last executing test programs: 3m0.503188319s ago: executing program 32 (id=2724): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) write$tun(r1, &(0x7f0000002640)=ANY=[@ANYBLOB="0000000d07000000000014"], 0x1022) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="14000000808900001c001280080001007866726d000000000c0002800800020001000000"], 0x3c}}, 0x40000) 2m41.823420351s ago: executing program 3 (id=3055): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}]}, 0x38}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) 2m41.503624754s ago: executing program 3 (id=3057): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], 0x0}, 0x94) pselect6(0x40, &(0x7f0000000180), 0x0, 0xfffffffffffffffc, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, 0x0, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r11, 0x4) 2m41.175219527s ago: executing program 3 (id=3062): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x9a}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000800)={r2}, 0x4) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r1, 0x11}, 0xa) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2m40.95640031s ago: executing program 3 (id=3063): syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) (async) close(r0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m40.373641792s ago: executing program 3 (id=3064): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$netlink(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async, rerun: 64) socket(0x10, 0x3, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r1, &(0x7f0000000000), &(0x7f0000000600)=@udp=r2, 0x2}, 0x20) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r5, 0x25, 0x4, @void}, 0x2a) (async) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000300)={0xffffffffffffffff, 0x4, 0xc, 0x3, @vifc_lcl_addr=@rand_addr=0x64010100, @multicast2}, 0x10) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) syz_emit_ethernet(0x5ef, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x5e1, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae91"}}}}, 0x0) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0), 0x4) 2m40.045891741s ago: executing program 3 (id=3066): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd9, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x268, 0x206, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0xb07, 0x302, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'dvmrp0\x00', {0xff}, {}, 0x6, 0x2, 0x4a}, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0xfffffffe, 0x0, 0xc, 0x0, 0x531aeecb, 0xc07, 0x0, 0x18}, {0xfff}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@private0, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x2, 0x4e20, 0x8, 0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x3, 0x3, 0xd, '\x00', 'syz0\x00', {0x54}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES64=r2], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r6) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002700010369bd7000ffdbdf250d0000009871a12d5f618e912273136b3e036de98024e8a9c8d017594ec9e30242dcd11822cd9d4ab0e0b6a395f3db759ca0b9a067f6073edbf45c95f62121f3aedce6fc8d060672bb642f823eba2584009333d9656c392015a08de9168d403fea05bd5ab8323b2c179ff10f1bab6451bb9af7940844"], 0x14}, 0x1, 0x0, 0x0, 0x24044010}, 0x404c000) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="110000000400000004000000ff00000004000000", @ANYRES32, @ANYBLOB="00000000000000010000110000004b0200000000d8c17b826bcb7c852a409b478cb71817cae5acc9ab9ffdf7482463c3c6592efd36577ad26fd46a4094", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r13, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2m37.666037132s ago: executing program 0 (id=3085): getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001000000018000180140002007665746830000000000000000f00000005000d"], 0x34}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000002c0)='@*:\'{.-\x00', 0x200, &(0x7f0000000300)={@_ha_fsid={[0x8, 0x8]}, {0x1, 0x3, 0x400, 0x8}}, 0xa, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0xe}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000040800124080000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="186700000600000000000000070000005f26f0ff08000000950000000000000085200000050000001d9a08001000000029658d7a59eef6f1b3318de2af30e2175dca0cb72a961757ecdadac53f6840e6cbcd77ce95eeacd52e50f94c15fbee285aec8ab9f12b225afbbc08264926d04e10e8f932887753d0ff360672ae6487f890d9a39622bf437e48a8f5a64a2799b2af0e6a856ad9dc09ad697076c10a2a9b2418382bc8d0432c250071d8a16b1d28198603a04bd861af6b7f82eabfe0a656113c47c8d433f7f15ff99d642c83b9cde9daf15cfb5bc539b16501ec86f2764283876d707b93ef7988480a3a04565802575b260ca95469"], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', r0, 0x0, r3}, 0x94) socket$rxrpc(0x21, 0x2, 0x0) r6 = socket$inet(0x2, 0x3, 0x28000000) bind$inet(r6, &(0x7f0000000400)={0x2, 0x4e22, @multicast2}, 0x10) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={&(0x7f00000000c0)='./file0\x00', r5}, 0x18) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r7, 0x0, 0xd0, 0x0, &(0x7f0000000080)) r8 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r8, 0x40106e8c, &(0x7f0000000540)=[0x751, 0x7fff]) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xcd}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000408000540000000010900010073797a3000a4000000140000001100010000000000000000000700000a"], 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m35.961372863s ago: executing program 0 (id=3088): socketpair(0xf, 0x1, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 2m35.865316205s ago: executing program 0 (id=3089): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xbfffffff}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x3a) getsockopt$inet6_int(r7, 0x29, 0x10, 0x0, &(0x7f0000000280)) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc417", 0xd}], 0x1}}], 0x1, 0x2090) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24", 0x232) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 2m34.914149457s ago: executing program 0 (id=3101): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "0ebfd61996044fb4249989f65f4e7f3ee7"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "0ebfd61996044fb4249989f65f4e7f3ee7"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) (async) 2m34.728228835s ago: executing program 0 (id=3103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000680), r0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r1, 0x101, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x8010) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdf41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xc3}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 2m34.585238618s ago: executing program 0 (id=3104): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="d34885f33598"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x30}}, 0x4) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r9}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r8}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r9}, &(0x7f00000006c0), &(0x7f0000000780)='%-010d \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x2}]}}, 0x0, 0x2a}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x400d4) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 2m0.271868309s ago: executing program 33 (id=3066): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd9, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x268, 0x206, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0xb07, 0x302, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'dvmrp0\x00', {0xff}, {}, 0x6, 0x2, 0x4a}, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0xfffffffe, 0x0, 0xc, 0x0, 0x531aeecb, 0xc07, 0x0, 0x18}, {0xfff}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@private0, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x2, 0x4e20, 0x8, 0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x3, 0x3, 0xd, '\x00', 'syz0\x00', {0x54}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES64=r2], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r6) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002700010369bd7000ffdbdf250d0000009871a12d5f618e912273136b3e036de98024e8a9c8d017594ec9e30242dcd11822cd9d4ab0e0b6a395f3db759ca0b9a067f6073edbf45c95f62121f3aedce6fc8d060672bb642f823eba2584009333d9656c392015a08de9168d403fea05bd5ab8323b2c179ff10f1bab6451bb9af7940844"], 0x14}, 0x1, 0x0, 0x0, 0x24044010}, 0x404c000) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="110000000400000004000000ff00000004000000", @ANYRES32, @ANYBLOB="00000000000000010000110000004b0200000000d8c17b826bcb7c852a409b478cb71817cae5acc9ab9ffdf7482463c3c6592efd36577ad26fd46a4094", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r13, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2m0.271704506s ago: executing program 34 (id=3104): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="d34885f33598"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x30}}, 0x4) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r9}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r8}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r9}, &(0x7f00000006c0), &(0x7f0000000780)='%-010d \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x2}]}}, 0x0, 0x2a}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x400d4) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 1m5.286558815s ago: executing program 5 (id=3701): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x66, @empty, 0x5}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000000)=0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x48080}, 0x24008861) 1m5.027172525s ago: executing program 5 (id=3708): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x40810) 1m4.354509347s ago: executing program 5 (id=3713): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="017f00000000000000200300000004"], 0x18}}, 0x4000) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0000002e7bd373095d29e162d80b7a502a9519076eb6b7c551b3b3ac5891b53dd7a762aa6d4ec992c14e6c02a0e038be0cd48bc1550076d937dda3131763bb6de941d0f42910a182c1d6a1a9af568bba5673", @ANYRES16=r3, @ANYBLOB="000126bd7000fedbdf25340000000c00990008000000090000001400550016dda904ec2169e62c44740d0966440f1400fe00a9d84f11e1e634a58236659aa8b624e814005500ae3a59f4086b454347be43fdd176037c05002001610000001400fe00b12f445ace03f08ff1398cbeb94a07d31400fe0044a30bce2087070a404dd8fccb8a297308001f0100000000140055000fdb1be8b4df66deac14ab9eebb74d8b140055003f8a10f19ad2c0b401f62ba5b90e7ff9"], 0xbc}, 0x1, 0x0, 0x0, 0x40800}, 0x20000040) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=@newtfilter={0x98, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x68, 0x2, [@TCA_BASIC_ACT={0x64, 0x3, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8000}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x20, 0x7}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x98}}, 0x0) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xfdef) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0xc1ddfe9aa4c8d4f8, 0xffffffffffffffff, 0xfffff000) 1m4.248295545s ago: executing program 5 (id=3717): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000b7030000000000008500000035d74d7253694a1fbf44c253e8c10c000000b70000000000000085100000020000008510000001000000950000fb000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000d90fa3681f4e1dcb668600"/32], &(0x7f0000000080)='GPL\x00', 0x1, 0xa8, &(0x7f00000000c0)=""/168, 0x82000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x2, 0x4, 0x8001}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000200)=[r0, r0], &(0x7f0000000240)=[{0x4, 0x2}, {0x3, 0x4, 0x5, 0x2}, {0x1, 0x1, 0x5}, {0x0, 0x3, 0x3, 0xc}, {0x5, 0x5, 0x6, 0x7}, {0x2, 0x1, 0x8, 0x1}, {0x3, 0x4, 0xd, 0x8}], 0x10, 0x32}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000380)={0x1, 0x3}) 1m4.17234915s ago: executing program 5 (id=3720): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x2, 0x6, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9bf8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b503020000000000850000008b000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x20, 0x7, 0x7, 0x1, {{0x1a, 0x4, 0x2, 0x7, 0x68, 0x64, 0x0, 0x5, 0x2f, 0x0, @loopback, @rand_addr=0x64010101, {[@generic={0x86, 0xe, "dfba3236d71c1c10ec6c7129"}, @timestamp={0x44, 0xc, 0x9c, 0x0, 0x7, [0x4, 0xf209]}, @timestamp_addr={0x44, 0x2c, 0xb5, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x1687}, {@loopback, 0x10001}, {@empty, 0x6}, {@multicast2, 0xfffff28b}]}, @end, @generic={0x88, 0xc, "649ceddf444a847f8a44"}]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="12c3f3900a1487888800db27801ce461cd69c5aa0eebd0e719d338085784c0f9453d9127db7ef0041747", 0x2a}, {&(0x7f0000000300)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51", 0x17}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050401000000000000000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a310000000008000300000000050c000480080001"], 0x88}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000740)={'vxcan1\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x401, 0x0}, 0x8) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0xd, 0x10}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r8, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xe, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000100)='GPL\x00', 0x2, 0xda, &(0x7f0000000200)=""/218, 0x41000, 0x40, '\x00', r3, @fallback=0x2c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r2, 0x8, &(0x7f00000005c0)=[r1, r7, r8, r1], &(0x7f0000000600)=[{0x4, 0x5, 0x9, 0xb}, {0x5, 0x5, 0x9, 0x2}, {0x2, 0x4, 0xb, 0x5}, {0x3, 0x4, 0x8}, {0x2, 0x5, 0xa, 0x4}, {0x5, 0x1, 0xf, 0x5}, {0x5, 0x2, 0x4, 0x9}, {0x4, 0x1, 0x3}], 0x10, 0x1}, 0x94) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x200}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000790438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x2, 0x6, 0x4}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9bf8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b503020000000000850000008b000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x20, 0x7, 0x7, 0x1, {{0x1a, 0x4, 0x2, 0x7, 0x68, 0x64, 0x0, 0x5, 0x2f, 0x0, @loopback, @rand_addr=0x64010101, {[@generic={0x86, 0xe, "dfba3236d71c1c10ec6c7129"}, @timestamp={0x44, 0xc, 0x9c, 0x0, 0x7, [0x4, 0xf209]}, @timestamp_addr={0x44, 0x2c, 0xb5, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x1687}, {@loopback, 0x10001}, {@empty, 0x6}, {@multicast2, 0xfffff28b}]}, @end, @generic={0x88, 0xc, "649ceddf444a847f8a44"}]}}}}}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="12c3f3900a1487888800db27801ce461cd69c5aa0eebd0e719d338085784c0f9453d9127db7ef0041747", 0x2a}, {&(0x7f0000000300)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51", 0x17}], 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050401000000000000000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a310000000008000300000000050c000480080001"], 0x88}}, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000740)={'vxcan1\x00'}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x401}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0xd, 0x10}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r8, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) (async) socket$kcm(0x29, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xe, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000100)='GPL\x00', 0x2, 0xda, &(0x7f0000000200)=""/218, 0x41000, 0x40, '\x00', r3, @fallback=0x2c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r2, 0x8, &(0x7f00000005c0)=[r1, r7, r8, r1], &(0x7f0000000600)=[{0x4, 0x5, 0x9, 0xb}, {0x5, 0x5, 0x9, 0x2}, {0x2, 0x4, 0xb, 0x5}, {0x3, 0x4, 0x8}, {0x2, 0x5, 0xa, 0x4}, {0x5, 0x1, 0xf, 0x5}, {0x5, 0x2, 0x4, 0x9}, {0x4, 0x1, 0x3}], 0x10, 0x1}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x200}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000790438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) 1m3.676467783s ago: executing program 5 (id=3727): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x600, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000002f0009002abd700000000000040000002600118031f9e05e2f", @ANYRESOCT=r0, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4a804}, 0x84) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 48.636817871s ago: executing program 35 (id=3727): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x600, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000002f0009002abd700000000000040000002600118031f9e05e2f", @ANYRESOCT=r0, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4a804}, 0x84) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 43.912143002s ago: executing program 1 (id=3933): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000105003654130d1796000000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES8=r3, @ANYBLOB="08000300ac1e00"], 0x44}}, 0x848c0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c010000100001002bbc700000000004fe800000000000000000000000000022ac14144300000000000000000000000000000008000300050a00600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x3c}}, 0xc004) 43.663030321s ago: executing program 1 (id=3938): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x7, 0x20, 0x4000, 0x8, {{0x9, 0x4, 0x1, 0x17, 0x24, 0x67, 0x0, 0x8, 0x2f, 0x0, @multicast1, @broadcast, {[@end, @lsrr={0x83, 0xf, 0xb4, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1]}]}}}}}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) pselect6(0x40, &(0x7f0000000180), 0x0, 0xfffffffffffffffc, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2c, r4, 0x9, 0xfffffffd, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004002}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000400)=@gettfilter={0x3c, 0x2e, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xf, 0xf}, {0x8, 0xfff3}, {0x0, 0x9}}, [{0x8}, {0x8, 0xb, 0xa24}, {0xfffffd80, 0xb, 0x5}]}, 0x3c}, 0x1, 0xf0ffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r12, {0x6}, {}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r14 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r14, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) sendmsg$NFT_BATCH(r15, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 42.596959972s ago: executing program 1 (id=3955): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000890) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={@remote, 0x41}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r2, &(0x7f0000000180)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0xffffffff}}, 0x10, 0x0, 0x0, 0x0, 0x33, 0x20000000}, 0x400080c) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r7, 0x0, 0x0}, 0x10) close(0x3) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x40410b0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f00000001c0)) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x104, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@remote, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@replay_thresh={0x8, 0xb, 0x8000}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f00000001c0)={&(0x7f0000000080)=0xfffffffffffffff7, 0x8, &(0x7f00000000c0)=[{}], &(0x7f0000000180)}) 42.506581256s ago: executing program 1 (id=3956): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) syz_emit_ethernet(0x1f, 0x0, 0x0) (async, rerun: 32) r1 = socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x4fde330a, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x9c}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) (async) r3 = socket(0x10, 0x803, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'ip_vti0\x00'}}, 0x1e) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) socket(0xa, 0x2, 0x0) (async) close(0x4) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002380)="fb", 0x1}], 0x1}}], 0x1, 0x20000000) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce"], 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) (async) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000240)={0x8, 0x8672, 0x3ff, 0x8}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x9, @private1, 0xd810}}, 0x0, 0x0, 0x30, 0x0, "cfbd0954434c28f17b76f79eb7e4d9f77b63df09f8e42fc53bba0202caeef370c9553c961bea899dddfa916dbd4adc273747b29b49b52e90ab3dc0772a63ce361c02de4886454ae1a80811c65048f82a"}, 0xd8) (rerun: 32) setsockopt$inet6_mreq(r7, 0x29, 0x1b, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x3d8, 0x230, 0x700001b, 0x148, 0x230, 0x148, 0x340, 0x206, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x88, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x2, 0xa, 0x6], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) 41.430663305s ago: executing program 1 (id=3968): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xb8, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x28, r2, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1d, 0x2, 0x6) recvfrom$rxrpc(r4, 0x0, 0x0, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a0000000400000001"], 0x48) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6e2e12bede68ed35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890c, &(0x7f0000000000)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$key(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0xf, 0x1, 0xc, 0x15, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_x_sa2={0x2, 0x13, 0x5e, 0x0, 0x0, 0x70bd25, 0x3505}, @sadb_ident={0x2, 0xa, 0xffff, 0x0, 0x3}, @sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x6e6bb9, 0x8, {0x6, 0x33, 0x5, 0x2, 0x0, 0x5, 0x0, @in=@multicast2, @in=@local}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_lifetime={0x4, 0x4, 0x6, 0x1, 0x5, 0x8fe}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd2b}]}, 0xa8}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a88000000060a010400000000000000000a0000050900010073797a31000000005c000480580001800a00666840b382f12417e869fb0100696e6e657200000048000280080004400000001724000580090001006d6574610000000014000280080001400000001508000240000000010800034000000000080002400000008408000140000000000900020073797a3200000000e8c69daa1100010000"], 0xb0}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x9}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048010}, 0x4) 38.213186739s ago: executing program 1 (id=3986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'macvlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r8, 0x89e5, &(0x7f0000000080)={'macvtap0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r6, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r9, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') pselect6(0x40, &(0x7f00000000c0)={0x5, 0x0, 0xfffffffffffffffa, 0x1, 0x9, 0x3, 0x1, 0x5ed}, &(0x7f0000000100)={0x10, 0x8, 0x9, 0x9, 0x9, 0x8f, 0xffff, 0x8}, &(0x7f0000000140)={0x3, 0x1000, 0xf1, 0x7, 0x115e, 0x100, 0x4}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x7fffffff]}, 0x8}) socket$inet6_sctp(0xa, 0x5, 0x84) 34.317747785s ago: executing program 2 (id=4041): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) (async) write(r0, &(0x7f0000000000)="3b000200", 0x4) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x24040851}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x2, 0x3, 0x4, 0x8, 0xf}, 0x20) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x184, r2, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x20}}}}, [@NL80211_ATTR_TID_CONFIG={0x164, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc0}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xf8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x24, 0x6, 0x18, 0xd, 0x24, 0x48, 0xb, 0x5, 0x3, 0x24, 0xb, 0x9, 0x30, 0x2]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xf38, 0x100, 0x8001, 0x200, 0x5, 0x434, 0x8]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x24, 0x60, 0x3, 0x6, 0x6c, 0xc]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x9}, {0x5, 0x9}, {0x3, 0x6}, {0x2, 0x1}, {0x0, 0x3}, {0x2, 0x8}, {0x0, 0x8}, {0x5, 0x8}, {0x7, 0x7}, {0x1, 0x8}, {0x1, 0x1}, {0x4, 0x7}, {0x6, 0x7}, {0x4, 0x8}, {0x7, 0x3}, {0x4, 0xa}, {0x4, 0x9}, {0x0, 0x7}, {0x7, 0x9}, {0x1}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x18, 0x16, 0x30, 0x9, 0x36, 0xb, 0x36, 0x30]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x6}, {0x0, 0x8}, {0x7, 0x1}, {0x5, 0x7}, {0x3, 0x7}, {0x7, 0x3}, {0x4, 0x8}, {0x1, 0x3}, {0x1, 0x2}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x9}, {0x1, 0x1}, {0x4, 0x6}, {0x3, 0x6}, {0x1, 0x9}, {0x4, 0x4}, {0x3, 0x4}, {0x0, 0x6}, {0x1, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x7, 0x7}, {0x1, 0xa}, {0x5, 0x7}, {0x6, 0x7}, {0x4, 0x4}, {0x1, 0x3}, {0x6, 0x5}, {0x1, 0xa}, {0x3, 0x7}, {0x5}, {0x6, 0x2}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x5}, {0x0, 0x7}, {0x7, 0x9}, {0x3, 0xa}, {0x4}, {0x7, 0x1}, {0x7}, {0x1, 0x4}, {0x2, 0x4}, {0x1}, {0x6, 0x4}, {0x2, 0x3}, {0x7, 0x3}, {0x1, 0x2}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x78a, 0x408, 0x7, 0xffaa, 0x7f, 0x6, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb7}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xee}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}]}]}, 0x184}}, 0x8004) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002f00090000000000000000000400000004001d"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 34.017655719s ago: executing program 2 (id=4043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20040800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20040800) (async) 33.813184894s ago: executing program 2 (id=4047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r4, &(0x7f00000021c0), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b702000000000000b70300000000f3ff850000007c000000b70000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f00000006c0)="000000000000000002", 0x0}, 0x50) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x140, 0x1170, 0x1398, 0x0, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [0x0, 0xff000000], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x2b, 0x3b, 0x3}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x5, 0x1, [0x8, 0x2, 0x1, 0x3, 0x9, 0x1, 0x8, 0x100, 0x273, 0x9, 0x6, 0x6, 0x5, 0x6, 0x800, 0xffff], 0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x2, 0x0, 0x0, 0x0, @loopback, @private0, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], [0xffffff, 0x0, 0xff000000, 0xffffffff], 0x6d3784e3f74c6113, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) write$tun(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0xfce) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000a, 0x12, 0xffffffffffffffff, 0x3000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 33.49892208s ago: executing program 2 (id=4052): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {@in=@multicast1, 0x0, 0x32}, @in6=@empty, {0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x70bd28, 0x0, 0x2, 0x2, 0x73, 0x4c}, [@algo_crypt={0x67, 0x2, {{'cbc(serpent)\x00'}, 0xf8, "51ad34d9ea841223e5d0f932af16e92125ccc28f24846c994df42d7b270566"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 33.466351056s ago: executing program 2 (id=4054): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0x9, 0x6, 0xffffffff}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000000000000400000008210000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000200"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x7, &(0x7f0000000180)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0) unshare(0x40000c80) 33.412019441s ago: executing program 2 (id=4055): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000001c0), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000240012800b00010067656e6576650000140002290c8b8280468005000a00010000000500"], 0x44}}, 0x0) listen(r3, 0x390) 23.175380912s ago: executing program 36 (id=3986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'macvlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r8, 0x89e5, &(0x7f0000000080)={'macvtap0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r6, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r9, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') pselect6(0x40, &(0x7f00000000c0)={0x5, 0x0, 0xfffffffffffffffa, 0x1, 0x9, 0x3, 0x1, 0x5ed}, &(0x7f0000000100)={0x10, 0x8, 0x9, 0x9, 0x9, 0x8f, 0xffff, 0x8}, &(0x7f0000000140)={0x3, 0x1000, 0xf1, 0x7, 0x115e, 0x100, 0x4}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x7fffffff]}, 0x8}) socket$inet6_sctp(0xa, 0x5, 0x84) 18.259392531s ago: executing program 37 (id=4055): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000001c0), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000240012800b00010067656e6576650000140002290c8b8280468005000a00010000000500"], 0x44}}, 0x0) listen(r3, 0x390) 4.780257368s ago: executing program 8 (id=4274): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)={0x5c, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a44a8a023f8d921f9b0dcb6e0a5c47ec"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8355d25ec17b3420"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b715d9c298832e40f361abef3b3ad9da82f74028a76d8db5"}]}]}, 0x5c}}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r5, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfb, 0x5b}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044800) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010000000000000000001c0000000c00070000"], 0x20}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000000c0)={0x6, 0x0, 0x5, 0x1, 0x1}) 4.604392349s ago: executing program 8 (id=4276): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0x0, 0x9}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f00000000c0)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}) close(r0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) 4.481372212s ago: executing program 8 (id=4278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'pimreg\x00', @broadcast}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 4.276463509s ago: executing program 9 (id=4280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x4, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) recvmmsg(r2, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000002200)}, 0xa2a}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff17043a73dbde08004500005c0000000000000080ac1e0001ac1414aa05009078e00000e0400004010000000000730000ac1400862900000000000566d281000d6f03057a91f875ccf5bd5d000f6253659c41d7cea461f45f9d3700020000000000000000c4cf8e9764254ffa0faa818620293b366332ff91f5689b2ace145aed922b044a5dfa9bb281f64a6a43aed511adda05bc0a920ee039218ccfedecd2b63eaa312f"], 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r2, 0xc0186e86, &(0x7f0000000140)={&(0x7f00000000c0), 0x0, 0x20, 0x5}) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x80800}, &(0x7f00000002c0)=0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080)={0x1, 0x4, 0x2, 0x0, 0xd, 0x1, 0x0, 0x3, 0x0, 0x5, 0x4}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000001c0)={r6, 0xb, 0x4a, "2e17ffa088c1a057c9f3bad3136ca6e9c96bf9ff335eed43b797462878e4892da37a843ea3ba63a3cb8fa331602322364a5a04caf68d8728ac681dfadf36b66a1b679df2af71d4a3ae08"}, 0x52) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x15}}, 0xfffb, 0x8}, &(0x7f00000003c0)=0x90) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={r7, 0x6}, 0x8) accept4$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e, 0x80800) 4.161324365s ago: executing program 4 (id=4285): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000040)="4c00000011002914000700020000170002000400200000", 0x17) 4.072868927s ago: executing program 4 (id=4286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000500000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000200)="4cf2", &(0x7f0000000240)}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x4) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, 0x8) (async) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d280c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000791204000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.058067298s ago: executing program 9 (id=4287): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000cef8000000000000000000000000000000000000000009000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x22, &(0x7f0000000580)=@raw=[@generic={0xa, 0x5, 0x9, 0x9, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x5e}, @exit, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x38ae}}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00'}) (async) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000080)="ffff0900000000114587acb93ffc223344554205000f32000000000100112233445500112233445500ff000034dec390a8a59472f2ae093a08883614de9216c3ca10e947905bdee57c405e7f997b32a82abd1ac6bd7caa8eb4c2f77cb392d8", 0x5f, 0x0, &(0x7f0000000800)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030062617461647630"], 0x34}}, 0x0) 3.966713798s ago: executing program 4 (id=4288): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@mpls_getroute={0x148, 0x1a, 0x0, 0x70bd27, 0x25dfdbfd, {0x1c, 0x0, 0x10, 0xd2, 0xfc, 0xe708bc88aa8843fd, 0x0, 0x2, 0x400}, [@RTA_NEWDST={0x84, 0x13, [{0x5, 0x0, 0x1}, {0x4}, {0x489}, {0x1, 0x0, 0x1}, {0x100}, {0xffff8}, {0x73b, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x9}, {0x7, 0x0, 0x1}, {0x4}, {0x3, 0x0, 0x1}, {0xa16d}, {0x1}, {0x5}, {0x2, 0x0, 0x1}, {0x9}, {0x1, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8000}, {0x5}, {0xb}, {0x100}, {0xe44, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xff001, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x8000}, {0x2, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x7b49}, {0x2, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x1, 0xe, r0}}, @RTA_DST={0x8, 0x1, {0x3, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x93}, @RTA_NEWDST={0x84, 0x13, [{0x7}, {0x8000}, {0xced}, {0xffeff, 0x0, 0x1}, {0xffff6, 0x0, 0x1}, {0x4}, {0x8}, {}, {0x3}, {0x80}, {0x0, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9}, {0xfffff}, {0x1}, {0x2}, {0x58, 0x0, 0x1}, {0x6}, {0x2, 0x0, 0x1}, {0x641a}, {0xfffff}, {0x4d15f, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x54c}, {0x1}, {0x8}, {0x5c, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x800}, {0xd3}, {0x3, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0xf, 0x0, 0x1}}]}, 0x148}}, 0x40010) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000002c0)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8841) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6_vti0\x00', r0, 0x4, 0xd, 0xf2, 0x6, 0x40, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7800, 0x10, 0x2, 0x1}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb4, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0xb4}}, 0x0) (async, rerun: 32) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (rerun: 32) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000680)={0x10, 0x3}, 0x2) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f00000017c0)={{r1, &(0x7f00000006c0)=')@&\x00', 0x206000, &(0x7f0000000700)={@_ha_fsid={[0x5, 0x10001]}, {0xfff2, 0x4, 0xb167, 0x3e}}, 0xfffffff9, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0x2}, {[0x3, 0x7bfa, 0x6]}, 0x400, 0x1000, &(0x7f00000007c0)=""/4096}) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f0000001840)=0x1) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000001880)={0x1f, 0xbe3c, @any, 0x5, 0x2}, 0xe) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r7) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x20, r9, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x12}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x98, r9, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x9, 0x7e, @random="347ed55bae"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2dd6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e7}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2cc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31b}], @NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, [{0x5, 0x1}, {0x1b}, {0x5}, {0x2}, {0x9}, {0x9}, {0x2}, {0x18}, {0x2, 0x1}, {0x6c, 0x1}, {0x4}, {0x60, 0x1}, {0x4, 0x1}, {0x24}, {0x1b, 0x1}, {0x3, 0x1}, {0x18}, {0x1b, 0x1}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40840}, 0x0) (async, rerun: 32) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000001b80), &(0x7f0000001bc0)=0x4) (async, rerun: 32) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f0000001c00)={@none, 0xa, 0x4, 0x2, 0x6d, 0x3, "766cc734c951039199ab1f91b53f0aedd84ceb40c9995e2825fa41b0d293970d606e16f7a2f66b4cd45d3e638a5ed4e7f6630b02e7070c8b774fe9246ea688b4fe5732fbe0e1bbe2c30424f55f12c658b72f09b68796006988d9d1db28f5ad846af02b71df815ab13ee1490572ab919d2f53e84f43095834feaf68e748c9065b"}) (async, rerun: 64) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000001cc0)={{{@in=@multicast2, @in=@remote}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000001dc0)=0xe8) (async, rerun: 64) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e40), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x34, r11, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) (async) ioctl(r2, 0x8, &(0x7f0000001f40)="458f70d0de691ee9ed0361040828b1d0fb54ce19830b558740eb0b081389af9996b68bdc115f7178a4beced8bf142ca2823909e01c8e08ea3f7bbad752459c6c9773851a5fc083ef73e932270eebedeef38d8ea39358cbdef4a795e1be2244e0e20bd5856f26536ee64e798c26f79ceb375683d1e51e0a20b99134fbe8e6d00f085758fbe64b7f6c9211b5db18a6ca1b0a2e8810aacf1eee7ad5f838a62ec74b1ad3da77e901fd130c3f3f60") ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000002000)={{0x0, 0x7, 0x1, 0x9, 0x52, 0x3f843f7, 0x9, 0x2, 0x0, 0x1, 0x1f, 0x7fffffffffffffff, 0x1, 0x9, 0x2}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002080)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000003080)={0x5d94, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "29a6ac90f2cdf8"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000103240)={0x80000001, [{}, {r12, r13}, {r14}], 0x2, "480c3201ae3443"}) 3.894635159s ago: executing program 7 (id=4290): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x6e21, 0xfffc, 0xa, 0x0, 0x10}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0xbcfbddc4f0d79c8f}}, 0xe8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'vlan0\x00', 0xe}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000de72f98f58204972d006110a300000000009500000000000000466a20a5167471e110fcec18a8bd07dee767e1aa5f14ec673f02fd5f50d51798e0f7c89aa2b2fba73430c27f2f801b422c09a79a87afa0aea8b3f824a949c16eb27e18e418b2a475391f62ff4d258acf643674d43910a7e46035104eaf034e6a4e4bda1941565134d5987bed7bceb8bb17b0fde8a2a27601f40cec35dc8f8a3cc8bceeb110c4ba3ce826894f81c83955bbf1cebc49e514d055cead97"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000003000000000140000001000010017"], 0x48}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x0, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 3.73444395s ago: executing program 6 (id=4291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'wlan0\x00', 0x600}) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x3}, [{{0x254, 0x1, {{0x0, 0x8}, 0x6, 0x7, 0xff, 0x8, 0x18, 'syz0\x00', "86bca39346212f86291651efda89f97eae0791a8937518b16a2af4d30592156d", "8a75bdacf9205e94b1affc4118e64c993c59ca1f8ac4bbb9fd263d6a7335d3e8", [{0x4, 0x8, {0xc14503c25b476f23, 0x3}}, {0x85, 0xd6, {0x1, 0x7}}, {0x3, 0x6, {0x3, 0x3}}, {0x40, 0x1, {0x2, 0x9}}, {0x1a9b, 0x4, {0x2, 0x4000000}}, {0xff, 0x6, {0x3, 0x6}}, {0xe7cd, 0x0, {0x2, 0x100}}, {0x2, 0x1, {0x3, 0x1000}}, {0x3, 0x3, {0x3, 0x401}}, {0xb5, 0x4, {0x0, 0x5}}, {0x8001, 0x80, {0x3, 0x3}}, {0x5, 0x0, {0x1}}, {0x0, 0x5, {0x1, 0x7f}}, {0x9, 0x7932, {0x1, 0x6}}, {0x1f8, 0x4, {0x1, 0x40}}, {0x7, 0x7, {0x1, 0x8001}}, {0x1, 0xead, {0x3, 0x7}}, {0x1, 0xfdf1, {0x2, 0x5}}, {0x9, 0x3, {0x1, 0x6}}, {0x1, 0xfff8, {0x1, 0xc68c}}, {0x4, 0x0, {0x3, 0xd9a}}, {0x7f, 0x6, {0x1, 0x9}}, {0x40, 0x3, {0x0, 0x8}}, {0x2, 0x4, {0x3, 0x3}}, {0xf3a2, 0x3f, {0x1, 0x7}}, {0x6, 0x7, {0x3, 0x4}}, {0x140, 0x45df, {0x0, 0x8}}, {0x5, 0xa, {0x0, 0x3}}, {0x40, 0x4, {0x2, 0x9}}, {0x0, 0xc5b, {0x1, 0x5}}, {0xd, 0x81d3, {0x2, 0xffffffc8}}, {0x7, 0xb0a, {0x1, 0x4}}, {0x0, 0x3, {0x0, 0x7}}, {0x1, 0x8, {0x2, 0x9}}, {0x0, 0x315, {0x3, 0x10}}, {0x8, 0x7, {0x2, 0x2}}, {0x7, 0x1, {0x3, 0x10000}}, {0xe4, 0x6, {0x1, 0x2}}, {0xffff, 0x7, {0xe8d95239bae06a34, 0x5}}, {0x6, 0x3, {0x1, 0x2821}}]}}}]}, 0x268}}, 0x840) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r7, 0x0, 0x1, 0x7, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40) 3.667530218s ago: executing program 6 (id=4292): syz_emit_ethernet(0x34, &(0x7f00000004c0)={@local, @local, @void, {@generic={0x8906, "434b5682f8682ed45b171376ad6a4e38b7aea7854bdfacbcb6245fd5539d8ffe6a8f98cecd73"}}}, 0x0) 3.60429061s ago: executing program 4 (id=4293): r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0xf0b, 0x1e, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) clock_gettime(0x6, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) getsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000100), &(0x7f0000000180)=0x10) sendmsg$can_raw(r3, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r4}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}}, 0x8004) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102385, &(0x7f0000000400)=0x19018) 3.603747989s ago: executing program 7 (id=4294): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x20, 0x7, 0x8000, 0x3, {{0x14, 0x4, 0x1, 0x5, 0x50, 0x66, 0x0, 0xe, 0x29, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0xf, 0x6e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010102]}, @cipso={0x86, 0x14, 0x3, [{0x5, 0xe, "7f6deb98c27ef771d9235e0f"}]}, @lsrr={0x83, 0x17, 0x3c, [@local, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, @empty, @loopback]}]}}}}}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@deltfilter={0x5c, 0x2d, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x8, 0xf}, {0x10, 0xffe0}, {0xfff1, 0x8}}, [@f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0xf846, 0x100}, {0x4, 0x9c4b, 0x4}, 0x1, 0x6, 0x7}}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24048041}, 0x810) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'pim6reg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="90010000207660fcd6b9b7865cbc26b4df29ede912d1df96e05c93ecd34a9ac6ea1f1f2a7b67f4ff7c96e68e44af993f6fe15d14bea038416cecaed3de84a40cc03a927a14667a31c93f81", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08000300010000001400020069703665727370616e300000000000001400020076657468315f746f5f6873720000000004000300"], 0x190}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000640)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x400, 0x3, 0x7fff, 0x1ff, 0x1]}, &(0x7f00000006c0)=0x78) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000090000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @fallback=0x22, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) 3.602878284s ago: executing program 6 (id=4295): r0 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0xd1383000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) (async) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd000000100001000c0808004149224e06040800", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xbf}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x100005, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 3.563290522s ago: executing program 9 (id=4296): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130780fffffffcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000f"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x54}, 0x24004085) 3.514921179s ago: executing program 6 (id=4297): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0xc0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x11) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10050}, 0x77eefd3db6e79531) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000440)={0x27, r3, 0x0, 0x4, 0x2, 0xf6, "583fd63adb62ee375f4cdeafe49eb56d3efe70305c4391593f7de7309359414412d60ab6c7aca4accb5ff408ae5e8ef0dfafe72bb379c1246b335b958ec324", 0x37}, 0x60) r7 = socket$packet(0x11, 0x3, 0x300) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000500), r4) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r8, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x40004) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000600)={r4, 0x10001, 0x4, 0xfffffffffffffbff}) setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, &(0x7f00000006c0)={@phonet={0x23, 0x7f, 0x5}, {&(0x7f0000000640)=""/57, 0x39}, &(0x7f0000000680), 0x80}, 0xa0) recvmsg(r7, &(0x7f0000002e00)={&(0x7f0000000780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000000800)=""/82, 0x52}, {&(0x7f0000000880)=""/155, 0x9b}, {&(0x7f0000000940)=""/52, 0x34}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/176, 0xb0}, {&(0x7f0000001a40)=""/80, 0x50}, {&(0x7f0000001ac0)=""/36, 0x24}, {&(0x7f0000001b00)=""/237, 0xed}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/223, 0xdf}], 0xa, &(0x7f0000002dc0)=""/20, 0x14}, 0x1) r11 = socket(0x2, 0x5, 0xfffffffc) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x20, r12, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044810}, 0x8) r13 = accept4$packet(r10, &(0x7f0000002f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002fc0)=0x14, 0x0) splice(r13, &(0x7f0000003000)=0x8, r11, &(0x7f0000003040)=0x8000000, 0x3, 0x2) ioctl$XFS_IOC_FREE_EOFBLOCKS(r13, 0x8080583a, &(0x7f0000003080)={0x5, 0x5, 0xa, 0x0, 0x1, 0x0, 0x7}) syz_80211_join_ibss(&(0x7f0000003100)='wlan0\x00', &(0x7f0000003140)=@default_ibss_ssid, 0x6, 0x1) ioctl$sock_SIOCGIFBR(r13, 0x8940, &(0x7f00000031c0)=@add_del={0x2, &(0x7f0000003180)='pim6reg\x00'}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003240), r0) sendmsg$NLBL_MGMT_C_ADD(r14, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x38, r15, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'macsec0\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x6000) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000003340)={0x80}) 3.432340361s ago: executing program 8 (id=4298): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf250501f2800f0018007d3a2e9c5bc85c23277d0000140001"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) write(0xca, &(0x7f0000000000)="ff6a", 0x2) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000240)={0x5, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @empty}}}, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.431967731s ago: executing program 4 (id=4299): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r3, 0x0, 0x7, 0x0, &(0x7f0000000240)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48090}, 0x20004000) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000850}, 0x2000080) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000500)=@base={0xe, 0x0, 0x0, 0x202000, 0x841}, 0x50) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x73ba, 0x4) 3.412306394s ago: executing program 7 (id=4300): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) write(r0, &(0x7f0000000040)="040b4f5a97258d11870093ee6a23a702d313a43da11bc90f9da91ebad7aada0166c6c54267af6bedf20ad0ca0a1abeba15cbf82fcb1c45421bf9ea7a8069d8b71f2a4596639d21", 0x47) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b9be"], 0xb4}}, 0x0) 446.207845ms ago: executing program 8 (id=4301): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRES32=r5, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c00"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 364.884287ms ago: executing program 9 (id=4302): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x7000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r1, 0x0, 0x0, 0x0, 0xa5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x40, 0x140a, 0x20, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x4b}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x40000) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x40, 0x140a, 0x20, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x4b}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xb3, &(0x7f00000002c0)={@empty, @random="8d8d05ebd2c5", @void, {@mpls_mc={0x8848, {[{0xaa}, {0x3, 0x0, 0x1}, {0x9}], @llc={@snap={0x0, 0x1, "eb", "1412df", 0x9000, "888766ad2590b035e1888ae57e27f76630e69918c9eb9d97f6ae0297d56229e326787a932bf5cc4e75ffdee23f1db41e3806f02af7136bd3a15ed04e4ac4345eeab94dda40d88f8b651b2eb60d491977135d178794b520e0406e050cb70651668461960de4b02a463d58c4af27873af29d8b5c4187cccb62bc72f61dcb07b1b339f84ed290ec6c57bd068595f4fb09b904"}}}}}}, 0x0) (async) syz_emit_ethernet(0xb3, &(0x7f00000002c0)={@empty, @random="8d8d05ebd2c5", @void, {@mpls_mc={0x8848, {[{0xaa}, {0x3, 0x0, 0x1}, {0x9}], @llc={@snap={0x0, 0x1, "eb", "1412df", 0x9000, "888766ad2590b035e1888ae57e27f76630e69918c9eb9d97f6ae0297d56229e326787a932bf5cc4e75ffdee23f1db41e3806f02af7136bd3a15ed04e4ac4345eeab94dda40d88f8b651b2eb60d491977135d178794b520e0406e050cb70651668461960de4b02a463d58c4af27873af29d8b5c4187cccb62bc72f61dcb07b1b339f84ed290ec6c57bd068595f4fb09b904"}}}}}}, 0x0) 364.37061ms ago: executing program 7 (id=4303): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}]}, 0x38}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x9}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xdc}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x9}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xdc}}, 0x0) 363.98096ms ago: executing program 4 (id=4304): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x4, 0xfff1}, {0x0, 0xfff1}, {0x8, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000)={0x0, "c6ab3c"}, 0x6) 334.660782ms ago: executing program 6 (id=4305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x91}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) 313.797ms ago: executing program 8 (id=4306): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) r6 = socket(0x1e, 0x4, 0x0) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r3, @ANYRES16=r6], 0x14) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000340)) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x4b, 0x0, "6b302de564baec5e95858b2a04e6d53747c5f2d386c89a3970099bd12e6ae8b3565e9522829963d34b8fe29090c7c5468d4ca9e1dd454c838beda7bef20b683b247927cd8e7d7df145c21a05a5d38187"}, 0xd8) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x4, 0x7, {{0x3f, 0x4, 0x1, 0x0, 0xfc, 0x66, 0x0, 0x6, 0x2f, 0x0, @broadcast, @multicast2, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x31, 0xffffffffffffffff, [{0x6, 0xd, "f638d0ee8881596061de96"}, {0x6, 0x9, "72a11b1326babc"}, {0x6, 0x7, "88703ab2e8"}, {0x7, 0xe, "83821d04dd360175b9517241"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xfc, [@remote, @broadcast, @multicast1, @local]}, @cipso={0x86, 0x52, 0xffffffffffffffff, [{0x0, 0xb, "534677ed2e47eca03d"}, {0x2, 0xa, "e39dfdf48e89cf4b"}, {0x0, 0x10, "2a08aa20c2fc26f25b13d9459994"}, {0x1, 0xa, "238b031882f01d2c"}, {0x6, 0x7, "32dfe0adee"}, {0x7, 0x8, "394f8373d27f"}, {0x5, 0x4, "cf7a"}, {0x6, 0x6, "3cacba95"}, {0x6, 0x4, "b0ad"}]}, @lsrr={0x83, 0x17, 0x82, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010101, @rand_addr=0x64010102, @remote]}, @timestamp_addr={0x44, 0xc, 0x3d, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x6}]}, @noop, @timestamp_addr={0x44, 0x24, 0x6a, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast2, 0x7f}, {@remote, 0xfa}, {@remote, 0xf2}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x41) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}}, 0x0) 212.231185ms ago: executing program 6 (id=4307): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000440)=0x5, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1d, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x220, 0x220, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="020a07020700000029bd7000f9dbdf2505001a00ffffff440000000000000000000000fe8800000000000000000000bf61b4a3260014ca"], 0x38}}, 0x4) (async) setsockopt(r3, 0xc8, 0x14, 0x0, 0x62) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007910480000000000910442000000000095000000", @ANYRES32=r2], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000201000008000300", @ANYRES32=r7, @ANYBLOB="08003f0000020000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="40030000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="24033300d0000000080211000001080211000000080211000000000004000000", @ANYBLOB='\x00'/782], 0x340}}, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="39e12d5cdb8d8ef3b2d59464c13900cd", 0x10) 211.906832ms ago: executing program 7 (id=4308): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) r1 = socket(0x11, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000)=[{{&(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2}}], 0x1, 0x24044015) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 163.581964ms ago: executing program 9 (id=4309): socket$netlink(0x10, 0x3, 0x9) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x240, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x64, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffd}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000000}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "43423b377d5cb9a6ba53457b8eb5a469"}]}, @NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffe}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x5c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xf}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9e3a477bf9cf6cdb6f69e4b5bdb4777f"}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0x1c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}, @NL802154_ATTR_SEC_KEY={0xcc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "386a74c63d799131c9e625ea203549d14b2df818f1d097d5d50e26b3834b1f02"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "16cceb200de0d450a1ae7047a780c6f7"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "bad6e3aecde824354947335b1b105b81"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "67fb3b4656df3a8d2250108b799d134bea042b97078bec1b3e0f6f830b295f15"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x240}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000400), &(0x7f0000000500)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff036bd9a3d0392eb005ead97f", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 90.525418ms ago: executing program 9 (id=4310): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) r1 = socket$inet6(0x10, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r5}, 0x94) write(r1, &(0x7f00000007c0)="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", 0xfc) 0s ago: executing program 7 (id=4311): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x1020703971be172d}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0x1f, r2}]}, 0x44}}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newlink={0xa8, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20018}, [@IFLA_TXQLEN={0x8, 0xd, 0x10}, @IFLA_IFALIAS={0x14, 0x14, 'ip6gretap0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_VFINFO_LIST={0x64, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x8}}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x5, 0xf5e, 0x800000}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2e28, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0x3, @remote}}]}]}]}, 0xa8}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r9, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000880)={{r7, &(0x7f0000000580)='*\x00', 0x400, &(0x7f00000005c0)={@align=0x8, {0x1, 0x910e, 0x1ff, 0x2}}, 0x544, &(0x7f0000000600), &(0x7f0000000640)=0xf}, {[0x8, 0x8, 0x5d, 0x40]}, 0xffffffff, 0xea, &(0x7f0000000780)=""/234}) bind$alg(r11, &(0x7f0000000900)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(twofish-generic)\x00'}, 0x58) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r9, 0x42035, 0x2d85}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x14, &(0x7f0000000200)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f00000002c0)='syzkaller\x00', 0xfff, 0x49, &(0x7f0000000340)=""/73, 0x40f00, 0x21, '\x00', r9, 0x0, r12, 0x8, &(0x7f0000000400)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xb, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{0x0, 0x2, 0x4, 0x2}], 0x10, 0x88}, 0x94) kernel console output (not intermixed with test programs): T25] lo speed is unknown, defaulting to 1000 [ 345.283545][T17916] netlink: 'syz.0.3076': attribute type 1 has an invalid length. [ 345.340618][T17916] 8021q: adding VLAN 0 to HW filter on device bond15 [ 345.354547][T17874] net_ratelimit: 5 callbacks suppressed [ 345.354562][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 345.483978][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 345.621999][ T5857] tipc: Node number set to 11578026 [ 345.782056][T17944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.784355][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 345.913828][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 346.024193][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 346.161235][T17963] netlink: 'syz.5.3082': attribute type 1 has an invalid length. [ 346.173939][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 346.326096][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 346.434557][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 346.544183][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 346.604025][ T5624] Bluetooth: hci6: command tx timeout [ 346.755761][T17990] netlink: 'syz.0.3084': attribute type 34 has an invalid length. [ 348.364535][T17925] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.387892][T17588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 348.413374][T17588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 348.417614][T17588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 348.482506][T17588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 348.498502][T17588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 348.536713][T17588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 348.538582][T17588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 348.548481][T17588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 348.565455][T18040] __nla_validate_parse: 29 callbacks suppressed [ 348.565472][T18040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3086'. [ 348.784344][T17588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.840022][T17588] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.854781][T17884] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.854966][T17884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.870657][T17884] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.870755][T17884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.912768][T18071] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3093'. [ 349.210718][T18089] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3097'. [ 349.227338][ T5624] Bluetooth: hci5: ACL packet for unknown connection handle 3484 [ 349.245468][T18089] syzkaller1: entered promiscuous mode [ 349.245489][T18089] syzkaller1: entered allmulticast mode [ 349.275582][T18089] macvlan2: entered promiscuous mode [ 349.275601][T18089] macvlan2: entered allmulticast mode [ 349.275983][T18089] bridge0: port 3(macvlan2) entered blocking state [ 349.276123][T18089] bridge0: port 3(macvlan2) entered disabled state [ 349.473433][T18100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3099'. [ 349.509741][T17588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.587738][T17588] veth0_vlan: entered promiscuous mode [ 349.609052][T17588] veth1_vlan: entered promiscuous mode [ 349.654701][T17588] veth0_macvtap: entered promiscuous mode [ 349.659827][T17588] veth1_macvtap: entered promiscuous mode [ 349.693645][T17588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.708836][T17588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.732195][T18109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3102'. [ 349.755627][T18109] hsr_slave_1 (unregistering): left promiscuous mode [ 349.787316][T17884] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.788735][T17885] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.789238][T17885] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.789274][T17885] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.936516][T17884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.936536][T17884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.026764][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.026786][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.222101][T18132] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3106'. [ 350.367159][T18138] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3108'. [ 350.377225][ T150] net_ratelimit: 30 callbacks suppressed [ 350.377243][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 350.428731][T18141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3109'. [ 350.484947][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 350.594647][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 350.704032][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 350.725441][T18161] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3116'. [ 350.727407][T18161] netlink: 'syz.5.3116': attribute type 1 has an invalid length. [ 350.727425][T18161] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3116'. [ 350.813892][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 350.925812][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 351.034045][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 351.154506][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 351.189908][T18138] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 351.190326][T18140] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 351.190672][T18144] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 351.217841][T18181] Cannot find set identified by id 0 to match [ 351.265702][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 351.374720][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 351.450018][T18188] netlink: 'syz.2.3124': attribute type 1 has an invalid length. [ 351.474891][T18190] netlink: 'syz.5.3125': attribute type 32 has an invalid length. [ 351.672003][T18201] bond3: option lp_interval: invalid value (0) [ 351.672027][T18201] bond3: option lp_interval: allowed values 1 - 2147483647 [ 351.675304][T18201] bond3 (unregistering): Released all slaves [ 351.729305][T18204] syz_tun: entered allmulticast mode [ 352.092025][T17880] IPVS: starting estimator thread 0... [ 352.092023][T18223] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 352.184387][T18224] IPVS: using max 30 ests per chain, 72000 per kthread [ 355.473937][T17881] net_ratelimit: 37 callbacks suppressed [ 355.473961][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 355.583985][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 355.694273][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 355.804465][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 355.914087][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 356.024448][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 356.144358][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 356.254717][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 356.364420][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 356.474617][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 360.484317][T17885] net_ratelimit: 35 callbacks suppressed [ 360.484338][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 360.594743][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 360.714108][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 360.824175][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 360.934156][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 361.044335][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 361.154683][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 361.264176][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 361.374263][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 361.484201][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 365.504265][T17884] net_ratelimit: 35 callbacks suppressed [ 365.504287][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 365.614183][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 365.723998][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 365.834192][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 365.953899][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 366.074566][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 366.183852][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 366.293852][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 366.404176][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 366.513825][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 370.563884][T17885] net_ratelimit: 35 callbacks suppressed [ 370.563907][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 370.673820][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 370.794133][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 370.903882][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 371.014097][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 371.123894][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 371.233820][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 371.344232][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 371.453854][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 371.564274][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 375.633851][T17886] net_ratelimit: 36 callbacks suppressed [ 375.633890][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 375.743865][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 375.854169][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 375.964003][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 376.073807][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 376.184127][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 376.293822][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 376.403881][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 376.513859][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 376.623874][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 380.694459][T17884] net_ratelimit: 36 callbacks suppressed [ 380.694492][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 380.803866][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 380.913961][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 381.023835][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 381.134195][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 381.244147][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 381.354171][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 381.463810][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 381.574557][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 381.693825][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 382.209833][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.411769][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 384.417594][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 384.423443][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 384.435319][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 384.435914][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 384.456143][T18249] __nla_validate_parse: 201 callbacks suppressed [ 384.456158][T18249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3143'. [ 384.460496][T18253] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3144'. [ 384.516979][T18254] netlink: 'syz.1.3139': attribute type 32 has an invalid length. [ 384.517056][T18254] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3139'. [ 384.562434][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 384.568224][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 384.570712][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 384.571561][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 384.572592][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 385.191716][T18246] lo speed is unknown, defaulting to 1000 [ 385.193382][T18246] lo speed is unknown, defaulting to 1000 [ 385.338007][T18257] lo speed is unknown, defaulting to 1000 [ 385.446054][T18296] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3154'. [ 385.481449][T18296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.491248][T18296] batman_adv: batadv0: Interface activated: dvmrp0 [ 385.502351][T18296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.516986][T18296] 8021q: adding VLAN 0 to HW filter on device bond2 [ 385.518969][T18257] lo speed is unknown, defaulting to 1000 [ 385.529891][T18303] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3154'. [ 385.829893][T18308] netlink: 'syz.2.3156': attribute type 32 has an invalid length. [ 385.829991][T18308] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3156'. [ 386.019407][T17884] net_ratelimit: 35 callbacks suppressed [ 386.019429][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 386.158337][T18325] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3159'. [ 386.158381][T18325] openvswitch: netlink: Message has 512 unknown bytes. [ 386.225325][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 386.288745][T18333] netlink: 53 bytes leftover after parsing attributes in process `syz.1.3161'. [ 386.335173][T18246] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.335283][T18246] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.335422][T18246] bridge_slave_0: entered allmulticast mode [ 386.337810][T18246] bridge_slave_0: entered promiscuous mode [ 386.340467][T18246] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.340588][T18246] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.341034][T18246] bridge_slave_1: entered allmulticast mode [ 386.342714][T18246] bridge_slave_1: entered promiscuous mode [ 386.447633][ T5624] Bluetooth: hci4: command tx timeout [ 386.450346][T18246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.503080][T18246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.582192][T18257] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.582350][T18257] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.582470][T18257] bridge_slave_0: entered allmulticast mode [ 386.586567][T18257] bridge_slave_0: entered promiscuous mode [ 386.589733][T18257] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.589828][T18257] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.590275][T18257] bridge_slave_1: entered allmulticast mode [ 386.591980][T18257] bridge_slave_1: entered promiscuous mode [ 386.606127][T18246] team0: Port device team_slave_0 added [ 386.607916][ T5624] Bluetooth: hci7: command tx timeout [ 386.636057][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3167'. [ 386.651025][T18246] team0: Port device team_slave_1 added [ 386.711525][T18352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3165'. [ 386.720786][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 386.745405][T18257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.817873][T18362] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 386.821539][T18257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.882327][T18246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.882344][T18246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.882368][T18246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.913193][T18364] netlink: 'syz.1.3169': attribute type 1 has an invalid length. [ 386.937398][T18257] team0: Port device team_slave_0 added [ 386.989878][T18246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.989893][T18246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.989948][T18246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.027530][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 387.049612][T18257] team0: Port device team_slave_1 added [ 387.078579][T18366] bond1: (slave gretap1): making interface the new active one [ 387.079965][T18366] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 387.131219][T18257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.131234][T18257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.131258][T18257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.238443][T18257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.238460][T18257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.238487][T18257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.364233][T18246] hsr_slave_0: entered promiscuous mode [ 387.366989][T18246] hsr_slave_1: entered promiscuous mode [ 387.367831][T18246] debugfs: 'hsr0' already exists in 'hsr' [ 387.367851][T18246] Cannot create hsr debugfs directory [ 387.408226][T18257] hsr_slave_0: entered promiscuous mode [ 387.408914][T18257] hsr_slave_1: entered promiscuous mode [ 387.409372][T18257] debugfs: 'hsr0' already exists in 'hsr' [ 387.409392][T18257] Cannot create hsr debugfs directory [ 387.550526][T18387] netlink: 'syz.1.3177': attribute type 1 has an invalid length. [ 387.875809][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 387.989071][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 388.062850][T18246] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 388.091865][T18246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.115383][T18246] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 388.139357][T18246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.142393][T18246] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 388.159288][T18246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.160498][T18246] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 388.167776][T18246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.233860][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 388.368898][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 388.428810][T18425] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 388.451737][T18257] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 388.464071][T18257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.466040][T18257] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 388.470563][T18257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.511799][T18257] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 388.523103][T18257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.530969][ T5624] Bluetooth: hci4: command tx timeout [ 388.541959][T18257] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 388.555200][T18257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.684109][ T5624] Bluetooth: hci7: command tx timeout [ 388.752432][T18246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.798570][T18246] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.831707][T17880] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.831810][T17880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.861360][T18450] netlink: 'syz.2.3188': attribute type 10 has an invalid length. [ 388.861572][T18450] tipc: Resetting bearer [ 388.883353][T18450] tipc: Resetting bearer [ 388.889017][T18450] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.896337][T18450] bond0: (slave team0): Enslaving as an active interface with an up link [ 388.906140][T18450] netlink: 'syz.2.3188': attribute type 10 has an invalid length. [ 388.906237][T18450] tipc: Resetting bearer [ 388.931646][T17880] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.931749][T17880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.969704][T18454] C: renamed from lo (while UP) [ 389.026508][T18454] IPVS: ip_vs_edit_dest(): server weight less than zero [ 389.098070][T18257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.219294][T18257] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.248976][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.249117][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.260507][T17880] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.260610][T17880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.272325][T18466] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 389.453481][T18473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.502706][T18473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.589118][T18479] netlink: 'syz.2.3194': attribute type 9 has an invalid length. [ 389.589140][T18479] __nla_validate_parse: 14 callbacks suppressed [ 389.589154][T18479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3194'. [ 389.648766][T18479] netlink: 'syz.2.3194': attribute type 9 has an invalid length. [ 389.648788][T18479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3194'. [ 389.655798][T17885] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.658957][ T150] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.658996][ T150] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.659028][ T150] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.861301][T18246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.955611][ T5624] Bluetooth: hci1: ACL packet for unknown connection handle 3484 [ 390.008887][T18488] lo speed is unknown, defaulting to 1000 [ 390.027394][T18498] Bluetooth: hci0: unsupported parameter 5161 [ 390.027412][T18498] Bluetooth: hci0: unsupported parameter 8192 [ 390.027496][T18498] Bluetooth: hci0: unsupported parameter 5161 [ 390.027507][T18498] Bluetooth: hci0: unsupported parameter 8192 [ 390.027717][T18488] lo speed is unknown, defaulting to 1000 [ 390.604131][ T5624] Bluetooth: hci4: command tx timeout [ 390.744517][T18525] netlink: 'syz.5.3201': attribute type 1 has an invalid length. [ 390.763995][ T5624] Bluetooth: hci7: command tx timeout [ 390.807502][T18257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.148239][T18536] netlink: 'syz.1.3205': attribute type 1 has an invalid length. [ 391.167529][T18246] veth0_vlan: entered promiscuous mode [ 391.193546][T18246] veth1_vlan: entered promiscuous mode [ 391.246675][T18543] vlan0: left allmulticast mode [ 391.246696][T18543] veth0_vlan: left allmulticast mode [ 391.394720][T17885] net_ratelimit: 18 callbacks suppressed [ 391.394741][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 391.400023][T18246] veth0_macvtap: entered promiscuous mode [ 391.455097][T18246] veth1_macvtap: entered promiscuous mode [ 391.469191][T18546] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3207'. [ 391.469215][T18546] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3207'. [ 391.526162][T18246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.549976][T18246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.567978][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 391.595662][ T150] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.595705][ T150] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.595739][ T150] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.595770][ T150] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.672345][T18556] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3209'. [ 391.674864][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 391.680228][T18556] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3209'. [ 391.701498][T18556] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3209'. [ 391.720853][T18556] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3209'. [ 391.723260][T18556] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3209'. [ 391.746543][T18556] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3209'. [ 391.795943][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 392.003168][T17880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.003191][T17880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.146826][T18257] veth0_vlan: entered promiscuous mode [ 392.155564][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 392.157532][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.157550][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.190640][T18257] veth1_vlan: entered promiscuous mode [ 392.325581][T18257] veth0_macvtap: entered promiscuous mode [ 392.345649][T18257] veth1_macvtap: entered promiscuous mode [ 392.388085][T18581] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 392.411352][T18257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.448953][T18257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.525978][T17881] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.526556][T17886] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.526596][T17886] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.683833][ T5624] Bluetooth: hci4: command tx timeout [ 392.843892][ T5624] Bluetooth: hci7: command tx timeout [ 392.888533][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.888555][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.954252][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.954271][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.964250][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 392.964296][T17886] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.966387][T18604] netlink: 'syz.6.3227': attribute type 1 has an invalid length. [ 392.974512][T18604] tipc: Started in network mode [ 392.974538][T18604] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 392.974875][T18604] tipc: Enabled bearer , priority 10 [ 393.049750][T18607] netlink: 'syz.2.3228': attribute type 4 has an invalid length. [ 393.082401][T18607] team0: MTU too low for tipc bearer [ 393.082424][T18607] tipc: Disabling bearer [ 393.142605][T18607] .`: renamed from bond0 (while UP) [ 393.165328][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 393.185105][T18609] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 393.273860][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 393.307170][ T5624] Bluetooth: hci5: unexpected event 0x05 length: 0 < 4 [ 393.354817][T18621] xt_policy: too many policy elements [ 393.384313][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 393.984585][ T7482] tipc: Node number set to 10070698 [ 395.920546][T18608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.922344][T18637] __nla_validate_parse: 37 callbacks suppressed [ 395.922377][T18637] netlink: 4096 bytes leftover after parsing attributes in process `syz.7.3235'. [ 396.105966][T18655] netlink: 666 bytes leftover after parsing attributes in process `syz.6.3239'. [ 396.212202][ T31] audit: type=1804 audit(1791282531.921:10): pid=18658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3237" name="/newroot/73/cgroup.controllers" dev="tmpfs" ino=396 res=1 errno=0 [ 396.216152][ T31] audit: type=1800 audit(1791282531.931:11): pid=18658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3237" name="cgroup.controllers" dev="tmpfs" ino=396 res=0 errno=0 [ 396.304588][T18663] netlink: 'syz.5.3238': attribute type 2 has an invalid length. [ 396.423921][ T150] net_ratelimit: 25 callbacks suppressed [ 396.423965][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 396.533996][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 396.551442][T18671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3243'. [ 396.654030][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 396.779444][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 396.885448][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 396.890150][T18688] netlink: 'syz.1.3249': attribute type 15 has an invalid length. [ 396.920449][T18690] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3250'. [ 396.921334][T18690] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3250'. [ 396.990095][T18692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3251'. [ 396.990886][T18692] netlink: 'syz.6.3251': attribute type 4 has an invalid length. [ 396.990906][T18692] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3251'. [ 397.024399][T18692] .`: renamed from bond0 (while UP) [ 397.088494][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 397.141283][T18696] netlink: 'syz.7.3254': attribute type 1 has an invalid length. [ 397.194511][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 397.196276][T18696] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3254'. [ 397.213030][T18697] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3254'. [ 397.305454][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 397.316374][T18711] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3257'. [ 397.415574][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 397.528778][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 397.654953][T18739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.682265][T18739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.892231][T18753] bond0: option min_links: invalid value (18446744073709551614) [ 397.892259][T18753] bond0: option min_links: allowed values 0 - 2147483647 [ 397.928573][T18753] bond0 (unregistering): Released all slaves [ 398.288032][T18781] netlink: 'syz.5.3277': attribute type 1 has an invalid length. [ 398.422530][T18787] netlink: 'syz.7.3281': attribute type 28 has an invalid length. [ 398.422555][T18787] netlink: 'syz.7.3281': attribute type 3 has an invalid length. [ 398.736443][T18819] block nbd2: Unsupported socket: should be TCP or UNIX. [ 398.801318][T17884] IPVS: starting estimator thread 0... [ 398.881741][T18830] netlink: 'syz.7.3291': attribute type 10 has an invalid length. [ 398.884712][T18824] IPVS: using max 34 ests per chain, 81600 per kthread [ 399.801158][T18889] netlink: 'syz.7.3308': attribute type 11 has an invalid length. [ 400.023307][T18907] netlink: 'syz.2.3314': attribute type 49 has an invalid length. [ 400.289657][T18929] veth0: entered promiscuous mode [ 400.396151][T18929] netlink: 'syz.2.3318': attribute type 11 has an invalid length. [ 400.413604][T18928] veth0: left promiscuous mode [ 400.448408][T18941] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 400.679822][T18949] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 400.910250][T18974] x_tables: duplicate underflow at hook 1 [ 400.955004][T18974] x_tables: duplicate underflow at hook 1 [ 401.027881][T18982] : renamed from bond0 [ 401.128052][T18984] __nla_validate_parse: 12 callbacks suppressed [ 401.128075][T18984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3330'. [ 401.132125][T18984] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3330'. [ 401.175128][T18986] netlink: 'syz.7.3332': attribute type 1 has an invalid length. [ 401.175149][T18986] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3332'. [ 401.498727][T19006] syzkaller0: entered promiscuous mode [ 401.498751][T19006] syzkaller0: entered allmulticast mode [ 401.516846][T17880] net_ratelimit: 43 callbacks suppressed [ 401.516865][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 401.595797][T19011] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3337'. [ 401.596846][T19010] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3336'. [ 401.643406][T19011] bond2 (unregistering): Released all slaves [ 401.722435][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3338'. [ 401.722460][T19019] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3338'. [ 401.752710][T19013] netlink: 'syz.7.3336': attribute type 1 has an invalid length. [ 401.752730][T19013] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3336'. [ 401.796706][T19013] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3336'. [ 401.804281][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 401.913399][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3340'. [ 401.913450][T19025] openvswitch: netlink: Missing key (keys=40, expected=100) [ 401.954402][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 402.064270][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 402.148839][T19042] syzkaller0: entered promiscuous mode [ 402.148863][T19042] syzkaller0: entered allmulticast mode [ 402.175591][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 402.192049][T19045] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 402.285098][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 402.393814][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 402.504236][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 402.661054][T19057] x_tables: duplicate underflow at hook 1 [ 402.745116][T17886] IPVS: starting estimator thread 0... [ 402.834242][T19062] IPVS: using max 28 ests per chain, 67200 per kthread [ 405.030952][T19034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 405.268315][T19080] netlink: 'syz.7.3356': attribute type 21 has an invalid length. [ 405.280513][T19084] netlink: 'syz.2.3359': attribute type 2 has an invalid length. [ 405.398323][T19088] netlink: 'syz.1.3361': attribute type 1 has an invalid length. [ 405.602275][T19102] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 405.605009][T19102] bond0 (unregistering): Released all slaves [ 405.859133][T19121] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 406.095772][T19133] netlink: 'syz.6.3375': attribute type 1 has an invalid length. [ 406.121107][T19083] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 406.211195][T19135] __nla_validate_parse: 12 callbacks suppressed [ 406.211217][T19135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3376'. [ 406.281952][T19141] netlink: 'syz.6.3380': attribute type 2 has an invalid length. [ 406.458312][T19150] syzkaller0: entered promiscuous mode [ 406.458337][T19150] syzkaller0: entered allmulticast mode [ 406.587980][T19156] net_ratelimit: 34 callbacks suppressed [ 406.588001][T19156] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 406.673835][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 406.784244][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 406.784374][T19160] netlink: 524 bytes leftover after parsing attributes in process `syz.1.3387'. [ 406.835046][T19163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3388'. [ 406.895967][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 406.899063][T19167] netlink: zone id is out of range [ 406.899086][T19167] netlink: zone id is out of range [ 406.899140][T19167] netlink: zone id is out of range [ 406.899148][T19167] netlink: zone id is out of range [ 406.899157][T19167] netlink: zone id is out of range [ 406.899223][T19167] netlink: zone id is out of range [ 407.156612][T19176] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3391'. [ 407.190233][T19184] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3392'. [ 407.608452][T19210] x_tables: duplicate underflow at hook 2 [ 407.640334][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3403'. [ 407.647842][T19211] x_tables: duplicate underflow at hook 2 [ 407.899148][T19218] vlan3: entered promiscuous mode [ 407.899172][T19218] geneve1: entered promiscuous mode [ 407.899356][T19218] vlan3: entered allmulticast mode [ 407.899371][T19218] geneve1: entered allmulticast mode [ 407.958461][T19221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3404'. [ 407.982024][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3406'. [ 407.995074][T19221] hsr_slave_1 (unregistering): left promiscuous mode [ 408.195018][T19226] syzkaller1: entered promiscuous mode [ 408.195043][T19226] syzkaller1: entered allmulticast mode [ 408.219567][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3409'. [ 408.510058][T19246] netlink: 'syz.2.3413': attribute type 17 has an invalid length. [ 408.510088][T19246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3413'. [ 408.520992][T19246] gretap0: entered promiscuous mode [ 408.548203][T19246] gretap0: left promiscuous mode [ 409.064533][T19286] veth3: entered promiscuous mode [ 409.478864][T19261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 409.482619][T19305] netlink: 'syz.6.3430': attribute type 1 has an invalid length. [ 409.651493][T19311] netlink: 'syz.1.3431': attribute type 1 has an invalid length. [ 409.871897][T19325] syzkaller0: entered promiscuous mode [ 409.871921][T19325] syzkaller0: entered allmulticast mode [ 410.048457][T19334] gretap0: entered promiscuous mode [ 410.217771][T19349] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 411.312105][T19404] __nla_validate_parse: 14 callbacks suppressed [ 411.312128][T19404] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3459'. [ 411.475174][T19420] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3462'. [ 411.613866][T17884] net_ratelimit: 59 callbacks suppressed [ 411.613899][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 411.738408][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 411.843885][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 411.953789][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 412.063846][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 412.174326][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 412.285597][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 412.403867][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 412.524625][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 412.633895][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 414.304325][T19405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.508375][T19450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3467'. [ 414.508941][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3467'. [ 414.804796][T19456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3472'. [ 415.435304][T19455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.908884][T19534] netlink: 232 bytes leftover after parsing attributes in process `syz.7.3489'. [ 415.950836][T19539] x_tables: duplicate underflow at hook 2 [ 415.972606][T19543] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3489'. [ 416.196329][T19555] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 416.196984][T19555] team0: Device ipvlan2 is already an upper device of the team interface [ 416.229181][T19559] netlink: 'syz.5.3496': attribute type 4 has an invalid length. [ 418.016174][ T150] net_ratelimit: 33 callbacks suppressed [ 418.016195][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 418.126557][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 418.234451][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 418.290877][T19572] netlink: 'syz.6.3497': attribute type 1 has an invalid length. [ 418.354874][T19574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3500'. [ 418.394367][T19566] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3497'. [ 418.468648][T19577] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3497'. [ 418.552047][T19590] x_tables: duplicate underflow at hook 1 [ 418.552919][T19583] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 418.577625][T19583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3501'. [ 418.577646][T19583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3501'. [ 418.581275][T19583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.656209][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 418.785858][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 418.887390][T19609] xt_time: unknown flags 0x68 [ 418.895169][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 419.024903][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 419.134145][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 419.282268][T19639] lo speed is unknown, defaulting to 1000 [ 419.378147][T19642] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 419.386260][T19642] bond1 (unregistering): Released all slaves [ 419.563028][T19656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3519'. [ 419.563055][T19656] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 419.747885][T19670] virt_wifi0: entered allmulticast mode [ 420.228797][T19698] tipc: Started in network mode [ 420.228827][T19698] tipc: Node identity 8a608ecf0644, cluster identity 4711 [ 420.228982][T19698] tipc: Enabled bearer , priority 0 [ 420.259877][T19654] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 420.381998][T19698] syzkaller0: entered promiscuous mode [ 420.382024][T19698] syzkaller0: entered allmulticast mode [ 420.382762][T19698] tipc: Resetting bearer [ 420.382857][T19701] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3529'. [ 420.418454][T19697] tipc: Resetting bearer [ 420.942457][T19722] netlink: 'syz.5.3533': attribute type 21 has an invalid length. [ 421.620232][T19727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3534'. [ 422.979725][T19697] tipc: Disabling bearer [ 423.031301][ T1235] tipc: Node number set to 2351206095 [ 423.039628][T17881] net_ratelimit: 7 callbacks suppressed [ 423.039645][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 423.167244][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 423.227067][T19733] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3536'. [ 423.277680][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 423.374126][T19751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3543'. [ 423.374427][T19751] netlink: 576 bytes leftover after parsing attributes in process `syz.5.3543'. [ 423.444536][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 423.555049][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 423.605753][T19763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3549'. [ 423.675928][T19766] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 423.681843][T19766] bond2 (unregistering): Released all slaves [ 423.739176][T19773] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 423.809324][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 423.860561][T19778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3552'. [ 423.937856][T19782] netlink: 'syz.1.3552': attribute type 30 has an invalid length. [ 423.988060][T19789] netlink: 'syz.2.3556': attribute type 1 has an invalid length. [ 424.069903][T19782] bond3: option arp_missed_max: invalid value (0) [ 424.070051][T19782] bond3: option arp_missed_max: allowed values 1 - 255 [ 424.080806][T19782] bond3 (unregistering): Released all slaves [ 424.173890][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 424.305312][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 424.436125][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 424.700699][T19824] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3565'. [ 424.741743][T19822] Cannot find set identified by id 4 to match [ 424.755855][T19825] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3565'. [ 424.767267][T19829] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3565'. [ 424.779283][T19825] netlink: 'syz.7.3565': attribute type 2 has an invalid length. [ 424.781142][T19824] netlink: 'syz.7.3565': attribute type 2 has an invalid length. [ 425.102107][T19837] gretap1: entered promiscuous mode [ 425.111107][T19837] batman_adv: batadv0: Adding interface: gretap1 [ 425.111124][T19837] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.111150][T19837] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 425.118144][T19842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3569'. [ 425.118200][T19842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3569'. [ 425.228649][T19842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3569'. [ 425.401171][T19862] netlink: 'syz.6.3574': attribute type 10 has an invalid length. [ 425.413484][T19853] syzkaller0: entered promiscuous mode [ 425.413506][T19853] syzkaller0: entered allmulticast mode [ 425.456400][T19857] gretap1: entered promiscuous mode [ 425.456423][T19857] gretap1: entered allmulticast mode [ 425.473177][T19862] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.475479][T19862] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.504542][T19862] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.504637][T19862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.504888][T19862] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.505008][T19862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.547171][T19862] .`: (slave bridge0): Enslaving as an active interface with an up link [ 428.231995][T17880] net_ratelimit: 11 callbacks suppressed [ 428.232017][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 428.336374][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 428.426408][T19927] __nla_validate_parse: 8 callbacks suppressed [ 428.426427][T19927] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3584'. [ 428.451380][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 428.556859][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 428.558490][T19932] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 428.625400][T19936] netlink: 'syz.7.3590': attribute type 1 has an invalid length. [ 428.625421][T19936] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3590'. [ 428.705350][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 428.870607][T19957] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3594'. [ 430.744611][T19952] sit0: entered promiscuous mode [ 430.755508][T19952] netlink: 'syz.1.3591': attribute type 1 has an invalid length. [ 430.755529][T19952] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3591'. [ 430.756672][T19950] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 430.756719][T19950] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 430.756740][T19950] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 430.779383][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 430.886671][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 430.939002][T19963] ovs-system: entered promiscuous mode [ 430.941538][T19963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.995412][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 431.151212][T19980] xt_hashlimit: size too large, truncated to 1048576 [ 431.522089][T20001] netlink: 'syz.6.3607': attribute type 1 has an invalid length. [ 431.576277][T20005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3607'. [ 431.578610][T20001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.580303][T20004] netlink: 'syz.1.3608': attribute type 4 has an invalid length. [ 431.676389][T20001] bond2: (slave bridge1): making interface the new active one [ 431.678101][T20001] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 431.710101][T20012] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3610'. [ 432.021289][T20029] 8021q: VLANs not supported on ip6_vti0 [ 432.120509][T20034] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3620'. [ 432.329652][T20047] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3623'. [ 432.577734][T20062] netlink: 'syz.1.3627': attribute type 46 has an invalid length. [ 432.717850][T20071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3631'. [ 432.786413][T20071] bond2: Invalid ad_actor_system MAC address. [ 432.786436][T20071] bond2: option ad_actor_system: invalid value (1) [ 432.786633][T20074] block nbd5: not configured, cannot reconfigure [ 432.788063][T20071] bond2 (unregistering): Released all slaves [ 433.214725][T20095] tap0: tun_chr_ioctl cmd 2148553947 [ 433.319357][T20102] macvtap0: entered allmulticast mode [ 433.319383][T20102] veth0_macvtap: entered allmulticast mode [ 433.334492][ T150] net_ratelimit: 17 callbacks suppressed [ 433.334512][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 433.444171][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 433.553944][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 433.660479][T20112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3643'. [ 433.673548][T20113] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3643'. [ 433.683964][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 433.697415][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3643'. [ 433.697616][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3643'. [ 433.697793][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3643'. [ 433.697998][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3643'. [ 433.698965][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3643'. [ 433.699750][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3643'. [ 433.699976][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3643'. [ 433.700147][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3643'. [ 433.801333][T20118] wlan1 speed is unknown, defaulting to 1000 [ 433.801406][T20118] wlan1 speed is unknown, defaulting to 1000 [ 433.802361][T20118] wlan1 speed is unknown, defaulting to 1000 [ 433.815572][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 433.828785][T20118] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 433.828819][T20118] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 433.828859][T20118] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 433.869069][T20121] digital: digital_start_poll: Unknown protocol [ 433.876984][T20122] digital: digital_start_poll: Unknown protocol [ 433.897531][T20118] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 433.924223][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 434.010228][T20118] wlan1 speed is unknown, defaulting to 1000 [ 434.028801][T20118] wlan1 speed is unknown, defaulting to 1000 [ 434.032326][T20118] wlan1 speed is unknown, defaulting to 1000 [ 434.035408][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 434.062556][T20118] wlan1 speed is unknown, defaulting to 1000 [ 434.073922][T20118] wlan1 speed is unknown, defaulting to 1000 [ 434.078704][T20118] wlan1 speed is unknown, defaulting to 1000 [ 434.080798][T20118] wlan1 speed is unknown, defaulting to 1000 [ 434.082763][T20118] wlan1 speed is unknown, defaulting to 1000 [ 434.119067][T20134] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 434.144525][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 434.254724][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 434.367047][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 435.245348][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 435.250088][T20138] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 436.803443][T20121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.292739][T20196] syzkaller1: entered promiscuous mode [ 437.292763][T20196] syzkaller1: entered allmulticast mode [ 437.326054][T20205] netlink: 'syz.7.3664': attribute type 5 has an invalid length. [ 437.350789][T20216] veth1_macvtap: left promiscuous mode [ 438.058737][T20270] netlink: 'syz.7.3681': attribute type 1 has an invalid length. [ 438.092603][T20270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.125565][T20270] bond1: (slave geneve2): making interface the new active one [ 438.130606][T20270] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 438.244519][T20277] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 438.256333][T20279] x_tables: duplicate underflow at hook 1 [ 438.290758][T20285] x_tables: duplicate underflow at hook 1 [ 438.367385][T20288] netlink: 'syz.5.3684': attribute type 18 has an invalid length. [ 438.408581][T20288] netlink: 'syz.5.3684': attribute type 18 has an invalid length. [ 438.414263][T17887] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.414983][T17887] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.415018][T17887] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.415051][T17887] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.444343][T17884] net_ratelimit: 38 callbacks suppressed [ 438.444387][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 438.555104][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 438.620188][T20304] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 438.684096][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 438.783003][T20315] netlink: 'syz.6.3691': attribute type 10 has an invalid length. [ 438.798909][T20315] team0: Port device dummy0 added [ 438.834471][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 438.947567][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 439.056492][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 439.106789][T20338] __nla_validate_parse: 68 callbacks suppressed [ 439.106811][T20338] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3695'. [ 439.146541][T20345] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 439.174243][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 439.285511][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 439.407670][T20363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3704'. [ 439.553842][T20378] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.692911][T20396] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3711'. [ 439.706462][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3711'. [ 440.087815][T20412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3715'. [ 440.372251][T20426] IPv6: Can't replace route, no match found [ 440.386677][T20426] netlink: 'syz.1.3718': attribute type 10 has an invalid length. [ 440.525471][T20440] netlink: 'syz.7.3722': attribute type 4 has an invalid length. [ 440.525494][T20440] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3722'. [ 440.554128][T20440] .`: renamed from bond0 (while UP) [ 440.890640][T20468] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!00000000000000000000003ÿÿÿ [ 440.970023][T20477] netlink: 'syz.6.3729': attribute type 8 has an invalid length. [ 441.789210][T20507] netlink: 'syz.6.3733': attribute type 12 has an invalid length. [ 441.789241][T20507] netlink: 'syz.6.3733': attribute type 29 has an invalid length. [ 441.789254][T20507] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3733'. [ 441.789271][T20507] netlink: 59 bytes leftover after parsing attributes in process `syz.6.3733'. [ 441.821604][T17881] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.821697][T17881] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.821730][T17881] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.821762][T17881] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.969427][T20515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3734'. [ 442.066205][T20516] bond0: option resend_igmp: invalid value (32767) [ 442.066231][T20516] bond0: option resend_igmp: allowed values 0 - 255 [ 442.073563][T20516] bond0 (unregistering): Released all slaves [ 442.081720][T20526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3736'. [ 442.127711][T20532] Bluetooth: hci0: unsupported parameter 5134 [ 442.127732][T20532] Bluetooth: hci0: unsupported parameter 8192 [ 442.127743][T20532] Bluetooth: hci0: unsupported parameter 5134 [ 442.127752][T20532] Bluetooth: hci0: unsupported parameter 8192 [ 442.142269][T20531] Bluetooth: MGMT ver 1.23 [ 442.439852][T20549] bond0: entered promiscuous mode [ 442.439877][T20549] bond0: entered allmulticast mode [ 443.009134][T20578] validate_nla: 2 callbacks suppressed [ 443.009149][T20578] netlink: 'syz.6.3753': attribute type 8 has an invalid length. [ 443.487125][T17884] net_ratelimit: 36 callbacks suppressed [ 443.487148][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 443.594795][T20568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 443.596420][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 443.704666][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 443.798687][T20600] netlink: 'syz.6.3762': attribute type 2 has an invalid length. [ 443.813939][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 443.967557][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 444.012266][T20623] netlink: 'syz.1.3760': attribute type 2 has an invalid length. [ 444.171273][T20614] syzkaller0: entered promiscuous mode [ 444.171298][T20614] syzkaller0: entered allmulticast mode [ 444.174352][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 444.204136][ T5633] Bluetooth: hci7: command 0x0405 tx timeout [ 444.292697][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 444.393862][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 444.524297][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 444.634064][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 444.888215][T20608] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 444.888238][T20608] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 445.027596][T20676] __nla_validate_parse: 5 callbacks suppressed [ 445.027617][T20676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3774'. [ 445.089993][T20608] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 445.090017][T20608] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 445.524358][T20702] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.592862][T20702] bridge_slave_0 (unregistering): left allmulticast mode [ 445.592889][T20702] bridge_slave_0 (unregistering): left promiscuous mode [ 445.592984][T20702] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.726016][ T5624] Bluetooth: hci5: command 0x0406 tx timeout [ 445.771286][T20608] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 445.771307][T20608] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 445.800091][T20705] syzkaller1: entered promiscuous mode [ 445.800113][T20705] syzkaller1: entered allmulticast mode [ 445.927748][T20608] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 445.927840][T20608] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 446.089951][T20608] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 446.089973][T20608] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 446.090823][ T7482] wlan1 speed is unknown, defaulting to 1000 [ 446.090845][ T7482] syz2: Port: 1 Link DOWN [ 446.176164][T20608] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 446.176187][T20608] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 446.224914][T20608] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 446.224961][T20608] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 446.606882][T20760] batadv_slave_0: entered promiscuous mode [ 446.607904][T20760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3790'. [ 446.608055][T20760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.670189][T20760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.700481][T20764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3789'. [ 446.975314][T20776] batadv_slave_0: entered promiscuous mode [ 447.059126][T20775] batadv_slave_0: left promiscuous mode [ 447.557571][T20796] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3795'. [ 447.710839][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3798'. [ 448.015900][T20827] syzkaller0: entered promiscuous mode [ 448.015923][T20827] syzkaller0: entered allmulticast mode [ 448.047610][T20824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3803'. [ 448.047632][T20824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3803'. [ 448.442092][T20849] ip6gre1: entered allmulticast mode [ 448.452552][T20851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3805'. [ 448.494618][T17887] net_ratelimit: 26 callbacks suppressed [ 448.494639][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 448.605677][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 448.713847][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 448.764402][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 448.823856][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 448.933078][T20880] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3814'. [ 448.935672][T20874] netlink: 'syz.2.3812': attribute type 12 has an invalid length. [ 448.971362][T20876] netlink: 6 bytes leftover after parsing attributes in process `syz.7.3811'. [ 448.971378][T20876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.976563][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 449.105417][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 449.215163][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 449.309433][T20900] netlink: 'syz.6.3820': attribute type 4 has an invalid length. [ 449.459472][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 449.567263][T17884] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 449.787490][T20929] netlink: 'syz.2.3828': attribute type 83 has an invalid length. [ 449.829532][T20929] syzkaller0: entered promiscuous mode [ 449.829555][T20929] syzkaller0: entered allmulticast mode [ 450.110962][T20949] sit0: left promiscuous mode [ 450.161160][T20949] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.162949][T20950] __nla_validate_parse: 3 callbacks suppressed [ 450.162966][T20950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3832'. [ 450.163040][T20950] netlink: 'syz.1.3832': attribute type 1 has an invalid length. [ 450.277299][T20949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.281604][T20949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.306264][T20956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3834'. [ 450.366796][T20949] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 450.389276][T20949] vlan3: left promiscuous mode [ 450.389289][T20949] geneve1: left promiscuous mode [ 450.389398][T20949] vlan3: left allmulticast mode [ 450.389405][T20949] geneve1: left allmulticast mode [ 450.431806][T20952] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3833'. [ 450.432049][T20955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3834'. [ 450.452029][T17881] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.453027][T17881] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.473175][T17887] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.476269][T17884] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.819083][T20982] netlink: 'syz.1.3842': attribute type 2 has an invalid length. [ 450.819109][T20982] netlink: 'syz.1.3842': attribute type 2 has an invalid length. [ 450.967864][T20994] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 451.068754][T20989] syzkaller0: entered promiscuous mode [ 451.068787][T20989] syzkaller0: entered allmulticast mode [ 451.108707][T21008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3846'. [ 451.110001][T21008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3846'. [ 452.338075][T21035] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.3855'. [ 452.392107][T21037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3856'. [ 452.419079][T21039] netlink: 'syz.2.3857': attribute type 178 has an invalid length. [ 454.023945][T17886] net_ratelimit: 15 callbacks suppressed [ 454.023967][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 454.137137][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 454.163537][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3860'. [ 454.163574][T21049] netlink: 'syz.7.3860': attribute type 30 has an invalid length. [ 454.203041][T21052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3861'. [ 454.217558][T21053] netlink: 'syz.7.3860': attribute type 30 has an invalid length. [ 454.324272][T17887] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.324321][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 454.335249][T17881] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.336178][T17881] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.336214][T17881] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.432218][T21060] bond3: Removing last arp target with arp_interval on [ 454.440707][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 454.456742][T21060] netlink: 'syz.7.3862': attribute type 5 has an invalid length. [ 454.478165][T21060] geneve3: entered promiscuous mode [ 454.478186][T21060] geneve3: entered allmulticast mode [ 454.484630][T17886] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 454.504025][T17886] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 454.504075][T17886] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 454.504107][T17886] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 454.543869][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 454.572648][T21067] netlink: 'syz.6.3864': attribute type 11 has an invalid length. [ 454.654943][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 454.784133][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 454.895152][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 454.917947][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.917981][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918006][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918020][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918034][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918047][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918060][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918074][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918087][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918100][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918114][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918127][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918141][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918154][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918167][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918180][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918193][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918207][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918220][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918233][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918247][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918260][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918273][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918286][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918300][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918313][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918326][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918340][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918353][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918366][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918386][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918400][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918413][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918426][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918440][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918453][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918466][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918479][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918493][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918506][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918519][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918532][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918627][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918651][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918674][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918688][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918701][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918715][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918728][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918742][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918755][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918768][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918782][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918795][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918808][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918822][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918835][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918848][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918862][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918875][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918891][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918905][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918919][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918963][T21100] IPVS: Unknown mcast interface: netpci0 [ 454.918987][T21100] IPVS: Unknown mcast interface: netpci0 [ 455.035115][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 455.136228][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 455.348042][T21113] __nla_validate_parse: 10 callbacks suppressed [ 455.348060][T21113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3875'. [ 455.473349][T21122] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3877'. [ 455.634718][T21134] netlink: 'syz.6.3880': attribute type 12 has an invalid length. [ 455.634741][T21134] netlink: 'syz.6.3880': attribute type 29 has an invalid length. [ 455.634755][T21134] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3880'. [ 455.634773][T21134] netlink: 'syz.6.3880': attribute type 3 has an invalid length. [ 455.634786][T21134] netlink: 'syz.6.3880': attribute type 2 has an invalid length. [ 455.634798][T21134] netlink: 35 bytes leftover after parsing attributes in process `syz.6.3880'. [ 455.943222][T21143] netlink: 404 bytes leftover after parsing attributes in process `syz.1.3884'. [ 455.943244][T21143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3884'. [ 455.964981][T21143] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3884'. [ 456.080606][ T5617] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 456.085118][ T5617] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 456.105078][ T5617] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 456.118067][ T5617] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 456.119935][ T5617] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 456.197988][ T5624] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 456.198408][ T5624] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 456.198744][ T5624] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 456.201342][ T5624] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 456.202057][ T5624] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 456.325604][T21160] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3890'. [ 456.356879][T21160] batman_adv: batadv0: Adding interface: syzkaller0 [ 456.356897][T21160] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.357006][T21160] batman_adv: batadv0: Interface activated: syzkaller0 [ 456.496137][T21172] tc_dump_action: action bad kind [ 456.498683][T21172] Cannot find add_set index 4 as target [ 456.529050][T21159] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 456.529262][T21172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3891'. [ 456.532775][ T31] audit: type=1107 audit(1791282592.241:12): pid=21170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ ŽL&6òŠ¨Š' [ 456.588912][T21159] batman_adv: batadv0: Removing interface: syzkaller0 [ 456.712624][T21180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3894'. [ 457.055772][T21150] lo speed is unknown, defaulting to 1000 [ 457.057639][T21150] lo speed is unknown, defaulting to 1000 [ 457.237602][T21202] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 457.259738][T21204] syzkaller0: left promiscuous mode [ 457.259761][T21204] syzkaller0: left allmulticast mode [ 457.367944][T21208] netlink: 'syz.6.3901': attribute type 83 has an invalid length. [ 457.575290][T21217] veth0: entered promiscuous mode [ 457.618270][T21150] wlan1 speed is unknown, defaulting to 1000 [ 457.682378][T21215] veth0: left promiscuous mode [ 458.284014][ T5624] Bluetooth: hci8: command tx timeout [ 458.412690][T21266] geneve4: entered promiscuous mode [ 458.412714][T21266] geneve4: entered allmulticast mode [ 458.509103][T21150] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.510970][T21150] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.511098][T21150] bridge_slave_0: entered allmulticast mode [ 458.513025][T21150] bridge_slave_0: entered promiscuous mode [ 458.524966][T21150] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.525069][T21150] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.525367][T21150] bridge_slave_1: entered allmulticast mode [ 458.527061][T21150] bridge_slave_1: entered promiscuous mode [ 458.566849][T21150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.570419][T21150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.639159][T21150] team0: Port device team_slave_0 added [ 458.657392][T21150] team0: Port device team_slave_1 added [ 458.751925][T21150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.751944][T21150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.751970][T21150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.948031][T21150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.948047][T21150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.948063][T21150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.178864][T21150] hsr_slave_0: entered promiscuous mode [ 459.184477][T21150] hsr_slave_1: entered promiscuous mode [ 459.185362][T21150] debugfs: 'hsr0' already exists in 'hsr' [ 459.185382][T21150] Cannot create hsr debugfs directory [ 459.224434][T17880] net_ratelimit: 20 callbacks suppressed [ 459.224527][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 459.535979][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 459.804972][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 459.823075][T21150] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 459.841265][T21150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 459.841789][T21150] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 459.851364][T21150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.855517][T21150] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 459.881176][T21150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.882689][T21150] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 459.906309][T21150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.955073][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 460.049344][T21335] netlink: 'syz.2.3928': attribute type 1 has an invalid length. [ 460.075008][T21335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.090862][T21335] bond0: (slave veth0_to_bond): making interface the new active one [ 460.099536][T21335] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 460.127967][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 460.162514][T21335] macvlan2: entered promiscuous mode [ 460.162533][T21335] macvlan2: entered allmulticast mode [ 460.163286][T21335] bond0: entered promiscuous mode [ 460.163302][T21335] veth0_to_bond: entered promiscuous mode [ 460.172797][T21335] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 460.173497][T21335] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 460.174867][T21335] bond0: left promiscuous mode [ 460.174884][T21335] veth0_to_bond: left promiscuous mode [ 460.335307][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 460.364592][ T5624] Bluetooth: hci8: command tx timeout [ 460.386371][ T150] bond0: (slave veth0_to_bond): link status definitely down, disabling slave [ 460.389867][T21347] __nla_validate_parse: 16 callbacks suppressed [ 460.389883][T21347] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3932'. [ 460.407743][ T150] bond0: now running without any active interface! [ 460.437910][T21348] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3932'. [ 460.441185][T21347] netlink: 'syz.6.3932': attribute type 3 has an invalid length. [ 460.441201][T21347] netlink: 'syz.6.3932': attribute type 1 has an invalid length. [ 460.475870][T21347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3932'. [ 460.476183][T21348] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3932'. [ 460.479106][T21348] netlink: 'syz.6.3932': attribute type 4 has an invalid length. [ 460.533906][T21150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.598861][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 460.611552][T21150] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.640712][T17887] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.640810][T17887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.642222][T21353] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3933'. [ 460.648816][T17887] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.648938][T17887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.699845][T21360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.737879][T21362] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3936'. [ 460.825346][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 460.936207][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 461.167547][T21386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3944'. [ 461.330674][T21392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3945'. [ 461.442493][T21400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.606028][T21150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.890604][T21423] xt_l2tp: missing protocol rule (udp|l2tpip) [ 461.948382][T21423] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3954'. [ 462.137189][T21440] netlink: 'syz.6.3958': attribute type 26 has an invalid length. [ 462.137212][T21440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3958'. [ 462.138196][T21440] netlink: 'syz.6.3958': attribute type 26 has an invalid length. [ 462.273527][T21150] veth0_vlan: entered promiscuous mode [ 462.332586][T21150] veth1_vlan: entered promiscuous mode [ 462.448307][ T5624] Bluetooth: hci8: command tx timeout [ 462.450378][T21150] veth0_macvtap: entered promiscuous mode [ 462.473004][T21150] veth1_macvtap: entered promiscuous mode [ 462.502597][T21450] xt_CT: No such helper "pptp" [ 462.516504][T21150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.549274][T21150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.587564][T17886] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.587653][T17886] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.587689][T17886] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.759144][T17874] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.977948][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.977971][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.047287][T17886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.047307][T17886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.234599][T21476] tipc: New replicast peer: 255.255.255.255 [ 463.235424][T21476] tipc: Enabled bearer , priority 10 [ 463.322705][T21483] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 463.327250][T21483] bond4 (unregistering): Released all slaves [ 463.711144][T21521] bond1 (unregistering): Released all slaves [ 464.284116][ T150] net_ratelimit: 27 callbacks suppressed [ 464.284139][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 464.394248][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 464.504474][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 464.524068][ T5624] Bluetooth: hci8: command tx timeout [ 464.614559][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 464.724651][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 464.834240][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 464.943943][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 465.054084][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 465.165327][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 465.273913][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 466.111968][T21471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.570744][T21566] netlink: 'syz.8.3990': attribute type 12 has an invalid length. [ 466.570767][T21566] netlink: 'syz.8.3990': attribute type 29 has an invalid length. [ 466.570779][T21566] __nla_validate_parse: 7 callbacks suppressed [ 466.570788][T21566] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3990'. [ 466.570805][T21566] netlink: 59 bytes leftover after parsing attributes in process `syz.8.3990'. [ 466.800352][T21581] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3994'. [ 466.885052][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3994'. [ 467.058101][T21591] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3996'. [ 467.113443][T21597] netdevsim netdevsim8: Firmware load for './file0/file0/..' refused, path contains '..' component [ 467.160162][T21601] netlink: 'syz.2.4000': attribute type 10 has an invalid length. [ 467.301692][T21612] gretap0: entered promiscuous mode [ 467.310586][T21612] vlan3: entered promiscuous mode [ 467.422284][T21618] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4005'. [ 467.627599][T21635] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4009'. [ 467.943062][T21651] syzkaller1: entered promiscuous mode [ 467.943085][T21651] syzkaller1: entered allmulticast mode [ 467.982059][T21651] tipc: Enabled bearer , priority 0 [ 469.091856][T21678] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4023'. [ 469.143492][T21675] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4022'. [ 469.143516][T21675] nbd: couldn't find a device at index 65553 [ 469.240495][T21691] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4025'. [ 469.324898][T17886] net_ratelimit: 36 callbacks suppressed [ 469.324951][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 469.436098][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 469.544159][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 469.667272][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 469.669275][T21711] netlink: 'syz.8.4031': attribute type 28 has an invalid length. [ 469.774911][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 469.885497][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 470.036992][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 470.281068][T21741] syzkaller0: entered promiscuous mode [ 470.281092][T21741] syzkaller0: entered allmulticast mode [ 470.304564][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 470.417572][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 470.525641][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 470.593351][T21765] bridge3: entered promiscuous mode [ 470.593410][T21765] bridge3: entered allmulticast mode [ 470.715403][T17886] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.716212][T17880] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.716389][T17880] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.716426][T17880] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.778492][T21778] sctp: [Deprecated]: syz.8.4048 (pid 21778) Use of int in maxseg socket option. [ 470.778492][T21778] Use struct sctp_assoc_value instead [ 470.809714][T21774] ip6t_hbh: Not strict - not implemented [ 471.208764][T21808] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 471.209091][T17887] IPVS: starting estimator thread 0... [ 471.293862][T21811] IPVS: using max 53 ests per chain, 127200 per kthread [ 472.088301][T21828] __nla_validate_parse: 74 callbacks suppressed [ 472.088321][T21828] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4061'. [ 472.484128][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4063'. [ 472.484201][T21841] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4063'. [ 472.484228][T21841] netlink: 'syz.7.4063': attribute type 12 has an invalid length. [ 472.484242][T21841] netlink: 'syz.7.4063': attribute type 11 has an invalid length. [ 472.676835][T21850] netlink: 'syz.6.4064': attribute type 21 has an invalid length. [ 472.676858][T21850] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4064'. [ 472.677006][T21850] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4064'. [ 472.902690][T21859] bridge0: Device is already in use. [ 473.166836][T21866] netlink: 'syz.6.4070': attribute type 1 has an invalid length. [ 473.204589][T21866] bond3: entered promiscuous mode [ 473.205030][T21866] 8021q: adding VLAN 0 to HW filter on device bond3 [ 473.217087][T21866] macvtap1: entered allmulticast mode [ 473.226374][T21866] macvtap2: entered allmulticast mode [ 473.249291][T21866] bond3: (slave bridge3): making interface the new active one [ 473.249312][T21866] bridge3: entered promiscuous mode [ 473.251686][T21866] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 473.261482][T21866] netlink: 'syz.6.4070': attribute type 1 has an invalid length. [ 473.331373][T21871] bond3: (slave bridge4): Enslaving as a backup interface with an up link [ 473.353282][T21870] macvtap3: entered allmulticast mode [ 473.388426][T21869] bond3: (slave bridge5): Enslaving as a backup interface with an up link [ 473.611972][T21885] netlink: 'syz.6.4074': attribute type 1 has an invalid length. [ 473.687833][T21885] 8021q: adding VLAN 0 to HW filter on device bond4 [ 473.707256][T21887] bond4: (slave veth0_to_bond): making interface the new active one [ 473.710519][T21887] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 473.722833][T21885] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4074'. [ 474.433981][T17887] net_ratelimit: 32 callbacks suppressed [ 474.434002][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 474.545573][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 474.619517][ T9] hid-generic 0005:4C4A:4155.0004: unknown main item tag 0x0 [ 474.637884][ T9] hid-generic 0005:4C4A:4155.0004: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 474.653940][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 474.765027][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 474.852638][T21907] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4079'. [ 474.874709][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 474.951723][T21911] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4080'. [ 474.984770][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 475.006625][T21913] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20003 [ 475.093442][T21916] tunl0: entered promiscuous mode [ 475.103433][T21916] netlink: 'syz.7.4082': attribute type 3 has an invalid length. [ 475.103452][T21916] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4082'. [ 475.113063][T21916] tipc: Enabling of bearer rejected, already enabled [ 475.115230][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 475.226230][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 475.292130][T21930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4084'. [ 475.336740][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 475.447135][ T150] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 475.585432][T21938] pim6reg527: entered allmulticast mode [ 475.913175][T21957] bond4: entered promiscuous mode [ 475.913199][T21957] bond4: entered allmulticast mode [ 476.555076][T21973] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 476.800823][T21988] netlink: 'syz.7.4098': attribute type 1 has an invalid length. [ 476.849813][T21988] bond5: entered promiscuous mode [ 476.850203][T21988] 8021q: adding VLAN 0 to HW filter on device bond5 [ 476.983079][T21989] 8021q: adding VLAN 0 to HW filter on device bond5 [ 476.983430][T21989] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 476.983449][T21989] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 477.051584][T21989] bond5: (slave wireguard0): making interface the new active one [ 477.051606][T21989] wireguard0: entered promiscuous mode [ 477.053173][T21989] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 477.067904][T21989] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 477.096974][T21989] bond5: (slave wireguard1): Enslaving as a backup interface with an up link [ 477.120492][T21989] bond5: (slave wireguard2): The slave device specified does not support setting the MAC address [ 477.150028][T21989] bond5: (slave wireguard2): Enslaving as a backup interface with an up link [ 477.185555][T21989] bond5: (slave wireguard3): The slave device specified does not support setting the MAC address [ 477.192034][T21989] bond5: (slave wireguard3): Enslaving as a backup interface with an up link [ 477.211247][T21989] bond5: (slave wireguard4): The slave device specified does not support setting the MAC address [ 477.233664][T21989] bond5: (slave wireguard4): Enslaving as a backup interface with an up link [ 477.272810][T21989] bond5: (slave wireguard5): The slave device specified does not support setting the MAC address [ 477.290736][T21989] bond5: (slave wireguard5): Enslaving as a backup interface with an up link [ 477.293459][T22010] __nla_validate_parse: 4 callbacks suppressed [ 477.293476][T22010] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4102'. [ 477.339166][T21989] bond5: (slave wireguard6): The slave device specified does not support setting the MAC address [ 477.370388][T21989] bond5: (slave wireguard6): Enslaving as a backup interface with an up link [ 477.390178][T21989] bond5: (slave wireguard7): The slave device specified does not support setting the MAC address [ 477.410430][T21989] bond5: (slave wireguard7): Enslaving as a backup interface with an up link [ 477.431879][T21989] bond5: (slave wireguard8): The slave device specified does not support setting the MAC address [ 477.449297][T21989] bond5: (slave wireguard8): Enslaving as a backup interface with an up link [ 477.479744][T21989] bond5: (slave wireguard9): The slave device specified does not support setting the MAC address [ 477.502717][T21989] bond5: (slave wireguard9): Enslaving as a backup interface with an up link [ 477.521997][T21989] bond5: (slave wireguard10): The slave device specified does not support setting the MAC address [ 477.542176][T21989] bond5: (slave wireguard10): Enslaving as a backup interface with an up link [ 477.562385][T21989] bond5: (slave wireguard11): The slave device specified does not support setting the MAC address [ 477.583612][T21989] bond5: (slave wireguard11): Enslaving as a backup interface with an up link [ 477.606693][T21989] bond5: (slave wireguard12): The slave device specified does not support setting the MAC address [ 477.612466][T21989] bond5: (slave wireguard12): Enslaving as a backup interface with an up link [ 477.641002][T21989] bond5: (slave wireguard13): The slave device specified does not support setting the MAC address [ 477.654969][T21989] bond5: (slave wireguard13): Enslaving as a backup interface with an up link [ 479.473811][T17887] net_ratelimit: 29 callbacks suppressed [ 479.473836][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 479.584233][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 479.693834][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 479.804624][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 479.914211][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 480.023815][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 480.133860][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 480.183561][T22010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.243860][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 480.354149][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 480.463936][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 480.668494][T22067] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4113'. [ 480.831648][T22072] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4115'. [ 481.407715][T22083] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 481.587763][ T5617] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 481.593643][ T5617] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 481.601927][ T5617] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 481.620723][ T5617] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 481.621563][ T5617] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 482.037010][T22113] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4125'. [ 482.250744][T22091] lo speed is unknown, defaulting to 1000 [ 482.252447][T22091] lo speed is unknown, defaulting to 1000 [ 482.311700][T22135] netlink: 'syz.6.4128': attribute type 7 has an invalid length. [ 482.312725][T22134] netlink: 'syz.6.4128': attribute type 7 has an invalid length. [ 482.498598][T22091] wlan1 speed is unknown, defaulting to 1000 [ 482.964375][T22162] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4136'. [ 483.010525][T22169] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4138'. [ 483.052140][T22091] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.052336][T22091] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.052463][T22091] bridge_slave_0: entered allmulticast mode [ 483.054554][T22091] bridge_slave_0: entered promiscuous mode [ 483.057324][T22091] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.057419][T22091] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.057535][T22091] bridge_slave_1: entered allmulticast mode [ 483.059575][T22091] bridge_slave_1: entered promiscuous mode [ 483.096743][T22091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.099997][T22091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.165957][T22091] team0: Port device team_slave_0 added [ 483.179034][T22091] team0: Port device team_slave_1 added [ 483.242207][T22178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4142'. [ 483.278392][T22091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.278407][T22091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.278433][T22091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.281550][T22091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.281564][T22091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.281645][T22091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.360375][T22182] syzkaller0: entered promiscuous mode [ 483.360395][T22182] syzkaller0: entered allmulticast mode [ 483.452880][T22187] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4145'. [ 483.473177][T22091] hsr_slave_0: entered promiscuous mode [ 483.474336][T22091] hsr_slave_1: entered promiscuous mode [ 483.475309][T22091] debugfs: 'hsr0' already exists in 'hsr' [ 483.475328][T22091] Cannot create hsr debugfs directory [ 483.724240][ T5617] Bluetooth: hci9: command tx timeout [ 484.007495][T22206] netlink: 'syz.6.4148': attribute type 1 has an invalid length. [ 484.007721][T22206] netlink: 'syz.6.4148': attribute type 1 has an invalid length. [ 484.008619][T22206] netlink: 'syz.6.4148': attribute type 1 has an invalid length. [ 484.008814][T22206] netlink: 'syz.6.4148': attribute type 1 has an invalid length. [ 484.009010][T22206] netlink: 'syz.6.4148': attribute type 1 has an invalid length. [ 484.009198][T22206] netlink: 'syz.6.4148': attribute type 1 has an invalid length. [ 484.009406][T22206] netlink: 'syz.6.4148': attribute type 1 has an invalid length. [ 484.489442][T22091] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 484.499584][T22091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.500431][T22091] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 484.522290][T22091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.531253][T22091] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 484.549960][T22091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.550749][T22091] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 484.561713][T22091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.618803][T22223] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4151'. [ 484.654961][T17886] net_ratelimit: 26 callbacks suppressed [ 484.654978][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 484.785727][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 484.851621][T22091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.919499][T22091] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.966183][T17886] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.966286][T17886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.969533][T17886] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.969633][T17886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.027669][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 485.135533][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 485.180880][T22237] Cannot find del_set index 1 as target [ 485.190019][T22236] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4153'. [ 485.192705][T22236] openvswitch: netlink: IP tunnel dst address not specified [ 485.246118][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 485.355769][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 485.465315][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 485.574465][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 485.685601][T17887] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 485.804092][ T5617] Bluetooth: hci9: command tx timeout [ 485.960116][T22263] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4158'. [ 486.107204][T22091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.330043][T22255] netlink: 'syz.6.4156': attribute type 1 has an invalid length. [ 486.791407][ T5624] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 486.800183][ T5624] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 486.810305][ T5624] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 486.826589][ T5624] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 486.827086][T22091] veth0_vlan: entered promiscuous mode [ 486.828381][ T5624] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 486.900454][T22091] veth1_vlan: entered promiscuous mode [ 487.069152][T22091] veth0_macvtap: entered promiscuous mode [ 487.113135][T22091] veth1_macvtap: entered promiscuous mode [ 487.200613][T22091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.243276][T22091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.286246][T17886] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.286333][T17886] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.286369][T17886] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.286402][T17886] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.469670][T17880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.469757][T17880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.556250][T17886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.556269][T17886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.657792][T22302] netlink: 'syz.6.4166': attribute type 58 has an invalid length. [ 487.657812][T22302] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4166'. [ 487.797048][T22283] lo speed is unknown, defaulting to 1000 [ 487.798781][T22283] lo speed is unknown, defaulting to 1000 [ 487.883906][ T5617] Bluetooth: hci9: command tx timeout [ 488.014630][T22311] netlink: 'syz.9.4168': attribute type 83 has an invalid length. [ 488.035539][T22283] wlan1 speed is unknown, defaulting to 1000 [ 488.570259][T22330] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4175'. [ 488.592344][T22330] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4175'. [ 488.868838][T22283] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.869279][T22283] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.870253][T22283] bridge_slave_0: entered allmulticast mode [ 488.894689][T22283] bridge_slave_0: entered promiscuous mode [ 488.902951][T22345] syzkaller0: entered promiscuous mode [ 488.902971][T22345] syzkaller0: entered allmulticast mode [ 488.921425][T22283] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.921536][T22283] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.921978][T22283] bridge_slave_1: entered allmulticast mode [ 488.924340][ T5617] Bluetooth: hci10: command tx timeout [ 488.952808][T22283] bridge_slave_1: entered promiscuous mode [ 489.064102][T22283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.068781][T22283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.119056][T22283] team0: Port device team_slave_0 added [ 489.162959][T22353] netlink: 'syz.7.4179': attribute type 11 has an invalid length. [ 489.163023][T22353] netlink: 3800 bytes leftover after parsing attributes in process `syz.7.4179'. [ 489.201585][T22349] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 489.215234][T22349] bond5 (unregistering): Released all slaves [ 489.246807][T22283] team0: Port device team_slave_1 added [ 489.412658][T22283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.412678][T22283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.412704][T22283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.421173][T22283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.421187][T22283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.421212][T22283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.538081][T22283] hsr_slave_0: entered promiscuous mode [ 489.539096][T22283] hsr_slave_1: entered promiscuous mode [ 489.539798][T22283] debugfs: 'hsr0' already exists in 'hsr' [ 489.539817][T22283] Cannot create hsr debugfs directory [ 489.768587][T22367] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 489.768610][T22367] syzkaller1: group set to 0 [ 489.784349][T17886] net_ratelimit: 26 callbacks suppressed [ 489.784365][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 489.785928][T22367] netlink: 59 bytes leftover after parsing attributes in process `syz.9.4183'. [ 489.887577][T17886] IPVS: starting estimator thread 0... [ 489.912411][T22373] netlink: 'syz.6.4185': attribute type 21 has an invalid length. [ 489.912433][T22373] IPv6: NLM_F_CREATE should be specified when creating new route [ 489.964883][ T5617] Bluetooth: hci9: command tx timeout [ 489.974509][T22375] IPVS: using max 32 ests per chain, 76800 per kthread [ 489.999726][T22283] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.999759][T22283] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.999786][T22283] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 490.076430][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4184'. [ 490.125397][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 490.148112][T22283] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.148144][T22283] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.148169][T22283] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 490.240964][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 490.279161][T22283] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.279197][T22283] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.279223][T22283] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 490.368458][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 490.460261][T22283] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.460297][T22283] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.460325][T22283] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 490.473114][T22393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4187'. [ 490.515619][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 490.525043][T22392] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4187'. [ 490.525069][T22392] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4187'. [ 490.626439][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 490.774674][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 490.883831][T17874] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 490.888347][T22283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 490.905215][T22283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 490.908246][T22283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 490.926656][T22283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 490.930698][T22283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 490.966448][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801244b400: rx timeout, send abort [ 490.966874][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801244b400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 490.978018][T22283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.978783][T22283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 491.007804][ T5617] Bluetooth: hci10: command tx timeout [ 491.017520][T22283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 491.131633][T22411] Set syz1 is full, maxelem 246 reached [ 491.215528][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 491.219037][T22413] netlink: 'syz.7.4193': attribute type 1 has an invalid length. [ 491.263027][T22413] 8021q: adding VLAN 0 to HW filter on device bond6 [ 491.295227][T22283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.356838][T22424] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4196'. [ 491.356858][T22424] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4196'. [ 491.383087][T22283] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.406412][T17885] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.406510][T17885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.458296][T17886] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.458402][T17886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.612462][T22424] pimreg3: entered allmulticast mode [ 491.635656][T22283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 492.262850][T22456] rdma_rxe: rxe_newlink: failed to add netdevsim0 [ 492.280261][T22458] rdma_rxe: rxe_newlink: failed to add netdevsim0 [ 492.735176][T22483] netlink: 'syz.9.4211': attribute type 6 has an invalid length. [ 492.836152][T22491] vlan3: entered allmulticast mode [ 492.836174][T22491] bridge4: entered allmulticast mode [ 492.843665][T22491] bridge4: port 1(erspan0) entered blocking state [ 492.865473][T22491] bridge4: port 1(erspan0) entered disabled state [ 492.865614][T22491] erspan0: entered allmulticast mode [ 492.869110][T22491] erspan0: entered promiscuous mode [ 492.870143][T22491] bridge4: port 1(erspan0) entered blocking state [ 492.870259][T22491] bridge4: port 1(erspan0) entered forwarding state [ 492.941006][T22283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.012427][T22495] xt_nat: multiple ranges no longer supported [ 493.083936][ T5617] Bluetooth: hci10: command tx timeout [ 493.192837][T22505] block nbd0: Unsupported socket: should be TCP or UNIX. [ 493.483400][T22520] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 493.498216][T22515] No such timeout policy "syz1" [ 493.518884][T22283] veth0_vlan: entered promiscuous mode [ 493.550813][T22283] veth1_vlan: entered promiscuous mode [ 493.638702][T22531] __nla_validate_parse: 16 callbacks suppressed [ 493.638720][T22531] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4224'. [ 493.663107][T22531] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4224'. [ 493.663139][T22531] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4224'. [ 493.707581][T22283] veth0_macvtap: entered promiscuous mode [ 493.723520][T22283] veth1_macvtap: entered promiscuous mode [ 493.787941][T22283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.852842][T22283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.871276][T22538] xt_REDIRECT: bad MAP_IPS. [ 493.967050][T17885] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.968083][T17885] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.968586][T17880] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.968623][T17880] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.011174][T22543] xt_REDIRECT: bad MAP_IPS. [ 494.212337][T17884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.212358][T17884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.339206][T17885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.339227][T17885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.645444][T22572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4161'. [ 494.664376][T22575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4161'. [ 494.809133][T22580] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4238'. [ 494.836056][T17885] net_ratelimit: 24 callbacks suppressed [ 494.836075][T17885] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 494.870415][T22591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4239'. [ 495.008456][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 495.049713][T22594] erspan0: entered promiscuous mode [ 495.065262][T22594] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4243'. [ 495.071437][T22599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.117756][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 495.163813][ T5617] Bluetooth: hci10: command tx timeout [ 495.225641][T17886] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 495.382536][T22618] ip_tables: iptables: counters copy to user failed while replacing table [ 495.400845][T22618] netlink: 'syz.4.4247': attribute type 21 has an invalid length. [ 495.443909][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 495.533496][T22609] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4245'. [ 495.533521][T22609] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4245'. [ 495.555942][T17879] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 495.666154][T17880] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 495.776312][T17879] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 496.841404][T22671] netlink: 'syz.4.4260': attribute type 64 has an invalid length. [ 499.092167][T22671] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.092799][T22671] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.229781][T22678] bridge7: entered promiscuous mode [ 499.229841][T22678] bridge7: entered allmulticast mode [ 499.403295][T22690] __nla_validate_parse: 6 callbacks suppressed [ 499.403451][T22690] netlink: 84 bytes leftover after parsing attributes in process `syz.9.4267'. [ 499.438999][T22691] netlink: 'syz.7.4264': attribute type 9 has an invalid length. [ 499.439071][T22691] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4264'. [ 499.517074][T22696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.577895][T22706] netlink: 'syz.4.4270': attribute type 2 has an invalid length. [ 499.577995][T22706] netlink: 'syz.4.4270': attribute type 2 has an invalid length. [ 499.582131][T22706] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4270'. [ 499.582164][T22706] bond0: ARP target 8.4.0.0 is already present [ 499.582184][T22706] bond0: option arp_ip_target: invalid value (1032) [ 499.911072][T22720] netlink: 'syz.8.4276': attribute type 29 has an invalid length. [ 500.024101][T17869] net_ratelimit: 10 callbacks suppressed [ 500.024122][T17869] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 500.095537][T22725] bond1: Removing last arp target with arp_interval on [ 500.135739][T17889] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 500.339001][T22739] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4282'. [ 500.364437][T17888] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 500.420484][T22751] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4284'. [ 500.420506][T22751] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4284'. [ 500.461893][T22744] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 500.473532][T22754] batman_adv: batadv0: Adding interface: veth0 [ 500.473546][T22754] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.473574][T22754] batman_adv: batadv0: Interface activated: veth0 [ 500.531504][T22753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.531527][T22753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.533369][T22753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.533386][T22753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.542347][T22753] batman_adv: batadv0: Interface deactivated: veth0 [ 500.542364][T22753] batman_adv: batadv0: Removing interface: veth0 [ 500.636321][T22765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4289'. [ 500.674735][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 500.800228][T17873] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 500.906116][T17873] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 501.016164][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 501.027875][T22789] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4296'. [ 501.125227][T17888] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 501.144505][T22804] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4300'. [ 501.234131][T17881] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 501.344326][T17873] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 503.484337][T17888] wlan0: Trigger new scan to find an IBSS to join [ 503.963075][T22789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.963253][T22797] netlink: 'syz.8.4298': attribute type 1 has an invalid length. [ 503.963271][T22797] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4298'. [ 504.280685][T22829] x_tables: unsorted underflow at hook 2 [ 504.444296][ T32] INFO: task syz.3.3066:17871 blocked for more than 143 seconds. [ 504.444322][ T32] Not tainted syzkaller #0 [ 504.444333][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 504.444342][ T32] task:syz.3.3066 state:D stack:25024 pid:17871 tgid:17868 ppid:5622 task_flags:0x400140 flags:0x00080002 [ 504.444402][ T32] Call Trace: [ 504.444458][ T32] [ 504.444472][ T32] __schedule+0x17db/0x58f0 [ 504.444591][ T32] ? __pfx___schedule+0x10/0x10 [ 504.444629][ T32] ? schedule+0x90/0x2b0 [ 504.444657][ T32] schedule+0x164/0x2b0 [ 504.444683][ T32] schedule_preempt_disabled+0x13/0x30 [ 504.444708][ T32] __mutex_lock+0x7c1/0x1550 [ 504.444741][ T32] ? __mutex_lock+0x5d4/0x1550 [ 504.444771][ T32] ? nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 504.444858][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 504.444891][ T32] ? net_generic+0x1e/0x240 [ 504.444913][ T32] ? net_generic+0x1e/0x240 [ 504.444941][ T32] nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 504.444979][ T32] ? rcu_is_watching+0x16/0xb0 [ 504.445033][ T32] ? trace_kmalloc+0x2a/0xf0 [ 504.445061][ T32] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 504.445086][ T32] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 504.445108][ T32] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 504.445130][ T32] ? netlink_dump+0x1e7/0xee0 [ 504.445163][ T32] ? netlink_dump+0x1e7/0xee0 [ 504.445189][ T32] genl_dumpit+0x10b/0x1b0 [ 504.445219][ T32] netlink_dump+0x711/0xee0 [ 504.445251][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 504.445284][ T32] ? genl_start+0x497/0x6d0 [ 504.445317][ T32] __netlink_dump_start+0x589/0x7b0 [ 504.445345][ T32] genl_family_rcv_msg_dumpit+0x213/0x310 [ 504.445376][ T32] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 504.445410][ T32] ? __pfx_genl_start+0x10/0x10 [ 504.445440][ T32] ? __pfx_genl_dumpit+0x10/0x10 [ 504.445463][ T32] ? __pfx_genl_done+0x10/0x10 [ 504.445491][ T32] ? bpf_lsm_capable+0x9/0x ** replaying previous printk message ** [ 504.445491][ T32] ? bpf_lsm_capable+0x9/0x20 [ 504.445537][ T32] ? security_capable+0x7e/0x2c0 [ 504.445593][ T32] genl_rcv_msg+0x5e1/0x7a0 [ 504.445624][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.445649][ T32] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 504.462596][ T32] netlink_rcv_skb+0x226/0x4a0 [ 504.462628][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.462657][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.462691][ T32] ? down_read+0x2be/0x330 [ 504.462727][ T32] genl_rcv+0x28/0x40 [ 504.462751][ T32] netlink_unicast+0x7bd/0x940 [ 504.462793][ T32] netlink_sendmsg+0x813/0xb40 [ 504.462824][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.462851][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 504.462890][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.462908][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 504.462973][ T32] ____sys_sendmsg+0x54e/0x850 [ 504.463046][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.463086][ T32] ? import_iovec+0x73/0xa0 [ 504.463118][ T32] ___sys_sendmsg+0x2a5/0x360 [ 504.463146][ T32] ? __lock_acquire+0x747/0x2de0 [ 504.463178][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.463208][ T32] ? futex_wait+0x2a2/0x390 [ 504.463281][ T32] ? __fget_files+0x2a/0x420 [ 504.463315][ T32] ? __fget_files+0x3a2/0x420 [ 504.463352][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 504.463532][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.463591][ T32] do_syscall_64+0x166/0x520 [ 504.463618][ T32] ? trace_irq_disable+0x3b/0x140 [ 504.463646][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.463667][ T32] ? clear_bhb_loop+0x70/0xc0 [ 504.470383][T22845] __nla_validate_parse: 1 callbacks suppressed [ 504.470399][T22845] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4311'. [ 504.479690][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.479720][ T32] RIP: 0033:0x7f7205b9e199 [ 504.479740][ T32] RSP: 002b:00007f7206adb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.479772][ T32] RAX: ffffffffffffffda RBX: 00007f7205e25fa0 RCX: 00007f7205b9e199 [ 504.479787][ T32] RDX: 000000000404c000 RSI: 0000200000000180 RDI: 000000000000000c [ 504.479800][ T32] RBP: 00007f7205c358e0 R08: 0000000000000000 R09: 0000000000000000 [ 504.479813][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.479833][ T32] R13: 00007f7205e26038 R14: 00007f7205e25fa0 R15: 00007ffd07e72f58 [ 504.479867][ T32] [ 504.479890][ T32] INFO: task syz.0.3104:18116 blocked for more than 143 seconds. [ 504.479904][ T32] Not tainted syzkaller #0 [ 504.479938][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 504.479947][ T32] task:syz.0.3104 state:D stack:24032 pid:18116 tgid:18115 ppid:5614 task_flags:0x400140 flags:0x00080002 [ 504.479999][ T32] Call Trace: [ 504.480006][ T32] [ 504.480019][ T32] __schedule+0x17db/0x58f0 [ 504.480072][ T32] ? __pfx___schedule+0x10/0x10 [ 504.499492][ T32] ? schedule+0x90/0x2b0 [ 504.513576][ T32] schedule+0x164/0x2b0 [ 504.513615][ T32] schedule_preempt_disabled+0x13/0x30 [ 504.513642][ T32] __mutex_lock+0x7c1/0x1550 [ 504.513676][ T32] ? __mutex_lock+0x5d4/0x1550 [ 504.523680][ T32] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 504.531322][T22847] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4311'. [ 504.613860][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 504.613907][ T32] ? net_generic+0x1e/0x240 [ 504.613932][ T32] ? net_generic+0x1e/0x240 [ 504.613962][ T32] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 504.613995][ T32] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 504.614027][ T32] ? rcu_is_watching+0x16/0xb0 [ 504.614102][ T32] ? trace_kmalloc+0x2a/0xf0 [ 504.614127][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 504.614150][ T32] ? __nla_parse+0x40/0x60 [ 504.614183][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 504.614209][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 504.614244][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 504.614310][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 504.614439][ T32] ? bpf_lsm_capable+0x9/0x20 [ 504.615537][ T32] ? security_capable+0x7e/0x2c0 [ 504.615601][ T32] genl_rcv_msg+0x614/0x7a0 [ 504.615635][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.615660][ T32] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 504.615700][ T32] netlink_rcv_skb+0x226/0x4a0 [ 504.615722][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.615749][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.615784][ T32] ? down_read+0x2be/0x330 [ 504.615818][ T32] genl_rcv+0x28/0x40 [ 504.615849][ T32] netlink_unicast+0x7bd/0x940 [ 504.615889][ T32] netlink_sendmsg+0x813/0xb40 [ 504.615919][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.615948][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 504.615974][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.615994][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 504.616019][ T32] ____sys_sendmsg+0x54e/0x850 [ 504.616054][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.616091][ T32] ? import_iovec+0x73/0xa0 [ 504.616120][ T32] ___sys_sendmsg+0x2a5/0x360 [ 504.616147][ T32] ? __lock_acquire+0x747/0x2de0 [ 504.616173][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.616204][ T32] ? futex_wait+0x2a2/0x390 [ 504.616253][ T32] ? __fget_files+0x2a/0x420 [ 504.616281][ T32] ? __fget_files+0x3a2/0x420 [ 504.616318][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 504.616349][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.616400][ T32] do_syscall_64+0x166/0x520 [ 504.616463][ T32] ? trace_irq_disable+0x3b/0x140 [ 504.616484][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.616504][ T32] ? clear_bhb_loop+0x70/0xc0 [ 504.616528][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.616548][ T32] RIP: 0033:0x7fb68e79e199 [ 504.616565][ T32] RSP: 002b:00007fb68f5e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.616610][ T32] RAX: ffffffffffffffda RBX: 00007fb68ea25fa0 RCX: 00007fb68e79e199 [ 504.616625][ T32] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 504.616638][ T32] RBP: 00007fb68e8358e0 R08: 0000000000000000 R09: 0000000000000000 [ 504.616650][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.616662][ T32] R13: 00007fb68ea26038 R14: 00007fb68ea25fa0 R15: 00007ffe40d2dd68 [ 504.616695][ T32] [ 504.619310][ T32] [ 504.619310][ T32] Showing all locks held in the system: [ 504.619331][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 504.619357][ T32] #0: ffffffff8ec364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 504.621388][ T32] #1: ffffffff9ad442d8 (&port_lock_key){-...}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 504.621536][ T32] locks held by kworker/1:1/30: 3, on CPU#1: [ 504.621555][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 504.621631][ T32] #1: ffffc90000a57c40 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 504.621682][ T32] #2: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: bpf_prog_dev_bound_destroy+0x29/0x3f0 [ 504.621735][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 504.621749][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 504.621832][ T32] locks held by getty/5373: 2, on CPU#1: [ 504.621852][ T32] #0: ffff8880358db0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 504.621897][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 504.621982][ T32] locks held by syz.4.2724/16231: 2, on CPU#1: [ 504.621996][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 504.622080][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 504.622139][ T32] locks held by syz.3.3066/17871: 3, on CPU#0: [ 504.622152][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 504.622200][ T32] #1: ffff8880330796e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 504.622245][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 504.622296][ T32] locks held by kworker/u8:30/17873: 3, on CPU#1: [ 504.622309][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 504.628621][ T32] #1: ffffc90003327c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 504.628681][ T32] #2: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 504.628742][ T32] locks held by syz.0.3104/18116: 2, on CPU#0: [ 504.628756][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 504.628805][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 504.628863][ T32] locks held by syz-executor/18246: 2, last CPU#1: [ 504.628877][ T32] #0: ffff888031a402e0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x55/0x400 [ 504.628961][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: psi_task_switch+0x57/0x7d0 [ 504.633391][ T32] locks held by syz.5.3727/20469: 2, on CPU#0: [ 504.633406][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 504.633456][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 504.633510][ T32] locks held by syz.1.3986/21549: 2, on CPU#1: [ 504.633524][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 504.633572][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 504.633623][ T32] locks held by syz.2.4055/21801: 3, on CPU#0: [ 504.633636][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 504.633684][ T32] #1: ffff8880551a06e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 504.662186][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 504.662248][ T32] locks held by syz.8.4306/22837: 2, last CPU#1: [ 504.662263][ T32] #0: ffff888050702800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 504.662350][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 504.662404][ T32] locks held by syz.9.4310/22846: 1, on CPU#1: [ 504.662418][ T32] #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 504.662469][ T32] locks held by syz.7.4311/22844: 1, last CPU#1: [ 504.662483][ T32] #0: ffff88807ff1e540 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 504.662623][ T32] locks held by syz.7.4311/22845: 3, last CPU#1: [ 504.662637][ T32] #0: ffffffff907aa3d0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 504.662802][ T32] #1: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 504.662861][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 504.662935][ T32] locks held by syz.7.4311/22847: 2, on CPU#1: [ 504.662948][ T32] #0: ffffffff907c1768 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 504.663006][ T32] #1: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 504.663056][ T32] locks held by syz.7.4311/22848: 2, on CPU#1: [ 504.663069][ T32] #0: ffffffff907c1768 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 504.663127][ T32] #1: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 504.667571][ T32] [ 504.667587][ T32] ============================================= [ 504.667587][ T32] [ 504.667642][ T32] NMI backtrace for cpu 1 [ 504.667657][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 504.667678][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.667690][ T32] Call Trace: [ 504.667698][ T32] [ 504.667706][ T32] dump_stack_lvl+0xe8/0x150 [ 504.667738][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 504.667761][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 504.667794][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 504.667819][ T32] sys_info+0x135/0x170 [ 504.667851][ T32] watchdog+0xfd7/0x1030 [ 504.667903][ T32] ? watchdog+0x1c7/0x1030 [ 504.667930][ T32] kthread+0x38b/0x480 [ 504.667949][ T32] ? __pfx_watchdog+0x10/0x10 [ 504.667967][ T32] ? __pfx_kthread+0x10/0x10 [ 504.667987][ T32] ret_from_fork+0x514/0xb70 [ 504.668030][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 504.668049][ T32] ? __switch_to+0xc89/0x1420 [ 504.668077][ T32] ? __pfx_kthread+0x10/0x10 [ 504.668097][ T32] ret_from_fork_asm+0x1a/0x30 [ 504.668140][ T32] [ 504.668162][ T32] Sending NMI from CPU 1 to CPUs 0: [ 504.668288][ C0] NMI backtrace for cpu 0 [ 504.668301][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 504.668321][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.668338][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 504.668366][ C0] Code: e8 7e 83 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 86 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a 8f 76 06 cc 44 89 f9 80 e1 07 [ 504.668383][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 504.668399][ C0] RAX: 1ffffffff35a8800 RBX: 00000000000003fd RCX: 0000000000000000 [ 504.668411][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 504.668422][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 504.668434][ C0] R10: dffffc0000000000 R11: ffffffff85736a40 R12: dffffc0000000000 [ 504.668448][ C0] R13: 0000000000000000 R14: ffffffff9ad44300 R15: 0000000000000000 [ 504.668460][ C0] FS: 0000000000000000(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000 [ 504.668526][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 504.668539][ C0] CR2: 0000555591feaa38 CR3: 0000000012870000 CR4: 00000000003526f0 [ 504.668556][ C0] Call Trace: [ 504.668563][ C0] [ 504.668570][ C0] wait_for_lsr+0x184/0x2f0 [ 504.668594][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 504.668626][ C0] serial8250_console_write+0xaa1/0x1200 [ 504.668647][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 504.668676][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 504.668697][ C0] ? __schedule+0x17f1/0x58f0 [ 504.668728][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 504.668758][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 504.668782][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 504.668811][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 504.668835][ C0] nbcon_kthread_func+0x679/0x880 [ 504.668858][ C0] ? nbcon_kthread_func+0x163/0x880 [ 504.668877][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 504.668901][ C0] ? __kthread_parkme+0x71/0x1f0 [ 504.668926][ C0] ? __kthread_parkme+0x199/0x1f0 [ 504.668954][ C0] kthread+0x38b/0x480 [ 504.668971][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 504.668989][ C0] ? __pfx_kthread+0x10/0x10 [ 504.669007][ C0] ret_from_fork+0x514/0xb70 [ 504.669025][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 504.669042][ C0] ? __switch_to+0xc89/0x1420 [ 504.669067][ C0] ? __pfx_kthread+0x10/0x10 [ 504.669085][ C0] ret_from_fork_asm+0x1a/0x30 [ 504.669120][ C0] [ 504.675933][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 506.133681][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 506.142798][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.152841][ T32] Call Trace: [ 506.156112][ T32] [ 506.159034][ T32] vpanic+0x56d/0xa60 [ 506.163022][ T32] ? __pfx___schedule+0x10/0x10 [ 506.167888][ T32] ? __pfx_vpanic+0x10/0x10 [ 506.172410][ T32] panic+0xc5/0xd0 [ 506.176133][ T32] ? __pfx_panic+0x10/0x10 [ 506.180555][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 506.186016][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 506.191438][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 506.197590][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 506.203786][ T32] watchdog+0x1030/0x1030 [ 506.208143][ T32] ? watchdog+0x1c7/0x1030 [ 506.212575][ T32] kthread+0x38b/0x480 [ 506.216643][ T32] ? __pfx_watchdog+0x10/0x10 [ 506.221311][ T32] ? __pfx_kthread+0x10/0x10 [ 506.225940][ T32] ret_from_fork+0x514/0xb70 [ 506.230523][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 506.235670][ T32] ? __switch_to+0xc89/0x1420 [ 506.240351][ T32] ? __pfx_kthread+0x10/0x10 [ 506.244935][ T32] ret_from_fork_asm+0x1a/0x30 [ 506.249708][ T32] [ 506.253219][ T32] Kernel Offset: disabled [ 506.257545][ T32] Rebooting in 86400 seconds..