type 3 has an invalid length. [ 281.209858][T12905] netlink: 'syz.2.1931': attribute type 3 has an invalid length. [ 281.332002][T12912] tipc: Resetting bearer [ 281.525670][T12921] lo speed is unknown, defaulting to 1000 [ 281.540412][T12921] wlan0 speed is unknown, defaulting to 1000 [ 281.925647][ T1157] net_ratelimit: 32 callbacks suppressed [ 281.925671][ T1157] bond5: (slave bridge2): failed to get link speed/duplex [ 282.025801][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 282.066292][ T9684] bond5: (slave bridge2): failed to get link speed/duplex [ 282.197481][ T9684] bond5: (slave bridge2): failed to get link speed/duplex [ 282.306436][ T1157] bond5: (slave bridge2): failed to get link speed/duplex [ 282.361069][T12948] openvswitch: netlink: Flow key attr not present in new flow. [ 282.416281][ T1157] bond5: (slave bridge2): failed to get link speed/duplex [ 282.526657][ T9684] bond5: (slave bridge2): failed to get link speed/duplex [ 282.636356][ T9671] bond5: (slave bridge2): failed to get link speed/duplex [ 282.693012][T12967] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 282.740438][T12967] CPU: 1 UID: 0 PID: 12967 Comm: syz.2.1949 Not tainted syzkaller #0 PREEMPT(full) [ 282.740471][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 282.740484][T12967] Call Trace: [ 282.740493][T12967] [ 282.740503][T12967] dump_stack_lvl+0xe8/0x150 [ 282.740540][T12967] sysfs_warn_dup+0x8e/0xa0 [ 282.740571][T12967] sysfs_do_create_link_sd+0xc0/0x110 [ 282.740605][T12967] device_add_class_symlinks+0x1cf/0x240 [ 282.740646][T12967] device_add+0x475/0xb70 [ 282.740680][T12967] wiphy_register+0x1d73/0x2d50 [ 282.740733][T12967] ? __pfx_wiphy_register+0x10/0x10 [ 282.740765][T12967] ? __pfx_netdev_run_todo+0x10/0x10 [ 282.740792][T12967] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 282.740831][T12967] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 282.740863][T12967] ieee80211_register_hw+0x3562/0x4200 [ 282.740906][T12967] ? ieee80211_register_hw+0x14c1/0x4200 [ 282.740946][T12967] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 282.740994][T12967] ? __hrtimer_setup+0x181/0x200 [ 282.741024][T12967] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 282.741057][T12967] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 282.741118][T12967] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 282.741142][T12967] ? kstrndup+0xbf/0x160 [ 282.741182][T12967] hwsim_new_radio_nl+0xf35/0x1bd0 [ 282.741234][T12967] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 282.741271][T12967] ? rcu_is_watching+0x15/0xb0 [ 282.741299][T12967] ? trace_kmalloc+0x2a/0x110 [ 282.741328][T12967] ? __nla_parse+0x40/0x60 [ 282.741353][T12967] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 282.741386][T12967] genl_family_rcv_msg_doit+0x22a/0x330 [ 282.741419][T12967] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 282.741467][T12967] ? bpf_lsm_capable+0x9/0x20 [ 282.741497][T12967] ? security_capable+0x7e/0x2c0 [ 282.741536][T12967] genl_rcv_msg+0x61c/0x7a0 [ 282.741571][T12967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.741595][T12967] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 282.741623][T12967] ? __lock_acquire+0x6b5/0x2cf0 [ 282.741676][T12967] netlink_rcv_skb+0x232/0x4b0 [ 282.741709][T12967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.741738][T12967] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.741794][T12967] ? down_read+0x272/0x2e0 [ 282.741819][T12967] ? genl_rcv+0xd/0x40 [ 282.741846][T12967] genl_rcv+0x28/0x40 [ 282.741869][T12967] netlink_unicast+0x80f/0x9b0 [ 282.741908][T12967] ? __pfx_netlink_unicast+0x10/0x10 [ 282.741936][T12967] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 282.741964][T12967] ? netlink_sendmsg+0x650/0xb40 [ 282.741994][T12967] ? skb_put+0x11b/0x210 [ 282.742021][T12967] netlink_sendmsg+0x813/0xb40 [ 282.742066][T12967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.742104][T12967] ? aa_sock_msg_perm+0xf1/0x1b0 [ 282.742138][T12967] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.742167][T12967] ____sys_sendmsg+0x972/0x9f0 [ 282.742205][T12967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.742242][T12967] ? import_iovec+0x73/0xa0 [ 282.742272][T12967] ___sys_sendmsg+0x2a5/0x360 [ 282.742305][T12967] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.742340][T12967] ? futex_wake+0x4ac/0x580 [ 282.742405][T12967] ? __fget_files+0x2a/0x420 [ 282.742436][T12967] ? __fget_files+0x3a0/0x420 [ 282.742482][T12967] __x64_sys_sendmsg+0x1bd/0x2a0 [ 282.742511][T12967] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.742549][T12967] ? rcu_is_watching+0x15/0xb0 [ 282.742596][T12967] do_syscall_64+0x14d/0xf80 [ 282.742619][T12967] ? trace_irq_disable+0x3b/0x150 [ 282.742657][T12967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.742680][T12967] ? clear_bhb_loop+0x40/0x90 [ 282.742707][T12967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.742729][T12967] RIP: 0033:0x7fc4d599c799 [ 282.742750][T12967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.742768][T12967] RSP: 002b:00007fc4d67eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.742794][T12967] RAX: ffffffffffffffda RBX: 00007fc4d5c15fa0 RCX: 00007fc4d599c799 [ 282.742810][T12967] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 282.742823][T12967] RBP: 00007fc4d5a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 282.742837][T12967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.742849][T12967] R13: 00007fc4d5c16038 R14: 00007fc4d5c15fa0 R15: 00007ffc3852e378 [ 282.742888][T12967] [ 283.105792][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 283.298412][T12976] tipc: Enabling of bearer rejected, failed to enable media [ 283.412748][T12983] __nla_validate_parse: 10 callbacks suppressed [ 283.412773][T12983] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.1954'. [ 283.473386][T12983] : entered promiscuous mode [ 283.629912][T12992] netlink: 'syz.2.1957': attribute type 4 has an invalid length. [ 284.413538][T13020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.459689][T13023] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1965'. [ 285.339060][T13037] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1970'. [ 285.414342][T13042] netlink: 'syz.3.1972': attribute type 2 has an invalid length. [ 285.420725][T13045] netlink: 'syz.5.1971': attribute type 3 has an invalid length. [ 285.424954][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 285.442144][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 285.454317][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 285.465302][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 285.474153][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 285.660589][T13043] lo speed is unknown, defaulting to 1000 [ 285.715047][T13043] wlan0 speed is unknown, defaulting to 1000 [ 286.214036][T13058] syzkaller0: entered promiscuous mode [ 286.246079][T13058] syzkaller0: entered allmulticast mode [ 286.573754][T13043] chnl_net:caif_netlink_parms(): no params data found [ 286.833434][T13058] tipc: Started in network mode [ 286.845871][T13058] tipc: Node identity fa4927d2153e, cluster identity 4711 [ 286.853836][T13058] tipc: Enabled bearer , priority 0 [ 286.939446][T13092] erspan0: entered promiscuous mode [ 286.945006][T13092] erspan0: entered allmulticast mode [ 286.964553][T13057] tipc: Resetting bearer [ 286.998126][T13057] tipc: Disabling bearer [ 287.079543][ T9684] net_ratelimit: 28 callbacks suppressed [ 287.079566][ T9684] bond5: (slave bridge2): failed to get link speed/duplex [ 287.169025][T13043] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.198235][T13043] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.210961][T13043] bridge_slave_0: entered allmulticast mode [ 287.220036][T13043] bridge_slave_0: entered promiscuous mode [ 287.263015][T13043] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.279956][T13043] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.298935][T13043] bridge_slave_1: entered allmulticast mode [ 287.305554][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 287.317736][T13043] bridge_slave_1: entered promiscuous mode [ 287.346452][ T9684] bond5: (slave bridge2): failed to get link speed/duplex [ 287.489534][T13043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.505995][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'. [ 287.527420][ T49] bond5: (slave bridge2): failed to get link speed/duplex [ 287.543810][T13043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.565244][ T5145] Bluetooth: hci7: command tx timeout [ 287.617188][T13043] team0: Port device team_slave_0 added [ 287.628815][T13043] team0: Port device team_slave_1 added [ 287.672044][T13043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.680685][T13043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.711470][T13043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.733622][T13043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.772662][T13043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.800886][T13043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.846458][T13116] sctp: [Deprecated]: syz.3.1992 (pid 13116) Use of int in maxseg socket option. [ 287.846458][T13116] Use struct sctp_assoc_value instead [ 287.864980][ T9683] bond5: (slave bridge2): failed to get link speed/duplex [ 287.900713][T13116] netlink: 'syz.3.1992': attribute type 1 has an invalid length. [ 287.912880][T13120] vlan2: entered promiscuous mode [ 287.919090][T13120] geneve1: entered promiscuous mode [ 287.924732][T13120] vlan2: entered allmulticast mode [ 287.931222][T13120] geneve1: entered allmulticast mode [ 287.955239][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'. [ 288.063779][T13116] bond7: entered promiscuous mode [ 288.071194][T13116] 8021q: adding VLAN 0 to HW filter on device bond7 [ 288.096021][T13116] netlink: 'syz.3.1992': attribute type 3 has an invalid length. [ 288.156745][T13043] hsr_slave_0: entered promiscuous mode [ 288.164031][T13043] hsr_slave_1: entered promiscuous mode [ 288.171123][T13043] debugfs: 'hsr0' already exists in 'hsr' [ 288.179507][T13043] Cannot create hsr debugfs directory [ 288.345584][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 288.366245][T13139] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1997'. [ 288.477797][T13145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1998'. [ 288.501537][T13145] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1998'. [ 288.595689][ T9683] bond5: (slave bridge2): failed to get link speed/duplex [ 288.704121][T13156] bond0: entered promiscuous mode [ 288.735667][ T9683] bond5: (slave bridge2): failed to get link speed/duplex [ 288.770921][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2003'. [ 288.806022][T13159] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2003'. [ 288.815136][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2003'. [ 288.838232][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2005'. [ 288.870009][T13159] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2003'. [ 288.926196][T13159] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2003'. [ 289.010585][ T49] bond5: (slave bridge2): failed to get link speed/duplex [ 289.070877][T13177] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.124166][T13043] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 289.156863][ T9671] bond5: (slave bridge2): failed to get link speed/duplex [ 289.164713][T13043] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 289.258138][T13043] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 289.300822][T13043] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 289.341752][T13187] netlink: 'syz.5.2010': attribute type 1 has an invalid length. [ 289.383601][T13191] can: request_module (can-proto-0) failed. [ 289.396393][T13187] netlink: 2108 bytes leftover after parsing attributes in process `syz.5.2010'. [ 289.570478][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 289.626804][ T5145] Bluetooth: hci7: command tx timeout [ 289.865026][T13043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.880787][T13218] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 289.930951][T13043] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.014551][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.021831][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.085138][ T9675] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.092391][ T9675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.092886][T13232] netlink: 'syz.1.2019': attribute type 83 has an invalid length. [ 290.379761][T13238] lo speed is unknown, defaulting to 1000 [ 290.387963][T13238] wlan0 speed is unknown, defaulting to 1000 [ 290.426450][T13241] netlink: 'syz.2.2020': attribute type 49 has an invalid length. [ 290.716580][T13253] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 290.749794][T13043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.359908][T13277] wireguard0: entered promiscuous mode [ 291.383586][T13277] wireguard0: entered allmulticast mode [ 291.424154][T13277] team0: Port device wireguard0 added [ 291.537033][T13043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.709304][ T5145] Bluetooth: hci7: command tx timeout [ 292.132262][ T9671] net_ratelimit: 19 callbacks suppressed [ 292.132285][ T9671] bond5: (slave bridge2): failed to get link speed/duplex [ 292.279270][T13309] netlink: 'syz.5.2038': attribute type 3 has an invalid length. [ 292.289208][ T9675] bond5: (slave bridge2): failed to get link speed/duplex [ 292.418045][ T9675] bond5: (slave bridge2): failed to get link speed/duplex [ 292.435368][T13043] veth0_vlan: entered promiscuous mode [ 292.493208][T13043] veth1_vlan: entered promiscuous mode [ 292.505643][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.567292][ T9671] bond5: (slave bridge2): failed to get link speed/duplex [ 292.624568][T13043] veth0_macvtap: entered promiscuous mode [ 292.650755][T13043] veth1_macvtap: entered promiscuous mode [ 292.731236][T13043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.768945][T13043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.845596][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.854801][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.916987][ T9683] bond5: (slave bridge2): failed to get link speed/duplex [ 292.925165][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.966148][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.025763][ T9684] bond5: (slave bridge2): failed to get link speed/duplex [ 293.088340][T13349] netlink: 'syz.2.2049': attribute type 1 has an invalid length. [ 293.139406][ T9684] bond5: (slave bridge2): failed to get link speed/duplex [ 293.214008][T13356] netlink: 'syz.5.2050': attribute type 10 has an invalid length. [ 293.265074][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.276040][ T13] bond5: (slave bridge2): failed to get link speed/duplex [ 293.295990][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.333727][T13356] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.341725][T13356] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.410568][T13356] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.417883][T13356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.425750][T13356] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.433343][T13356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.519660][T13356] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 293.541212][T13375] __nla_validate_parse: 7 callbacks suppressed [ 293.541233][T13375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2054'. [ 293.555910][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.639600][T13375] vxcan0: entered allmulticast mode [ 293.722215][ T9671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.739844][ T9671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.786241][ T5838] Bluetooth: hci7: command tx timeout [ 293.812947][T13382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.897174][T13382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.924975][T13388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2059'. [ 295.867377][ T5838] Bluetooth: hci7: command 0x0405 tx timeout [ 296.754714][T13389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.985269][T13413] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2062'. [ 297.216342][T13424] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2062'. [ 297.242342][ T9684] net_ratelimit: 36 callbacks suppressed [ 297.242366][ T9684] bond5: (slave bridge2): failed to get link speed/duplex [ 297.343109][T13435] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2068'. [ 297.408754][ T49] bond5: (slave bridge2): failed to get link speed/duplex [ 297.526426][ T49] bond5: (slave bridge2): failed to get link speed/duplex [ 297.621936][T13447] netlink: 'syz.5.2070': attribute type 32 has an invalid length. [ 297.646890][ T49] bond5: (slave bridge2): failed to get link speed/duplex [ 297.661922][T13442] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2069'. [ 297.684987][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2070'. [ 297.705552][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 297.763476][T13455] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2072'. [ 297.788695][T13447] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 297.795715][ T49] bond5: (slave bridge2): failed to get link speed/duplex [ 297.963814][ T9684] bond5: (slave bridge2): failed to get link speed/duplex [ 298.012638][T13468] netlink: 'syz.7.2074': attribute type 9 has an invalid length. [ 298.029115][T13468] netlink: 'syz.7.2074': attribute type 11 has an invalid length. [ 298.040298][T13467] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2076'. [ 298.056765][T13468] netlink: 'syz.7.2074': attribute type 12 has an invalid length. [ 298.075205][T13468] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.2074'. [ 298.108299][ T9684] bond5: (slave bridge2): failed to get link speed/duplex [ 298.223887][T13482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.246053][ T9684] bond5: (slave bridge2): failed to get link speed/duplex [ 298.344027][T13492] xt_hashlimit: size too large, truncated to 1048576 [ 298.367974][T13489] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 298.415640][ T9671] bond5: (slave bridge2): failed to get link speed/duplex [ 298.665958][ T31] INFO: task syz.4.640:8127 blocked for more than 143 seconds. [ 298.698513][T13512] __nla_validate_parse: 2 callbacks suppressed [ 298.698536][T13512] netlink: 81 bytes leftover after parsing attributes in process `syz.5.2084'. [ 298.719745][ T31] Not tainted syzkaller #0 [ 298.729432][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.748011][ T31] task:syz.4.640 state:D stack:26120 pid:8127 tgid:8126 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 298.775578][ T31] Call Trace: [ 298.785958][ T31] [ 298.788963][ T31] __schedule+0x15dd/0x52d0 [ 298.798765][ T31] ? __pfx___schedule+0x10/0x10 [ 298.814359][ T31] ? schedule+0x90/0x360 [ 298.819004][ T31] schedule+0x164/0x360 [ 298.823229][ T31] schedule_preempt_disabled+0x13/0x30 [ 298.838212][ T31] __mutex_lock+0x7fe/0x1300 [ 298.843109][ T31] ? __mutex_lock+0x5ac/0x1300 [ 298.848586][ T31] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 298.854586][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 298.864406][T13514] netlink: 'syz.3.2085': attribute type 4 has an invalid length. [ 298.872678][ T31] ? __nlmsg_put+0xef/0x1b0 [ 298.884144][ T31] ? genlmsg_put+0x137/0x2e0 [ 298.891490][T13514] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2085'. [ 298.901045][ T31] nfsd_nl_version_get_doit+0x17c/0xc40 [ 298.909899][ T31] ? kmem_cache_free+0x187/0x630 [ 298.935333][ T31] ? nlmon_xmit+0xb0/0x100 [ 298.946559][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 298.965564][ T31] ? dev_hard_start_xmit+0x802/0x870 [ 298.971191][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 298.977470][ T31] ? __asan_memcpy+0x40/0x70 [ 298.982480][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 298.989809][ T31] genl_rcv_msg+0x61c/0x7a0 [ 298.994679][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.003541][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 299.010122][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 299.015319][ T31] netlink_rcv_skb+0x232/0x4b0 [ 299.021004][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.026478][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.032079][ T31] ? down_read+0x272/0x2e0 [ 299.037420][ T31] ? genl_rcv+0xd/0x40 [ 299.041725][ T31] genl_rcv+0x28/0x40 [ 299.046831][ T31] netlink_unicast+0x80f/0x9b0 [ 299.051785][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 299.064261][ T31] ? netlink_sendmsg+0x650/0xb40 [ 299.067147][T13527] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2085'. [ 299.070590][ T31] ? skb_put+0x11b/0x210 [ 299.083981][ T31] netlink_sendmsg+0x813/0xb40 [ 299.089453][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.094921][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 299.100641][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.107292][ T31] ____sys_sendmsg+0x972/0x9f0 [ 299.112278][ T31] ? futex_unqueue+0x211/0x240 [ 299.119358][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.124824][ T31] ? import_iovec+0x73/0xa0 [ 299.130163][ T31] ___sys_sendmsg+0x2a5/0x360 [ 299.135073][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.140899][ T31] ? futex_wait+0x29a/0x380 [ 299.147652][ T31] ? __fget_files+0x2a/0x420 [ 299.152432][ T31] ? __fget_files+0x3a0/0x420 [ 299.157764][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 299.162865][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.169356][ T31] ? rcu_is_watching+0x15/0xb0 [ 299.174311][ T31] do_syscall_64+0x14d/0xf80 [ 299.179424][ T31] ? trace_irq_disable+0x3b/0x150 [ 299.184635][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.198163][ T31] ? clear_bhb_loop+0x40/0x90 [ 299.202912][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.210669][ T31] RIP: 0033:0x7fabb839c799 [ 299.215131][ T31] RSP: 002b:00007fabb9236028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.224134][ T31] RAX: ffffffffffffffda RBX: 00007fabb8615fa0 RCX: 00007fabb839c799 [ 299.233303][ T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 299.241745][ T31] RBP: 00007fabb8432c99 R08: 0000000000000000 R09: 0000000000000000 [ 299.250633][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.259903][ T31] R13: 00007fabb8616038 R14: 00007fabb8615fa0 R15: 00007fffb2f763e8 [ 299.269087][ T31] [ 299.272405][ T31] [ 299.272405][ T31] Showing all locks held in the system: [ 299.282815][ T31] 1 lock held by khungtaskd/31: [ 299.289142][ T31] #0: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 299.368928][ T31] 2 locks held by getty/5584: [ 299.374633][ T31] #0: ffff8880363aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 299.385213][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 299.396219][ T31] 2 locks held by syz.0.530/7786: [ 299.401433][ T31] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 299.410472][ T31] #1: ffffffff8ea85f88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 [ 299.421281][ T31] 2 locks held by syz.4.640/8127: [ 299.427012][ T31] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 299.435969][ T31] #1: ffffffff8ea85f88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 299.446714][ T31] 3 locks held by kworker/u8:22/9684: [ 299.452549][ T31] #0: ffff88803144f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 299.465348][ T31] #1: ffffc90005347c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 299.479942][ T31] #2: ffffffff8fbcdbc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 299.492524][ T31] 2 locks held by syz.6.1810/12486: [ 299.498320][ T31] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 299.507309][ T31] #1: ffffffff8ea85f88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 299.518015][ T31] 2 locks held by syz.2.2083/13504: [ 299.523254][ T31] #0: ffffffff9a7ab538 (nfnl_subsys_ipset){+.+.}-{4:4}, at: call_ad+0x292/0xb60 [ 299.533050][ T31] #1: ffffffff8e7647b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 299.544734][ T31] 2 locks held by syz.5.2084/13512: [ 299.550424][ T31] #0: ffffffff8fbcdbc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 299.560793][ T31] #1: ffffffff8e7647b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 299.572309][ T31] 1 lock held by syz.5.2084/13515: [ 299.577630][ T31] #0: ffff88805bd9d8d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 299.588659][ T31] 1 lock held by syz.3.2085/13514: [ 299.593795][ T31] #0: ffffffff8fbcdbc8 (rtnl_mutex){+.+.}-{4:4}, at: fib_newrule+0x4b6/0x1030 [ 299.603212][ T31] 3 locks held by syz.3.2085/13517: [ 299.608462][ T31] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 299.617001][ T31] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 299.629569][ T31] #2: ffffffff8fbcdbc8 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_compat_doit+0x22a/0x650 [ 299.639871][ T31] 1 lock held by syz.3.2085/13520: [ 299.644990][ T31] #0: ffffffff8fbd1368 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc6/0xd70 [ 299.657777][ T31] 1 lock held by syz.3.2085/13524: [ 299.662917][ T31] #0: ffffffff8fbd1368 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc6/0xd70 [ 299.674877][ T31] 1 lock held by syz.3.2085/13527: [ 299.680519][ T31] #0: ffffffff8fbcdbc8 (rtnl_mutex){+.+.}-{4:4}, at: fib_newrule+0x4b6/0x1030 [ 299.691032][ T31] 2 locks held by syz.3.2085/13528: [ 299.696686][ T31] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 299.705002][ T31] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 299.714982][ T31] 2 locks held by syz.3.2085/13531: [ 299.721202][ T31] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 299.729892][ T31] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 299.739355][ T31] 2 locks held by syz.3.2085/13535: [ 299.744582][ T31] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 299.753752][ T31] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 299.763528][ T31] [ 299.767137][ T31] ============================================= [ 299.767137][ T31] [ 299.786551][ T31] NMI backtrace for cpu 1 [ 299.786575][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 299.786600][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.786622][ T31] Call Trace: [ 299.786630][ T31] [ 299.786639][ T31] dump_stack_lvl+0xe8/0x150 [ 299.786675][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 299.786705][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 299.786734][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 299.786766][ T31] sys_info+0x135/0x170 [ 299.786791][ T31] watchdog+0xfd9/0x1030 [ 299.786829][ T31] ? watchdog+0x21a/0x1030 [ 299.786866][ T31] kthread+0x388/0x470 [ 299.786888][ T31] ? __pfx_watchdog+0x10/0x10 [ 299.786916][ T31] ? __pfx_kthread+0x10/0x10 [ 299.786938][ T31] ret_from_fork+0x51e/0xb90 [ 299.786967][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 299.786992][ T31] ? __switch_to+0xc7d/0x1450 [ 299.787021][ T31] ? __pfx_kthread+0x10/0x10 [ 299.787042][ T31] ret_from_fork_asm+0x1a/0x30 [ 299.787089][ T31] [ 299.787097][ T31] Sending NMI from CPU 1 to CPUs 0: [ 299.905293][ C0] NMI backtrace for cpu 0 [ 299.905312][ C0] CPU: 0 UID: 0 PID: 5812 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 299.905332][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.905343][ C0] RIP: 0010:__lock_acquire+0x324/0x2cf0 [ 299.905370][ C0] Code: 0d c1 e6 0e 09 d6 8b 54 24 20 c1 e2 0f 0f b7 d2 09 f2 41 83 e5 03 41 c1 e5 10 41 09 d5 8b 54 24 10 83 e2 01 c1 e2 12 44 09 ea e3 14 09 d3 8b 14 24 c1 e2 13 41 c1 e4 15 41 09 d4 41 09 cc 41 [ 299.905384][ C0] RSP: 0018:ffffc90000007758 EFLAGS: 00000006 [ 299.905400][ C0] RAX: 000000000000000a RBX: 0000000000000000 RCX: 0000000000000007 [ 299.905411][ C0] RDX: 0000000000022000 RSI: 0000000000002000 RDI: 0000000000000000 [ 299.905422][ C0] RBP: 0000000000000002 R08: ffffffff81767e95 R09: ffffffff8e75e520 [ 299.905433][ C0] R10: ffffc90000007a38 R11: ffffffff81b0c260 R12: 0000000000000000 [ 299.905443][ C0] R13: 0000000000022000 R14: ffff8880247c8000 R15: ffff8880247c8b58 [ 299.905459][ C0] FS: 0000555557992540(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000 [ 299.905474][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.905486][ C0] CR2: 000000110c305cf3 CR3: 0000000078ef6000 CR4: 00000000003526f0 [ 299.905504][ C0] Call Trace: [ 299.905512][ C0] [ 299.905523][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 299.905563][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 299.905591][ C0] lock_acquire+0xf0/0x2e0 [ 299.905611][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 299.905637][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 299.905661][ C0] ? slab_free_after_rcu_debug+0x126/0x220 [ 299.905685][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 299.905708][ C0] unwind_next_frame+0xc2/0x23c0 [ 299.905732][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 299.905759][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 299.905783][ C0] ? __kasan_slab_free+0x5c/0x80 [ 299.905802][ C0] ? slab_free_after_rcu_debug+0x126/0x220 [ 299.905826][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 299.905845][ C0] arch_stack_walk+0x11b/0x150 [ 299.905873][ C0] ? slab_free_after_rcu_debug+0x126/0x220 [ 299.905899][ C0] stack_trace_save+0xa9/0x100 [ 299.905916][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 299.905934][ C0] ? kasan_save_track+0x4f/0x80 [ 299.905951][ C0] ? kasan_save_track+0x3e/0x80 [ 299.905967][ C0] ? kasan_save_free_info+0x46/0x50 [ 299.905991][ C0] ? __kasan_slab_free+0x5c/0x80 [ 299.906009][ C0] ? kfree+0x1c1/0x630 [ 299.906022][ C0] ? slab_free_after_rcu_debug+0x5e/0x220 [ 299.906046][ C0] kasan_save_track+0x3e/0x80 [ 299.906063][ C0] ? kasan_save_track+0x3e/0x80 [ 299.906079][ C0] ? kasan_save_free_info+0x46/0x50 [ 299.906103][ C0] ? __kasan_slab_free+0x5c/0x80 [ 299.906121][ C0] ? slab_free_after_rcu_debug+0x126/0x220 [ 299.906167][ C0] ? kfree+0x1c1/0x630 [ 299.906182][ C0] kasan_save_free_info+0x46/0x50 [ 299.906207][ C0] __kasan_slab_free+0x5c/0x80 [ 299.906225][ C0] slab_free_after_rcu_debug+0x126/0x220 [ 299.906248][ C0] ? rcu_core+0x751/0x1070 [ 299.906269][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 299.906292][ C0] rcu_core+0x7cd/0x1070 [ 299.906320][ C0] ? __pfx_rcu_core+0x10/0x10 [ 299.906339][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 299.906365][ C0] handle_softirqs+0x22a/0x870 [ 299.906389][ C0] ? do_softirq+0x76/0xd0 [ 299.906412][ C0] ? tcp_recvmsg+0x1f2/0x7f0 [ 299.906433][ C0] do_softirq+0x76/0xd0 [ 299.906454][ C0] [ 299.906460][ C0] [ 299.906466][ C0] __local_bh_enable_ip+0xf8/0x130 [ 299.906487][ C0] tcp_recvmsg+0x1f2/0x7f0 [ 299.906512][ C0] ? __pfx_tcp_recvmsg+0x10/0x10 [ 299.906544][ C0] ? aa_sk_perm+0x6d5/0x900 [ 299.906570][ C0] ? sock_rps_record_flow+0x19/0x400 [ 299.906592][ C0] inet_recvmsg+0x157/0x270 [ 299.906613][ C0] ? __pfx_inet_recvmsg+0x10/0x10 [ 299.906630][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 299.906655][ C0] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 299.906673][ C0] ? security_socket_recvmsg+0x7e/0x2c0 [ 299.906689][ C0] ? __pfx_inet_recvmsg+0x10/0x10 [ 299.906707][ C0] sock_recvmsg+0x155/0x1b0 [ 299.906730][ C0] sock_read_iter+0x251/0x320 [ 299.906750][ C0] ? __pfx_sock_read_iter+0x10/0x10 [ 299.906774][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 299.906792][ C0] ? security_file_permission+0x75/0x260 [ 299.906813][ C0] vfs_read+0x582/0xa70 [ 299.906828][ C0] ? debug_object_free+0x2d7/0x490 [ 299.906853][ C0] ? __pfx_vfs_read+0x10/0x10 [ 299.906870][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 299.906898][ C0] ksys_read+0x150/0x270 [ 299.906915][ C0] ? __pfx_ksys_read+0x10/0x10 [ 299.906935][ C0] do_syscall_64+0x14d/0xf80 [ 299.906953][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.906969][ C0] ? clear_bhb_loop+0x40/0x90 [ 299.906987][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.907003][ C0] RIP: 0033:0x7f87ddf57917 [ 299.907018][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 299.907031][ C0] RSP: 002b:00007ffd16714080 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 299.907048][ C0] RAX: ffffffffffffffda RBX: 0000555557992540 RCX: 00007f87ddf57917 [ 299.907059][ C0] RDX: 0000000000000004 RSI: 00007ffd167140dc RDI: 0000000000000003 [ 299.907070][ C0] RBP: 00007ffd16714580 R08: 0000000000000000 R09: 0000000000000000 [ 299.907080][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 299.907089][ C0] R13: 00007ffd167140dc R14: 00007ffd16714170 R15: 0000000000000000 [ 299.907108][ C0] [ 299.919013][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 299.919035][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 299.919057][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.919069][ T31] Call Trace: [ 299.919077][ T31] [ 299.919086][ T31] vpanic+0x56c/0xa60 [ 299.919117][ T31] ? __pfx___schedule+0x10/0x10 [ 299.919139][ T31] ? __pfx_vpanic+0x10/0x10 [ 299.919173][ T31] panic+0xc5/0xd0 [ 299.919197][ T31] ? __pfx_panic+0x10/0x10 [ 299.919223][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 299.919250][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 299.919281][ T31] watchdog+0x1023/0x1030 [ 299.919314][ T31] ? watchdog+0x21a/0x1030 [ 299.919348][ T31] kthread+0x388/0x470 [ 299.919368][ T31] ? __pfx_watchdog+0x10/0x10 [ 299.919393][ T31] ? __pfx_kthread+0x10/0x10 [ 299.919413][ T31] ret_from_fork+0x51e/0xb90 [ 299.919441][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 299.919464][ T31] ? __switch_to+0xc7d/0x1450 [ 299.919489][ T31] ? __pfx_kthread+0x10/0x10 [ 299.919509][ T31] ret_from_fork_asm+0x1a/0x30 [ 299.919552][ T31] [ 300.564365][ T31] Kernel Offset: disabled [ 300.568684][ T31] Rebooting in 86400 seconds..