last executing test programs: 4m57.310973865s ago: executing program 3 (id=220): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfff}, 0x8}, 0x94) (async) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000a00)=@buf={0x35, &(0x7f00000000c0)="4e19769cf4a539206ccbf470694260fb4aedee725b08119636e816f903eb83553271b053ab1d45f69d1ed2e063befc59b7678f66c7"}) 4m57.068385159s ago: executing program 3 (id=222): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xb}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0xfd, 0x7, 0x80, 0x0, 0x4c, 0xf3, 0x9, [0x4, 0x9, 0x0, 0x2, 0x5, 0x0, 0x0, 0x40000000]}}) 4m56.756315058s ago: executing program 3 (id=225): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000140)={@default, @null, @default, 0x2, 0x7, 0x4, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @default]}) ppoll(&(0x7f0000000100)=[{r1, 0x2}, {r1, 0xa063}], 0x2, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "db"}]}], {0x14}}, 0x7c}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa00000000000000000800120000001500000000000000000006000000000000000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000080019"], 0xe0}}, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f00000001c0)='syz0\x00', 0x1ff) 4m56.582823738s ago: executing program 3 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062019c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) r2 = socket(0x10, 0x3, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) write(r2, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0xed4}, 0x8) 4m56.319158515s ago: executing program 3 (id=232): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10) (async) recvmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x84, 0x20, 0x0, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000c3bb274a90af9405db1ea4f8d443325874cfa50dae003a15fadc7afc2b57fa72262a9a4de2d9c544dc26b0602775f0932f3cb6ca3a0daea466912a35667d9974c03bca4e36c719f07558ec447d79a4b4ed4997f3563d42fb4a31fd822daad1e335fc11658c72582108021b68e904dd0a01026bcb1a360666cf991ca723991e06cb22a8e1b27816f5cf3e", @ANYRES16=r1, @ANYBLOB="0102000000000000000004002600140006007369743000"/34], 0x28}, 0x8, 0x3000000000002}, 0x0) 4m56.091324323s ago: executing program 3 (id=234): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newchain={0x84, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xfff1, 0xffff}, {0xb, 0xffe8}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xb, 0xb}}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000000, 0x10000000, 0x1ff, 0xfffffffc, 0x81, {0x81, 0x0, 0x8, 0x3ff, 0x4, 0x5}, {0x28, 0x2, 0x4, 0x4000, 0x5, 0x4}, 0x2, 0x6, 0x80000001}}]}]}}]}, 0x84}}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 4m40.988474499s ago: executing program 32 (id=234): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newchain={0x84, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xfff1, 0xffff}, {0xb, 0xffe8}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xb, 0xb}}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000000, 0x10000000, 0x1ff, 0xfffffffc, 0x81, {0x81, 0x0, 0x8, 0x3ff, 0x4, 0x5}, {0x28, 0x2, 0x4, 0x4000, 0x5, 0x4}, 0x2, 0x6, 0x80000001}}]}]}}]}, 0x84}}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m39.754969861s ago: executing program 5 (id=1723): ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 2m38.396919764s ago: executing program 5 (id=1726): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003e00000008007300000000000e0001006e657464657673696d0000000fdbe9006e657464657673696d3000001db2147bc29c8a182536b808b84cd630aa37e9"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, {@in6=@empty, 0x4d4, 0x32}, @in=@local, {}, {}, {}, 0x70bd27, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'pcrypt(rfc4309(ccm_base(cbc(aes-aesni),wp384)))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x40) 2m38.3880875s ago: executing program 5 (id=1730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0xe, &(0x7f00000002c0)={@broadcast, @remote, @void, {@generic={0x86dd}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 2m38.387500971s ago: executing program 5 (id=1731): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x10, 0x700, 0x100, 0x4, {{0x11, 0x4, 0x1, 0x0, 0x44, 0x68, 0x0, 0x84, 0x29, 0x0, @local, @rand_addr=0x64010100, {[@end, @end, @lsrr={0x83, 0x7, 0x1e, [@local]}, @cipso={0x86, 0x14, 0x1, [{0x2, 0xe, "a3f3976be9f88e9bfebf487c"}]}, @noop, @rr={0x7, 0xf, 0x58, [@empty, @local, @dev={0xac, 0x14, 0x14, 0xf}]}]}}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000010000000850000006a00000018010000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c0001e003000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3], 0xb4}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m38.364197574s ago: executing program 5 (id=1735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x8a0, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x42}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x11}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7c}, @NL80211_ATTR_CSA_IES={0x860, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x8, 0xe424, 0x3, 0x5e]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x130, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x14a5}, @device_b, @device_a, @initial, {0xd, 0x7fe}}, 0x40, @default, 0x2003, @void, @val={0x1, 0x1, [{0xb}]}, @void, @void, @val={0x6, 0x2, 0x80}, @void, @val={0x25, 0x3, {0x1, 0xb6, 0xba}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x40, 0x3, 0x32}}, @val={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0x7, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x10, 0x6}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xa, "b0f8df41499d24dd41f5"}, {0xdd, 0x61, "2fedfdb5a3d43fc8fdea987125d72bb57c289d2a2a87776d59a55bae4b67594ad0a7d04cba2e7bd5245c7ccce1b34039860c83be5f3895ddc6e109e59b10c268cd5374846fdb4e7aa89fab4899a432c0a209c9d6d8acda9d2e286fc1a17044e2e7"}, {0xdd, 0x5e, "124f8dbdf57df87eb105406a13ab98c7c214613ba4c119440dd8fb4e6a3c8867abee088792386dcc2aced3f636fc2679d84bf4195ff7d8c6bc4237afe72b0745d0852d7b53fa008d7dc1d15b36500887d04fe7fae96c1926636a5dc6cb60"}]}}, @NL80211_ATTR_BEACON_TAIL={0xe2, 0xf, [@ssid={0x0, 0x6, @default_ibss_ssid}, @channel_switch={0x25, 0x3, {0x1, 0x38, 0xa}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @measure_req={0x26, 0xc8, {0x4, 0x4, 0x6, "85e69bbc3bc65e9187f6779904443c23cafc460aea3cfc70e37a2a3ad48bb8a91eebdb555bc44bc93b3cebb59c350c1c060c47f2ea2daef9cd4e10d77dfab10a0f5b69d9fcb4d30205c1e309af5d971e7544225749f697ad5f2243e2f68579de93b6c6f0952731dc022c954afb04bd2171936346ede7a40f8a7cda7bae6b0e977af14e1d4e1e46f8e8ebaa2b06f18171b89ce283f71e451c01394e7968739cbc060545fc3e5f3054da7468e709879e7ae1b8df64360fb5efe04c2dc5020af3dcecf87e2e71"}}, @ibss={0x6, 0x2}]}], @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x2c, 0xf, [@ht={0x2d, 0x1a, {0x300, 0x2, 0x6, 0x0, {0x32, 0x2, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x3, 0x2}}, @mesh_id={0x72, 0x6}, @supported_rates={0x1, 0x2, [{0x5}, {0xc}]}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_PROBE_RESP={0x4c4, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x32, 0x80, [@prep={0x83, 0x1f, {{}, 0x7, 0x5, @device_a, 0x4, @void, 0x81, 0x8527, @device_b, 0x2}}, @channel_switch={0x25, 0x3, {0x1, 0xe, 0x6}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_BEACON_TAIL={0x102, 0xf, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0x3, @broadcast, 0x6, @value=@broadcast, 0xd, 0x8000, @device_a, 0x5}}, @tim={0x5, 0xcd, {0x6, 0xf2, 0xf5, "c18977172274dd54218aa369f412c4ec8ec5538c6d7b7492cd3d6d7f7cd79e0a6a1401dc7cf3628cc2c977e04c040697a6d176578108761ccfd8909ed862b248815b8677cc520fb58d4cde31be50b5f2499cae29c8376c19d1c6f8a3dfd33803acabe5b6a50c6dd4b432f06e604f5301989ff10d654c2d7e42bb4dda10f0f64ffac2f5c4bd4ddf018302fc77a506badfe961658c160de1a83176fd3fbfc55d1429d1de01f6bdcc03506e571fafcd4a804dc34136f18b9eab81465dcc54716050c502e4ef3726063f4cac"}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x26}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe5}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x80}, 0x20048000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) 2m38.268667606s ago: executing program 5 (id=1739): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) splice(r6, 0x0, r7, &(0x7f00000002c0), 0x6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000080)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5f}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xc9, &(0x7f0000000100)=""/201, 0x40f00, 0x4b, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x10, 0xbd37}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r6, r1, r1, r1, r1], &(0x7f00000004c0)=[{0x3, 0x3cb6, 0xd, 0xa}, {0x1, 0x2, 0x2, 0xc}, {0x4, 0x2, 0x6, 0x3}, {0x0, 0x2, 0x2, 0x9}, {0x4, 0x3, 0x7, 0x9}], 0x10, 0x7bc3}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002540)={0x2, 0x2}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) (async) pipe(&(0x7f0000000200)) (async) close(r7) (async) splice(r6, 0x0, r7, &(0x7f00000002c0), 0x6, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000080)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5f}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xc9, &(0x7f0000000100)=""/201, 0x40f00, 0x4b, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x10, 0xbd37}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r6, r1, r1, r1, r1], &(0x7f00000004c0)=[{0x3, 0x3cb6, 0xd, 0xa}, {0x1, 0x2, 0x2, 0xc}, {0x4, 0x2, 0x6, 0x3}, {0x0, 0x2, 0x2, 0x9}, {0x4, 0x3, 0x7, 0x9}], 0x10, 0x7bc3}, 0x94) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002540)={0x2, 0x2}, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 2m23.198077146s ago: executing program 33 (id=1739): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) splice(r6, 0x0, r7, &(0x7f00000002c0), 0x6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000080)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5f}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xc9, &(0x7f0000000100)=""/201, 0x40f00, 0x4b, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x10, 0xbd37}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r6, r1, r1, r1, r1], &(0x7f00000004c0)=[{0x3, 0x3cb6, 0xd, 0xa}, {0x1, 0x2, 0x2, 0xc}, {0x4, 0x2, 0x6, 0x3}, {0x0, 0x2, 0x2, 0x9}, {0x4, 0x3, 0x7, 0x9}], 0x10, 0x7bc3}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002540)={0x2, 0x2}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) (async) pipe(&(0x7f0000000200)) (async) close(r7) (async) splice(r6, 0x0, r7, &(0x7f00000002c0), 0x6, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000080)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5f}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xc9, &(0x7f0000000100)=""/201, 0x40f00, 0x4b, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x10, 0xbd37}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r6, r1, r1, r1, r1], &(0x7f00000004c0)=[{0x3, 0x3cb6, 0xd, 0xa}, {0x1, 0x2, 0x2, 0xc}, {0x4, 0x2, 0x6, 0x3}, {0x0, 0x2, 0x2, 0x9}, {0x4, 0x3, 0x7, 0x9}], 0x10, 0x7bc3}, 0x94) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002540)={0x2, 0x2}, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 1m54.776585184s ago: executing program 6 (id=2350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x4, 0x3}}, 0x2e) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf728}]}, 0x1c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710427000000000095000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x8, '\x00', 0x0, @fallback=0x22}, 0x94) 1m54.547393303s ago: executing program 6 (id=2353): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0xee, 0x73, 0xb, 0x40, @empty, @remote, 0x7, 0x10, 0xffffffff, 0xfffffffb}}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xdd22}, [@call={0x85, 0x0, 0x0, 0x7a}, @generic={0x9, 0xd, 0x1, 0xffff, 0x4}, @ldst={0x0, 0x2, 0x2, 0xa, 0x7, 0x2, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x1c, '\x00', r0, 0x0, r1, 0x8, &(0x7f00000001c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x1, 0x552cc24a, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[r2], &(0x7f0000000300)=[{0x1, 0x1, 0x6, 0x6}, {0x0, 0x4, 0x8, 0x3}, {0x5, 0x4, 0x5}, {0x5, 0x2, 0x10}], 0x10, 0x3}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000004c0)={r5}, &(0x7f0000000500)=0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000540)={r6, 0x0, 0x5d, "77a139f758342cd3dbbbc96f263836d34a4fe3c8874ca78dc1fd694a206548f2030902926086cd29c2cce496d879d0fd72b075754dec67672e71cdb78eace520f0f131c9d3453e534b944293af109d87a2eadaaa452557bc1fca87f97c"}, 0x65) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x0, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000001}, 0x48010) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r7) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r8, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x20008804) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000800)=0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000840)={r6, 0x1}, &(0x7f0000000880)=0x8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000008c0)={@loopback, @private=0xa010102, 0x1, 0x3, [@empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x33}]}, 0x1c) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r10, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, r10, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x70, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000884) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000cc0)={r6, 0x5}, 0x8) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x4, 0x6, 0x89f3d4cee2e7b7eb, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc004}, 0xc1) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r11, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, 0x140c, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000ccc4}, 0x80) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000f80)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000fc0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r9, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x21000001}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x5c, r12, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044000) 1m54.09595649s ago: executing program 6 (id=2361): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$rose(0xffffffffffffffff, 0x104, 0x6ba05eb0794edd29, 0x0, &(0x7f0000002180)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x8}, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 1m53.997011686s ago: executing program 6 (id=2364): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xf9, 0x51, &(0x7f0000000100)="c165b32b785f5408fc0ee03422348444318030fd88c03ad9b30a048c031193b8b0e4d4f1dac0cc4a9d74b39d0929468520851a94c1c2dd5efde194b244e94b33db0a29394dd0aea714f13afde255fff9a4f3d700a8dda36795a4fb45aa6b42d0cc5c8043b01f652b9c034a994c4aeda9ead891c2527714ab955bf3bc334a05888d3aad3adbb95da46a728fb8d4b97531c84eff621f3ba5d874a38f2fb98f8feededce4efe50379aee685d53e0df2f123d186ee749b8a06d5d2d78e837e0928be2d232543b9e3cb3cf492465064a7f8dca05ee62900bb25922bff2068754143941b93f29927a66807a5e9e873b84b231fcaf94f42ebaae66c74", &(0x7f0000000040)=""/81, 0xd976, 0x0, 0x1000, 0xba, &(0x7f0000001180)="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", &(0x7f0000000200)="4609d36012c446acd30386dd21b25e72bb1ce6d2ec8b67f8c6e3ee305594c8af5baeb7ed0f98f69f159b4fb7b90d9cae2ee76b4e61e66603c1bd45b5a10cf75d34fc8e294f7baf22bbda78fd511e587709498fe343526fa12f2eda6e3910a873651fb14da30b5c542152bb536a3e86015ed228122c44132906a1d56ee4df2118009b19f2617d0beb2b0b233e35088f3bce9eb82aa3ce0deabe62985b9e47859392de25db8a31d1c28c502f4eb58657416b1cfa4fd0d88d0d0c74", 0x2, 0x0, 0x2}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000004c0)=@in6={0x21, 0xfffe, 0xa, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) 1m53.555813552s ago: executing program 6 (id=2370): socket$kcm(0x29, 0x5, 0x0) (async) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x300, &(0x7f0000000000), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @local}}}, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) close(0x3) getsockname$packet(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r6, r5, 0x25, 0x4, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r7, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r7, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) 1m53.03351132s ago: executing program 6 (id=2376): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20048000) 1m37.839453991s ago: executing program 34 (id=2376): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20048000) 8.474579941s ago: executing program 2 (id=3458): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000500000000e2000000000061102000000000009500000002000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) 8.328092876s ago: executing program 2 (id=3459): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x1, 0x8000, 0x20, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x8, 0x7f20, 0x5, 0x8}}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_newaddr={0x28, 0x14, 0x800, 0x70bd2b, 0x25dfdbff, {0x2, 0x18, 0x80, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x8000810) (async) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000001c0)={0x4, 0x800}) (async) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x80c00) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc8, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xe}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfa}, @ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x891) (async) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000400), 0x4) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, 0x4000, r2}, 0x18) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000500)={0xa, 0x8, [0x800, 0x6, 0x6, 0x4], &(0x7f00000004c0)=[0x0]}) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x400}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'veth1_virt_wifi\x00'}) (async) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000680)=""/79, 0x4f, 0x40000002, &(0x7f0000000700)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) (async) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x8, 0xfffffff8}, 0x10) recvmsg$can_raw(r7, &(0x7f0000001c40)={&(0x7f00000007c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/49, 0x31}, {&(0x7f0000001900)=""/227, 0xe3}, {&(0x7f0000001a00)=""/168, 0xa8}, {&(0x7f0000001ac0)=""/176, 0xb0}, {&(0x7f0000001b80)=""/6, 0x6}], 0x7}, 0x2) (async) sendto$packet(r7, &(0x7f0000001c80)="e241655c0aad24463815bc5aa037ee1cced7a8e59c64779a6078102cffdcb4c790dc3a5d7fc989d801748a25126c063577a0e7d69e763bd1ced72848bf7982ff69123bbcec3d0a14b3ea4724fc7fdc4ebf6f7bb5123efbacec5643ecd0b78294a7480997f2344b797c", 0x69, 0x20008000, &(0x7f0000001d00)={0x11, 0x11, r1, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x14) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r6) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001f80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x140, r9, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x41}}}}, [@NL80211_ATTR_FRAME={0x10e, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xff}, @broadcast, @device_a, @random="0296c35f76bc", {0x9, 0x1}}, @tdls_teardown={0xc, 0x3, {0x1e, {0x37, 0xd8, {0xc4, 0x8, "fa037d8c3e0f470f1e70d47ec5cbc9c8", "02046d4766b7d192d581523318166b1aceacb4f43c795599bf3a2717f640516f", "8d085b5b5e3abc187c30039406b32d3e519e85f2057e63ee012c7a5d245aec88", [{0x4, 0x4, "097f9461"}, {0x3, 0x12, "c437d587a70a3b5c0b202a9c784e3ff92e53"}, {0x3, 0x15, "d1c8c6e2be97c66dd50994c03dcdf150d2cd2f7468"}, {0x4, 0x1c, "bdc7dcd0ff2308857cd6105021a2b00fd721c95efd6ec3b11845c1b9"}, {0x4, 0x12, "10aa0e9cf3f218ed3136944968782b837a85"}, {0x4, 0x5, "bd87499b92"}, {0x4, 0x11, "fa2b0915914b9384d136ecf400b78b46db"}, {0x4, 0x7, "707f75efe1b720"}]}}, {0x65, 0x12, {@random="04a71493d8cd", @device_b}}}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x1, 0x1, 0x4]}]}, 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x81) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x60, 0xe, 0x6, 0x301, 0x0, 0x0, {0x18, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0xd1) (async) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000003200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000031c0)={&(0x7f0000002140)={0x1068, r9, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x46, 0xc5, "17208f53a60e3600776e491a509fbce08dd0b713f1d8d22c305f61ac95cbbc27b158db66bb58bd928579c6ccff27e8a069b20617ca9caa3e15d320322bb08c783108"}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0x1068}, 0x1, 0x0, 0x0, 0x10}, 0x4008861) (async) getsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000003240), &(0x7f0000003280)=0x4) (async) sendmsg$rds(r6, &(0x7f0000003700)={&(0x7f00000032c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003640)=[{&(0x7f0000003300)=""/80, 0x50}, {&(0x7f0000003380)=""/194, 0xc2}, {&(0x7f0000003480)=""/136, 0x88}, {&(0x7f0000003540)=""/10, 0xa}, {&(0x7f0000003580)=""/34, 0x22}, {&(0x7f00000035c0)=""/50, 0x32}, {&(0x7f0000003600)=""/22, 0x16}], 0x7, &(0x7f00000036c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xf4, 0x7}}, @zcopy_cookie={0x18}], 0x30, 0x2000800}, 0x8040) (async) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000037c0)={'syztnl1\x00', &(0x7f0000003740)={'ip6tnl0\x00', r8, 0x29, 0xc, 0xfd, 0xfff, 0x4, @private0, @empty, 0x8, 0x7800, 0x5, 0x8}}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000003800)={r2}) (async) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000003840)={0x0, 0xa, 0x1}, 0x8) (async) socket$inet_udp(0x2, 0x2, 0x0) 8.27025346s ago: executing program 2 (id=3462): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000014002101000000000000000023000000", @ANYRES32=0x0, @ANYBLOB="00dbe80000"], 0x2c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='p', 0x1}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000"], 0xb8}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000003c0)={r5, 0x68}, &(0x7f0000000400)=0x8) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000bf6bc97012d1a02dac10f304bd0000000d000000050007000000000006000800000000000508000000000032776224c83f112905ecf40000001900000000006078b4da51d32bcffd292271556286780a151d6a239efc287599e5fbdec38ff7a217d7fbac01849afa83e61df932b46df864563bd59f72a209f799f55c6e9b4fc445eab678dd41cf6dd0ad470212f4c926"], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000002060108000000000000000007000000050004000300000005000500070000000c00078005e5ad16353a3528571a0789e9d8e78aef0014000700000064fd0300686173683a6e6574000000000900020073797a3000000000"], 0x5c}}, 0x0) 8.132116044s ago: executing program 2 (id=3464): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socket$inet6(0xa, 0x2, 0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/217, 0xd9}, {&(0x7f0000000280)=""/121, 0x79}], 0x4, 0x7, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r1, 0x34, 0x0, 0x81, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 7.523725671s ago: executing program 2 (id=3470): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_gstrings={0x3d, 0x4}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r6, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) ppoll(&(0x7f0000000140)=[{r6, 0x200}, {r5, 0x421}], 0x2, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000090a010400000000000000000a000001400000002467eed5c06c0c0a0101000000007823fcd7ae1f30900900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x40, r9, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r8) close(r7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0xc, 0xffff}, {0x4, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x4, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x800) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r11, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8fc83f9c7d4c9ccd}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r4, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r12, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)={0x57c, r13, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x8, 0x3, 0xffff, 0x6, 0x9, 0x401, 0xfb0]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xf4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe3a6, 0x9, 0xac, 0x21aa, 0x6, 0x6, 0x8, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x9}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x1}, {0x2}, {0x1, 0x3}, {0x5, 0x5}, {0x0, 0x9}, {0x6, 0x3}, {0x1, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0x4}, {0x6, 0x8}, {0x0, 0x2}, {0x4, 0x2}, {0x0, 0x7}, {0x0, 0x6}, {0x6, 0x4}, {0x6, 0x7}, {0x6, 0x9}, {0x5, 0x9}, {0x7, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0xa}, {0x2, 0x1}, {0x0, 0x4}, {0x4, 0x8}, {0x2}, {0x5, 0x9}, {0x6, 0x3}, {0x7, 0x7}, {0x3, 0x4}, {0x1, 0x7}, {0x6, 0x9}, {0x4, 0x2}, {0x5, 0x8}, {0x4, 0x9}, {0x1, 0x1}, {0x4, 0x5}, {0x3, 0x4}, {0x2, 0x8}, {0x6, 0x8}, {0x6, 0x5}, {0x0, 0x4}, {0x7, 0x6}, {0x6, 0x4}, {0x0, 0x4}, {0x3, 0x5}, {0x7, 0x6}, {0x7, 0x6}, {0x7, 0x2}, {0x6, 0x3}, {0x0, 0x2}, {0x5, 0x1}, {0x4, 0x4}, {0x1, 0x8}, {0x6, 0x8}, {0x3, 0x3}, {0x0, 0xa}, {0x6, 0x6}, {0x4, 0x4}, {0x4}, {0x4, 0x6}, {}, {0x5, 0x4}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x6}, {0x6}, {0x2, 0x6}, {0x1, 0x7}, {0x4, 0x7}, {0x6}, {0x0, 0x2}, {0x6, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x6, 0x6}, {0x0, 0xa}, {0x5, 0xa}, {0x7, 0x3}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0xa}, {0x5, 0x4}, {0x6, 0x2}, {0x1, 0x7}, {0x5, 0x9}, {0x6, 0x4}, {0x6, 0x1}, {0x1, 0x2}, {0x0, 0x8}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x2}, {0x5, 0x8}, {0x7, 0xa}, {0x7, 0x4}, {0x5, 0x4}, {0x6, 0x7}, {0x7, 0x1}, {0x1}, {0x0, 0xa}, {0x1, 0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x3, 0x7}, {}, {0x5, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x7, 0x2}, {0x5, 0x1}, {0x4, 0x2}, {0x2, 0x3}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x8}, {0x6, 0xa}, {0x4, 0x1}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0xa}, {0x1, 0x7}, {0x2}, {0x2, 0x9}, {0x4, 0x2}, {0x2, 0x6}, {0x3, 0x4}, {0x7, 0x5}, {0x4}, {0x1, 0x7}, {0x3, 0x1}, {0x4, 0x8}, {0x6, 0x3}, {0x2, 0x8}, {0x5, 0x7}, {0x4, 0xa}, {0x2, 0x7}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x7}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x5, 0x9, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0xc, 0x1, 0x9, 0x0, 0x6, 0x9f5f]}}]}]}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x4, 0x2, 0xf414d92992c89e18, 0x36, 0x24, 0xc, 0x30, 0x5, 0x60, 0x2, 0x30, 0x48, 0x5, 0x6, 0x9, 0x1, 0x30, 0x16, 0x18, 0x30, 0x6, 0x5, 0x36, 0x6, 0x6, 0xb, 0x6, 0x1, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2976, 0x81, 0x6, 0x800, 0x1400, 0xc478, 0x800, 0x1]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0xffc0, 0x0, 0x7, 0x0, 0x4fa9, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x318, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x60, 0x16, 0x0, 0x36, 0xc, 0x24, 0x36, 0x24, 0x4, 0x6c, 0xc, 0xb, 0x3, 0x30, 0x12, 0x3, 0x30]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xcce, 0x4, 0x2, 0x7, 0x7, 0x6, 0x7, 0x25]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x71f, 0x3, 0x0, 0x6, 0x4, 0x9, 0x4a3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x53, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x6, 0x76f0, 0xfffa, 0x3ff, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x2}, {0x7, 0x6}, {0x7}, {0x5, 0x9}, {0x1, 0x5}, {0x7, 0x4}, {0x4, 0x2}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x1}, {0x5, 0x8}, {0x5, 0x1}, {0x7, 0x6}, {}, {0x6}, {0x5, 0x6}, {0x3}, {0x0, 0x4}, {0x3, 0x2}, {0x6, 0x8}, {0x4, 0x3}, {0x1, 0x4}, {0x7, 0x5}, {0x7, 0x6}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x3}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x2}, {0x6, 0x5}, {0x3, 0x9}, {0x0, 0x2}, {0x7, 0x1}, {}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0xc, 0x19, 0x60, 0x16, 0xb, 0xb, 0x12, 0x1, 0x9, 0x48, 0x60, 0x4, 0x60, 0x9, 0x18, 0x9]}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x8, 0x9, 0x3, 0x8f06, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x8, 0xfff7, 0x2, 0x7f, 0x81, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x60, 0x8000, 0x8485, 0x4b5b, 0x400, 0xfff7, 0x1ff, 0xa60]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x1c, 0x6, 0x6, 0xb, 0x1, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x0, 0x57fa, 0x3, 0x7, 0x3321, 0x1]}}]}, @NL80211_BAND_6GHZ={0xe0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x5, 0x9}, {0x5}, {0x3}, {0x1, 0x2}, {0x5, 0x7}, {0x1, 0x3}, {0x2, 0x6}, {0x5, 0x1}, {0x1, 0xa}, {0x0, 0x2}, {0x0, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x9}, {0x6}, {0x4, 0x5}, {0x4}, {0x2, 0x4}, {0x4, 0x3}, {0x6, 0x5}, {0x4, 0x8}, {0x4, 0xa}, {0x4, 0xa}, {0x1, 0xa}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x8}, {0x1, 0x6}, {0x5, 0x4}, {0x7, 0x5}, {0x4}, {0x3}, {0x3, 0x3}, {0x5, 0x1}, {0x5, 0x4}, {0x5, 0xa}, {0x7, 0x4}, {0x0, 0x2}, {0x0, 0x7}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x7}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x3, 0x3}, {0x4, 0x6}, {0x5, 0x9}, {0x5, 0x6}, {0x2, 0x6}, {0x3, 0x1}, {0x0, 0x3}, {0x4, 0x9}, {0x0, 0x4}, {0x3, 0x2}, {0x1, 0x7}, {0x1, 0x1}, {0x0, 0x9}, {0x0, 0x5}, {0x0, 0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x7}, {0x2, 0x4}, {0x5}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x2, 0x80, 0x8d8, 0x3, 0x3, 0xe679, 0x7]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x60, 0x6c, 0x4, 0x1, 0x16, 0x1b, 0x48, 0x6, 0x4, 0x9, 0x12, 0x30, 0xb, 0x30, 0x60, 0x4, 0x12, 0x60, 0x20, 0x6c, 0x36, 0x9, 0xb, 0x0, 0xb, 0x3, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x18, 0x5, 0x24, 0x1b, 0xe, 0xb, 0x48, 0x12, 0x30, 0x16, 0x48, 0x3, 0x4, 0x24, 0x4, 0x6c, 0x6c, 0xb, 0x0, 0x12, 0x3, 0x36, 0x0, 0x16, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x6, 0x0, 0x8, 0x4, 0x10, 0x5]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd2f, 0x3, 0x2, 0x9, 0x80, 0x496, 0x9, 0x31]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfeff, 0x8, 0x9, 0x4, 0xa, 0x858f, 0x2, 0x9]}}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x1, 0x33, 0x8, 0x10, 0x5, 0x6, 0xffa7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x2, 0x8570, 0x7, 0x8, 0xa, 0xd5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x4}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x6}, {0x7, 0x9}, {0x6, 0x3}, {0x5, 0x4}, {0x5, 0x3}, {0x6, 0xa}, {0x5, 0x6}, {0x2}, {0x3, 0xa}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0x7}, {0x0, 0x8}, {0x7, 0x4}, {0x1, 0xa}, {0x0, 0x6}, {0x3, 0x4}, {0x2, 0x6}, {0x6}, {0x1, 0xa}, {0x4, 0xa}, {0x3, 0x1}, {0x0, 0x9}, {0x6}, {0x7, 0x5}, {0x4, 0x6}, {0x5, 0x1}, {0x1, 0xa}, {0x0, 0x7}, {0x4, 0xa}, {0x1, 0x1}, {0x7, 0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x8}, {0x7, 0xa}, {0x1}, {0x1, 0x4}, {0x4}, {0x4, 0x8}, {0x1, 0x1}, {0x5, 0xa}, {0x5, 0xa}, {0x1, 0x7}, {0x0, 0x2}, {0x5, 0x7}, {0x7}, {0x0, 0x1}, {0x2}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x9, 0xec, 0x5, 0x3, 0x39ad, 0x1, 0xfffd]}}]}]}, @NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x7, 0x1}, {0x2}, {0x2, 0x7}, {0x7, 0x9}, {0x7, 0x2}, {0x2}, {0x5, 0xa}, {0x4, 0x1}, {0x5, 0x8}, {0x1, 0x2}, {0x3}, {0x1, 0x9}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x4, 0x3}, {0x0, 0x2}, {0x2, 0x5}, {0x5, 0x4}, {0x4, 0x1}, {0x7, 0x2}, {0x5, 0x5}, {0x6, 0x5}, {0x7}, {0x1, 0x5}, {0x7, 0x3}, {0x3, 0xa}, {0x0, 0xa}, {0x4, 0x5}, {0x4, 0x3}, {0x3, 0x8}, {0x5, 0x3}, {0x3, 0x4}, {0x0, 0x4}, {0x4, 0x3}, {0x7, 0x9}, {0x1}, {0x2, 0x5}, {0x2, 0x2}, {0x4, 0x9}, {0x2, 0x1}, {0x0, 0x2}, {}, {0x2, 0x8}, {0x1, 0x8}, {0x3, 0x1}, {0x7, 0x9}, {0x0, 0x1}, {0x4, 0x6}, {0x7, 0x9}, {0x6, 0x4}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0x5}, {0x2, 0x5}, {0x1, 0x2}, {0x7, 0x2}, {0x0, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x4, 0x9}, {0x4}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0xa}, {0x2, 0x7}, {0x6, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x4, 0x6}, {0x6, 0x9}, {0x6, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x400, 0x2, 0xa, 0x7, 0xfff, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x2}, {0x0, 0x3}, {0x5, 0x4}, {0x7, 0x1}, {0x5}, {0x1, 0x4}, {0x1}, {0x1, 0x7}, {0x7, 0x4}, {0x7, 0x7}, {0x7, 0x5}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0xa}, {0x0, 0x6}, {0x4, 0x8}, {0x5, 0x7}, {0x6, 0x6}, {0x6, 0x7}, {0x3, 0x3}, {0x0, 0x7}, {0x3, 0x5}, {0x3, 0x5}]}]}]}]}, 0x57c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x20000815) 6.751870733s ago: executing program 2 (id=3478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x1, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x13, [{0x3ff}, {0x5}, {}, {0x2, 0x0, 0x1}, {0x6}, {0x4, 0x0, 0x1}, {0x2}, {0x1fdc}, {0xff, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {}, {0x9, 0x0, 0x1}, {0x5f5}, {0x7, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x4}, {0x4, 0x0, 0x1}, {0xe}, {0xe2}, {0x1, 0x0, 0x1}, {0x2}, {0x101, 0x0, 0x1}, {0x1000}, {0xf30b}, {0xe1e3, 0x0, 0x1}, {0x1}, {0xffc00, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x2}, {0xf2e}, {0x5, 0x0, 0x1}]}]}, 0xa0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x84000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x44, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0xc8}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, &(0x7f0000000080)=0x20) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x80010, r4, 0x802c6000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200000024000480206374000014000280080001400000000c080002400000000b0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) 2.26105012s ago: executing program 7 (id=3543): r0 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) 2.259792555s ago: executing program 1 (id=3544): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRES64=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) listen(r1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000180)}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x1) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r5, 0x7, 0x5, 0x1}, 0x10) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @multicast2}, &(0x7f0000000280)=0xc) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, 0x0, &(0x7f0000001080)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) 2.243581832s ago: executing program 7 (id=3545): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x36e01c0612421f59}, 0x0) (async) r1 = accept(0xffffffffffffffff, &(0x7f0000000140)=@ethernet={0x0, @random}, &(0x7f00000001c0)=0x80) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x40) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f00000003c0)=@ctrl_frame=@ba={{}, {0x2}, @broadcast, @device_a, @basic={{0x0, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x9}, "6e8faf4cc0e29f37a897bc08e2d947a8c3b914e9196f91e375a0bf984a2b4e0439d6888e9bc7648382eb195c10efcf2f2427d20add74d6e7f502d5ebe73d984946e6ac4b3082092a09edd5ca021b0495889f0dd494696cd2dddb903a2ccf951162584081bf3eed9ba0805f9d46b36f962ef56051c0008dd3cda237697606ee2d"}}, 0x94) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000480), &(0x7f00000004c0)=0x4) (async) getpid() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000500)={'wlan1\x00', @remote}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xac, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000c0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'veth1\x00', 0x0}) (async) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa0, 0x0, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x67}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xbd}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6df9}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfd2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x15c240dd}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2000050}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@getnexthop={0x1c, 0x6a, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x20000001) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001a00)={0xffffffffffffffff, &(0x7f00000009c0)="1e891ce7d9aee47644d0c9f579e860f6c353ce0ec486968dc79b1f1edcefbcf5788b9f9d693d824592dea05b7a43e4577cde9b2a5b21e39a215708c974d39f6de445be9b75099a4ecff62637ac0c8f50dedc19d826f328915a81a73f17b62a94be822e6569b543d2f90e11b73b4d9676479d5ba1438eaf412a12c3746fbb299f7253ddf307187727b2bd5d8bf6abf5a8c4f7ad3e1d99fc37c435670f20fc0ec50412f5de53844c1562317cdbd34fd42e581f12d6219e846bcea19c36c7aa37a64178dfedf16d2fc0fb94707318e916f1d5ca10883213a1b5828ca0ee883aa44736d578f93c569278acc0a85c242146d6afb1b9a8ac507ac086454fa66bf19f2c524c870aec4f05d8898bfbdbc17a59c0ecb7b572561b1d9a5ec322d18efec6df7f17d594b1d82cfa4b226de118564a16513607c51a7fea48ba856077386e4213c2eb8ac5d11c02c219511e968a02638dc2679bea95d3f25a28f53feb70cfc404a916b9aa6cdfcfdd73df14501660e385b052c161f9d97d1f5750f3ccfc85f6e0a805269fa94d74db7a5f7534ba9c1daf1f212e470ef54a269a7ad23b25e63911c1104ad4c5788a06d9151fcfb303d38164d503d9211683d3f90ebc64de3524a7d62a18288b7a35544f36a6b715d9c18bb5608a78fb86e0220c0737d58d15e78f7eb362a20e125e052f21bc7709d9991c3c1bdd7297d2a8d2c00a1adb08bdaa713cbacd5cb1ff325af241b2c20174b3ff30bf91f347b9db5c78218689d30c726d4d0c43ca8aa0d317753ff497d3e0e904e2a4db64ec553e807eda705c12a37ff2319194ba942f51a0f208c08a11ce772b5c9ceb1b65199d7becc4d0e85d21188217de4e7599794a372bf1ebb9d3d1c6885878257d31026c967992fdf140d3565c104fef2a9f7b1f0ffef8ac6d0fe1dc72bf443081c18ce795338329ea075a0901f5debda451a9441a1cc1b27e48b43718eedae971c7ee09e58880543785dd989104933a6c8e64e87de20ac6f7b175ab6c4431cb5cb63abb606713aa16723e7834de9353919073ae92df6a922e8183bdab872cf2803b0a49223a9630dc73189f9d2e32f930f7e3e80b033de5ed2adcec03904e91eefa366a01fc8f77796d381af47810ac83607679d7f0e8949e73e9fd48375e9576de2c5655a3152d7cd277281fd95a9d17bb7eceeb402736947d58792fa4ea39410b0eefd8e642af2b7bb0fbca78e3a7d86a6af12607e89f9162b6e20539cc51a590b613a8fa4ec379b79ab045a02d0dd6565dfdb7b8e67416478beaa79217150aaa89c4d9945e6fe4dc52f49e5e490a029ec34f01e6511ab3ed6be8cb6990c8527743036c105cac234e0db9e02ea785555097cb7dc59cd16b98696248e3c5f534460c8440ced5d6c37ca75554716ad175a92a1636bfdd4765b290ed98550ddb6187da9a480db2a5b814ba947ebcd200b7f8c51122385966e4e0479a0373320b1b477bb7e11ac0a1c3224f83c22ea9761d69308bba37a2468c532ec3d0540288a80a419986de28bd21b35a797cfc9a00a3883c3186765f8d36566c94653bb7cd34ea63518ff55b023e5228cab6ea7246eb413e68e2199804b0a02fb02c890ad7ee9146c769488d72729dd4232f117d97dc4663ce89e7eee5975aa09e92e97b92f92c94dd7b92294386bac77d1b3927d2a939fb2ab7e255e881b3547e503a49656f1b3c3f3cc6b63978d505ed00aab80562ccc17a2f5efc1680f4149511585425b658bd2d440fc38d113eeec57298d3f094b0661b82387a43e6a4591a1599a2ec920191bf49bae8c74fc0bb91e27613b12c0acbf5b70ac031ed6c4bd28358a544c8a601ab99a38d91ecc178d99e97ae9e997f2ff899ece0b85239cebbc8f4fa052d572490f2cde2b9b8cacb62a263a894181bb8d379f071563ea5710601a9ef1a3baed25f6c1da73c014ff50ac39734e8c418d36e55ccda482d1b3e2b5b057c604121ab3f6471911271e9ba24293c368e37640b1db851dc2be55c9b1d5b8ea6f375089cb9719f146bb80f82c078ed87934d78fb7f1ea2c9bec1df34f621057268ddb728d411f992816432ae1ff634e121d0da0d62462466489b2fb70b27cdfc5d9518df69757d2276cd1aa459353e652b7b145575e62b84dad49d2896588aaedd9a1d753fb0e1a85e203898f7785fa3a48b565193a69ad49bb5baa887fa723f6529700e380513b6e37ffb252c012bddfb9460717e703675f8295524c1bc648ce2e5a60470c66fc3a435fa8f222d33c56faf576d5b4fcf14486b48b864b8af3f0a1cf3b600e02b95296bf939f0c2d3aaa71201c0f598c5838b1c48e9f97df5a24f2f3fd0b489156d9e6a7c9f005a047c99ca71ac667707b71d65a0ac8a792cc4df9878fd91fce10ffedf3fd5181af58e4a7cb23a222fd02c4bc124a3e8fb30bbbc7eb1c98a7579a40810eaa9eae1934c5da91b200beda9fe422194e3daa9010bd0b316a276aad496d8e67053e71ca464d8a3f9e668516363b9d06eb93743b1d15f5710f1d107106f0b949c1a43cf7f5c571696482c2206ca291175b6e932c1c413c0c7968d595dd34c71baa8a931b378a131eaea3e97022937d89490378555509453528db68e34c38736171b965a8f5520934bc186a840b2a9488e15a4bbd01f58714017b7153797640927da9adbcb616b15e7e86d0ba15c8396b7cbbd486717734d14ad599825576f4d952188902c943ccf5f3869a169cec0d7383867f55409a9f0ef019f335ac070e831034fee21c0dcfa504c76816d384ea35146d6c10910caf94e11a63fd70d2d9bb72e677f301880d5511f1e564fc1d1234f1604f05df48d7f555a847c7ebc6f2bdbb80c16df8f4334bf335ac887007b35818eae75c398d9e140b2580766ce1bc8532e3225cb451ed752901073d1ce31eac8933c4942e83a0f3f6a5926b4872e5bc094ad1d14e394edcd2adcb1bfa56f7b28c6cf762e100eba11545fbbb978f7527dedc676eb80cca8a9c774e2130e98245fad7321086cef3e088b7268509fd3e2e1868d035f74abafc2d3be51e9d34c1eb2aed50d1a308bdb2320ee81c284dc7fbce4cde82662acd3bf931e900e1d80c57157deed1c0f7ae2d4cfffd8640e03ba675b669abac3b8015e4a516f48a22cb9a095bbfe2d2bdccfb1512da21797a347dd4108aa6cb022ccb943a96cc362297585b0ab5d228048c0a506a934c3ee2c4ec35070086cf6bffe2bbbd18c349c2210d8663138dbbe27bc32512f3cd886dfbb0a9aa8a4040e148b1b62e22834b1903f6c3b2a63e087c3cfa0dc058918d9df1b94b274d0959f92552f4a580324f7a8c33e9b3daf28e497aa9043d4b147988ce0cf0fe374da06b308a17aa6c31f7249660cb43178474ad8dc9a7acf84511ea2353fa37df37e5f83868635ad78327ab14899cab84fc7723572454f2d1b25364407c75be08886bc6276c662b7f0aaf95d700ff3692338bbb6fe6175215254955497e008b16e423ca2c6a45b783f8b0d5692cf0b1736ba1334f918165f8806acac53943b7186609941c4b81e5ccefe9b2e5b139a8a70c2dffd367913dccfc332afbf970e40d8f25f50a7f80ea7120283c665872b45c41216e7ae00cbef2b4da5845313275452f9b8b97808a9d29d74262a3001e15bb1b5cf08629dc2a2b935614d476ed4bb5a7b605d15efbf32554beafd2e3199a3d1c5221ee7b0b4c7d6c09322847b4ab11d3e6c1856deeb0c5cb1c3cd0d6e7e85a70cb3e8f4baf9820c923a3b9c943fdafcbd65222b6caaeea05283086bc87cecbfdbb86fc2f0e05b620061d571dd47e8cc335b60029c2200ecc195b26dce96d10e99947674ca261d7068a24bda5ed66a55a404635fc6d5573560edb9b3455429b9da327bab5217c3c9de5ff038185d0e76ab65c2f7cdd767495c53cb5e0269498bb7eb7465e5a69f1e53da1aeb3fe083b1d36eb3bcc997a3eaec43f8201675fb5de76c422477f7e70b21063e2dc0eec60088ca1746f8513a37ce795e25e9ce26827ed6886aca354bea35186d07720a8cc861d79bc1a5472f651c5fd7d2f81a31dddbc420021b98f4f6437739c07fa1a20fc784214aa38241fb73e2a4fbeaac838ddc66284ba70d27e4e2917ed8a7162289b5203f04569d22b6be237aa7d8bfa2ba848135c30772340679329e9d1d3c4c815f6e0e9e0d48e47f59a824130c1bf611b1ca06f04671d348854d75817cb10aac154d9d17ee71e93ce3b208588f8f4eb19f7ce1feda965aa9530322f957c347a7195eb801e0ff8ff5438fa78903d1add5e9e0d80846faf28d7fa05b92b9e2f2cf471a613ac79c974a18b04b2adea904bb6c896d1432ebe9f77f41dbd829c8e33e9a8933e67fef37731977980e38d8248013bcc4305c58da41e47acdf2615a55871bbf9b408926034986637481a2fc7a4ea75f0e15d58116f298cc1f6ee038f2233c2b6b1911c2abf77909ddc0ebc466b425ae32211692ae8ea0f835b7223fff7d4595df30f47aab9b0a0cc180ba03c8d858bd82dcc6f95758170b6ae87b93191e1be19624823ac77ff17760d036c10d12a47e55be53d41fa4137c2d9f5ebe38357dc920e4db52ce840b525be3ff02581660fe415810707d7c771e4e9d97698c0c17c2a74da8c836ad2c5c6eea754382235f8921a9e23b619056180185d0ec9de03149e3752a47e7b422320d29298bf18b64bd8e2c61e40d00ed648ba90148fea8c0d0e934ea8a204ae439f5212c5282be70153585fe42b815d209b0b16b464fd0e6d6b39107c3a13795afd9cf5caae60d72902581e728455624a14eb36225ad4dbd5a1cd8ac786c033691ed36e4db96d9907e50e310f8cdccfdb8379daeb1c4ee7f3df42b7350ca7d08ff1e1f8649c27e53cd00a9663f65e0b47814348a46cb2aaff47f2824f65f73b8eedd6302ad70f5e23be3b1bc77300af72a37df72d8d0d597c5c8f94194d09386b777184be24b149ba515c8f20237b1158a2a03fa228c0e379f0297f533273c9ff2c6265c3924108d4c85afc0dccfb0dfcbf98c26c2c4e1916d272ef1c6bbbb397a2c0da0c6fd4eaa383a29e7fe8f6c0197b38ada333707d801d57d9e4a21f1b2f5bc1a384ffa9e24a1cec3ca4433744d07334ce474f99c1c291715858d38fca57a92b482181c38b1bfdefa8bfa5121d7f04292b24e792d27d4cbec1d7e735d076fcc2d5d66e11ad62b6f4ec49670eb44126916fec71a3063c365cfd2476be64496c66f76d332d8ab436d51834e91aef8d5f17f7adbd0dd3eef0e89cf6989eb4328fab73004957389be0954aa3ae8f83fd75dbe9bf5d1ad204e54f573686eaa14d4eb22a4d88cf684cae7df8cef22718bbc6e9a574a5f91aa7ad609429d9e42bed70ae406c2fae5cbba7cc9914c8b3f470adb42b976573ff1237007e9875cc127409c304d34d46960e72c7a03116ace3766198bccd8fc7b18cb1c157bb5829bbe5c7bb38d334a97051959e6ee1cc6990f00935384c55b1160ccef778c01f160d0bbf1a88f679759253dd2f951e71e8e14a6ff63a020f94e829434094172ae7353e51a6b1da3daddebb5012cd12b7f60c19218cd765b0ea1eac05f5ad8e4e155253a34966881868a46984963128b5d3ef0f44831b6c5a418af5ed475142585265ed1a44d2960e8436e6370f5b215c0ad8d92dc5cdddd5152cea696b6cd163e1f892c0e419932ce622c713165ee41346c624b729ad469c60c3479f55b2f566c2a70a9dbf4e319c8b35eaa233c48a77d53bbd30b942bd2ecaad94be3a0bff0c0432e256ddeef2a6b3a7bd5d42d7e199254eb5f200e081d0a6b", &(0x7f00000019c0)=@tcp6=r6, 0x1}, 0x20) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a80), r1) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x90, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff5bc4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x55}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x80) syz_80211_inject_frame(&(0x7f0000001c00)=@broadcast, &(0x7f0000001c40)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {}, @from_mac, @broadcast, @random="81c4e795148e", {0x4, 0x372}}, @a_msdu=[{@device_b, @broadcast, 0xb7, "f525702fce6638d0fe0d3cb3d0439ba454a0706718e165e4e8c60ccfed6437b11dd911c8fa944c3fbda910f4c86fd52adad9bd22cc80792619886fa3d139d18a6c9d0d87bafd28eaecb0cc38a721bb3d8c2c32e8d13116788259ff3330112a906d29ea4d011680a1bc43e08656ffb50fd99caab7e549ea43217fe90c969ad21ed99a42310c81fa778079c5196521baf386345a35263694d060e2e8dd97cd3f2e9328bd6689ab8e8f3fa9cb6ff5538f0b98186d4b5a71ae"}, {@broadcast, @device_b, 0x24, "17df9e2fe76336a5b052b6b9f6656a1362e709667f21545811671ae913141dfe996da419"}, {@device_b, @broadcast, 0xcc, "7d3ba22304fdb935b889ca5926f29c70562dada148082b7137c3ca5cb6da89e92bf0787f08423633807e290ab0f87cc3f939257ad858205390335ce882c5dd45070bd11f639ce0fc6c7ec905093831d702b257abecd2f162d7437a1b60873b87399866bd39b603b1eaec372392866dfd9016696c23b87e87c03614a418025ad85edaec61e03f7ae2846ddc6299f432666c6bcacb83904d4a160c5766e2dd5e570fe75ae7a83ca7289d6cb1cee5a1b327acd6a62a5f3af9b9dc14d624dbb3078743a78e03a39b6d0636da985d"}, {@broadcast, @device_b, 0x93, "0eac32f306793de79e170e509b1716a445ab67f77f29848745e58cff0499fc4df544c90e9fb9a1d70d7c2e9b7a1491d426121291521259e6aba69cf9647037d5319ed449963ebde313b2435c4ead85de5c701ff1ead2a41af8c82f5c1903dfbadfe77f2275772ad95112ea866682b85bba7e9ce2bbf9ad2f381c5c040ea9e718c9e45da73366289359426f2fe0baf5be98c7e5"}, {@device_a, @device_a, 0x5e, "bf0989abc955d012370642fed031edda5da1e25c93c155d435601576a9d689c123658bb4147f1a3b3e43c3b36daf2cdf19358bb57362eec7b3ac2873db7858bc2041e7312404aadfd03500e2574b0ee1f928d94edb6c5cb04f96c356f698"}]}, 0x300) (async) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000001f80)) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8982, &(0x7f0000001fc0)={0x6, 'pim6reg1\x00', {0x9}, 0x8df}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000002000)={@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x3, 0x7fff, 0x7, 0x100, 0x7fe00000000, 0x110010, r5}) (async) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x50, 0x0, 0x302, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe600}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000085}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000002480)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002440)={&(0x7f0000002200)=@deltaction={0x214, 0x31, 0x408, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x988}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x10}, 0x4004004) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f00000024c0)=0x6, 0x4) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002500)={0xffffffffffffffff, r5, 0x25, 0x0, @void}, 0x10) 1.703586703s ago: executing program 0 (id=3551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000012c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x18a}], 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x8c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x12d, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e20f0000f71101fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e204e2200f79078b6"], 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000340)=@nat={'nat\x00', 0x19, 0x5, 0x90, [0x200000004bc0, 0x0, 0x0, 0x200000004dbe, 0x200000005172], 0x0, 0x0, &(0x7f0000004bc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x108) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.644810209s ago: executing program 7 (id=3552): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0xffffffb9, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0xffffffff, {0xa, 0x0, 0x10}}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) sendmsg$TIPC_NL_SOCK_GET(r0, 0x0, 0x8800) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="ce3941b50b2381d439f81c7ad5e49790f95d78a15a801ea6810743bb29a09ddff07548049e3afa8f8c3c144cbb2b6b5c131241c8a1fc556b02e078fdab6476bbececfb42a636978c886bd91791e53f6aae41cde99432", @ANYBLOB="a88787d7e601d3e12c99ebb9f525eea6bef8719f62d574408398f79b654fc30d348f2e0d9c6995c0936024dd99515708e5f9dde09c58a61594bb43126e7d3f473736392377db90abed5e0ea84ce74cc3a39d79b1", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x2004800d}, 0x20000000) 1.564954662s ago: executing program 7 (id=3553): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="e4000000", @ANYBLOB="52a2a8de2d90d65f070f1075b28e0e640c831d6ab7d884741ab9d5a396de09bf452b8c9d8504a3c640", @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r10, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000ea9ddeceeb11429d730000", @ANYRES16=r7, @ANYBLOB="0100000000000000000067000000080001003c00000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000000000000000000"], 0x30}}, 0x0) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) write(r5, &(0x7f00000001c0)="b4", 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x10, 0x0, 0x8, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x1, 0x40, 0xfffffffd, 0x8}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/time\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r12, 0x6180, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000ca11140100000000000000000b0000a6"], 0x20}}, 0x91) sendto$packet(r2, &(0x7f0000000300)="389295d291ba5aa2ff9e33b71a171b52ade11bce7ff5653a4614d3e51c0bd9fcd749e8681cad90175ec342c02311e954cfae3e99ea74e7eeb1e7098af0bfe2a4542a19f887377af91e698629a584d0fa9ccdcfa156038cf35aa4e99b772cfe194c6e92b9b8b43c73cd94a2c2261c3266e5e57044f5cb507217790ea1253cd42fc664759a6d2421678efbc5565b9b42792cfcb3b2af2d8c181ad1397f7117fe13687e55eb482adaf303b5b0bdcd893b34b67063868a5dbb30962949cee7e097388603afa44251c809", 0xc8, 0x40000cc, &(0x7f00000005c0)={0x11, 0x6, r11, 0x1, 0x1, 0x6, @multicast}, 0x14) splice(r2, &(0x7f0000000000)=0xef, r2, &(0x7f0000000240)=0x6, 0x2, 0x2) splice(r5, 0x0, r2, 0x0, 0x25a9, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000e6322af305000007000000000000001c00366eff74d34241a844fe693bbaab2be843f0fdf9990000afbee237a75ba118779076ff244609e1d09544478741386cae164e2b3e392a884148ab84130c5ac5f4c08528d8cdad074c4e27b8ea22ac5ac8f728280ca489ede1c251fe3702ac6d6bc993f6e7c172b5e202f8378da8a670b8cfc2b14cb3070e51b926c9b746e3031d03cad31259416a04a46664171f750d023c3a46dafc9752da9b18000000000000000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000001c00128009000100626f6e64000000000c0002800500060001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000fe8000004000000000000000000000aafe8000000000000000000900000000aa0000400100"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000090780000fe06e2d4c3d90000"], 0x0) 1.309088998s ago: executing program 1 (id=3556): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) bind$l2tp6(r1, &(0x7f0000001100)={0xa, 0x0, 0x0, @remote, 0xc, 0x1}, 0x20) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000004000000020000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="a400c678", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="080005000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x828}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x17, &(0x7f0000001500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_fd={0x18, 0xb, 0x1, 0x0, r3}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @exit, @jmp={0x5, 0x0, 0x9, 0x0, 0x7, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}]}, &(0x7f0000001080)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x3d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001180)={0x3, 0xd, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0), 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001380)={r10, 0x0, 0x3e, 0x0, &(0x7f0000001300)="237fe82c9e1db4dc2fa0c5784fbace9627c4863b0edc4069597b35fc7ce49c5bb51d2a4f9e51c38a0ca70d3e92693331f55ecdfe316230c635d039db670d", 0x0, 0x9, 0x0, 0x39, 0x0, &(0x7f0000001340)="f27d27673d1fae6c6cdaeee0c3611929d577e48b86a3ac1c3ffb6d41341bfa219627fc04e49a08d31c5b39accc466b694c8ab17e51db2a1291", 0x0, 0x2, 0x0, 0x71}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r9) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001400)=ANY=[@ANYRES32=0x0, @ANYRES32=r9, @ANYRES64=r2], 0x2c}}, 0x8080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xa3, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xfff2}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000e500000000000000808500000053000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x11, r5, 0x78f6b000) 1.238362067s ago: executing program 4 (id=3558): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x43}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4040095}, 0x8010) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r1}, 0x38) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.13650761s ago: executing program 1 (id=3559): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) socket(0x1d, 0x2, 0x8) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r1, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x368}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000006646000200000a48010000020a050000feee0000000000000000100900010073797a300000000008000240000000060800024000000003080002400000000308000240000000030900010073797a3000000000f90006008de00b8ae1d58822d71da98b4cd55e01e277f5435efed520664d015b84112c9bf3435910276fce810f097649c88e804320fa911e11e6bf9546f7c45cc048fef13eec3473d36d676e672495bb49c8e897030ed30959ac5bacd928982152c9e74ab40fcceba816968acd096676b55094f7ab5bf7838dc403a2829e6a58df3347b72d7af6fb1fc411a7823861d1064c4d3f58fdd5e34f65f2f9c6b1bbfebb5493713e16664dfcbbf042418b60f07417aec74e081679b2cba19d818b3149a322b192c1ffbe65a09699b2715a2cbeedd5b7b3eaa05d41cd58297d8f764a1af28c3518d72f3d4b113369cdadad8102b40fd26c21a2c303fa0000003c010000050a030000000000000000000800000408000540fffffffc0900010073797a31000000000c000240000000000000000508000540ffffffff0c00024000000000000000040c00048008000140000000040900030073797a310000000049000c00b7adfbdd4286bcc011f3d25d27153609965da0aba893356111e27b534c1830d354fdc11ef82065d808320cfa17e86c3206111f5b0ffcb776d810bd6cceb12fd19fd228c95000000035000c001c326e271450889a9bddcfa082a68fd82abe097cffb805cd51526eaebb84cef48147c362ecc47014534ed5dece3eb4e28b000000580004800800024060bc4c141400030070696d72656730000000000000000000140003006272696467655f736c6176655f3000001400030067726574617030000000000000000000080001400000000408000140000000022c000000080a010200000000000000000a000008080009400000000208000b400000000308000a400000000248000000050a010200000000000000000a0000020a000700726f7574650000000a000700726f75746500000008000540fffffffe0a000700726f75746500000008000a400000000320000000120a010100000000000000000a0000050900010073797a310000000028000000000a050000000000000000000000000408000240000000000ce386868adc531988000004140000001100010000000000000000000500000a"], 0x368}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x68}}, 0x40800) r3 = socket$inet(0x10, 0x80000, 0xffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x89f0, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r4, 0x89f0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r6, 0x4008744b, &(0x7f0000000040)={0x57}) (async) ioctl$PPPIOCSNPMODE(r6, 0x4008744b, &(0x7f0000000040)={0x57}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.135560715s ago: executing program 4 (id=3560): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x1, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @mcast1, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x6c, 0x0, @private1, @private2}}}}}}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9200183afffe8000000000000000000000000000bbff02000000000000000000000000000184009078000c0700fe8000000000000000000036000000a4b3317fdf7f314fc349485b3e"], 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c0002800c0004800500010084000000080001400002000008000240000000000c00038005000100430000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x64, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "2da0ef4d4f08ef1678917de3de3d7b4cd008d35eb8557ec3ee777de774fc7987cca41989"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0xe0b, 0x71bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x44}}, 0x40440c0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.091093139s ago: executing program 4 (id=3561): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1404, 0x400, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8081}, 0x60040c1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x5}}}}]}, 0x30}}, 0x0) 1.00003092s ago: executing program 1 (id=3562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b8, 0x2e0, 0x0, 0x0, 0x400, 0x210, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv6=@empty, 0x38, 0x16, 0x300}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @local, [0xff000000, 0xff, 0xffffff00, 0xff], [0xff, 0xff, 0x0, 0xffffff00], 'tunl0\x00', 'dummy0\x00', {0xff}, {}, 0x84, 0x2, 0x6, 0x9}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x36}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'ipvlan1\x00', 'dvmrp0\x00', {0xff}, {0xff}, 0x4, 0x9, 0x2, 0x4c}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x40, 0x9}}}, {{@ipv6={@private0, @mcast1, [0x0, 0xff000000, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xff000000], 'dummy0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x62, 0x2, 0x0, 0x5f}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @private0, [0xffffffff, 0x1ff0001ff, 0xffffffff, 0xffffff00], [0xffffff00, 0xff, 0xc3ce0e07f1463f4b, 0xff000000], 'macvlan0\x00', 'wlan0\x00', {0xff}, {}, 0x5e, 0x3, 0x1, 0x18}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x4, @ipv4=@loopback, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900676c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000400000000000000000000001000000000000000000000000000000000000000000000000000000000000df000012000000000000000000000000000000000000010000000000000044"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x5}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xd}, [{0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x6}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5efd3e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0xfffffffa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="a800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010008000200ac1e00010c0002800500010000000000440010800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000080)={0xfffa, "deacc1"}, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b000100657874686472000014000280080001400000000008000640000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ae968ba36aedd69a00b63a36e302f548eba68a12cf40d43bdd1388dba95b42daf5c8549ae1c83253bf237e506fde95a9546d1b3e692aed07a6cc5a70099f4627660254a6204bad0013a389f020117659aec9a50a4dfab185c328be40b1a01733321f6f9dfa9c5d410b6b1a42297e4a58b7dcd604d0687708439461dde08c63b14c11592149edf30b754f2d99295c50aeb3fee506e015bf2119017c49c5ec80fc0492c4b9ab813580c532be40c9ee85c4c363382fbd78571dab144cc04bdfd018dc3fd39bc55955ffb7e950b14d09453c803a601a8037fb6419884a48c680568f5dcb172e913d92e7e1110764c7ef58eaf7c598bd95e776cadada967d95efe7f40b5d023350154bd0b9f8d58e5646846f5bcfdfac623038f4b"], 0x7c}}, 0x0) listen(r0, 0x2) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xc8, "f6467f3ca83daeff0019f93d0b3f36c9f9e9ad3fb2df1f6a6310414f6af4436182c1749736ec456365b25dffd6e432cb29586a1d43dacfd8a3162a4d090047a99246e11ab0a2018a6c025502a11e0904c882b5d20e1a79e29c050eb0409d0bb7f1e3c12602ab9c12fac8ed97ab4421b6bbb18f6f0635f1b22e35bac7e1b97f01b18cb452e220eda863f449fc467fc853c236f68cdc98bcc9e9eaaf2ed53496ff353c5f5fa30a742b983ddfee1254b603a95c9ba74fd84a413f1fa9c7260c5b61c2ed1abb43657bca"}, &(0x7f00000001c0)=0xd0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000240)={r8, 0xe1d0}, 0x8) 949.052671ms ago: executing program 4 (id=3563): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079108700000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x74bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) (async) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x58) 858.017003ms ago: executing program 1 (id=3564): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xfffffdd7, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) write$nci(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="510401a1"], 0x4) (async) write$nci(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="510401a1"], 0x4) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x3) (async) listen(r7, 0x3) accept4(r7, 0x0, 0x0, 0x0) (async) accept4(r7, 0x0, 0x0, 0x0) shutdown(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000600", @ANYRES32, @ANYBLOB="08000300c6f898"], 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r8}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r11, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)) (async) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r13, 0x0, 0xf3a, 0x0) (async) splice(r12, 0x0, r13, 0x0, 0xf3a, 0x0) write$cgroup_pid(r13, &(0x7f0000000000), 0xffffff98) splice(r10, 0x0, r13, 0x0, 0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001600000000000700"/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001600000000000700"/28], 0x48) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r14, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r14, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 784.632826ms ago: executing program 0 (id=3565): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@loopback}, 0x14) 656.399634ms ago: executing program 4 (id=3566): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000002c0)={0x0, 0x1, 0x0, [0x0, 0x4, 0x10000, 0x7fffffffffffffff, 0x3], [0x9, 0x8, 0x9, 0x10, 0x6, 0x9, 0x8000, 0x400, 0x4d516adc, 0x401, 0x8, 0xe85, 0x9, 0x1ff, 0xd, 0x100000001, 0x0, 0xfff, 0x80000001, 0xdd94, 0x3, 0x9, 0x4b, 0x2, 0x23569d5c, 0x2, 0x399, 0x10000, 0x7, 0x10001, 0x9b57000000, 0x4, 0x0, 0x11bd, 0x1c00000, 0x2, 0x3ff, 0x36e, 0x88d, 0x8, 0x80000001, 0x8000000000000001, 0xfffffffffffffff8, 0x4, 0xc9, 0x7f, 0x3, 0x8, 0x9, 0x3ff, 0x3, 0x400, 0x5, 0x586, 0x6, 0x5, 0x280000000, 0x0, 0x8, 0x9, 0x80000001, 0x61, 0x7, 0x3, 0x9, 0x8, 0x6, 0xfffffffffffffeff, 0x3, 0x1, 0x2, 0x0, 0xfff, 0x7, 0x4, 0x8, 0x3, 0x7, 0x10000, 0x1, 0x2, 0x0, 0x4, 0x25f, 0x7fff, 0x7, 0x7, 0xd30, 0x4, 0x4, 0x3, 0x2, 0x2b0, 0x1, 0x3ff, 0x0, 0x81, 0x6b, 0x7, 0x100000001, 0x21, 0xffffffffffff0000, 0x1, 0x4, 0x1, 0x800, 0x2, 0x4, 0x1ff, 0x9, 0x2, 0xe0, 0x8, 0x9, 0x3, 0xd7, 0x6, 0xfc, 0x40, 0x7, 0x3]}) 655.781865ms ago: executing program 7 (id=3567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r4 = accept$packet(r1, &(0x7f0000000d80), &(0x7f0000000dc0)=0x14) (rerun: 64) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000e00)={0x2, 0x8000}, 0x4) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0xac, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x45, 0x8, "a912bc9041d6a75f8957242ec76028531c1cd971f3d77e0446526104958d1b5b884163dfe4d512e9e875c77bd615d734bf380c56e7fb0ad6c8e7c54bc9dce92df0"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0xa20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x9c4, 0x3, 0x0, 0x1, [{0x59c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x58, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7f}, @NFTA_SET_ELEM_KEY_END={0x25c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x44, 0x1, "726b248c383f8a2deb57799dcf4def4b5222ccd449f304bca51a9a08cfd9acd3f83daccf744f2575402091a6cef60d7bb7335d00c25ee0d7e11bab67066a1d92"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb7, 0x1, "7e755bf0cd534dc8f22ee03c62eaff6a1f869b88f906be4aaf467e372f63f58c9119459fe2179dd3627be0ed5ce721c2a3e149f30bd7344214f9606a6a736406f61b4f08f657230600438a9f7b9ccac077b65025a2c4efc3bd77c2dfbe6b8c6af272ef74e95485300aae34503866643661c860daac4d3032095d50d2752809e9e6ac2e925e909bd02b4d06c2501832e27f120d99e254e8c761c131801cc46db37446804cbeff9cd47571181d3130546868481b"}]}, @NFTA_SET_ELEM_DATA={0x24c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa0, 0x1, "7978a2e862e6121815fa3940ce3596da0f9b225eb0c7b35f05c324476b8886e60edf2627fb81de7bbee215b5fa07f2783b5c5f5aff7dd9b01986783752cdef1e51ab23c6c84680b06a64354bc621eb39a5c31a0ac5d2a2a2dc60342ab2ae8792eda75fb66b72608881c5fa4a314b0f195002b3b99d5c3cbb3aff17b9537b59d0f70788e8145109863dd9faa03315e2e932a0559001a74ce7816920f2"}, @NFTA_DATA_VALUE={0x9a, 0x1, "9c65922d5fe8bad0d50b9dfb75ae9c7e9385786a4148171a20c2ff02f78afe18dceb2987a478d8efb58cbce381cd2fb6d63f604a9b1e575332181fb1f664f7d804c6d76cb25e35838bcebf7ba674927e49439a952de544531a5661ab47441f5685c9215287c45aba8d821e0c30ff72c43f12fbb9ccd0778c3bb5be2cd0d2341cb1a39f2332d8ec3e02af7456e0ff83dd2c16724ea3ab"}, @NFTA_DATA_VALUE={0xa4, 0x1, "228c810b350c2ef7ba85808dd59dac92ed80c420a231427f7addb12dc31523a83c97a1ab2e389c5aae01aac29f82b4dde7f7ce996212de9120e0778624cf12e3790f55592cb453134a5899a4b5bd15c0a5e2a08f2eb30c2c2f32ea8cf479a643e0329cb116b181cffb9aaf7497002f3e82b523ea1d38ed8c341e3269175343cd5e6b3b2e97d8255a81de1b7a9600af5cea184ca2f925de355ed9bbede816f627"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x7b3f49ceecca0ba2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}, {0x18c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @rt={{0x7}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9a31}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xe0}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x48}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MASQ_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x96, 0x1, "93991cdb9a7fe7f0cd79b374a4914171d367808cb4b3b2a12b397904bee4250f1c139f2cbd1a8cb769e467aa023128a7f2c77e7d61ec3a46d3030b34ac37685ce79aa7adbff991dcc0a2c1e322ebb144f1b3af889a7786a31730f59876756a8dc85934fb63d7291e3124ee583632251c999a67532797ae9e08bf94801acb2f8c3c08fcc62c19623c089aa33b487fbaaf6193"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x90, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x54, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4f, 0x1, "7eca21036690c3e7fc18bd358ac1e5e1285bff9cf953907394413098aa6b0f66815c9103a19877c93d960ae433bd34f3422c442de194e8c374ad2c6272ed5f5743454938d6eb45d620e9ed"}]}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xd, 0x6, 0x1, 0x0, "13f3cb6139048b415e"}]}, {0xf8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0xd4, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x58, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x3c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x8df}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}]}, {0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x10c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "99dab16920075fca3161889efec95fa682928cc125e6ce5c658e71b3a1e8c01950d44c70c535f3d52d2faa8661bcf88da5080afafbc6a0f0fbc326514fb091813239c53a8b328ddf214e3f8f2618713f51a956c0cf0004f78a5e96fad4c7ff4c8942480af9f9d4b6578e26ced408994ddf8f7be9270cfbccb9dce13979387aa65518e929be78bb03605efe55413d481b7a9c8f47e397677bd1ca05a16eebfbc3f5a9779bb3f276190971af362ab496c28d2481a8aebc1f6ab8d89f417597bd5e71a15b2be0848ab648e8640b4c212b2710"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb20}, 0x1, 0x0, 0x0, 0x400080c}, 0x4000091) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x44800) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0xf8}, @val={0x0, 0x1, 0x0, 0x6, 0x5, 0x7}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @multicast, @private0={0xfc, 0x0, '\x00', 0x1}, @random="c45d418a2f59", @empty}}, 0x42) 620.508269ms ago: executing program 0 (id=3568): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000008c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x15, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcff2000000000000034e58085000000a0000000850000009e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x100b, &(0x7f0000001680)=""/4107}, 0x90) 518.635463ms ago: executing program 0 (id=3569): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x0, 'veth0_to_bridge\x00', {0x1}, 0x6}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'macsec0\x00', {0x2, 0x4e21, @broadcast}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x44, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}}, 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000011002104000000000000000000000000000000000000000000000000000000000000000014000d00e0000002000000000000000000000000d49a6fff0541fb7a7f54b2a7f48099ce81f4e327aa9373b728b03a8bfa384d6be157c6e025dc1cd29486faa2bd8f6395199a0cd007bc0e7090c74eba1a2c1100"], 0x3c}, 0x1, 0x0, 0x0, 0x440d5}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=@flushpolicy={0x158, 0x1d, 0x2, 0x70bd2c, 0x25dfdbfc, "", [@lifetime_val={0x24, 0x9, {0x0, 0xa395, 0xfffffffffffffff8, 0xc54}}, @algo_aead={0xde, 0x12, {{'morus1280-sse2\x00'}, 0x490, 0x0, "6d081d5fc22fe4144eda0082166503684948c3ff6adfa82080d3b53084334eb0cd88800e7c43ae4aa197051947a1b1e2ff7be5b99cb5d68b507ed330ca6d3cc5ce5a4e92081a9b0d57e031514b44b01d45850e62c5cf5a4f678ecdbff04af8eec3c7ac586a51eba4613587ea994421899c58d55ff177f105926734a1022d2bf3f1953af396da1b03bc8a9f7e3da7b3801a79"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}, @replay_thresh={0x8, 0xb, 0x4}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x468c}, @user_kmaddress={0x2c, 0x13, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast1, 0x0, 0xa}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r6, 0x1, 0x70bd26, 0x25df9bfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x7fffffff}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) 319.987184ms ago: executing program 1 (id=3570): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x21c, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'vcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) listen(r4, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000013c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001380)={&(0x7f0000000e40)={0x20, r3, 0x101, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x4}}]}, 0x20}}, 0x8800) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r7, 0x0, 0x33, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delsa={0x34, 0x11, 0x4, 0x70bd2a, 0x25dfdbfc, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d3, 0xa, 0x32}, [@lastused={0xc, 0xf, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20050) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfffffeb5, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) 318.443932ms ago: executing program 0 (id=3571): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05fa651ba00000000000010000000900010073797a30000000002c000000030a03000000000000400000010000000900030073797a32000000000900010073797a300000000054000000060a01040000000000000000010000002c00048028000180080001006e6174001c00028008000540000000040800014000000001080002404d89000208000b40000000000900010073797a30"], 0xc8}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="010000b146b8d9000000000000000018000000cb72050000000000000000", @ANYRES32=0x0, @ANYRESDEC=r1], 0x68}, 0x1, 0x0, 0x0, 0x4c040}, 0x0) 176.711698ms ago: executing program 7 (id=3572): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)={{0x0, 0xe5, 0x81, 0x1, 0xffffffffffffb94d, 0x9, 0x100000001, 0x6, 0x14, 0x60, 0xe000, 0x47e6, 0x1, 0x8, 0x16}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000100)={r1, 0x100000000}) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000001100)=@short={0xb, @remote, @rose, 0x1, @default}, &(0x7f0000001140)=0x1c, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001180)={0x0, 0x0, 0x0}, &(0x7f00000011c0)=0xc) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001200)={r2}, 0x8) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000001240)=0x18, 0x4) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r6) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f0000001480)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x108, r7, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x800}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x9}, {0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4840}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000014c0), r8) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001540), r8) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x5c, r9, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xb}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x6}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x4}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000844}, 0x24000002) r10 = socket$netlink(0x10, 0x3, 0x2) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), r6) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000001700)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000001840)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0xb0, r12, 0x0, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x40811) syz_genetlink_get_family_id$net_dm(&(0x7f0000001880), r8) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r14, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001900)={0x158, 0x0, 0x7bc1d2f006664115, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0xf9a10e6b76d162b}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7dc0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c9d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64e42ad2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6774}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xddda}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f58}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6760ca02}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51aebfbe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x449c77fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9676}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x296c82ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ddca7d8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9870}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1525}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x465d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2ff}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x94ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61d7fa82}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e0e420f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2bf8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a3131a4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79d05ce9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xff18100}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b1a}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x24000080}, 0x10) r15 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r15, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x28, 0x3f7, 0x2, 0x70bd27, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000800) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000002880)=0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002940)={{r11, 0xffffffffffffffff}, &(0x7f00000028c0), &(0x7f0000002900)='%-5lx \x00'}, 0x20) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002980)={0x0, 0x0, 0x0}, &(0x7f00000029c0)=0xc) sendmsg$netlink(r11, &(0x7f0000002ac0)={&(0x7f0000001c00)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000000}, 0xc, &(0x7f0000002800)=[{&(0x7f0000001c40)={0x1fc, 0x13, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@generic="3ae5c7ef4546a96ea47958ae61ff6257f6ae167fc78d1f77edf5d9450183a71a2bc73e0062739c3b741721a9a5c6575bbaa35e9a30f9fa94d5c8693239ec3fe3c4025c6064b76535eb3c01c4d1f798bf523b18b556e7600617b68184474550f48f50ebd9f218c9cec3aa74c0b61d5063b1c25bac242275611d4a1a31fe2696d16fc06de793a7a74dbe4b2428db99ec7996b0f5ef28ed3e19781bb3c7f0b6d26aa2a691e6480c89db0457f5b21de8386f6f0dbb4d531edfdec93d4fa1095dfdf2aeceba2bb62baef6bd2462dc7e6db94ed63089738bb1a28f7875b5651a8c8729c8d7cbf58ee493022fa2935fb2e0db487d7568a109", @generic="3c11dfed47d4e4bc621b52b3d90ca1ef3cfbf04341a9576e02d80761845bd7cbb60610e8bd8c60c83fc6ca6fb9ae35056a5f1948aea8060dea9d9b9cc160ef19a7143921ae53ebce369821c95f9d26590629b0f0079f5c40174793b26f0b59f6afc5cdb3420823366dce1044bd51d0df9d8a3fa25105f54506548d5afc58401d9bbd7c3679cedfbd67c4be5282e1ca1846d7e76d5c4012ab30cee58195392308", @typed={0x4, 0x97}, @generic="3637b18b459ced4942560b31d94eaa120412a00ba8a390d895165928ebf3548c7160727e48123d764d95037bbe8ba931fdb2b6ebc4", @typed={0x14, 0x69, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x8, 0xe9, 0x0, 0x1, [@nested={0x4, 0xe6}]}]}, 0x1fc}, {&(0x7f0000001e40)={0x18, 0x31, 0x200, 0x70bd2a, 0x25dfdbff, "", [@typed={0x6, 0x6b, 0x0, 0x0, @str='@\x00'}]}, 0x18}, {&(0x7f0000001e80)={0x358, 0x42, 0x200, 0x70bd25, 0x25dfdbfb, "", [@nested={0x1b, 0x45, 0x0, 0x1, [@nested={0x4, 0x53}, @generic="732fb3a55f1ae5", @nested={0x4, 0xd8}, @typed={0x8, 0xc8, 0x0, 0x0, @fd=r2}]}, @typed={0x14, 0xbb, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x31}}, @typed={0xc, 0x9f, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x103, 0x0, 0x0, @fd=r11}, @generic="0d858a98f644ee097f240af43d503a0ab0d10d979e2f817560a9bc1090d15f0b7294ca7e02efb7b2e2314a3b45d5e09f7671c4db56", @generic="6957f89b5eff704ba4c70b17e2551a6508fc6e4ff4722d63f54f8c10dcb16e6db4544fe2a04c099cd149572b979b79f776e5a1e46fddcb7f96c3aa66af01986685a62b5202fe5e04c7818159271d7e25177924d8", @nested={0x277, 0xd5, 0x0, 0x1, [@typed={0xd, 0x6b, 0x0, 0x0, @str='netdevsim'}, @generic="136d9fe1aff3078606e3321deebf7ee92c070abea9e21551bdb33ac96ede1576e8a06032828ebf8c72d67bc991a111c0b6db3b1e42409e5592f11ed4128f12cbd19f519876f94e6ce3de217b0585d28271cead6f24e3c3949a3d76b300fae49701206b822a51bedd83a4011d1c7be1caaaa275bdef00ba4418462a45fd66a2310ec9cd5c398d473ae99f335b40a9cc7c09478ca4fc2487566d1e238ab17a8464e7fffa4e2cff6d52c449f3c5d715277e952a6757dc559271cbb3fe", @typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x84}, @generic="f9a5a09bbfb65f8a278ae192b5f6aea20b02254cf9105384068166e5c5be6b4fdc3abfa149893d3db2d1a968b474e479345e3f77c5f70015411f00a36c33188ff4afcee222e4e69616739337041c230fe04fd97272af9bcf03f3217692f264267d4f377a1a1b13be8d04815c554e011b541b39b7d0906026484142b72beb85d5e64fcb2b35a1b3984c45abcba292dbf2c314b15d284f72331a22f7b6c19a8230e1199c3c532385b2273cd57cee805002ec3939b5b3278b0615c1140b16d82f82ed55a1", @generic="6416dcbe25542224de146b397fa73062a1e6f57a9ce768a46af98b28b7fa0d097f014b62ad1dc38434e77ce649d0c105bdafa8a289a0727d167ed0bee636d9299b7d6941167ccbf756cef443e1e570a056d5fceb6537e8734a18fa049e844b6a5bf74b1198483bdf24744c4b8ab41476ed328d3fe1851922e299ce8441e0c3cf94d15f984b973ee52a8f7496933ec0ed647d59c1d943389d82a9b60ba1db71d0b36351854c489410177ba0a2288225e5c041459120b916edbe2e5d0f500a9c0194e0167afd5624cbcc34c8eed5d10e68bfa158ca2fd7d3ad51"]}]}, 0x358}, {&(0x7f0000002200)={0x2c0, 0x15, 0x4, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x16, 0x8, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x4d}, @generic="3a9f0f279b7c"]}, @typed={0xc, 0xe3, 0x0, 0x0, @u64}, @generic="d50c85dc2736be20c3579c53f37c994e03932a075080504c36e3c27717675762cd3f2f330d738f2e73a33700c9dfbc5567124d82259082dd27374ae46f758c0b70cfa40b6ad9748b3b2ba92335153153f41f788b073a538f3ae7408eabdb589aebc455b9e4b76b11070060f4b66043710c63237312effad52efb67f38c9c8716029c16d500171d69893d5ac1e497d1f7b6f5fed515ec0233f4f6bd31d4ad4cd81ead321cd432a62bd2ba484a54f71cc02a268e7a1bd49552da5946f3af7b42605b08f944dfd8deb8d1303d57f54767", @generic, @nested={0x3b, 0x32, 0x0, 0x1, [@nested={0x4, 0x14d}, @typed={0x8, 0xb3, 0x0, 0x0, @pid=r3}, @generic="56ea6f9ac2c7a5ac60b8a93a23619a4c8ae144a16c078c7223cab1a57a2082ed67b8f0a1dd4da0ce62646c"]}, @generic="52b2a78ab4e613af7d5a24c2f525af31f55b3db51ba256ab65340c4d0e4c81553f8292f99e6716fba2f34bf474776d723c0285003a93495fa40447bba0cb7d00a6f12b75ac40401457e7f996b1b2f47514f710943577ce7c4be5966e756d4bae5c4fb3ccce5878d591e51b725896ef2f3bd1779f733d7689bda8d11083a2217b3b3bea36e8ed7c7942a6ea68d30c3c8e", @generic="88a303ff85de61efe810bfdc2f03849e650545cb197560e57bd26cde1e4d917b8496317d179e5a8238eb605db7e6f5058fc4a954f698294a3c1487d5de024677a47cb8edec93b1853f888709110152e0413f036731869affa4be0fdbe4adb1d8a464375b8d0770c7475bfa938b708c17362796a709017393e8bda8c213508bf4cb73eb1175c669a5e0d840f9479b34358dc1349b268172b9e8", @generic="a118961ee5ed1a0065fe36", @generic="f4c7baa91fc5fc17a2eaab2de3347ac9145bab744a282c3e8cfc957b6a347cbb4135d29c4b42f404aa03d9ed1a8aa1d84ee1d7ea87f9d702e48acbcab05ea67993e97e6a23", @typed={0x8, 0x7e, 0x0, 0x0, @ipv4=@multicast1}]}, 0x2c0}, {&(0x7f00000024c0)={0x124, 0x14, 0x200, 0x70bd26, 0x6, "", [@typed={0x8, 0xda, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x87, 0x0, 0x0, @fd=r15}, @generic="b7c558e81d28b95c8d6b53f8fa4d489baaca1e6166c2e2328f3836876a5e586014a153058abf0eac7330bb0dc552f75f4af80b338a67c3fa901fe50f1c01672635e2c00f52deec61c5212994d8f0ff675c065c0496e4b735f7fd336d9454d0bc951b82c1cfece6ba032672603dca16a4b03ed4325c7fab4afc129de6044e187a23ae1084a5ae5e1cd5dc12523c7af0a02d2aa26b722a2eda015d975b56690ef96799ed59a321597c81973e18df2cbe15a5d21de6052581ef234c9994ae39", @generic, @typed={0x8, 0x19, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x7, 0x0, 0x0, @u32=0x2}, @generic="d63a966c0dadb8c172a8a9ebddb75280eeaae48ae4c1eacfce3bfe075c10412e9843c474d7253c603508bb0b278bd19477c96853e4"]}, 0x124}, {&(0x7f0000002600)={0x1dc, 0x2e, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@generic="89310a62382564ac7a97365869ea705cc88a54c93a05b52bb263496996ee5425640642da17816ba185a6e58e65159736977636009a9f1beecf60542a5ea57d9ebf5e675ecded453bdeeb0c3868bdcc0b", @typed={0xc, 0x3b, 0x0, 0x0, @u64=0x8}, @generic="24c802e49680066a9bb20d5f6367c2923382d8dbc8e1dcdef9fbbcb878626eb13f7ddd62dc68ebc6e5a0ae4546ec3aee8340db1c493706b3b21eb0fe4cdaf0d51bc3d8f30afcf7bb4642d5664bc1408808bcabf186bfc23c140cc0c28f440f91428c3d580792564a3bfe58cdf68f2f107fe043bdfc93524c4f611b806053c46e6d4ebbae8569a14fd8a5337110e0f971f96a065526fc6ee1674249aa24e1e13294c5714b1ef96da47d45361c9f368a4fe08e5bb03919a45360f2741199186e108f502674e277bb32", @generic="b1b2cf593ad564c9074b50c546f527f7c9c6cfadbe6bf9f77c0271b459b51db42a11f01a75231fe4a486d6f73fc2d081c79ce16734c545562bf78d23efa9b18557fe7411dda014c869409cdc0a0080694356619a302687529571e3649dade5e177bb9fd4ceef0a9482121a3d1d23644bf942588920f2d2585640f8478b58607dccd329ec431196b37821349e622d7170af67a8589cdf71caa4591fad1ce036653d43268227706e"]}, 0x1dc}], 0x6, &(0x7f0000002a00)=[@cred={{0x1c, 0x1, 0x2, {r16, r4, r5}}}, @rights={{0x24, 0x1, 0x1, [r15, r10, r10, r11, r17]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r18}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x88, 0x604c041}, 0x40010) 110.167155ms ago: executing program 4 (id=3573): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r1, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x2004c880) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xd, &(0x7f0000000040), 0x4) setsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf51230000000c00060001"], 0x20}, 0x1, 0x0, 0x0, 0x24000008}, 0x8000) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x200448d8) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x4000000) 0s ago: executing program 0 (id=3574): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f0000000140)=@ethtool_ringparam={0x1f, 0x0, 0x2, 0x37d7, 0x9, 0x6, 0x7, 0x1, 0x10}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) kernel console output (not intermixed with test programs): 9][T14232] [ 280.574278][T14232] dump_stack_lvl+0x189/0x250 [ 280.574308][T14232] ? __pfx____ratelimit+0x10/0x10 [ 280.574334][T14232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.574356][T14232] ? __pfx__printk+0x10/0x10 [ 280.574385][T14232] ? __pfx___might_resched+0x10/0x10 [ 280.574407][T14232] ? fs_reclaim_acquire+0x7d/0x100 [ 280.574433][T14232] should_fail_ex+0x414/0x560 [ 280.574468][T14232] should_failslab+0xa8/0x100 [ 280.574488][T14232] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 280.574512][T14232] ? __alloc_skb+0x255/0x430 [ 280.574527][T14232] ? napi_skb_cache_get+0x4a5/0x780 [ 280.574541][T14232] ? napi_skb_cache_get+0x151/0x780 [ 280.574559][T14232] __alloc_skb+0x255/0x430 [ 280.574577][T14232] ? __pfx___alloc_skb+0x10/0x10 [ 280.574597][T14232] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 280.574616][T14232] netlink_sendmsg+0x5c6/0xb30 [ 280.574644][T14232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.574674][T14232] ? aa_sock_msg_perm+0xf1/0x1b0 [ 280.574695][T14232] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 280.574708][T14232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.574727][T14232] __sock_sendmsg+0x21c/0x270 [ 280.574752][T14232] __sys_sendto+0x3bd/0x520 [ 280.574770][T14232] ? __pfx___sys_sendto+0x10/0x10 [ 280.574810][T14232] ? rcu_is_watching+0x15/0xb0 [ 280.574840][T14232] __x64_sys_sendto+0xde/0x100 [ 280.574860][T14232] do_syscall_64+0xfa/0xf80 [ 280.574877][T14232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.574891][T14232] ? clear_bhb_loop+0x60/0xb0 [ 280.574910][T14232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.574924][T14232] RIP: 0033:0x7fc8977915dc [ 280.574939][T14232] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 280.574951][T14232] RSP: 002b:00007fc89858bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 280.574969][T14232] RAX: ffffffffffffffda RBX: 00007fc89858bfc0 RCX: 00007fc8977915dc [ 280.574980][T14232] RDX: 0000000000000020 RSI: 00007fc89858c010 RDI: 0000000000000003 [ 280.574990][T14232] RBP: 0000000000000000 R08: 00007fc89858bf14 R09: 000000000000000c [ 280.574999][T14232] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 280.575008][T14232] R13: 00007fc89858bf68 R14: 00007fc89858c010 R15: 0000000000000000 [ 280.575034][T14232] [ 281.066356][T14248] __nla_validate_parse: 6 callbacks suppressed [ 281.066377][T14248] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2171'. [ 281.566215][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2177'. [ 281.683289][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2180'. [ 281.703221][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2180'. [ 282.220766][T14294] netlink: 404 bytes leftover after parsing attributes in process `syz.2.2188'. [ 282.287557][T14298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.434533][T14304] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2192'. [ 282.480382][T14308] netlink: 'syz.0.2191': attribute type 10 has an invalid length. [ 282.516469][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2191'. [ 282.536096][T14310] netlink: 'syz.0.2191': attribute type 1 has an invalid length. [ 282.575798][T14312] FAULT_INJECTION: forcing a failure. [ 282.575798][T14312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.601991][T14312] CPU: 0 UID: 0 PID: 14312 Comm: syz.1.2193 Not tainted syzkaller #0 PREEMPT(full) [ 282.602021][T14312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.602034][T14312] Call Trace: [ 282.602042][T14312] [ 282.602052][T14312] dump_stack_lvl+0x189/0x250 [ 282.602082][T14312] ? __pfx____ratelimit+0x10/0x10 [ 282.602103][T14312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.602127][T14312] ? __pfx__printk+0x10/0x10 [ 282.602156][T14312] ? __might_fault+0xb0/0x130 [ 282.602199][T14312] should_fail_ex+0x414/0x560 [ 282.602236][T14312] _copy_from_iter+0x1cd/0x1630 [ 282.602262][T14312] ? __build_skb_around+0x22d/0x3c0 [ 282.602291][T14312] ? __pfx__copy_from_iter+0x10/0x10 [ 282.602308][T14312] ? __alloc_skb+0x2f1/0x430 [ 282.602332][T14312] ? __pfx___alloc_skb+0x10/0x10 [ 282.602355][T14312] ? netlink_sendmsg+0x642/0xb30 [ 282.602379][T14312] ? skb_put+0x11b/0x210 [ 282.602405][T14312] netlink_sendmsg+0x6b2/0xb30 [ 282.602441][T14312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.602470][T14312] ? aa_sock_msg_perm+0xf1/0x1b0 [ 282.602498][T14312] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.602517][T14312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.602544][T14312] __sock_sendmsg+0x21c/0x270 [ 282.602577][T14312] __sys_sendto+0x3bd/0x520 [ 282.602602][T14312] ? __pfx___sys_sendto+0x10/0x10 [ 282.602652][T14312] ? exc_page_fault+0x82/0x100 [ 282.602693][T14312] __x64_sys_sendto+0xde/0x100 [ 282.602719][T14312] do_syscall_64+0xfa/0xf80 [ 282.602740][T14312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.602760][T14312] ? clear_bhb_loop+0x60/0xb0 [ 282.602784][T14312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.602803][T14312] RIP: 0033:0x7f5c8c7915dc [ 282.602822][T14312] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 282.602839][T14312] RSP: 002b:00007f5c8d60fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 282.602862][T14312] RAX: ffffffffffffffda RBX: 00007f5c8d60ffc0 RCX: 00007f5c8c7915dc [ 282.602876][T14312] RDX: 0000000000000020 RSI: 00007f5c8d610010 RDI: 0000000000000003 [ 282.602889][T14312] RBP: 0000000000000000 R08: 00007f5c8d60ff14 R09: 000000000000000c [ 282.602901][T14312] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 282.602912][T14312] R13: 00007f5c8d60ff68 R14: 00007f5c8d610010 R15: 0000000000000000 [ 282.602945][T14312] [ 282.879819][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2191'. [ 282.928284][T14308] netlink: 'syz.0.2191': attribute type 8 has an invalid length. [ 283.150056][T14318] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2195'. [ 283.583633][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'. [ 283.712870][T14341] sch_tbf: burst 8128 is lower than device gretap1 mtu (65507) ! [ 283.802093][T14344] FAULT_INJECTION: forcing a failure. [ 283.802093][T14344] name failslab, interval 1, probability 0, space 0, times 0 [ 283.821706][T14344] CPU: 1 UID: 0 PID: 14344 Comm: syz.2.2204 Not tainted syzkaller #0 PREEMPT(full) [ 283.821736][T14344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.821747][T14344] Call Trace: [ 283.821755][T14344] [ 283.821765][T14344] dump_stack_lvl+0x189/0x250 [ 283.821795][T14344] ? __pfx____ratelimit+0x10/0x10 [ 283.821815][T14344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.821838][T14344] ? __pfx__printk+0x10/0x10 [ 283.821870][T14344] ? __pfx___might_resched+0x10/0x10 [ 283.821891][T14344] ? fs_reclaim_acquire+0x7d/0x100 [ 283.821918][T14344] should_fail_ex+0x414/0x560 [ 283.821955][T14344] should_failslab+0xa8/0x100 [ 283.821981][T14344] __kmalloc_cache_noprof+0x84/0x700 [ 283.822002][T14344] ? rtnl_newlink+0xfb/0x1c90 [ 283.822022][T14344] ? stack_depot_save_flags+0x40/0x850 [ 283.822058][T14344] rtnl_newlink+0xfb/0x1c90 [ 283.822080][T14344] ? kasan_save_track+0x4f/0x80 [ 283.822098][T14344] ? kasan_save_track+0x3e/0x80 [ 283.822116][T14344] ? kasan_save_free_info+0x46/0x50 [ 283.822140][T14344] ? __kasan_slab_free+0x5c/0x80 [ 283.822159][T14344] ? kmem_cache_free+0x197/0x620 [ 283.822177][T14344] ? nlmon_xmit+0xb0/0x100 [ 283.822199][T14344] ? dev_hard_start_xmit+0x2cd/0x800 [ 283.822223][T14344] ? __dev_queue_xmit+0x1493/0x3140 [ 283.822247][T14344] ? __netlink_deliver_tap+0x5ad/0x850 [ 283.822270][T14344] ? netlink_deliver_tap+0x19c/0x1b0 [ 283.822292][T14344] ? netlink_unicast+0x7fa/0x9e0 [ 283.822311][T14344] ? netlink_sendmsg+0x805/0xb30 [ 283.822337][T14344] ? __pfx_rtnl_newlink+0x10/0x10 [ 283.822356][T14344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.822418][T14344] ? kasan_quarantine_put+0xdd/0x220 [ 283.822437][T14344] ? lockdep_hardirqs_on+0x98/0x140 [ 283.822467][T14344] ? kmem_cache_free+0x197/0x620 [ 283.822485][T14344] ? nlmon_xmit+0xb0/0x100 [ 283.822521][T14344] ? __lock_acquire+0x6b6/0x2cf0 [ 283.822546][T14344] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 283.822573][T14344] ? __dev_queue_xmit+0x289/0x3140 [ 283.822598][T14344] ? __dev_queue_xmit+0x289/0x3140 [ 283.822621][T14344] ? __dev_queue_xmit+0x289/0x3140 [ 283.822657][T14344] ? __dev_queue_xmit+0x1955/0x3140 [ 283.822680][T14344] ? __x64_sys_sendto+0xde/0x100 [ 283.822729][T14344] ? __pfx_rtnl_newlink+0x10/0x10 [ 283.822750][T14344] rtnetlink_rcv_msg+0x7cf/0xb70 [ 283.822776][T14344] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 283.822797][T14344] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 283.822816][T14344] ? ref_tracker_free+0x63a/0x7d0 [ 283.822836][T14344] ? __asan_memcpy+0x40/0x70 [ 283.822854][T14344] ? __pfx_ref_tracker_free+0x10/0x10 [ 283.822885][T14344] netlink_rcv_skb+0x208/0x470 [ 283.822911][T14344] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 283.822935][T14344] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 283.822973][T14344] ? netlink_deliver_tap+0x2e/0x1b0 [ 283.823008][T14344] netlink_unicast+0x82f/0x9e0 [ 283.823041][T14344] ? __pfx_netlink_unicast+0x10/0x10 [ 283.823066][T14344] ? netlink_sendmsg+0x642/0xb30 [ 283.823089][T14344] ? skb_put+0x11b/0x210 [ 283.823115][T14344] netlink_sendmsg+0x805/0xb30 [ 283.823151][T14344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.823181][T14344] ? aa_sock_msg_perm+0xf1/0x1b0 [ 283.823209][T14344] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.823227][T14344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.823254][T14344] __sock_sendmsg+0x21c/0x270 [ 283.823286][T14344] __sys_sendto+0x3bd/0x520 [ 283.823311][T14344] ? __pfx___sys_sendto+0x10/0x10 [ 283.823362][T14344] ? exc_page_fault+0x82/0x100 [ 283.823394][T14344] __x64_sys_sendto+0xde/0x100 [ 283.823420][T14344] do_syscall_64+0xfa/0xf80 [ 283.823443][T14344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.823461][T14344] ? clear_bhb_loop+0x60/0xb0 [ 283.823486][T14344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.823505][T14344] RIP: 0033:0x7fc4575915dc [ 283.823524][T14344] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 283.823541][T14344] RSP: 002b:00007fc4583b7ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 283.823564][T14344] RAX: ffffffffffffffda RBX: 00007fc4583b7fc0 RCX: 00007fc4575915dc [ 283.823578][T14344] RDX: 0000000000000020 RSI: 00007fc4583b8010 RDI: 0000000000000003 [ 283.823590][T14344] RBP: 0000000000000000 R08: 00007fc4583b7f14 R09: 000000000000000c [ 283.823603][T14344] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 283.823615][T14344] R13: 00007fc4583b7f68 R14: 00007fc4583b8010 R15: 0000000000000000 [ 283.823657][T14344] [ 284.592638][T14360] wg1 speed is unknown, defaulting to 1000 [ 284.648569][T14360] wg1 speed is unknown, defaulting to 1000 [ 284.656699][T14360] wg1 speed is unknown, defaulting to 1000 [ 284.677729][T14360] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 284.736573][T14360] wg1 speed is unknown, defaulting to 1000 [ 284.769984][T14369] syzkaller0: entered promiscuous mode [ 284.782342][T14360] wg1 speed is unknown, defaulting to 1000 [ 284.790069][T14369] syzkaller0: entered allmulticast mode [ 284.802724][T14360] wg1 speed is unknown, defaulting to 1000 [ 284.860331][T14360] wg1 speed is unknown, defaulting to 1000 [ 284.908750][T14360] wg1 speed is unknown, defaulting to 1000 [ 284.923519][T14378] FAULT_INJECTION: forcing a failure. [ 284.923519][T14378] name failslab, interval 1, probability 0, space 0, times 0 [ 284.932189][T14360] wg1 speed is unknown, defaulting to 1000 [ 284.942392][T14378] CPU: 0 UID: 0 PID: 14378 Comm: syz.2.2217 Not tainted syzkaller #0 PREEMPT(full) [ 284.942421][T14378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 284.942432][T14378] Call Trace: [ 284.942439][T14378] [ 284.942448][T14378] dump_stack_lvl+0x189/0x250 [ 284.942478][T14378] ? __pfx____ratelimit+0x10/0x10 [ 284.942498][T14378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.942520][T14378] ? __pfx__printk+0x10/0x10 [ 284.942550][T14378] ? __pfx___might_resched+0x10/0x10 [ 284.942569][T14378] ? fs_reclaim_acquire+0x7d/0x100 [ 284.942593][T14378] should_fail_ex+0x414/0x560 [ 284.942627][T14378] should_failslab+0xa8/0x100 [ 284.942651][T14378] __kmalloc_cache_noprof+0x84/0x700 [ 284.942670][T14378] ? rtnl_newlink+0xfb/0x1c90 [ 284.942688][T14378] ? stack_depot_save_flags+0x40/0x850 [ 284.942720][T14378] rtnl_newlink+0xfb/0x1c90 [ 284.942740][T14378] ? kasan_save_track+0x4f/0x80 [ 284.942757][T14378] ? kasan_save_track+0x3e/0x80 [ 284.942772][T14378] ? kasan_save_free_info+0x46/0x50 [ 284.942796][T14378] ? __kasan_slab_free+0x5c/0x80 [ 284.942814][T14378] ? kmem_cache_free+0x197/0x620 [ 284.942832][T14378] ? nlmon_xmit+0xb0/0x100 [ 284.942853][T14378] ? dev_hard_start_xmit+0x2cd/0x800 [ 284.942875][T14378] ? __dev_queue_xmit+0x1493/0x3140 [ 284.942898][T14378] ? __netlink_deliver_tap+0x5ad/0x850 [ 284.942930][T14378] ? netlink_deliver_tap+0x19c/0x1b0 [ 284.942950][T14378] ? netlink_unicast+0x7fa/0x9e0 [ 284.942967][T14378] ? netlink_sendmsg+0x805/0xb30 [ 284.942994][T14378] ? __pfx_rtnl_newlink+0x10/0x10 [ 284.943012][T14378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.943067][T14378] ? kasan_quarantine_put+0xdd/0x220 [ 284.943085][T14378] ? lockdep_hardirqs_on+0x98/0x140 [ 284.943111][T14378] ? kmem_cache_free+0x197/0x620 [ 284.943129][T14378] ? nlmon_xmit+0xb0/0x100 [ 284.943164][T14378] ? __lock_acquire+0x6b6/0x2cf0 [ 284.943190][T14378] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 284.943218][T14378] ? __dev_queue_xmit+0x289/0x3140 [ 284.943244][T14378] ? __dev_queue_xmit+0x289/0x3140 [ 284.943266][T14378] ? __dev_queue_xmit+0x289/0x3140 [ 284.943289][T14378] ? __dev_queue_xmit+0x1955/0x3140 [ 284.943309][T14378] ? __x64_sys_sendto+0xde/0x100 [ 284.943352][T14378] ? __pfx_rtnl_newlink+0x10/0x10 [ 284.943371][T14378] rtnetlink_rcv_msg+0x7cf/0xb70 [ 284.943394][T14378] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 284.943414][T14378] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 284.943429][T14378] ? ref_tracker_free+0x63a/0x7d0 [ 284.943448][T14378] ? __asan_memcpy+0x40/0x70 [ 284.943464][T14378] ? __pfx_ref_tracker_free+0x10/0x10 [ 284.943496][T14378] netlink_rcv_skb+0x208/0x470 [ 284.943522][T14378] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 284.943546][T14378] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.943582][T14378] ? netlink_deliver_tap+0x2e/0x1b0 [ 284.943616][T14378] netlink_unicast+0x82f/0x9e0 [ 284.943649][T14378] ? __pfx_netlink_unicast+0x10/0x10 [ 284.943673][T14378] ? netlink_sendmsg+0x642/0xb30 [ 284.943694][T14378] ? skb_put+0x11b/0x210 [ 284.943719][T14378] netlink_sendmsg+0x805/0xb30 [ 284.943752][T14378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.943781][T14378] ? aa_sock_msg_perm+0xf1/0x1b0 [ 284.943808][T14378] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 284.943827][T14378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.943852][T14378] __sock_sendmsg+0x21c/0x270 [ 284.943883][T14378] __sys_sendto+0x3bd/0x520 [ 284.943922][T14378] ? __pfx___sys_sendto+0x10/0x10 [ 284.943972][T14378] ? exc_page_fault+0x82/0x100 [ 284.944016][T14378] __x64_sys_sendto+0xde/0x100 [ 284.944039][T14378] do_syscall_64+0xfa/0xf80 [ 284.944061][T14378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.944079][T14378] ? clear_bhb_loop+0x60/0xb0 [ 284.944103][T14378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.944121][T14378] RIP: 0033:0x7fc4575915dc [ 284.944140][T14378] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 284.944157][T14378] RSP: 002b:00007fc4583b7ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 284.944180][T14378] RAX: ffffffffffffffda RBX: 00007fc4583b7fc0 RCX: 00007fc4575915dc [ 284.944194][T14378] RDX: 0000000000000020 RSI: 00007fc4583b8010 RDI: 0000000000000003 [ 284.944206][T14378] RBP: 0000000000000000 R08: 00007fc4583b7f14 R09: 000000000000000c [ 284.944218][T14378] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 284.944230][T14378] R13: 00007fc4583b7f68 R14: 00007fc4583b8010 R15: 0000000000000000 [ 284.944264][T14378] [ 284.961754][T14360] wg1 speed is unknown, defaulting to 1000 [ 286.101622][T14430] bridge0: entered promiscuous mode [ 286.113037][T14432] netlink: zone id is out of range [ 286.118661][T14430] macsec2: entered promiscuous mode [ 286.124640][T14432] netlink: zone id is out of range [ 286.130315][T14430] macsec2: entered allmulticast mode [ 286.136289][T14432] netlink: zone id is out of range [ 286.141630][T14430] bridge0: entered allmulticast mode [ 286.161920][T14432] netlink: zone id is out of range [ 286.175086][T14432] netlink: zone id is out of range [ 286.180251][T14432] netlink: zone id is out of range [ 286.190283][T14430] bridge0: port 1(macsec2) entered blocking state [ 286.206001][T14430] bridge0: port 1(macsec2) entered disabled state [ 286.227109][T14432] netlink: zone id is out of range [ 286.232391][T14432] netlink: set zone limit has 4 unknown bytes [ 286.266461][T14430] bridge0: left allmulticast mode [ 286.280914][T14441] netlink: 'syz.0.2236': attribute type 6 has an invalid length. [ 286.303943][T14430] bridge0: left promiscuous mode [ 286.389033][T14449] netlink: 'syz.4.2238': attribute type 1 has an invalid length. [ 286.576483][T14450] 8021q: adding VLAN 0 to HW filter on device bond5 [ 286.586437][T14450] bond4: (slave bond5): making interface the new active one [ 286.594853][T14450] bond4: (slave bond5): Enslaving as an active interface with an up link [ 286.622190][T14457] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 286.707296][T14434] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 287.335763][T14491] netlink: 'syz.2.2247': attribute type 3 has an invalid length. [ 287.340534][T14492] __nla_validate_parse: 4 callbacks suppressed [ 287.340551][T14492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2245'. [ 287.343564][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2247'. [ 287.618354][T14508] net_ratelimit: 1 callbacks suppressed [ 287.618373][T14508] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 287.653678][T14509] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2253'. [ 287.676057][T14510] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2253'. [ 287.688170][T14509] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2253'. [ 287.848064][T14520] FAULT_INJECTION: forcing a failure. [ 287.848064][T14520] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 287.862226][T14520] CPU: 0 UID: 0 PID: 14520 Comm: syz.1.2255 Not tainted syzkaller #0 PREEMPT(full) [ 287.862253][T14520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.862265][T14520] Call Trace: [ 287.862272][T14520] [ 287.862281][T14520] dump_stack_lvl+0x189/0x250 [ 287.862310][T14520] ? __pfx____ratelimit+0x10/0x10 [ 287.862330][T14520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.862354][T14520] ? __pfx__printk+0x10/0x10 [ 287.862384][T14520] ? fs_reclaim_acquire+0x7d/0x100 [ 287.862416][T14520] should_fail_ex+0x414/0x560 [ 287.862451][T14520] prepare_alloc_pages+0x22b/0x650 [ 287.862482][T14520] __alloc_frozen_pages_noprof+0x123/0x370 [ 287.862506][T14520] ? stack_depot_save_flags+0x40/0x850 [ 287.862536][T14520] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 287.862580][T14520] ? policy_nodemask+0x27c/0x720 [ 287.862600][T14520] ? do_syscall_64+0xfa/0xf80 [ 287.862618][T14520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.862641][T14520] alloc_pages_mpol+0x232/0x4a0 [ 287.862671][T14520] vma_alloc_folio_noprof+0xe4/0x200 [ 287.862698][T14520] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 287.862732][T14520] folio_prealloc+0x30/0x180 [ 287.862752][T14520] do_wp_page+0x1231/0x5810 [ 287.862801][T14520] ? __pfx_do_wp_page+0x10/0x10 [ 287.862821][T14520] ? do_raw_spin_lock+0x121/0x290 [ 287.862850][T14520] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 287.862887][T14520] handle_mm_fault+0x14c5/0x32b0 [ 287.862928][T14520] ? handle_mm_fault+0xdb/0x32b0 [ 287.862965][T14520] ? __pfx_handle_mm_fault+0x10/0x10 [ 287.862995][T14520] ? lock_vma_under_rcu+0x42c/0x4a0 [ 287.863034][T14520] ? do_user_addr_fault+0x1a8/0x1380 [ 287.863060][T14520] do_user_addr_fault+0xa7c/0x1380 [ 287.863088][T14520] ? rcu_is_watching+0x15/0xb0 [ 287.863111][T14520] ? trace_page_fault_user+0x84/0x1c0 [ 287.863133][T14520] exc_page_fault+0x82/0x100 [ 287.863158][T14520] asm_exc_page_fault+0x26/0x30 [ 287.863175][T14520] RIP: 0033:0x7f5c8c749185 [ 287.863194][T14520] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 287.863210][T14520] RSP: 002b:00007f5c8d60fde0 EFLAGS: 00010293 [ 287.863229][T14520] RAX: 0000000000000008 RBX: 00007f5c8d517d60 RCX: 0000000000000000 [ 287.863243][T14520] RDX: 0000000000000000 RSI: 00007f5c8c851b9e RDI: 00007f5c8d517d60 [ 287.863256][T14520] RBP: 00007f5c8d60ff00 R08: 0000000000000000 R09: 0000000000000005 [ 287.863268][T14520] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5c8c851740 [ 287.863281][T14520] R13: 0000000000000016 R14: 00007f5c8c9ba460 R15: 0000000000000000 [ 287.863316][T14520] [ 287.863642][T14520] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 287.886943][T14523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.227244][T14537] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2260'. [ 288.269131][T14537] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2260'. [ 288.299478][T14539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.308024][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 288.334600][T14544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2261'. [ 288.389097][T14549] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2263'. [ 288.417771][T14549] xfrm1: entered promiscuous mode [ 288.423196][T14549] xfrm1: entered allmulticast mode [ 288.654421][T14565] FAULT_INJECTION: forcing a failure. [ 288.654421][T14565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.668281][T14565] CPU: 0 UID: 0 PID: 14565 Comm: syz.1.2267 Not tainted syzkaller #0 PREEMPT(full) [ 288.668309][T14565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.668321][T14565] Call Trace: [ 288.668329][T14565] [ 288.668338][T14565] dump_stack_lvl+0x189/0x250 [ 288.668368][T14565] ? __pfx____ratelimit+0x10/0x10 [ 288.668389][T14565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.668412][T14565] ? __pfx__printk+0x10/0x10 [ 288.668456][T14565] should_fail_ex+0x414/0x560 [ 288.668494][T14565] _copy_to_user+0x31/0xb0 [ 288.668519][T14565] simple_read_from_buffer+0xe1/0x170 [ 288.668550][T14565] proc_fail_nth_read+0x1b3/0x220 [ 288.668576][T14565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 288.668614][T14565] ? rw_verify_area+0x2a6/0x4d0 [ 288.668633][T14565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 288.668657][T14565] vfs_read+0x200/0xa30 [ 288.668675][T14565] ? fdget_pos+0x247/0x320 [ 288.668704][T14565] ? __pfx___mutex_lock+0x10/0x10 [ 288.668727][T14565] ? __pfx_vfs_read+0x10/0x10 [ 288.668749][T14565] ? __fget_files+0x2a/0x420 [ 288.668779][T14565] ? __fget_files+0x3a0/0x420 [ 288.668802][T14565] ? __fget_files+0x2a/0x420 [ 288.668837][T14565] ksys_read+0x145/0x250 [ 288.668859][T14565] ? __pfx_ksys_read+0x10/0x10 [ 288.668884][T14565] ? do_syscall_64+0xbe/0xf80 [ 288.668910][T14565] do_syscall_64+0xfa/0xf80 [ 288.668932][T14565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.668951][T14565] ? clear_bhb_loop+0x60/0xb0 [ 288.668976][T14565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.668995][T14565] RIP: 0033:0x7f5c8c78e15c [ 288.669013][T14565] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 288.669031][T14565] RSP: 002b:00007f5c8d611030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 288.669053][T14565] RAX: ffffffffffffffda RBX: 00007f5c8c9e5fa0 RCX: 00007f5c8c78e15c [ 288.669067][T14565] RDX: 000000000000000f RSI: 00007f5c8d6110a0 RDI: 0000000000000004 [ 288.669080][T14565] RBP: 00007f5c8d611090 R08: 0000000000000000 R09: 0000000000000000 [ 288.669092][T14565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 288.669104][T14565] R13: 00007f5c8c9e6038 R14: 00007f5c8c9e5fa0 R15: 00007fffbc650978 [ 288.669141][T14565] [ 288.953041][T14572] netlink: 'syz.2.2269': attribute type 1 has an invalid length. [ 289.052890][T14572] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 289.307617][T14596] netlink: 'syz.2.2273': attribute type 1 has an invalid length. [ 289.450045][T14605] bond2: (slave geneve3): making interface the new active one [ 289.460245][T14605] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 289.469832][T12587] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 289.502798][ T5834] block nbd1: Receive control failed (result -32) [ 289.503056][T12587] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 289.574994][ T69] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 289.596601][ T69] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 289.861258][T14629] x_tables: unsorted entry at hook 3 [ 290.220687][T14650] syzkaller1: entered promiscuous mode [ 290.232059][T14650] syzkaller1: entered allmulticast mode [ 290.255608][T14654] netlink: 'syz.4.2289': attribute type 63 has an invalid length. [ 290.467945][T14664] netlink: 'syz.1.2295': attribute type 12 has an invalid length. [ 290.499645][T14666] syzkaller0: entered promiscuous mode [ 290.505670][T14666] syzkaller0: entered allmulticast mode [ 290.683142][T14678] netlink: 'syz.2.2298': attribute type 1 has an invalid length. [ 291.096143][T14704] netlink: 'syz.4.2307': attribute type 12 has an invalid length. [ 291.541351][T14720] bond8: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 291.585010][T14720] bond8 (unregistering): Released all slaves [ 292.127034][T14745] netlink: 'syz.4.2318': attribute type 1 has an invalid length. [ 292.340989][T14717] gre0: left promiscuous mode [ 292.345931][T14717] gre0: left allmulticast mode [ 292.408077][T14756] netlink: 'syz.4.2322': attribute type 1 has an invalid length. [ 292.516208][T14762] bond6: (slave gretap2): making interface the new active one [ 292.531277][T14762] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 292.597085][T14764] bond0: (slave dummy0): Releasing backup interface [ 292.630927][T14767] nftables ruleset with unbound set [ 292.653784][T14764] bridge_slave_0: left allmulticast mode [ 292.663672][T14764] bridge_slave_0: left promiscuous mode [ 292.670538][T14764] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.689546][T14764] bond0: (slave bond_slave_0): Releasing backup interface [ 292.706035][T14764] bond0: (slave bond_slave_1): Releasing backup interface [ 292.725805][T14764] team0: Port device team_slave_0 removed [ 292.738226][T14764] team0: Port device team_slave_1 removed [ 292.746906][T14764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.765410][T14764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.781449][T14764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.788456][T14776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.799299][T14764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.811397][T14764] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 292.837239][ T6035] wg1 speed is unknown, defaulting to 1000 [ 293.133770][T14794] __nla_validate_parse: 12 callbacks suppressed [ 293.133785][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2331'. [ 293.482425][T14787] netlink: 'syz.0.2330': attribute type 1 has an invalid length. [ 293.502893][T14787] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2330'. [ 294.028040][T14823] team0: Caught tx_queue_len zero misconfig [ 294.229897][T14828] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 294.375978][T14839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2344'. [ 294.615760][T14848] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2346'. [ 294.785121][T14856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2349'. [ 295.426165][T14891] openvswitch: netlink: Flow key attr not present in new flow. [ 295.442317][T14895] IPv6: NLM_F_CREATE should be specified when creating new route [ 295.461470][T14895] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 295.469218][T14895] IPv6: NLM_F_CREATE should be set when creating new route [ 295.547125][T14899] netlink: 'syz.4.2363': attribute type 10 has an invalid length. [ 295.573402][T14899] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 295.598093][T14901] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2364'. [ 295.608340][T14902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2362'. [ 295.635921][T14902] geneve4: entered promiscuous mode [ 295.771687][T14901] bond2: option min_links: invalid value (18446744073709551614) [ 295.781495][T14901] bond2: option min_links: allowed values 0 - 2147483647 [ 295.791223][T14901] bond2 (unregistering): Released all slaves [ 295.862192][T14912] bond8: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 295.877670][T14912] bond8 (unregistering): Released all slaves [ 296.254808][T14934] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2372'. [ 296.299074][T14936] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2372'. [ 296.440562][T14947] sctp: [Deprecated]: syz.2.2375 (pid 14947) Use of int in maxseg socket option. [ 296.440562][T14947] Use struct sctp_assoc_value instead [ 296.470280][T14947] netlink: 'syz.2.2375': attribute type 1 has an invalid length. [ 296.479623][T14947] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2375'. [ 296.702374][T14965] netlink: 'syz.2.2381': attribute type 28 has an invalid length. [ 296.741009][T14965] netlink: 'syz.2.2381': attribute type 3 has an invalid length. [ 297.340608][T14999] netlink: 'syz.1.2389': attribute type 1 has an invalid length. [ 297.349551][T14999] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 298.077977][T15011] delete_channel: no stack [ 298.147998][T15026] netlink: 'syz.4.2396': attribute type 2 has an invalid length. [ 298.237039][T15032] lo: entered promiscuous mode [ 298.242201][T15032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.302870][T15036] __nla_validate_parse: 4 callbacks suppressed [ 298.302893][T15036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2401'. [ 298.711216][T15066] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2410'. [ 298.783753][T15069] netlink: 'syz.0.2412': attribute type 1 has an invalid length. [ 298.796130][T15069] netlink: 'syz.0.2412': attribute type 7 has an invalid length. [ 298.803960][T15069] netlink: 'syz.0.2412': attribute type 8 has an invalid length. [ 298.814329][T15069] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2412'. [ 298.826256][T15071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2413'. [ 298.881767][T15071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2413'. [ 298.959911][T15080] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2414'. [ 298.990457][T15071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2413'. [ 299.091945][T15071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2413'. [ 299.181934][T15071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2413'. [ 299.260415][T15071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2413'. [ 299.381198][T15105] netlink: 'syz.2.2419': attribute type 1 has an invalid length. [ 299.578377][T15115] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 131092, id = 0 [ 299.580471][T15110] tipc: Enabling of bearer rejected, failed to enable media [ 300.406924][T15168] xt_l2tp: missing protocol rule (udp|l2tpip) [ 300.419859][T15166] xt_l2tp: missing protocol rule (udp|l2tpip) [ 301.250327][T15216] validate_nla: 1 callbacks suppressed [ 301.250346][T15216] netlink: 'syz.4.2446': attribute type 1 has an invalid length. [ 301.431902][T15222] nbd: must specify a size in bytes for the device [ 301.459502][T15229] tipc: Enabled bearer , priority 0 [ 301.675938][T15245] netlink: 'syz.4.2456': attribute type 1 has an invalid length. [ 301.681645][T15246] netlink: 'syz.1.2455': attribute type 5 has an invalid length. [ 301.692397][T15245] netlink: 'syz.4.2456': attribute type 1 has an invalid length. [ 301.703318][T15246] geneve4: entered promiscuous mode [ 301.709184][T15246] geneve4: entered allmulticast mode [ 301.717616][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 301.732987][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 301.753230][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 301.762878][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 301.823475][T15248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.044615][T15265] netlink: 'syz.2.2463': attribute type 4 has an invalid length. [ 302.632596][T15298] 8021q: adding VLAN 0 to HW filter on device bond11 [ 302.770674][T15313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.873897][T15318] netlink: 'syz.4.2478': attribute type 1 has an invalid length. [ 303.519419][T15341] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 303.533631][T15341] bond8 (unregistering): Released all slaves [ 303.615352][T15344] __nla_validate_parse: 12 callbacks suppressed [ 303.615371][T15344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2484'. [ 303.642376][T15347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2485'. [ 303.688536][T15347] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 303.733158][T15347] gretap1: entered promiscuous mode [ 303.740935][T15352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2485'. [ 303.762100][T15347] gretap1: entered allmulticast mode [ 303.795456][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2486'. [ 303.903483][T15355] syz.4.2487 (15355) used obsolete PPPIOCDETACH ioctl [ 303.917065][T15359] netlink: 'syz.2.2488': attribute type 8 has an invalid length. [ 303.945899][T15361] netlink: 15447 bytes leftover after parsing attributes in process `syz.4.2487'. [ 303.945899][T15355] netlink: 15447 bytes leftover after parsing attributes in process `syz.4.2487'. [ 304.040325][T15371] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2492'. [ 304.825079][T15417] sch_fq: defrate 0 ignored. [ 304.867932][T15417] netlink: 'syz.4.2507': attribute type 39 has an invalid length. [ 304.995292][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2510'. [ 305.016053][T15427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2510'. [ 305.047140][T15428] netlink: 'syz.1.2510': attribute type 32 has an invalid length. [ 305.064167][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2510'. [ 305.355656][T15425] bond1: left promiscuous mode [ 305.360502][T15425] bond1: left allmulticast mode [ 305.369862][T15425] gtp0: left promiscuous mode [ 305.384509][T15425] gtp0: left allmulticast mode [ 305.465520][T15425] tipc: Resetting bearer [ 305.473857][T15425] syzkaller0: left promiscuous mode [ 305.479868][T15425] syzkaller0: left allmulticast mode [ 305.534704][T15428] bond12: option coupled_control: invalid value (52) [ 305.543964][T15428] bond12 (unregistering): Released all slaves [ 305.572299][ T60] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.582260][ T60] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.611847][ T60] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.621390][ T60] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.654252][ T60] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.687404][ T60] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.699656][ T60] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.708959][ T60] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.759752][T15448] openvswitch: netlink: Flow key attr not present in new flow. [ 305.760859][T15446] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 305.813897][T15446] netlink: 'syz.4.2512': attribute type 5 has an invalid length. [ 306.237860][T15480] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 306.781249][T15522] netlink: 'syz.0.2535': attribute type 4 has an invalid length. [ 306.858206][T15528] netlink: 'syz.1.2537': attribute type 16 has an invalid length. [ 306.875272][T15528] netlink: 'syz.1.2537': attribute type 17 has an invalid length. [ 306.884394][T15528] lo: left promiscuous mode [ 306.938892][T15528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.949123][T15528] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.966788][T15528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.066313][T15540] syzkaller0: entered promiscuous mode [ 307.071846][T15540] syzkaller0: entered allmulticast mode [ 307.302008][T15555] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 307.400304][T15559] team0: Mode "l " not found [ 307.543130][T15570] veth0: entered promiscuous mode [ 307.698823][T15569] veth0: left promiscuous mode [ 307.728804][ T5906] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 307.743422][ T5906] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 307.753900][ T5906] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 307.767212][ T5906] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 307.775426][ T5906] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 307.783037][ T5906] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 307.793135][ T5906] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 307.967093][T15596] netlink: 'syz.4.2556': attribute type 23 has an invalid length. [ 308.020799][T15598] veth0_to_team: entered promiscuous mode [ 308.062390][T15602] netlink: 'syz.2.2559': attribute type 5 has an invalid length. [ 308.087146][T15604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.117629][T15604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.188400][T15611] netlink: 'syz.2.2559': attribute type 5 has an invalid length. [ 308.645001][T15628] __nla_validate_parse: 21 callbacks suppressed [ 308.645016][T15628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2567'. [ 308.986708][T15648] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 309.361020][T15662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2577'. [ 310.063323][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2588'. [ 310.089946][T15702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2588'. [ 310.105844][T15706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.113140][T15706] IPv6: NLM_F_CREATE should be set when creating new route [ 310.120488][T15706] IPv6: NLM_F_CREATE should be set when creating new route [ 310.127808][T15706] IPv6: NLM_F_CREATE should be set when creating new route [ 310.163276][T15706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.585860][T15726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2594'. [ 310.622036][T15726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2594'. [ 310.631961][T15726] block nbd2: Unsupported socket: should be TCP or UNIX. [ 310.711311][T15735] bond1: (slave lo): Releasing backup interface [ 310.718618][T15735] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 310.740976][T15735] bond0: (slave bond_slave_0): Releasing backup interface [ 310.746393][T15737] nbd: must specify a device to reconfigure [ 310.770999][T15735] bond0: (slave bond_slave_1): Releasing backup interface [ 310.781722][T15735] team0: Port device team_slave_0 removed [ 310.791126][T15735] team0: Port device team_slave_1 removed [ 310.806069][T15735] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 311.115251][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2604'. [ 311.181674][T15764] netlink: 'syz.1.2605': attribute type 3 has an invalid length. [ 311.191068][T15764] netlink: 'syz.1.2605': attribute type 1 has an invalid length. [ 311.202265][T15764] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2605'. [ 311.416488][T15780] syz_tun: entered allmulticast mode [ 311.504834][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2610'. [ 311.569773][T15787] syzkaller0: entered promiscuous mode [ 311.596021][T15787] syzkaller0: entered allmulticast mode [ 311.687404][T15787] tipc: Enabled bearer , priority 0 [ 311.701497][T15779] syz_tun: left allmulticast mode [ 311.717022][T15786] tipc: Resetting bearer [ 311.852392][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.861933][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.871334][T15786] tipc: Disabling bearer [ 311.884840][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.896384][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.906228][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 311.956485][T15801] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2615'. [ 311.991044][T15803] netlink: 'syz.4.2616': attribute type 1 has an invalid length. [ 311.999023][T15803] netlink: 'syz.4.2616': attribute type 4 has an invalid length. [ 312.712838][T15797] wg1 speed is unknown, defaulting to 1000 [ 312.855338][T15848] tipc: Enabling of bearer rejected, failed to enable media [ 313.101042][T15858] netlink: 'syz.4.2631': attribute type 1 has an invalid length. [ 313.165517][T15858] 8021q: adding VLAN 0 to HW filter on device bond8 [ 313.199131][T15832] wg1 speed is unknown, defaulting to 1000 [ 313.693511][T15797] chnl_net:caif_netlink_parms(): no params data found [ 313.820538][T15894] netlink: 'syz.4.2641': attribute type 2 has an invalid length. [ 313.978488][ T5834] Bluetooth: hci7: command tx timeout [ 314.178941][T15797] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.186504][T15797] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.197789][T15797] bridge_slave_0: entered allmulticast mode [ 314.209545][T15797] bridge_slave_0: entered promiscuous mode [ 314.226367][T15797] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.236138][T15797] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.243443][T15797] bridge_slave_1: entered allmulticast mode [ 314.245842][T15908] __nla_validate_parse: 13 callbacks suppressed [ 314.245858][T15908] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2644'. [ 314.266113][T15797] bridge_slave_1: entered promiscuous mode [ 314.274604][T15907] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2644'. [ 314.287413][T15907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2644'. [ 314.331945][T15912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2645'. [ 314.377480][T15797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.390920][T15797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.449003][T15797] team0: Port device team_slave_0 added [ 314.469972][T15797] team0: Port device team_slave_1 added [ 314.485895][T15915] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 314.530261][T15797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.539300][T15919] netlink: 'syz.1.2647': attribute type 1 has an invalid length. [ 314.544676][T15797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.575042][T15797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.635855][T15919] 8021q: adding VLAN 0 to HW filter on device bond12 [ 314.650036][T15797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.666362][T15797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.713635][T15797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.731395][T15921] vlan5: entered allmulticast mode [ 314.736889][T15921] bond12: entered allmulticast mode [ 314.751657][T15919] bond12: (slave gretap1): making interface the new active one [ 314.759651][T15919] gretap1: entered allmulticast mode [ 314.766793][T15919] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 314.806539][T15927] bond3: option miimon: invalid value (18446744073709551585) [ 314.813974][T15927] bond3: option miimon: allowed values 0 - 2147483647 [ 314.825589][T15927] bond3 (unregistering): Released all slaves [ 314.949363][T15797] hsr_slave_0: entered promiscuous mode [ 314.957958][T15797] hsr_slave_1: entered promiscuous mode [ 314.971509][T15797] debugfs: 'hsr0' already exists in 'hsr' [ 314.988333][T15797] Cannot create hsr debugfs directory [ 315.353010][T15797] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 315.363774][T15797] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 315.374501][T15797] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 315.388284][T15797] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 315.480224][T15797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.508455][T15797] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.520734][T12587] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.527978][T12587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.545783][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.553091][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.713298][T15968] openvswitch: netlink: IP tunnel dst address not specified [ 315.726204][T15968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2660'. [ 315.808465][T15971] netlink: 'syz.2.2661': attribute type 1 has an invalid length. [ 315.817726][T15971] netlink: 'syz.2.2661': attribute type 4 has an invalid length. [ 315.826730][T15971] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2661'. [ 315.892186][T15797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.054789][ T5834] Bluetooth: hci7: command tx timeout [ 316.097026][T15983] netlink: 'syz.0.2664': attribute type 21 has an invalid length. [ 316.229793][T15956] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 316.356014][T16003] netlink: 'syz.4.2669': attribute type 10 has an invalid length. [ 316.369664][T16003] veth1_macvtap: left promiscuous mode [ 316.383677][T16003] team0: Device veth1_macvtap failed to register rx_handler [ 316.394581][T16005] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2668'. [ 316.410556][T16006] netlink: 'syz.4.2669': attribute type 10 has an invalid length. [ 316.452765][T16006] team0: Device veth1_macvtap failed to register rx_handler [ 316.565447][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2670'. [ 316.577325][T15797] veth0_vlan: entered promiscuous mode [ 316.622810][T15797] veth1_vlan: entered promiscuous mode [ 316.676835][T16017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2671'. [ 316.733671][T15797] veth0_macvtap: entered promiscuous mode [ 316.764378][T16021] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 316.772348][T15797] veth1_macvtap: entered promiscuous mode [ 316.828827][ T30] audit: type=1804 audit(1766445865.623:2): pid=16024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2674" name="/newroot/558/cgroup.controllers" dev="tmpfs" ino=2855 res=1 errno=0 [ 316.859267][T15797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.884116][ T30] audit: type=1800 audit(1766445865.623:3): pid=16024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2674" name="cgroup.controllers" dev="tmpfs" ino=2855 res=0 errno=0 [ 316.936576][T15797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.983734][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.005092][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.033440][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.052742][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.159480][T16036] validate_nla: 1 callbacks suppressed [ 317.159499][T16036] netlink: 'syz.2.2677': attribute type 1 has an invalid length. [ 317.207751][T16035] netlink: 'syz.2.2677': attribute type 1 has an invalid length. [ 317.229485][T16035] netlink: 'syz.2.2677': attribute type 2 has an invalid length. [ 317.230346][T16036] netlink: 'syz.2.2677': attribute type 2 has an invalid length. [ 317.252012][T16035] netlink: 'syz.2.2677': attribute type 1 has an invalid length. [ 317.263501][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.292919][T16035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2677'. [ 317.295240][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.352109][T16036] netlink: 'syz.2.2677': attribute type 1 has an invalid length. [ 317.392845][ T765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.416136][ T765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.416644][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 317.917829][T16065] block nbd7: not configured, cannot reconfigure [ 318.013928][T16071] syzkaller1: entered promiscuous mode [ 318.051643][T16071] syzkaller1: entered allmulticast mode [ 318.136612][ T5834] Bluetooth: hci7: command tx timeout [ 318.505070][T16097] syzkaller1: entered promiscuous mode [ 318.511375][T16097] syzkaller1: entered allmulticast mode [ 318.842812][T16121] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 318.903137][T16124] netlink: 'syz.0.2702': attribute type 21 has an invalid length. [ 318.930563][T16125] veth0_to_team: entered promiscuous mode [ 318.942787][T16125] veth0: entered promiscuous mode [ 318.957995][T16122] veth0: left promiscuous mode [ 319.466494][T16151] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 319.705170][ T60] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 319.718258][T16165] netlink: 'syz.2.2713': attribute type 4 has an invalid length. [ 319.729723][T16165] netlink: 'syz.2.2713': attribute type 4 has an invalid length. [ 319.809853][T16165] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20003 [ 320.214404][ T5834] Bluetooth: hci7: command tx timeout [ 320.360090][T16205] __nla_validate_parse: 3 callbacks suppressed [ 320.360112][T16205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2720'. [ 320.384861][T16205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2720'. [ 320.473081][T16191] netlink: 'syz.1.2718': attribute type 1 has an invalid length. [ 320.672545][T16208] bond0: (slave netdevsim0): Releasing backup interface [ 320.712881][T16208] batman_adv: batadv0: Adding interface: netdevsim0 [ 320.773295][T16208] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.836589][T16208] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 320.902766][T16211] nbd: must specify a device to reconfigure [ 320.922046][T16213] bond10: entered promiscuous mode [ 320.928677][T16213] 8021q: adding VLAN 0 to HW filter on device bond10 [ 320.994458][T16213] bond10: (slave bridge5): making interface the new active one [ 321.002059][T16213] bridge5: entered promiscuous mode [ 321.049254][T16213] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 321.233017][T16235] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2729'. [ 321.565129][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 321.576849][ T5840] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 321.587513][ T5840] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 321.596334][ T5840] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 321.614946][ T5840] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 321.746265][T16254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2734'. [ 321.809322][T16254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2734'. [ 322.168881][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2738'. [ 322.303461][ T5840] Bluetooth: hci7: command tx timeout [ 322.410665][T16246] wg1 speed is unknown, defaulting to 1000 [ 322.627859][T16288] syzkaller0: left promiscuous mode [ 322.633138][T16288] syzkaller0: left allmulticast mode [ 322.725879][T16293] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2748'. [ 322.828475][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2751'. [ 322.909270][T16307] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2752'. [ 322.919502][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2752'. [ 322.942079][T16246] chnl_net:caif_netlink_parms(): no params data found [ 323.218262][T12590] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 323.259633][T16326] xt_TCPMSS: Only works on TCP SYN packets [ 323.384742][T16335] validate_nla: 2 callbacks suppressed [ 323.384763][T16335] netlink: 'syz.0.2763': attribute type 7 has an invalid length. [ 323.435954][T12590] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 323.637359][T12590] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 323.664448][ T5840] Bluetooth: hci8: command tx timeout [ 323.701179][T16246] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.714301][T16246] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.729391][T16246] bridge_slave_0: entered allmulticast mode [ 323.757477][T16246] bridge_slave_0: entered promiscuous mode [ 323.780252][T16246] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.805765][T16246] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.813095][T16246] bridge_slave_1: entered allmulticast mode [ 323.838251][T16246] bridge_slave_1: entered promiscuous mode [ 323.879950][T12590] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 324.042509][T16246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.089581][T16246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.162399][ T5906] IPVS: starting estimator thread 0... [ 324.171259][T16379] Cannot find map_set index 0 as target [ 324.196335][T16379] Cannot find map_set index 0 as target [ 324.254526][T16380] IPVS: using max 23 ests per chain, 55200 per kthread [ 324.264493][T16246] team0: Port device team_slave_0 added [ 324.340941][T16246] team0: Port device team_slave_1 added [ 324.472848][T16246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.486602][T16246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.545515][T16246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.899411][T12590] bond12 (unregistering): (slave gretap1): Releasing active interface [ 324.914816][T12590] gretap1 (unregistering): left allmulticast mode [ 325.064660][T12590] dvmrp0 (unregistering): left allmulticast mode [ 325.209990][T12590] bond5 (unregistering): (slave bridge1): Releasing backup interface [ 325.725227][T12590] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 325.735650][T12590] bond0 (unregistering): Released all slaves [ 325.744170][ T5840] Bluetooth: hci8: command tx timeout [ 325.752143][T12590] bond1 (unregistering): Released all slaves [ 325.875280][T12590] bond2 (unregistering): (slave veth3): Releasing active interface [ 325.883868][T12590] vlan2: entered promiscuous mode [ 325.891396][T12590] bond2 (unregistering): (slave vlan2): Releasing active interface [ 325.902457][T12590] bond2 (unregistering): Released all slaves [ 325.918142][T12590] bond3 (unregistering): Released all slaves [ 325.933665][T12590] bond4 (unregistering): Released all slaves [ 325.970808][T16416] netlink: 'syz.4.2785': attribute type 1 has an invalid length. [ 326.058813][T12590] bond5 (unregistering): Released all slaves [ 326.175031][T12590] bond6 (unregistering): (slave veth11): Releasing active interface [ 326.183824][T12590] bond6 (unregistering): Released all slaves [ 326.295009][T12590] bond7 (unregistering): Released all slaves [ 326.308334][T12590] bond8 (unregistering): Released all slaves [ 326.414136][T12590] bond9 (unregistering): Released all slaves [ 326.427943][T12590] bond10 (unregistering): Released all slaves [ 326.531729][T12590] bond11 (unregistering): Released all slaves [ 326.639856][T12590] bond12 (unregistering): Released all slaves [ 326.661497][T16246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.670693][T16246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.702173][T16246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.834619][T16414] IPVS: Error connecting to the multicast addr [ 326.852219][T16417] tipc: Enabling of bearer rejected, already enabled [ 326.917309][T16421] tipc: Resetting bearer [ 326.931693][T12590] : left promiscuous mode [ 327.121336][T16438] IPv6: addrconf: prefix option has invalid lifetime [ 327.144641][T16439] IPv6: addrconf: prefix option has invalid lifetime [ 327.270146][T12590] tipc: Left network mode [ 327.295756][T16246] hsr_slave_0: entered promiscuous mode [ 327.303007][T16246] hsr_slave_1: entered promiscuous mode [ 327.320317][T16246] debugfs: 'hsr0' already exists in 'hsr' [ 327.330145][T12590] IPVS: stopping backup sync thread 15115 ... [ 327.342665][T16246] Cannot create hsr debugfs directory [ 327.625659][T16464] __nla_validate_parse: 8 callbacks suppressed [ 327.625679][T16464] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2797'. [ 327.777373][T16472] sctp: [Deprecated]: syz.7.2799 (pid 16472) Use of int in maxseg socket option. [ 327.777373][T16472] Use struct sctp_assoc_value instead [ 327.816188][ T5840] Bluetooth: hci8: command tx timeout [ 327.825070][T16472] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2799'. [ 327.867246][T16470] batadv_slave_0: Caught tx_queue_len zero misconfig [ 327.899299][T16479] netlink: 'syz.4.2800': attribute type 33 has an invalid length. [ 327.934964][T16470] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2798'. [ 328.075180][T16475] syzkaller0: entered promiscuous mode [ 328.080816][T16475] syzkaller0: entered allmulticast mode [ 329.878490][T16506] tipc: Enabling of bearer rejected, failed to enable media [ 329.898310][ T5840] Bluetooth: hci8: command tx timeout [ 329.991803][T16505] tipc: Enabling of bearer rejected, failed to enable media [ 330.231347][T16524] xt_ct_set_helper: 55 callbacks suppressed [ 330.231372][T16524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.362164][T16533] netlink: 'syz.2.2811': attribute type 1 has an invalid length. [ 330.461749][T16533] bond3: entered promiscuous mode [ 330.467109][T16533] bond3: entered allmulticast mode [ 330.472750][T16533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 330.496218][T16533] netlink: 'syz.2.2811': attribute type 1 has an invalid length. [ 330.526421][T16543] netlink: 'syz.0.2813': attribute type 1 has an invalid length. [ 330.534549][T16543] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2813'. [ 330.562061][T16536] macvlan0: entered promiscuous mode [ 330.568184][T16536] macvlan0: entered allmulticast mode [ 330.577706][T16536] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 331.000449][T16559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2818'. [ 331.172630][T16573] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 331.353769][T16581] x_tables: duplicate underflow at hook 2 [ 331.372742][T16583] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2822'. [ 331.481668][T16246] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 331.487040][T16583] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2822'. [ 331.532935][T16246] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 331.599754][T16246] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 331.686680][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2825'. [ 331.696895][T12590] hsr_slave_0: left promiscuous mode [ 331.714560][T12590] hsr_slave_1: left promiscuous mode [ 331.886487][T12590] pim6reg (unregistering): left allmulticast mode [ 332.783946][T16246] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 332.840633][T16602] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 332.857208][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2825'. [ 332.892996][T16605] dvmrp0: entered allmulticast mode [ 332.978211][T12604] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.002059][T12604] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.032666][T16613] netlink: 'syz.4.2830': attribute type 6 has an invalid length. [ 333.054282][T12604] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.073410][T12604] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.200370][T16609] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.232558][T16609] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.273688][T16630] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2831'. [ 333.465855][T16609] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.497713][T16609] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.555547][T16632] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 333.602706][T12590] IPVS: stop unused estimator thread 0... [ 333.692133][T16609] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.710371][T16609] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.862819][T16609] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.876199][T16609] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.877011][T16640] sctp: [Deprecated]: syz.4.2836 (pid 16640) Use of int in max_burst socket option. [ 333.877011][T16640] Use struct sctp_assoc_value instead [ 334.003685][T16246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.058507][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2836'. [ 334.110277][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2836'. [ 334.128925][ T765] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.153854][ T765] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.200899][T16652] ip6tnl0: Caught tx_queue_len zero misconfig [ 334.318504][T16246] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.335165][ T765] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.353644][ T765] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.388653][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2839'. [ 334.412047][ T36] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.426339][ T36] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.437882][ T765] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.445139][ T765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.486610][ T6836] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.515870][ T6836] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.549581][ T765] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.554438][T16671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2842'. [ 334.556829][ T765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.725342][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2844'. [ 334.800155][T16677] macsec2: entered promiscuous mode [ 334.816209][T16677] macsec2: entered allmulticast mode [ 334.821566][T16677] bridge0: entered allmulticast mode [ 334.875822][T16677] bridge0: port 1(macsec2) entered blocking state [ 334.893925][T16677] bridge0: port 1(macsec2) entered disabled state [ 334.919663][T16677] bridge0: left allmulticast mode [ 335.464585][T16711] netlink: 1744 bytes leftover after parsing attributes in process `syz.2.2852'. [ 335.524346][T16711] tunl0: Caught tx_queue_len zero misconfig [ 335.784383][T16246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.971825][T16246] veth0_vlan: entered promiscuous mode [ 336.046097][T16246] veth1_vlan: entered promiscuous mode [ 336.240693][T16246] veth0_macvtap: entered promiscuous mode [ 336.269362][T16740] netlink: 'syz.7.2860': attribute type 2 has an invalid length. [ 336.289762][T16246] veth1_macvtap: entered promiscuous mode [ 336.359280][T16246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.416995][T16246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.480023][T12590] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.536068][T12590] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.576352][T12590] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.596212][T12590] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.623777][T16750] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2863'. [ 336.639790][T16751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2861'. [ 337.314801][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.330826][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.446409][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.486024][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.075547][T16808] __nla_validate_parse: 4 callbacks suppressed [ 338.075568][T16808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2871'. [ 338.180507][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.191677][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.204565][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.213622][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.223375][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.827493][T16809] wg1 speed is unknown, defaulting to 1000 [ 338.938279][T16837] lo: entered promiscuous mode [ 338.965884][T16837] tunl0: entered promiscuous mode [ 338.974645][T16837] gre0: entered promiscuous mode [ 338.996718][T16837] gretap0: entered promiscuous mode [ 339.006620][T16837] erspan0: entered promiscuous mode [ 339.018253][T16837] ip_vti0: entered promiscuous mode [ 339.291925][ T6836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.311373][ T6836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.489124][T16863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2890'. [ 339.543701][T16863] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2890'. [ 339.633008][T16809] chnl_net:caif_netlink_parms(): no params data found [ 339.698361][T16871] lo: entered allmulticast mode [ 339.868129][T16884] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2894'. [ 339.870188][T16882] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2895'. [ 339.901866][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2896'. [ 339.919805][T16809] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.927652][T16809] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.935356][T16809] bridge_slave_0: entered allmulticast mode [ 339.943636][T16809] bridge_slave_0: entered promiscuous mode [ 339.954982][T16886] bridge_slave_1: left allmulticast mode [ 339.968916][T16886] bridge_slave_1: left promiscuous mode [ 339.975522][T16886] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.066822][T16886] bridge_slave_0: left allmulticast mode [ 340.076988][T16886] bridge_slave_0: left promiscuous mode [ 340.083580][T16886] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.294312][ T5840] Bluetooth: hci0: command tx timeout [ 340.712163][T16903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2899'. [ 340.838143][T16809] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.846793][T16809] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.856342][T16809] bridge_slave_1: entered allmulticast mode [ 340.863568][T16809] bridge_slave_1: entered promiscuous mode [ 341.039513][T16809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.067971][T16809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.097459][T16911] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 341.151026][T16914] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 341.166334][T16809] team0: Port device team_slave_0 added [ 341.176973][T16918] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2902'. [ 341.193385][T16809] team0: Port device team_slave_1 added [ 341.205167][T16918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2902'. [ 341.380732][T16809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.407980][T16809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.473314][T16809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.487016][T16809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.495295][T16809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.530865][T16809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.556339][T16932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2905'. [ 341.643261][T16809] hsr_slave_0: entered promiscuous mode [ 341.649854][T16809] hsr_slave_1: entered promiscuous mode [ 341.663018][T16809] debugfs: 'hsr0' already exists in 'hsr' [ 341.669473][T16809] Cannot create hsr debugfs directory [ 342.081595][T16809] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.098371][T16809] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.127404][T16949] team0: Cannot enslave team device to itself [ 342.247110][T16809] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.267953][T16809] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.380588][ T5840] Bluetooth: hci0: command tx timeout [ 342.426034][T16809] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.453021][T16809] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.607067][T16976] x_tables: duplicate underflow at hook 1 [ 342.666647][T16809] batman_adv: batadv0: Removing interface: netdevsim0 [ 342.683297][T16809] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.701066][T16809] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.775366][T16985] veth1_to_bond: entered allmulticast mode [ 342.879542][T16988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.983609][T16985] veth1_to_bond (unregistering): left allmulticast mode [ 343.040135][T16999] netlink: 'syz.2.2921': attribute type 29 has an invalid length. [ 343.064697][T17001] tipc: Started in network mode [ 343.088678][T17001] tipc: Node identity 96de8d1ca77f, cluster identity 4711 [ 343.101978][T17001] tipc: Enabled bearer , priority 0 [ 343.275248][T17006] syzkaller0: entered promiscuous mode [ 343.280751][T17006] syzkaller0: entered allmulticast mode [ 343.301476][T17006] tipc: Resetting bearer [ 343.310475][T17017] __nla_validate_parse: 5 callbacks suppressed [ 343.310489][T17017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2925'. [ 343.332643][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2925'. [ 343.342217][T17015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2925'. [ 343.365865][T17015] netlink: 'syz.2.2925': attribute type 6 has an invalid length. [ 343.375946][T16986] tipc: Resetting bearer [ 344.458071][ T5840] Bluetooth: hci0: command tx timeout [ 345.180797][T16986] tipc: Disabling bearer [ 345.200070][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2925'. [ 345.207426][T17036] geneve3: entered promiscuous mode [ 345.209135][T17015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2925'. [ 345.217370][T17038] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2933'. [ 345.223644][ T9] tipc: Node number set to 832671004 [ 345.238828][T17015] netlink: 'syz.2.2925': attribute type 6 has an invalid length. [ 345.253055][T17038] netlink: 'syz.7.2933': attribute type 5 has an invalid length. [ 345.253099][T12587] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 345.294426][T12587] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 345.314453][T17038] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2933'. [ 345.333711][T12587] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 345.338964][T17038] netlink: 'syz.7.2933': attribute type 5 has an invalid length. [ 345.367125][T16809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 345.386830][T17042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2935'. [ 345.400023][T12587] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 345.416744][T16809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 345.449093][T16809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 345.491349][T16809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 345.541644][T17047] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2937'. [ 345.557827][T17047] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2937'. [ 345.621304][T17065] netlink: 'syz.4.2938': attribute type 4 has an invalid length. [ 345.923189][T16809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.971924][T17079] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 345.986378][T17081] netlink: 'syz.2.2943': attribute type 10 has an invalid length. [ 346.034282][T17081] team0: Device geneve0 is of different type [ 346.080851][T17081] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 346.126035][T16809] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.188926][T12590] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.196194][T12590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.280552][T12590] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.287810][T12590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.536949][ T5840] Bluetooth: hci0: command tx timeout [ 346.601808][T17112] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 346.960764][T16809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.082185][T16809] veth0_vlan: entered promiscuous mode [ 347.120430][T16809] veth1_vlan: entered promiscuous mode [ 347.239109][T17155] netlink: 'syz.2.2962': attribute type 1 has an invalid length. [ 347.248747][T17155] netlink: 'syz.2.2962': attribute type 1 has an invalid length. [ 347.262105][T17155] netlink: 'syz.2.2962': attribute type 1 has an invalid length. [ 347.279700][T16809] veth0_macvtap: entered promiscuous mode [ 347.315229][T16809] veth1_macvtap: entered promiscuous mode [ 347.391070][T16809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.439714][T16809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.459775][T17162] tipc: Enabling of bearer rejected, failed to enable media [ 347.498873][ T6836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.508994][ T6836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.521092][ T6836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.530465][ T6836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.770850][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.811799][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.938337][ T6980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.968569][ T6980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.249288][T17199] xt_TPROXY: Can be used only with -p tcp or -p udp [ 348.483268][T17212] __nla_validate_parse: 8 callbacks suppressed [ 348.483288][T17212] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2980'. [ 348.505325][T17211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2978'. [ 348.684893][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.700014][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.715454][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.740665][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.748759][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.863057][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2981'. [ 349.059502][ T69] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 349.090181][T17239] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2985'. [ 349.465747][T17218] wg1 speed is unknown, defaulting to 1000 [ 349.897864][T17255] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2989'. [ 349.909393][T17218] chnl_net:caif_netlink_parms(): no params data found [ 350.113032][T17218] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.121262][T17218] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.134509][T17218] bridge_slave_0: entered allmulticast mode [ 350.155551][T17218] bridge_slave_0: entered promiscuous mode [ 350.164867][T17218] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.172199][T17218] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.179644][T17218] bridge_slave_1: entered allmulticast mode [ 350.191788][T17218] bridge_slave_1: entered promiscuous mode [ 350.315850][T17218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.329347][T17218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.393583][T17218] team0: Port device team_slave_0 added [ 350.411225][T17218] team0: Port device team_slave_1 added [ 350.434481][T17284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2995'. [ 350.496021][T17218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.506699][T17218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.539261][T17218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.570333][T17218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.594359][T17218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.653284][T17218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.818470][T17303] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3001'. [ 350.854827][ T5834] Bluetooth: hci3: command tx timeout [ 350.877415][T17218] hsr_slave_0: entered promiscuous mode [ 350.887115][T17218] hsr_slave_1: entered promiscuous mode [ 350.895401][T17218] debugfs: 'hsr0' already exists in 'hsr' [ 350.901179][T17218] Cannot create hsr debugfs directory [ 351.244820][T17316] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3004'. [ 351.346360][T17320] bond2: Removing last ns target with arp_interval on [ 351.671875][T17218] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 351.796029][T17218] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 352.152240][T17218] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 352.239056][T17362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3019'. [ 352.274241][T17360] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3020'. [ 352.286042][T17218] bond0: (slave netdevsim0): Releasing backup interface [ 352.308371][T17218] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 352.329781][T17362] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.337927][T17362] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.351668][T17367] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 352.713535][T17218] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 352.753802][T17354] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 352.760232][T17218] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 352.783468][T17354] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 352.800307][T17218] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.839217][T17218] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.852526][T17354] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 352.860943][T17387] netlink: 'syz.1.3028': attribute type 1 has an invalid length. [ 352.874607][T17354] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 352.927696][T17387] bond1: entered promiscuous mode [ 352.932790][T17387] bond1: entered allmulticast mode [ 352.938020][ T5834] Bluetooth: hci3: command tx timeout [ 352.945468][T17387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 353.024933][T17354] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 353.042417][T17354] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 353.071494][T17354] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 353.084063][T17354] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 353.330042][T17354] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 353.335586][T17411] lo: left promiscuous mode [ 353.344476][T17354] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 353.352668][T17411] tunl0: left promiscuous mode [ 353.385620][T17411] gre0: left promiscuous mode [ 353.390797][T17411] gretap0: left promiscuous mode [ 353.576171][T17411] erspan0: left promiscuous mode [ 353.581344][T17411] ip_vti0: left promiscuous mode [ 353.611976][T17411] bond1: left promiscuous mode [ 353.699500][T17411] __nla_validate_parse: 4 callbacks suppressed [ 353.699523][T17411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3032'. [ 353.718484][T17354] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 353.723087][T17218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.742547][T17354] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 353.763881][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3035'. [ 353.888632][T17429] bond0: Error: Cannot enslave bond to itself. [ 353.890028][T17354] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 353.909817][T17218] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.934107][T17354] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 353.972963][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3039'. [ 353.990392][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.997625][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.009160][T17433] netlink: 'syz.1.3038': attribute type 21 has an invalid length. [ 354.046455][T17433] netlink: 'syz.1.3038': attribute type 1 has an invalid length. [ 354.095926][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.103172][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.104536][T17354] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 354.123110][T17354] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 354.258200][T17442] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3040'. [ 354.305496][T17445] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20002 [ 354.490786][T12590] team0: left allmulticast mode [ 354.503693][T12590] team0: left promiscuous mode [ 354.517323][T12590] bridge0: port 1(team0) entered disabled state [ 354.592251][T12590] tipc: Resetting bearer [ 355.027938][T12590] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 355.063037][T17484] netlink: 'syz.0.3054': attribute type 1 has an invalid length. [ 355.087630][T12590] bond6 (unregistering): (slave gretap2): Releasing active interface [ 355.183027][T12590] bond3 (unregistering): (slave geneve2): Releasing active interface [ 355.445853][T12590] bond2 (unregistering): (slave bridge4): Releasing active interface [ 355.486243][T12590] tipc: Disabling bearer [ 355.545182][T12590] bond10 (unregistering): (slave bridge5): Releasing backup interface [ 355.553413][T12590] bridge5 (unregistering): left promiscuous mode [ 355.646342][T12590] bond11 (unregistering): (slave bridge7): Releasing backup interface [ 355.792256][T12590] bond0 (unregistering): Released all slaves [ 355.903040][T12590] bond1 (unregistering): Released all slaves [ 355.916589][T12590] bond2 (unregistering): Released all slaves [ 356.026302][T12590] bond3 (unregistering): Released all slaves [ 356.040331][T12590] bond4 (unregistering): (slave bond5): Releasing backup interface [ 356.049455][T12590] bond4 (unregistering): Released all slaves [ 356.164333][T12590] bond5 (unregistering): Released all slaves [ 356.179522][T12590] bond6 (unregistering): Released all slaves [ 356.192650][T12590] bond7 (unregistering): Released all slaves [ 356.319770][T12590] bond8 (unregistering): Released all slaves [ 356.332910][T12590] bond9 (unregistering): Released all slaves [ 356.446980][T12590] bond10 (unregistering): Released all slaves [ 356.460405][T12590] bond11 (unregistering): Released all slaves [ 356.482272][T17484] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 356.659479][T17500] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3056'. [ 356.722666][T17502] netlink: 'syz.2.3057': attribute type 1 has an invalid length. [ 358.378480][T12590] : left promiscuous mode [ 358.391913][T17502] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 358.539573][T17515] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.608789][T12590] 9: left promiscuous mode [ 358.696896][T17523] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3061'. [ 358.733217][T17525] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.3060'. [ 358.749605][T17218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.001818][T17538] netlink: 'syz.0.3062': attribute type 4 has an invalid length. [ 359.040295][T17535] can: request_module (can-proto-5) failed. [ 359.052463][T17535] netlink: 'syz.0.3062': attribute type 4 has an invalid length. [ 359.165400][T12590] tipc: Left network mode [ 359.308762][T17537] syzkaller0: entered promiscuous mode [ 359.315016][T17537] syzkaller0: entered allmulticast mode [ 361.787049][T17588] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3071'. [ 361.837480][T17218] veth0_vlan: entered promiscuous mode [ 361.889486][T17218] veth1_vlan: entered promiscuous mode [ 362.105400][T17218] veth0_macvtap: entered promiscuous mode [ 362.147584][T17218] veth1_macvtap: entered promiscuous mode [ 362.158945][T17607] netlink: 580 bytes leftover after parsing attributes in process `syz.0.3076'. [ 362.265565][T17218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.327066][T17218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.352120][T17614] IPv6: sit1: Disabled Multicast RS [ 362.359978][T17614] sit1: entered allmulticast mode [ 362.425998][ T179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.466879][ T179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.477920][ T179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.497481][ T179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.876365][ T3081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.904075][ T3081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.208615][T17647] pimreg: entered allmulticast mode [ 363.276864][ T765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.306526][ T765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.413146][T12590] hsr_slave_0: left promiscuous mode [ 363.459754][T12590] hsr_slave_1: left promiscuous mode [ 363.497162][T17659] Bluetooth: MGMT ver 1.23 [ 363.780553][T17673] netlink: 'syz.1.3094': attribute type 10 has an invalid length. [ 364.219759][T17655] netlink: 11 bytes leftover after parsing attributes in process `syz.7.3089'. [ 364.229577][T17655] netlink: 11 bytes leftover after parsing attributes in process `syz.7.3089'. [ 364.244381][T17656] netlink: 11 bytes leftover after parsing attributes in process `syz.7.3089'. [ 364.253531][T17656] netlink: 11 bytes leftover after parsing attributes in process `syz.7.3089'. [ 364.266754][T17657] netlink: 11 bytes leftover after parsing attributes in process `syz.7.3089'. [ 364.277583][T17657] netlink: 11 bytes leftover after parsing attributes in process `syz.7.3089'. [ 364.405031][T17673] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 364.633214][T17684] netlink: 'syz.7.3097': attribute type 1 has an invalid length. [ 364.682865][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.693692][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.712830][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.722683][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.731650][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.761161][T17694] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3100'. [ 364.777905][T17689] netlink: 'syz.1.3098': attribute type 1 has an invalid length. [ 364.794467][T17694] syz_tun: entered allmulticast mode [ 365.116548][T17704] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3102'. [ 365.282357][T12590] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 365.329348][T12590] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 365.342352][T12590] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.374530][T12590] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 365.403901][T17712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3106'. [ 365.491006][T12590] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 365.532061][T12590] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 365.551104][T12590] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.568721][T17722] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3110'. [ 365.578669][T12590] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 365.633821][T17685] wg1 speed is unknown, defaulting to 1000 [ 365.701753][T12590] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 365.719786][T12590] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 365.730773][T12590] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.743545][T17727] x_tables: duplicate underflow at hook 1 [ 365.749934][T12590] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 365.854636][T12590] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 365.867965][T12590] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 365.878894][T12590] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.900427][T12590] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 365.973286][T17729] sch_fq: defrate 0 ignored. [ 366.776993][ T5840] Bluetooth: hci2: command tx timeout [ 367.141975][T12590] bond2 (unregistering): (slave geneve3): Releasing active interface [ 367.176689][T12590] bond0 (unregistering): (slave geneve2): Releasing active interface [ 367.588001][T12590] bond1 (unregistering): Released all slaves [ 367.611833][T12590] bond0 (unregistering): Released all slaves [ 367.626272][T12590] bond2 (unregistering): Released all slaves [ 367.738711][T12590] bond3 (unregistering): Released all slaves [ 367.997682][T12590] tipc: Disabling bearer [ 368.020622][T12590] tipc: Left network mode [ 368.096682][T17808] netlink: 'syz.7.3128': attribute type 3 has an invalid length. [ 368.332214][T17685] chnl_net:caif_netlink_parms(): no params data found [ 368.854978][ T5840] Bluetooth: hci2: command tx timeout [ 368.918923][T17840] netlink: 'syz.7.3135': attribute type 6 has an invalid length. [ 369.314839][T17874] __nla_validate_parse: 5 callbacks suppressed [ 369.314859][T17874] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3142'. [ 369.381815][T17685] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.420224][T17685] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.461221][T17685] bridge_slave_0: entered allmulticast mode [ 369.514480][T17685] bridge_slave_0: entered promiscuous mode [ 369.589177][T17890] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3145'. [ 369.604226][T17685] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.612205][T17685] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.629501][T17685] bridge_slave_1: entered allmulticast mode [ 369.638611][T17685] bridge_slave_1: entered promiscuous mode [ 369.907233][T17685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.961507][T17685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.112799][T17685] team0: Port device team_slave_0 added [ 370.149188][T17685] team0: Port device team_slave_1 added [ 370.245272][T17911] sch_fq: defrate 0 ignored. [ 370.268779][T17685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.280116][T17685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.317915][T17685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.420706][T17685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.441409][T17685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.505025][T17685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.574178][T17925] atomic_op ffff888049df7998 conn xmit_atomic 0000000000000000 [ 370.741793][T17932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3157'. [ 370.934142][ T5840] Bluetooth: hci2: command tx timeout [ 371.001896][T12590] hsr_slave_0: left promiscuous mode [ 371.026716][T12590] hsr_slave_1: left promiscuous mode [ 371.026941][T17937] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.3158'. [ 371.063925][T12590] veth1_macvtap: left promiscuous mode [ 371.068177][T17937] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.3158'. [ 371.076876][T12590] veth0_macvtap: left promiscuous mode [ 371.108274][T17939] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3159'. [ 371.190128][T17944] openvswitch: netlink: Tunnel attr 9 has unexpected len 1 expected 2 [ 371.216678][T17950] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3159'. [ 371.250429][T17950] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3159'. [ 371.265971][T17952] netlink: 'syz.0.3161': attribute type 3 has an invalid length. [ 371.381081][T12590] team0 (unregistering): Port device wireguard0 removed [ 371.823780][T17970] xt_l2tp: unknown flags: 10 [ 372.232197][T17685] hsr_slave_0: entered promiscuous mode [ 372.246017][T17685] hsr_slave_1: entered promiscuous mode [ 372.252299][T17685] debugfs: 'hsr0' already exists in 'hsr' [ 372.258402][T17685] Cannot create hsr debugfs directory [ 372.265052][T17939] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 372.319881][T17958] tipc: Enabling of bearer rejected, failed to enable media [ 372.346103][T17970] vxcan1: entered promiscuous mode [ 372.355208][T17971] syzkaller0: entered promiscuous mode [ 372.360765][T17971] syzkaller0: entered allmulticast mode [ 372.608736][T17990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.017470][ T5840] Bluetooth: hci2: command tx timeout [ 373.139456][T18021] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3175'. [ 373.152259][T12590] IPVS: stop unused estimator thread 0... [ 374.128546][T18072] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3187'. [ 374.368126][T17685] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 374.422752][T18084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3189'. [ 374.439762][T17685] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 374.484678][T17685] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 374.513934][T18089] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3191'. [ 374.514806][T17685] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 375.004481][T17685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.061337][T17685] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.100786][ T765] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.108088][ T765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.182052][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.189341][ T3081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.233231][T18122] xt_CT: You must specify a L4 protocol and not use inversions on it [ 375.377699][T18127] netlink: 'syz.1.3197': attribute type 1 has an invalid length. [ 375.394644][T18127] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3197'. [ 375.650407][T18138] netlink: 508 bytes leftover after parsing attributes in process `syz.0.3199'. [ 375.926920][T18126] wg1 speed is unknown, defaulting to 1000 [ 376.212886][T17685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.516496][T18169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3204'. [ 376.927612][T18193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3208'. [ 376.938759][T18169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.958040][T18169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.973189][T18169] bond0 (unregistering): Released all slaves [ 377.262271][T17685] veth0_vlan: entered promiscuous mode [ 377.358527][T18201] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3210'. [ 377.462605][T17685] veth1_vlan: entered promiscuous mode [ 377.631132][T18224] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3215'. [ 377.679259][T18224] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3215'. [ 377.720713][T18224] gretap1: entered promiscuous mode [ 377.743519][T18224] gretap1: entered allmulticast mode [ 377.836851][T17685] veth0_macvtap: entered promiscuous mode [ 377.871274][T17685] veth1_macvtap: entered promiscuous mode [ 377.958759][T17685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.005031][T18232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3217'. [ 378.015926][T18232] block nbd3: Unsupported socket: should be TCP or UNIX. [ 378.220505][T17685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.365649][ T765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.392297][T18252] 0{X: renamed from gretap0 (while UP) [ 378.447473][T18252] 0{X: entered allmulticast mode [ 378.470405][T18252] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 378.542308][ T765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.564744][ T765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.665875][ T765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.724388][T18266] Cannot find add_set index 0 as target [ 378.821449][T18277] xt_hashlimit: size too large, truncated to 1048576 [ 379.180276][T12590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.220669][T12590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.302079][T18294] geneve2: entered promiscuous mode [ 379.307750][T18294] geneve2: entered allmulticast mode [ 379.319480][T12604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.332896][T12604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.555249][T18313] netlink: 'syz.7.3237': attribute type 11 has an invalid length. [ 379.563143][T18313] __nla_validate_parse: 8 callbacks suppressed [ 379.563163][T18313] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.3237'. [ 379.737143][T18323] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 379.766317][T18329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3239'. [ 379.815537][T18313] netlink: 'syz.7.3237': attribute type 1 has an invalid length. [ 379.829344][T18313] netlink: 'syz.7.3237': attribute type 2 has an invalid length. [ 379.941141][T18329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.967622][T18313] netlink: 'syz.7.3237': attribute type 3 has an invalid length. [ 379.989287][T18313] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3237'. [ 380.010844][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 380.021653][T18318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.705061][T18367] netlink: 'syz.0.3245': attribute type 10 has an invalid length. [ 380.729280][T18369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3246'. [ 380.737181][T18367] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 380.804758][T18369] netlink: 'syz.2.3246': attribute type 7 has an invalid length. [ 380.833015][T18380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3248'. [ 380.839174][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3246'. [ 380.868808][T18384] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 380.936722][ T1156] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.954541][ T1156] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.012992][ T1156] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.051634][ T1156] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.203530][T18398] netlink: 'syz.1.3253': attribute type 4 has an invalid length. [ 381.220820][T18398] netlink: 'syz.1.3253': attribute type 4 has an invalid length. [ 381.243294][T18398] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20003 [ 381.279150][T18398] lo speed is unknown, defaulting to 1000 [ 381.300855][T18398] lo speed is unknown, defaulting to 1000 [ 381.325105][T18398] lo speed is unknown, defaulting to 1000 [ 381.383458][T18408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.673766][T18398] infiniband sz1: set active [ 381.678888][T18398] infiniband sz1: added lo [ 381.733901][T18398] RDS/IB: sz1: added [ 381.738265][T18398] smc: adding ib device sz1 with port count 1 [ 381.746959][T18398] smc: ib device sz1 port 1 has no pnetid [ 381.781395][T18398] lo speed is unknown, defaulting to 1000 [ 382.034806][ T5928] lo speed is unknown, defaulting to 1000 [ 382.044566][ T7387] lo speed is unknown, defaulting to 1000 [ 382.048471][T18430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3262'. [ 382.085909][T18431] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3261'. [ 382.095622][T18430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3262'. [ 382.119182][T18433] SET target dimension over the limit! [ 382.125840][T18430] netlink: 'syz.0.3262': attribute type 7 has an invalid length. [ 382.155604][T18430] netlink: 'syz.0.3262': attribute type 8 has an invalid length. [ 382.273409][T18398] lo speed is unknown, defaulting to 1000 [ 382.307024][T18435] vlan0: entered promiscuous mode [ 382.345416][T18435] vlan0: entered allmulticast mode [ 382.350839][T18435] veth0_vlan: entered allmulticast mode [ 382.525131][T18450] netlink: 'syz.0.3268': attribute type 1 has an invalid length. [ 382.738398][T18454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.792047][T18454] bond1: (slave bond2): making interface the new active one [ 382.817883][T18454] bond1: (slave bond2): Enslaving as an active interface with an up link [ 382.907544][T18450] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 382.965042][T18450] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 383.037534][T18398] lo speed is unknown, defaulting to 1000 [ 383.645675][T18398] lo speed is unknown, defaulting to 1000 [ 383.656341][T18504] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 383.910880][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 384.291871][T18398] lo speed is unknown, defaulting to 1000 [ 384.512477][T18543] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 384.723040][T18398] lo speed is unknown, defaulting to 1000 [ 384.939891][T18558] __nla_validate_parse: 12 callbacks suppressed [ 384.939912][T18558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3298'. [ 384.961351][T18558] bridge_slave_1: left allmulticast mode [ 384.970113][T18558] bridge_slave_1: left promiscuous mode [ 384.976920][T18558] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.999993][T18558] bridge_slave_0: left allmulticast mode [ 385.006452][T18558] bridge_slave_0: left promiscuous mode [ 385.025820][T18558] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.220257][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3301'. [ 385.224549][T18398] lo speed is unknown, defaulting to 1000 [ 385.566242][T18582] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3303'. [ 385.636581][T18589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3304'. [ 385.960326][T18398] lo speed is unknown, defaulting to 1000 [ 386.307587][T18611] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3313'. [ 386.549511][T18624] validate_nla: 2 callbacks suppressed [ 386.549532][T18624] netlink: 'syz.4.3315': attribute type 39 has an invalid length. [ 386.570216][T18620] 0{X: left allmulticast mode [ 386.683641][T18631] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3316'. [ 386.933625][T18620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.961641][T18620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.038000][T18620] vlan0: left promiscuous mode [ 387.043233][T18620] vlan0: left allmulticast mode [ 387.049145][T18620] veth0_vlan: left allmulticast mode [ 387.144865][T18624] syz_tun (unregistering): left allmulticast mode [ 387.156410][T18398] lo speed is unknown, defaulting to 1000 [ 387.173438][T18637] tipc: Started in network mode [ 387.193788][T18637] tipc: Node identity c2bd29a09c37, cluster identity 4711 [ 387.202531][T18637] tipc: Enabled bearer , priority 0 [ 387.210986][T18642] syzkaller0: entered promiscuous mode [ 387.218166][T18642] syzkaller0: entered allmulticast mode [ 387.232794][ T179] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.274245][ T179] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.348968][ T179] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.360706][ T179] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.373268][T18642] tipc: Resetting bearer [ 387.426354][T18642] tipc: Disabling bearer [ 387.475255][T18652] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3320'. [ 387.572143][T12591] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.596623][T12591] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.626271][T12591] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.637149][T12591] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.804922][T18664] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3322'. [ 388.383332][T18688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.431890][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3331'. [ 388.507200][T18690] 8021q: adding VLAN 0 to HW filter on device bond4 [ 388.544409][T18696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3333'. [ 388.557198][T18696] xt_connbytes: Forcing CT accounting to be enabled [ 388.623167][T18700] tipc: Started in network mode [ 388.635875][T18700] tipc: Node identity , cluster identity 4711 [ 388.642097][T18700] tipc: Failed to set node id, please configure manually [ 388.664730][T18700] tipc: Enabling of bearer rejected, failed to enable media [ 388.896949][T18710] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 388.928215][T18715] netlink: 'syz.7.3339': attribute type 1 has an invalid length. [ 388.937002][T18714] netlink: 'syz.4.3338': attribute type 21 has an invalid length. [ 388.945567][T18710] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 388.954984][T18714] IPv6: NLM_F_CREATE should be specified when creating new route [ 388.964597][T18715] netlink: 'syz.7.3339': attribute type 2 has an invalid length. [ 388.988577][T18710] gretap1: entered promiscuous mode [ 388.998227][T18710] gretap1: entered allmulticast mode [ 389.849357][T18762] sctp: [Deprecated]: syz.4.3345 (pid 18762) Use of int in max_burst socket option. [ 389.849357][T18762] Use struct sctp_assoc_value instead [ 389.863265][T18761] netlink: 'syz.2.3348': attribute type 7 has an invalid length. [ 389.883486][T18761] netlink: 'syz.2.3348': attribute type 8 has an invalid length. [ 389.961288][T18769] __nla_validate_parse: 5 callbacks suppressed [ 389.961310][T18769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3349'. [ 390.348717][T18790] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3356'. [ 390.706469][T18803] netlink: 'syz.0.3361': attribute type 1 has an invalid length. [ 390.772786][T18803] 8021q: adding VLAN 0 to HW filter on device bond4 [ 391.000495][T18803] veth7: entered promiscuous mode [ 391.010895][T18803] bond4: (slave veth7): Enslaving as an active interface with an up link [ 391.123626][T18833] netlink: 81 bytes leftover after parsing attributes in process `syz.2.3369'. [ 391.431037][T18856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3373'. [ 393.517234][T18876] tipc: Enabled bearer , priority 11 [ 393.713454][T18862] syzkaller0: entered promiscuous mode [ 393.737700][T18862] syzkaller0: entered allmulticast mode [ 393.836167][T18905] netlink: 'syz.1.3378': attribute type 6 has an invalid length. [ 396.281938][ T5967] tipc: Node number set to 1586112928 [ 396.461705][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3381'. [ 396.575878][T15431] IPVS: starting estimator thread 0... [ 396.628298][T18947] netlink: 'syz.4.3385': attribute type 13 has an invalid length. [ 396.657676][T18949] xt_hashlimit: size too large, truncated to 1048576 [ 396.684383][T18945] IPVS: using max 24 ests per chain, 57600 per kthread [ 396.700709][T18954] netlink: 'syz.4.3385': attribute type 13 has an invalid length. [ 396.728844][T18957] x_tables: duplicate entry at hook 3 [ 397.337603][T18973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3392'. [ 397.349576][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3392'. [ 397.362352][T18974] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3391'. [ 397.392979][T18973] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.400336][T18973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.409043][T18973] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.416412][T18973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.102400][T19001] openvswitch: netlink: Missing valid actions attribute. [ 398.117562][T18987] xt_CT: No such helper "pptp" [ 398.134747][T19001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.592805][T19031] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3405'. [ 398.619595][T19031] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3405'. [ 398.749601][T19041] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3410'. [ 398.812230][T19041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3410'. [ 398.967247][T19061] xt_cgroup: invalid path, errno=-2 [ 399.135314][T19068] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3420'. [ 399.239556][T19020] udevd[19020]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 399.298896][T19016] udevd[19016]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 399.398147][T19086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3424'. [ 399.442615][T19088] netlink: 'syz.2.3425': attribute type 1 has an invalid length. [ 400.172868][T19139] team0: Device gtp0 is up. Set it down before adding it as a team port [ 400.496525][T19158] netlink: 'syz.7.3447': attribute type 1 has an invalid length. [ 400.646117][T19169] block nbd0: reconnected socket [ 400.682785][T19171] mac80211_hwsim hwsim55 syzkaller0: entered promiscuous mode [ 400.712697][T19171] mac80211_hwsim hwsim55 syzkaller0: entered allmulticast mode [ 401.460172][ T5840] block nbd0: Receive control failed (result -32) [ 401.616068][T19224] netlink: 'syz.7.3467': attribute type 1 has an invalid length. [ 401.739572][T19224] bond5: entered promiscuous mode [ 401.745185][T19224] bond5: entered allmulticast mode [ 401.750910][T19224] 8021q: adding VLAN 0 to HW filter on device bond5 [ 401.839825][T19230] __nla_validate_parse: 16 callbacks suppressed [ 401.839848][T19230] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3467'. [ 401.965077][T19230] macvlan2: entered promiscuous mode [ 401.984360][T19230] macvlan2: entered allmulticast mode [ 402.446065][ T9] IPVS: starting estimator thread 0... [ 402.449698][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3475'. [ 402.531593][T19288] syzkaller0: entered promiscuous mode [ 402.537240][T19279] IPVS: using max 47 ests per chain, 112800 per kthread [ 402.547078][T19288] syzkaller0: entered allmulticast mode [ 402.920580][T19304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3478'. [ 402.928226][T19300] ip6t_rpfilter: unknown options [ 404.261950][T19385] netlink: 'syz.7.3500': attribute type 2 has an invalid length. [ 404.282574][T19385] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3500'. [ 404.347768][T19391] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3501'. [ 404.477864][T19394] netlink: 'syz.7.3503': attribute type 13 has an invalid length. [ 404.496025][T19394] veth0_macvtap: left promiscuous mode [ 404.502633][T19399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3504'. [ 404.521153][T19394] macvtap0: entered allmulticast mode [ 404.531450][T19394] macvtap0: refused to change device tx_queue_len [ 404.601651][T19399] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.777752][T19399] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.889792][T19399] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.977235][T19424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3513'. [ 405.007386][T19399] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.032191][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3512'. [ 405.045996][T19422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3512'. [ 405.195924][ T3081] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.196825][T19435] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3517'. [ 405.230075][ T3081] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.281800][T12587] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.325507][ T3081] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.352049][T19441] Cannot find add_set index 0 as target [ 405.476721][T19448] netlink: 'syz.1.3521': attribute type 1 has an invalid length. [ 405.480478][T19447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.492175][T19448] netlink: 'syz.1.3521': attribute type 1 has an invalid length. [ 405.508794][T19448] netlink: 'syz.1.3521': attribute type 2 has an invalid length. [ 405.806764][T19468] netlink: 'syz.0.3525': attribute type 5 has an invalid length. [ 405.848282][T19470] macsec2: entered promiscuous mode [ 405.853654][T19468] netlink: 'syz.0.3525': attribute type 6 has an invalid length. [ 406.987208][T19509] netlink: 'syz.1.3537': attribute type 7 has an invalid length. [ 407.071546][T19514] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20000 [ 407.165209][T19521] netlink: 'syz.7.3542': attribute type 10 has an invalid length. [ 407.292092][T19529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.292895][T19530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.324690][T19530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.647852][T19541] sock: sock_timestamping_bind_phc: sock not bind to device [ 407.758098][T19544] netlink: 'syz.0.3550': attribute type 2 has an invalid length. [ 407.772579][T19544] : entered promiscuous mode [ 407.918654][T19552] netlink: 'syz.7.3553': attribute type 10 has an invalid length. [ 408.058253][T19557] __nla_validate_parse: 7 callbacks suppressed [ 408.058275][T19557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3554'. [ 408.092420][T19557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3554'. [ 408.205912][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3556'. [ 408.221443][T19566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3556'. [ 408.237848][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3556'. [ 408.248354][T19566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3556'. [ 408.350533][T19575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3559'. [ 408.361993][T19573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3559'. [ 408.363835][T19576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3560'. [ 408.554595][T19585] x_tables: duplicate underflow at hook 1 [ 408.562790][T19585] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3562'. [ 408.785780][T19594] ipvlan2: entered promiscuous mode [ 408.980739][T19607] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 409.496159][ T31] INFO: task syz.5.1739:12733 blocked for more than 143 seconds. [ 409.519695][ T31] Not tainted syzkaller #0 [ 409.531517][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.577229][ T31] task:syz.5.1739 state:D stack:25896 pid:12733 tgid:12725 ppid:7464 task_flags:0x400140 flags:0x00080002 [ 409.613216][ T31] Call Trace: [ 409.623673][ T31] [ 409.633030][ T31] __schedule+0x14bc/0x5000 [ 409.651223][ T31] ? __pfx___schedule+0x10/0x10 [ 409.666949][ T31] ? schedule+0x91/0x360 [ 409.681094][ T31] schedule+0x165/0x360 [ 409.691055][ T31] schedule_preempt_disabled+0x13/0x30 [ 409.696861][ T31] __mutex_lock+0x7e6/0x1350 [ 409.702026][ T31] ? __mutex_lock+0x5bb/0x1350 [ 409.729067][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 409.736361][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 409.741570][ T31] ? __nlmsg_put+0xef/0x1b0 [ 409.746401][ T31] ? genlmsg_put+0x137/0x2e0 [ 409.752213][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 409.758211][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 409.763704][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 409.770708][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 409.777657][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 409.784003][ T31] genl_rcv_msg+0x60e/0x790 [ 409.788705][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.793856][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 409.800572][ T31] netlink_rcv_skb+0x208/0x470 [ 409.805515][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.810668][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.817201][ T31] ? down_read+0x274/0x2e0 [ 409.822134][ T31] ? genl_rcv+0xd/0x40 [ 409.826575][ T31] genl_rcv+0x28/0x40 [ 409.830689][ T31] netlink_unicast+0x82f/0x9e0 [ 409.835945][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 409.842125][ T31] ? netlink_sendmsg+0x642/0xb30 [ 409.847511][ T31] ? skb_put+0x11b/0x210 [ 409.852995][ T31] netlink_sendmsg+0x805/0xb30 [ 409.858323][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.863639][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 409.869288][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.874886][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.880558][ T31] __sock_sendmsg+0x21c/0x270 [ 409.886811][ T31] ____sys_sendmsg+0x505/0x820 [ 409.892355][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.898528][ T31] ? import_iovec+0x74/0xa0 [ 409.903218][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 409.908032][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.913293][ T31] ? futex_wake+0x4b2/0x560 [ 409.918446][ T31] ? __fget_files+0x2a/0x420 [ 409.923786][ T31] ? __fget_files+0x3a0/0x420 [ 409.928748][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 409.933925][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.939946][ T31] ? do_syscall_64+0xbe/0xf80 [ 409.945042][ T31] do_syscall_64+0xfa/0xf80 [ 409.949773][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.956570][ T31] ? clear_bhb_loop+0x60/0xb0 [ 409.961362][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.967434][ T31] RIP: 0033:0x7f535978f749 [ 409.972349][ T31] RSP: 002b:00007f535a5ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.981965][ T31] RAX: ffffffffffffffda RBX: 00007f53599e6090 RCX: 00007f535978f749 [ 409.990553][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000005 [ 410.000529][ T31] RBP: 00007f5359813f91 R08: 0000000000000000 R09: 0000000000000000 [ 410.009141][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.017333][ T31] R13: 00007f53599e6128 R14: 00007f53599e6090 R15: 00007ffce3b5e778 [ 410.025404][ T31] [ 410.028677][ T31] [ 410.028677][ T31] Showing all locks held in the system: [ 410.037028][ T31] 1 lock held by khungtaskd/31: [ 410.042008][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 410.052054][ T31] 2 locks held by getty/5589: [ 410.057799][ T31] #0: ffff88803499e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 410.068448][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 410.079136][ T31] 2 locks held by syz.3.234/6820: [ 410.084719][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 410.093152][ T31] #1: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 410.104168][ T31] 2 locks held by syz.5.1739/12733: [ 410.109518][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 410.118137][ T31] #1: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 410.128585][ T31] 2 locks held by syz.6.2376/14949: [ 410.136602][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 410.144951][ T31] #1: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 410.155780][ T31] 2 locks held by syz.2.3478/19296: [ 410.161496][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 410.170512][ T31] #1: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc2/0x770 [ 410.180649][ T31] [ 410.182995][ T31] ============================================= [ 410.182995][ T31] [ 410.194410][ T31] NMI backtrace for cpu 1 [ 410.194431][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 410.194453][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.194465][ T31] Call Trace: [ 410.194473][ T31] [ 410.194483][ T31] dump_stack_lvl+0x189/0x250 [ 410.194611][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.194634][ T31] ? __pfx__printk+0x10/0x10 [ 410.194671][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 410.194696][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 410.194744][ T31] ? __pfx__printk+0x10/0x10 [ 410.194787][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 410.194821][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 410.194859][ T31] sys_info+0x135/0x170 [ 410.194888][ T31] watchdog+0xf95/0xfe0 [ 410.194941][ T31] ? watchdog+0x20a/0xfe0 [ 410.194976][ T31] kthread+0x711/0x8a0 [ 410.195005][ T31] ? __pfx_watchdog+0x10/0x10 [ 410.195031][ T31] ? __pfx_kthread+0x10/0x10 [ 410.195058][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.195087][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 410.195105][ T31] ? __pfx_kthread+0x10/0x10 [ 410.195130][ T31] ret_from_fork+0x599/0xb30 [ 410.195180][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 410.195211][ T31] ? __switch_to_asm+0x39/0x70 [ 410.195235][ T31] ? __switch_to_asm+0x33/0x70 [ 410.195258][ T31] ? __pfx_kthread+0x10/0x10 [ 410.195282][ T31] ret_from_fork_asm+0x1a/0x30 [ 410.195326][ T31] [ 410.195372][ T31] Sending NMI from CPU 1 to CPUs 0: [ 410.350364][ C0] NMI backtrace for cpu 0 [ 410.350383][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 410.350401][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.350411][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 410.350433][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 410.350446][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 410.350461][ C0] RAX: 583558132e09b800 RBX: ffffffff81978fda RCX: 583558132e09b800 [ 410.350473][ C0] RDX: 0000000000000001 RSI: ffffffff8d7925ee RDI: ffffffff8bc08360 [ 410.350484][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 410.350495][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822070 [ 410.350506][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 410.350516][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 410.350529][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.350540][ C0] CR2: 00007f8acc72b6b0 CR3: 00000000759aa000 CR4: 00000000003526f0 [ 410.350556][ C0] Call Trace: [ 410.350563][ C0] [ 410.350570][ C0] default_idle+0x13/0x20 [ 410.350587][ C0] default_idle_call+0x73/0xb0 [ 410.350605][ C0] do_idle+0x1ea/0x520 [ 410.350622][ C0] ? irqentry_exit+0x5ba/0x660 [ 410.350640][ C0] ? __pfx_do_idle+0x10/0x10 [ 410.350662][ C0] cpu_startup_entry+0x44/0x60 [ 410.350679][ C0] rest_init+0x2de/0x300 [ 410.350699][ C0] start_kernel+0x3a7/0x400 [ 410.350716][ C0] x86_64_start_reservations+0x24/0x30 [ 410.350736][ C0] x86_64_start_kernel+0x143/0x1c0 [ 410.350754][ C0] common_startup_64+0x13e/0x147 [ 410.350780][ C0] [ 410.535003][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 410.541918][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 410.551643][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.561809][ T31] Call Trace: [ 410.565097][ T31] [ 410.568098][ T31] dump_stack_lvl+0x99/0x250 [ 410.572811][ T31] ? __asan_memcpy+0x40/0x70 [ 410.577423][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.582724][ T31] ? __pfx__printk+0x10/0x10 [ 410.587425][ T31] vpanic+0x237/0x6d0 [ 410.591414][ T31] ? __pfx_vpanic+0x10/0x10 [ 410.596012][ T31] ? preempt_schedule_common+0x83/0xd0 [ 410.601489][ T31] panic+0xb9/0xc0 [ 410.605217][ T31] ? __pfx_panic+0x10/0x10 [ 410.609689][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 410.615152][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 410.621318][ T31] watchdog+0xfdf/0xfe0 [ 410.625577][ T31] ? watchdog+0x20a/0xfe0 [ 410.629923][ T31] kthread+0x711/0x8a0 [ 410.633998][ T31] ? __pfx_watchdog+0x10/0x10 [ 410.638765][ T31] ? __pfx_kthread+0x10/0x10 [ 410.643362][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.648572][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 410.653773][ T31] ? __pfx_kthread+0x10/0x10 [ 410.658542][ T31] ret_from_fork+0x599/0xb30 [ 410.663147][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 410.668265][ T31] ? __switch_to_asm+0x39/0x70 [ 410.673042][ T31] ? __switch_to_asm+0x33/0x70 [ 410.677876][ T31] ? __pfx_kthread+0x10/0x10 [ 410.682475][ T31] ret_from_fork_asm+0x1a/0x30 [ 410.687262][ T31] [ 410.690592][ T31] Kernel Offset: disabled [ 410.694917][ T31] Rebooting in 86400 seconds..