last executing test programs: 7.609071456s ago: executing program 0 (id=2734): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYRES16], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 7.229665954s ago: executing program 0 (id=2736): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f00000004000000040000001200004000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008cdcb3677c0671aa0c2f3b70d28530929e56e3cf23d93263c8c5e2d47f610d88c6ca34980db41cafeae7a2fd9e299691c255c33d502771804837863b701726d9da90af48a7b850d3df57", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x7d, 0x80, 0x8, 0x9, 0x20, @loopback, @mcast1, 0x7800, 0x8, 0x8, 0x1}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)={0x100, r7, 0x200, 0x20000, 0x2, {}, [@ETHTOOL_A_LINKMODES_OURS={0xd4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4d, 0x5, "bc50c60ad233ae24112dc562f42d63ef000c2fabdd90b37b8a74b95755f0b9cb93bd6aaee82053f4bea3e101f95610e34132984cd5e7c0a41215ca8a7c78cbea8e0000000000000000"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/+'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{\xbc~&il\xc4'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'P,/]^/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'ib'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-{[]\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x100}}, 0x48070) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newtaction={0x7c, 0x30, 0xb, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x68, 0x1, [@m_mirred={0x64, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r4}}]}, {0x16, 0xa, "2a202d4c68bd9b9a83cb816559efd495fe17"}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x10, 0x20, 0x2, 0x2, {{0x10, 0x4, 0x0, 0x23, 0x40, 0x64, 0x0, 0x41, 0x4d529f8190e92a5a, 0x0, @multicast1, @remote, {[@rr={0x7, 0x1f, 0xf2, [@local, @broadcast, @multicast2, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_addr={0x44, 0xc, 0x6, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x29d}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3fff}, 0xc, &(0x7f0000000840)={&(0x7f0000000c80)={0x164, r1, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x24040001}, 0x8000) r11 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="010025bd7000fcdbdf25010000000000000001410000001000170000000e0000000669623a00"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) getsockname$llc(r11, &(0x7f0000000640)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000680)=0x10) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f00000000c0)={&(0x7f0000000040)=[{0xa27, 0x2, 0x0, {0xff, 0x7, 0x1}}, {0x1, 0x0, 0x0, {0x8, 0x63072cd, 0x1}}, {0x10, 0x2, 0x0, {0x7fffffffffffffff, 0xf}}], 0x3, 0x20, 0x8000, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000080000000000000008000000911142000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r14}, 0x4) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 6.417231083s ago: executing program 0 (id=2742): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f00000003c0)={0x1f, 0xc001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x4, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=@getlink={0x3c, 0x12, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12100, 0x5cac4a7961cf0dbf}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xfffffff8}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22045054}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000feffff3f000000000001000085100000060000008510000004000000c608000000000000180000000000000000000000000000009500000000000000950000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x100, 0x8}, 0x94) 5.516492972s ago: executing program 3 (id=2747): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000001540)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x4e23, @private=0xa010100}}, {{0x2, 0x4e21, @private=0xa0100fe}}]}, 0x190) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdc02, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x17}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000540)={{r3}, "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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x24, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000084) 5.392870216s ago: executing program 0 (id=2749): r0 = socket(0x10, 0xc86825e6dadf4129, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) (async) bind$inet6(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000001600)=0x4, 0x4) socket$netlink(0x10, 0x3, 0x8000000004) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, r6, 0x25, 0x4, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, r6, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaa1eaabb000000f0e70088a826"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x23, 0x5, 0x0) (async) r7 = socket(0x23, 0x5, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000002480)={'syztnl1\x00', &(0x7f0000002400)={'ip6tnl0\x00', r6, 0x2f, 0x8, 0x1, 0xc, 0x0, @local, @local, 0x8700, 0x80, 0x8, 0x35}}) setsockopt$inet_opts(r7, 0x0, 0x9, 0x0, 0x0) (async) setsockopt$inet_opts(r7, 0x0, 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x952e9b07472a931e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80009}, 0x94) recvmmsg$unix(r7, &(0x7f0000002a80)=[{{&(0x7f00000003c0), 0x6e, 0x0, 0x0, &(0x7f0000000640)}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000002540)=""/160, 0xa0}, {&(0x7f0000000440)=""/224, 0xe0}, {&(0x7f0000002700)=""/85, 0x55}, {&(0x7f0000002200)=""/232, 0xe8}, {&(0x7f0000002880)=""/6, 0x6}], 0x5, &(0x7f0000002940)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}}], 0x3, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000080)=@generic={0x3, 0x200000000000, 0x100000000}) (async) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000080)=@generic={0x3, 0x200000000000, 0x100000000}) close(0x4) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRESHEX=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYRES16=r9, @ANYRESDEC, @ANYRES16=r4], 0x50) 5.196547624s ago: executing program 3 (id=2751): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x40c, 0x0, 0xfffd, 0x0, 0x80}, {0x1, 0x0, 0x0, 0x6cc, 0xffffffffffffffa4}, {0x0, 0x0, 0x0, 0x7}, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x400000, 0x6c}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93}}, 0xe8) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0030000020010000000000000000000000000000fe80000000000000000000000000000000040000000000000718000000000700", @ANYRESHEX, @ANYRES64=0x0, @ANYRES64=r0, @ANYRES16=0x0, @ANYRES8=r0, @ANYRESHEX=0x0, @ANYBLOB="50ebe4d034c65a8d0976010f779eadd08c643997e32b7c28ef409ee8ea5dcc32628cf2f4bf05a98917105b6dd4e3e34ebca408d88a38024bd38371adb48114f63c6e1517da3692864cff4112e498cccaf6d7728cabded03ebb98787ed6e1edc18d3265d74cf94f25bbcabb5d0fd3c4a92922a1d11d61b18d61011377b45e29a84c6da0c8ea2820069d98bc5ac85e3eadf32b820f7e11e9af202e87527d570e596e9cdcec0991a8ded8ce9d655225f43795ac3578", @ANYRESHEX=r0, @ANYRES16=r0], 0x0) 5.15857059s ago: executing program 0 (id=2752): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3, 0x8}, &(0x7f00000000c0)=0x8) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) socket(0x8, 0x4, 0x3) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xb, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r5, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2000}, 0x15) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x41) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x13, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0xfffffffffffffcb3}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.968733542s ago: executing program 4 (id=2753): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)={@ifindex, r1, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @local}}}], 0x20}, 0x0) socket(0xa, 0x1, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)="16", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x2017be01}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x21, 0x9, 0xe2e9, 0x6, 0xd3, 0x8b, 0x5, 0x1}, &(0x7f0000000040)={0x7, 0x3, 0xcaa, 0x8, 0x9fb, 0x6, 0xe0a, 0x4}, &(0x7f0000000140)={0x5, 0x173365cc, 0x7, 0x101, 0x10001, 0x0, 0x2, 0x5}, &(0x7f00000001c0)={r5, r6/1000+60000}) 4.967437304s ago: executing program 2 (id=2754): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000000000180050800500020062db390f1e5306224850f7f7173daf02002f8bd750e15fc88ae55700000800"], 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x8010) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037af0c045942824251d7d1701191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe09"], 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async, rerun: 32) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 32) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000200)=0x1e) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)=""/49, 0x31}, {&(0x7f0000000300)=""/224, 0x63}], 0x2}, 0x2}], 0x1, 0x0, 0x0) 4.585594334s ago: executing program 2 (id=2757): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/167, 0xa7}], 0x1}, 0xfff}], 0x1, 0x122, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa14000700000000000000000080"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/167, 0xa7}], 0x1}, 0xfff}], 0x1, 0x122, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) (async) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa14000700000000000000000080"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) (async) 4.54089895s ago: executing program 4 (id=2758): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000edff000000000000a000aa6202d33a3ea4c08b1d283ffce672489808b42b4a12c3007877ea90ac3e885ab549a739707800"], 0x48) socket(0x1e, 0x4, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000004) (async) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000004) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) (async) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, 0x0, 0x1) sendmsg$can_bcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x1e, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x6, 0x2, 0xff, 0x6, 0x7, 0x5}, 0x20) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000100)=0x12, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000100)=0x12, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611934000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.1356737s ago: executing program 3 (id=2759): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000083) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0xfde07b3053828a68, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b400000000000000006400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x20044090}, 0x20048804) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c100000095"], &(0x7f0000000040)='GPL\x00', 0x81, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a00000429bd7000fedbdf2507000007fe01fd0b0008000008000300", @ANYRES32=r5, @ANYBLOB="0c0016800600060000100000"], 0x30}, 0x1, 0x0, 0x0, 0x4814}, 0xa0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10000014}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = socket(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r9, 0x400442c9, &(0x7f0000000080)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}) write(r8, &(0x7f00000002c0)="2000000012005f0214f9f4070000fbe60a0000000000c5c61f33ad512e9cfc31", 0x20) recvmmsg(r8, &(0x7f00000021c0), 0x5b, 0x40, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d2, &(0x7f0000000100)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="5753fcfffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900317400004e000000", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x4c455}, 0x4000000) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r4, r4, 0xd, 0x0, 0x0, 0x9, 0x1, 0x16bd, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) 4.00025683s ago: executing program 4 (id=2760): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) pwritev(r3, &(0x7f0000000980)=[{&(0x7f0000000540)="813cf78c48d4cb56733344381606e5e74d2e6ac9ff99912a52a1794c0f19ff022e759b0103b36adc17e9978dea974bbb4cc67d04dedac1805e9fb03afa194603b803fbb9ac2a4dcca812924af72eaf74f54faaff5cc0e920060eae177cf28b9039aa5d454baabc1aa71f309d2b09ab0bed46ce3d82dd97b2ea390f9dc8025a4d3b50fdf8f4", 0x85}, {&(0x7f0000000600)="9a77810880f5df1a3cbc940e91d20556ceedf9b2efd26826a197514768852371e290a88162b6d39695541ff611c3e9d27f033493a15e2f1228ae4aaf5964027aee6c65f451bf5c123b7b8c01750aaa24eb7eaf5ee6d5f16247323f31a139924daa884dc9930e7cd12da3eec49a07147702bb487d8962c2f405e3acc385182209b0829da6dd00ecb28bf0446f04eb190953eaafd7d936305077c3d7fc335cb731e82dab4aa9f38fb01f", 0xa9}, {0x0}, {&(0x7f0000000700)="d5c140e218d5d79e9ab1714e9f16668efc5deb93aa7c08f4899eb663c6d6", 0x1e}, {0x0}, {&(0x7f0000000840)="76e89c515cc21e0f6220726608e581e34f7c94e24438c11545078d1bc808043f234d97fd6ca8a3cc10b125c84c7d309547d0decfdab6b56c1049b72afba4a2830313d977bbee3eb30c0148aab569af39ccda", 0x52}], 0x6, 0x2, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000040)=""/240, 0x46, 0xf0, 0x6}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="a3b10db501470637df63966c22f1c1c7ff0f00000000000026bd7003fddbdf2700000000", @ANYRES32=0x0, @ANYBLOB="100a050023000000240012800b000100627269646765000014000280080003000a040000080004000e000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x74, r9, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xffffffffffff0283}}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x74}, 0x1, 0x0, 0x0, 0x40051}, 0x81) write$cgroup_int(r6, &(0x7f0000000080)=0x9, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r10}, 0xc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r6, 0x0) r11 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r11, 0x4, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0xc004}, 0x4000000) 3.597497727s ago: executing program 1 (id=2762): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000002c80)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010021bd7000fedbdf25010000002400030000000000000000000000000000000000000000000000000000cd00000000000004000880060006004e20000014000200776731000000000000000000000000000800072006000000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmmsg$alg(r1, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e044eb4", 0x5}], 0x1, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8010}], 0x1, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000500)=@in6={0xa, 0x4e20, 0x7ff, @loopback, 0x2}, 0x1c, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x8048004}, 0x810) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x33, 0x0, &(0x7f00000000c0)) (async) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x33, 0x0, &(0x7f00000000c0)) recvmsg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfecc}, 0x40000002) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="760af5ffffffffff6011680000000044b4a93dac1b001800000000000000000000000000000095b20000000000001d71df9b7ff237cbeea41c"], &(0x7f0000000000)='GPL\x00'}, 0x90) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000029c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002980)={&(0x7f0000001300)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="08002abd7000fbdbdf258300000008000300", @ANYRES32=r11, @ANYBLOB="0c009900030000002c000000ec151180e81505809800008094000380040002007800018020000180060004007f000000050005000f00000004000b00060004000100000018000180050003000f0000000500060008000000040001000400018010000180050007000900000004000a000c00018005000700000000000800018004000b001400018006000400000000000400090004000c000400020004000200040002000400020004000200900300800a00010008021100000100000a00010008021100000100000a00010008021100000100000a000100ffffffffffff0000340002800500180113000000080026006c09000005001801020000000800a000730000000800220102010000050019010600000094010380040002000400020004000200980001802c000180050006001b000000040001000400090004000100060004008f00000004000a00050003000f00000034000180050005000c00000004000800050003000e0000000400080005000500000000000400010004000a00050006001a0000003400018005000600030000000500050007000000050005000000000005000700fb000000050003000b0000000500070003000000040002000400020004000200e00001802000018005000600180000000800020001000000050003000c00000004000a0004000180280001800400010004000c0004000a000400010004000a00040008000800020002000000040009000c00018005000700030000003000018004000c0004000c00040001000500060008000000050006001e000000040001000600040002000000040001002400018004000900080002000200000004000a0004000100050003000e00000004000b000800018004000a001c0001800600040000000000050005000f00000006000400003800000c00018006000400000800005801038004000200e80001802400018004000900050005000f0000000400080004000a000400080004000b0004000b000c00018006000400070000001c0001800500060019000000080002000000000008000200010000002000018004000b000500050006000000080002000300000004000b00040009002c000180040001000800020004000000050003000300000006000400ff0f0000050003000a00000004000a0008000180040001000c0001800800020002000000280001800500070009000000050007000000000004000b0004000100050006000d00000004000a00040001800c000180050007001000000004000200640001803800018004000c0004000a0004000a00050007001000000004000a000800020000000000050003000d000000050007000300000004000a00080001800400080010000180040001000600040010000000040001800c000180050003000b0000003c0002800800a00039020000050018012d0000000800270003000000050018012700000005001801250000000800a100080000000800a0000f000000040200800c0103800400020004000200dc00018008000180040009002800018005000600060000000800020002000000050006001e00000004000c00050005000c0000000800018004000800100001800400010006000400060000001000018004000100050006001f0000001400018004000b0004000100050003000c000000340001800400080004000a00060004000000000004000b00050007000600000005000500030000000500060017000000040001002400018004000100050005000b00000008000200000000000400080005000500050000001400018004000a0004000c000500060001000000200001801c000180050005000500000004000800050006000f00000004000900040002000a000100ffffffffffff00000a00010008021100000100000800038004000200d400038004000200440001801400018004000a000500030008000000040008002c00018008000200030000000400090004000b0004000b00050007000700000004000a000500070001000000040002002c0001800c00018004000100040008001c000180050005000900000004000c00050005000600000004000a00040002000400020050000180100001800800020003000000040008000c0001800500060012000000240001800400080004000100050005000b000000050007000000000005000300060000000c000180050007000c000000b80300800a0001000802110000010000340002800800a10080000000080026006c090000050019010d0000000800270003000000050019010e0000000800a000070000000a000100080211000001000068030380100001800c0001800400080004000800040002000400020004000200280101802c00018008000200030000000400010004000c0004000800040009000500060006000000050006001900000020000180050006001a00000004000c0004000c00050006001c00000004000800300001800400090006000400030000000400090004000b0004000b0004000a000800020002000000050005000400000024000180040008000400080004000a0005000700fc000000040009000400010004000a001c000180040001000500030008000000050005000c0000000400090028000180040001000400010006000400010000000600040000000000040009000400080004000a000c00018005000700030000002c000180050003000100000004000800060004000900000004000900060004000800000004000c00040008000800018004000a002c0001802800018004000900080002000100000004000b00050007000b0000000400010004000b0004000100e80001801c000180080002000300000004000c000400010005000700340000001000018004000c000400080004000b001c0001800400010004000100040001000800020003000000040001001c0001800500070048000000050003000a00000008000200000000003c00018004000a00080002000200000006000400fcff000004000b00080002000400000004000900040009000400090004000100050005000c0000001000018004000a000400090004000900340001800400080004000c000400080004000c0004000800060004000f00000004000b000500070081000000050003000c0000007c0001802c0001800800020000000000050005000c00000004000b0005000600190000000500030002000000040009001800018004000b0004000b00040008000800020003000000240001800600040006000000040001000500060013000000050003000100000004000b001000018004000a00050005000b000000040002008c0001801800018004000c00050006001200000005000600040000002400018004000a0005000700080000000400080008000200010000000500050006000000380001800600040009000000050007000600000005000700ff000000050006000200000004000c000800020001000000050006001d000000140001800500060009000000080002000400000040040080f403038004000200340101802400018004000b00040001000400080004000a000400010004000b0004000c0004000b0014000180050005000b00000005000300010000001c0001800400010006000400050000000800020001000000040001003c000180040001000400090005000500060000000800020001000000080002000400000004000900040008000800020000000000050005000a0000001c0001800800020004000000050007000500000008000200030000003c0001800500050004000000050005000c0000000500060001000000050003000500000008000200040000000500050009000000060004000b0000000c00018004000a00040008000800018004000b000400018030000180040001000400090005000700d3000000050007000600000006000400987e000005000700f700000004000a00cc0001801c00018004000a0008000200000000000400010005000700050000002800018006000400080000000400080005000700810000000500070002000000050005000000000014000180050006000f000000050006001000000008000180040001002c00018004000900060004001a0400000500070006000000050006001300000004000c0005000300030000003c000180050005000500000004000100050003000e00000004000100040008000500050008000000050007008000000004000100050006001e0000004c000180200001800400080004000c00050007007f000000050007000600000004000a002800018004000a0004000800040001000500030002000000050006000f000000060004000080000004000200600001802800018004000a000400080004000800040009000800020001000000050003000200000004000a003400018005000700ce00000004000c00080002000100000006000400040000000400010004000a0004000c000500070005000000ec0001800c00018004000800040008004800018004000a0008000200010000000500030004000000050006001200000004000a00050003000300000005000700010000000500050002000000060004000000000004000100340001800400080005000700020000000400010004000c00050006000d00000004000900060004000900000005000700810000002c0001800400010005000700070000000600040001000000050005000b000000050005000c00000004000b0018000180050003000300000004000b0005000300010000001c000180060004000080000004000b00040008000500070009000000500001801c000180050007000800000005000700050000000400010004000900180001800400080004000c0006000400020000000400090018000180050006001b0000000400090008000200020000000a000100ffffffffffff00003c00028008002600c814000008009f000100000008002201380000000800a000001000000800a100080000000800260080090000080022015a010000ac030080a803038004000200000101803000018004000b0004000100050006000300000004000100050006000d000000050005000e000000050007000700000014000180050007000900000005000300090000001c0001800400080004000c0004000100040001000400090004000100340001800400090004000800050007008000000004000c000500060004000000060004000600000004000900040009000400090010000180050003000800000004000a001000018005000500050000000400010018000180050005000c000000050005000f0000000400010020000180050005000f00000004000900050005000000000005000700060000001000018004000c0004000b0004000100340001803000018004000a000500030008000000050005000600000005000500050000000500070081000000050003000a000000940001802c000180080002000400000004000a0004000b000500050005000000040008000400090005000500080000004000018006000400040000000800020002000000060004000004000004000a000500050001000000040001000500060017000000080002000200000004000c0014000180040001000400080004000c0004000a001000018004000c000500030007000000580001800c0001800500070009000000100001800400090004000b0004000a000800018004000c000800018004000c0028000180050005000c00000004000b0005000600080000000400010004000c00060004000104000004000200780101803c0001800400010006000400a90000000500030000000000080002000200000004000c0005000300060000000400090004000b0004000b0004000c001800018004000800060004000600000005000700080000003c000180080002000100000004000800050003000b000000080002000300000005000700090000000400010004000a00050006000c00000004000b003c000180060004008000000006000400040000000500060008000000050005000700000005000300030000000400080004000b00050006001b000000300001800800020002000000050003000a000000050006000200000004000a000400010004000100040001000400090024000180060004000700000004000800050003000b000000060004000900000004000c00280001800400080004000900060004007f0000000600040081000000050006001800000004000a002c00018005000500060000000600040001800000040001000400010004000a000400090005000600130000000400020060030080e0010380c00001802c00018004000100050006001e000000050003000b00000004000c00050006001500000006000400060000000c000180050005000e00000034000180050007007f00000005000700070000000400010005000600190000000400090005000700fd000000050005000a000000340001800400010004000c000500060001000000060004000400000004000a0004000c00060004000400000005000300030000001c000180050007000400000004000a0004000c0004000a0004000c001c01018014000180050005000500000008000200000000001000018006000400040000000400090024000180050003000b00000004000c000400080005000300010000000400010004000a0028000180040009000500060013000000050003000000000005000600060000000400010004000c003c00018004000c00050005000e00000004000900040008000600040004000000050006001c00000006000400050000000400010005000600110000001400018004000a000400080004000c00040008001c00018004000b00060004000d000000080002000200000004000a003c00018004000900050005000800000004000c0005000300020000000600040002000000080002000100000004000900050007007f00000004000c00a00003806c0001801000018004000c00050005000800000010000180050006001a00000004000a003c0001800400080008000200020000000600040006000000050003000f000000080002000200000004000c00050006001800000008000200040000000c00018004000c0004000c00300001802400018006000400010000000400080004000a0006000400f8ff00000800020001000000080001800400080014000280050019010800000008009f000700000024000280080026004416000008002201800000000800a10002000000050018013a0000003c000280080026001617000005001801310000000500180138000000050019010d00000008002201d203000008009f00020000000800a00000200020440002800800270002000000080026006c090000080022013401000008009f000500000005001801200000000800a000050000000800a100f8ffffff0500180118000000240002800800260085160000080026006c0900000800a0000000000008009f0006000000b40000809800038054000180380001800600040000800000080002000200000004000900050006000b00000005000600110000000400090006000400ff00000004000c000c00018008000200000000000c00018004000a0004000100040002003400018014000180050005000800000004000900040001000c00018004000a00040001001000018004000a00080002000500000004000200040002000c00028008009f00040000000a000100080211000000000008001001100000000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff0000"], 0x1640}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) (async) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000029c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002980)={&(0x7f0000001300)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="08002abd7000fbdbdf258300000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x1640}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x1, 0x5}, {0x0, 0xd}, {0x3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x1, 0x5}, {0x0, 0xd}, {0x3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r12, {0x10, 0xfff3}, {0x0, 0x2}, {0xa, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x81}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r12, {0x10, 0xfff3}, {0x0, 0x2}, {0xa, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x81}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 3.539934872s ago: executing program 2 (id=2763): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000001ada04006b1166000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf251d0000000c000600010000000100000000002f8008000100040000000c0002000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x1f8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010101, 0x4, 0xffffffff}}}, {{@arp={@local, @remote, 0xffffff00, 0xffffff00, 0x3, 0x3, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x7, 0x7, 0xb8, 0x101, 0x5, 0x800, 'team_slave_1\x00', 'veth1\x00', {0x7f}, {}, 0x0, 0x120}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@rand_addr=0x64010102, @multicast1, 0xff, 0xff, 0xc, 0xd, {@mac, {[0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff]}}, 0x7, 0x8522, 0x5, 0x3, 0x0, 0x40, 'team0\x00', 'nr0\x00', {}, {0x1fe}, 0x0, 0x8}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fad89963553cb886271b1fb4a635121af22af0f691140598d433e89237bd"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="d40000004400010029bd7000040000000100000004004880bc000180b7004c807a1ddfe8b291dc3bff5168d86c3f6bd3feac2cabf40793135b6f279ca6acf52000b57d7ed355667675c2fb028a665545619fe90ef4dcf04032e9871ce105857955842bf423a9395c49488d59bedbcd4025f2b8a9135510bb3f7892c37f2ae3da450670adb9cd84af960feb320a4d143500448005006c0000000000c290b77dca18cf9e2b5f92c62f790a342611515370a729504a339a39cc67acd380155844bc232647d50000000800c400", @ANYRES32=0x0, @ANYBLOB="0401008000"], 0xd4}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000047000701ec560dbbffffffff017c000008000300"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x80) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000001c0)={0xfc58, {{0x2, 0x4e23, @local}}, 0x0, 0x6, [{{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}}, {{0x2, 0x4e24, @multicast1}}]}, 0x390) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r8) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)={0x28, r9, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0x6, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r4, 0x1}, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500020000000d000300686173683a6d616300"], 0x5c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x28, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xa, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r12, 0x114, 0x8, &(0x7f0000000600)=0x2, 0xffffffffffffff17) 3.068442247s ago: executing program 3 (id=2764): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000800)=ANY=[], 0x141) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x4, 0xffff, {{0x28, 0x4, 0x0, 0x2f, 0xa0, 0x65, 0x0, 0x9, 0x4, 0x0, @multicast2, @empty, {[@end, @timestamp_prespec={0x44, 0x24, 0xf4, 0x3, 0x9, [{@local, 0xb}, {@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0xe2}, 0x7ff}, {@loopback, 0x8}]}, @noop, @generic={0x83, 0xd, "f02172a93b7667780b3cf2"}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x34, 0x52, 0x1, 0x4, [{@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x6}, {@loopback, 0x800}, {@remote, 0xa}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x4}]}, @ssrr={0x89, 0x1b, 0xbb, [@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @local]}, @ra={0x94, 0x4}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1d, 0xd, 0x100401, 0x8, 0x0, r2, 0xfffffff9, '\x00', r3, r2, 0x0, 0x3, 0xfffffffd}, 0x50) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) epoll_create1(0x0) (async) r4 = socket$unix(0x1, 0x2, 0x0) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async, rerun: 32) sendto$inet(r5, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x0) (async) socket$kcm(0xa, 0x3, 0x3a) (async) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe80900534e05f5dd0000001000010004", 0x4d}], 0x1) (async) ioctl$HCIINQUIRY(r6, 0x8917, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) (async) sendmmsg$sock(r8, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="d0d38cd6", 0x4}], 0x1, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000740)=[@in6={0xa, 0x4e23, 0x1, @empty, 0x9}, @in6={0xa, 0x4e21, 0x3, @private1, 0x40}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e21, 0xee97, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x8}, @in6={0xa, 0x4e23, 0xc, @empty}, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, @in6={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}}], 0xe8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) (async, rerun: 64) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xdbcd78cf0f854f85}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x804) 3.068231704s ago: executing program 1 (id=2765): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000100000c02000000000000000100000d00000000000000000000000000005f"], 0x0, 0x3c, 0x0, 0x0, 0x3}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000001000000950000000000000089e77f8ebcaddbfc4a227578d1cb976ecc68c344d8ff40ff622e0468de3e8635b575a60c2f52f68a3d09ae0786d54b8566432a45477d69e5253bd7789fc72a4a0a98dffafe6f807759dad9dd8a388bd108b1a1193dfad8076886fe0696fae3d18be4f67b3c32efec1fa3716b5081948eaa4462801032f5629435a871d5f4ed206bc04fb1cfebcaa01f15abc5266dfe125c3159992515f536b9c9108988abdea6df3dbb4d8a8998bdd76dea"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socket(0x1e, 0x4, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000100000c02000000000000000100000d00000000000000000000000000005f"], 0x0, 0x3c, 0x0, 0x0, 0x3}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000001000000950000000000000089e77f8ebcaddbfc4a227578d1cb976ecc68c344d8ff40ff622e0468de3e8635b575a60c2f52f68a3d09ae0786d54b8566432a45477d69e5253bd7789fc72a4a0a98dffafe6f807759dad9dd8a388bd108b1a1193dfad8076886fe0696fae3d18be4f67b3c32efec1fa3716b5081948eaa4462801032f5629435a871d5f4ed206bc04fb1cfebcaa01f15abc5266dfe125c3159992515f536b9c9108988abdea6df3dbb4d8a8998bdd76dea"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) (async) 2.261791062s ago: executing program 1 (id=2766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x38, r1, 0x731, 0x0, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x38}, 0x1, 0x2, 0x0, 0x40000d0}, 0x4010) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x8000400) r3 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000000c0)=0x20018, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0xc) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) 2.025538538s ago: executing program 3 (id=2767): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x4000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60801}, 0x811) r3 = getpid() r4 = syz_open_procfs$namespace(r3, &(0x7f00000002c0)='ns/user\x00') r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0xc000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r6, &(0x7f0000000600)={&(0x7f0000000400)=@in6, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/217, 0xd9}, {&(0x7f0000000580)=""/20, 0x14}], 0x2}, 0x100) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000d00)={{r4, &(0x7f0000000640)='802.15.4 MAC\x00', 0x8f800, &(0x7f0000000680)={@align=0x8, {0x8001, 0x5, 0x463, 0x6}}, 0x0, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x4}, 0x6, &(0x7f0000000c40)=[{0x3, 0x8, &(0x7f0000000740)='*^\x00', &(0x7f0000000780)="a6be548780153694b0d0188c9dea35031362d1bdabe388a147d47cd6e2b427594c42d2a9b536ca77bd015ee66b1178b09414681cadc532514e278841bfed80410e460072e92409585e7920528e50e90238dcf52da8eb97eb3c9193e2a0e47b303b5f20cddd2a7122c8903a32d03d3e512a34a9cb15058607245b75aa9667aac036f44d18a2b6bae3a7764e832f5aad97d459097edfb456ce3c49f3519f45bc7b2e68d56a1e02e985e95f3fc917817d5d537e498a323b575c28c0cd8996fbfff0496ddf49bc8fdb94c63b62e8e2b448a2f31f3cfc7fe3df57f0feb6dec32921d5ffa0471834f8623649ceef3aa6789226a5e0284cb7dcae37", 0xf8, 0x2}, {0x3, 0x0, &(0x7f0000000880)='ns/user\x00', &(0x7f00000008c0)="6f784361cc1311d2299a9011e8acc01bf1d91071be73045f9c5f807a67cde77a41c1c7099d1034698ffa556e636b698e65025b2aa45d5e62239e599e7ca23eac78465692a943c27ef5d181fad82361edeb2a58d239de7ea230a39130bda3243643e38b5da0410c44ec1aa0be5f2c15c73ad5308d2bc9a39e869a03d6bae58b03cbd75edb585b62e0c175ea14c958521efc9efec5b5b1a6903da3645512674fcba2a2bcfdc17cd3f20c655f6e331ae894ae6d99c297ec471628eb5acef485", 0xbe, 0x12}, {0x2, 0x2, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="a63bd104beae50e9e2429774bbd1b12a46ff6272b474a29cc348a81744e7d6d24c03aeb87a695c93a38de118a2008dd94935e80843290c2a1b8e4c914a6a266b66c1f5193ae91a89808883313392cca40a8155130a262d2842205f17888cd6fd6c621d221f35c01c4ce8d6568a4f011705", 0x71, 0x28}, {0x2, 0xffffff7f, &(0x7f0000000a40)='802.15.4 MAC\x00', &(0x7f0000000a80)="1d2d74ada6e6a83dbfdd0bbb345f3628090d14458bc4df1c66a26253ab99f46d27d172708beee8c7ed8d9bbee58ffb404ef9e3ae4286", 0x36, 0x12}, {0x3, 0x4, &(0x7f0000000ac0)='802.15.4 MAC\x00', &(0x7f0000000b00), 0x0, 0x2}, {0x3, 0x3de1, &(0x7f0000000b40)='wpan4\x00', &(0x7f0000000b80)="12ad1eb7664788e789048b55242f6eb8880203d9dcc43dba89a80d90b2fac415d10f50fbb4793abacedd3570265944a8088e54b61c08928a4d41a4be7b85412aba9520cad5c919c7603427c208dfb86d67490a6e849ab9584f84b809c426011658d872f5f0c25d044a71a0fd38886ddc61151548f92c8e47ed8cf330958f49a26a9c212ab19687cf644ea4e4538bfad301daacddafdf56efe7b97eb962d43035c3ec5613d84311b4d69fab", 0xab}]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r8, 0x901, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000f00)={0x0}, &(0x7f0000000f40)=0xc) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000f80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x44, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x4004810) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000010c0), r0) r11 = accept4(r7, &(0x7f0000001100)=@nfc, &(0x7f0000001180)=0x80, 0x80000) setsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f00000011c0)=0x5, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x101340, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x20080) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000002540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002500)={&(0x7f00000013c0)={0x110c, r8, 0xb00, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@crypto_settings=[@NL80211_ATTR_PMK={0x28, 0xfe, "44de4fa98194e9f0829fef9b1a42855a0e22e546cff1b651a2d0d169669394af446b10f2"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x95, 0xfc, "795c6aa5e4b7816d30aec6f5a36a58d2fe5615458c14ce4390be44cbde57fc7921f0dcd007d4a8934d583865446e8583b810a592966ed95f15a3be096830648ef9457fc7897ecb94edc982b58064cd564296ae82db83767be070baf5bf622e1125d70081cd06697cac6dc19ee7b6c20d0c1388f1d2821b84d3a758e59b5ccf2f6d526b7385f2b0ebc77a5d4d690701d5e8"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}], @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x16e9}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x2, 0x0, 0x0, {0x7, 0x80, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x1}}]}, 0x110c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$PPPIOCGL2TPSTATS(r11, 0x80487436, &(0x7f0000002580)="63c8e83c03552d96f1e75b39f8fa5276b8ed20703fad9ed25f13db41d25b4fa8217f798c223d9d0e8cf5f324b96a96414a119c88d98224253c1f") setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f00000025c0)={0x2e, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e20, 0x0, 'lc\x00', 0x2a, 0x9, 0x2f}, 0x2c) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000002640)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0xffffffff, 0x110, 0x110, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000002600), {[{{@ip={@broadcast, @broadcast, 0x0, 0xffffffff, 'ipvlan0\x00', 'syzkaller0\x00', {}, {0xff}, 0x5c, 0x2, 0x5}, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@addrtype={{0x30}, {0x181, 0x20, 0x0, 0x1}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x3, 0x2, 0x5, 0x2, 0x5, 0x4], 0x2, 0x5}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x5, 0x25994fc2}}}, {{@ip={@empty, @multicast2, 0x39d4521b9be04333, 0xffffff00, 'ip_vti0\x00', 'netdevsim0\x00', {}, {0xff}, 0xe, 0x6, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7172f761}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff0000ff, 'batadv_slave_0\x00', 'vcan0\x00', {}, {}, 0x5c, 0x2, 0x30}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x8, 0x4, [0x2d, 0x22, 0xd, 0xf, 0x21, 0x3e, 0x3e, 0x18, 0x18, 0x3d, 0x3, 0x29, 0x3f, 0x37, 0xd, 0x2d], 0x0, 0x7fffffff, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x40, r13, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x8081}, 0x800) 1.824696181s ago: executing program 2 (id=2768): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000100000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x7d, &(0x7f0000000480)={0x0, 0x2}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) 1.542068136s ago: executing program 2 (id=2769): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14f, 0x14f, 0x5, [@type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @float={0x10, 0x0, 0x0, 0x10, 0x10}, @const={0x5}, @const={0x7, 0x0, 0x0, 0xa, 0x4}, @struct={0xb, 0x7, 0x0, 0x4, 0x1, 0x3, [{0x3, 0x1, 0xc667}, {0xd, 0x5, 0xa265}, {0x9, 0x0, 0xbf5}, {0x9, 0x0, 0x1}, {0x3, 0x0, 0x8000}, {0x6, 0x1, 0x3}, {0xf, 0x3, 0x3}]}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x6b, 0x4}, @datasec={0x4, 0x4, 0x0, 0xf, 0x3, [{0x1, 0xb9, 0x4de}, {0x2, 0x40, 0xa}, {0x9, 0x6, 0x8f0}, {0x2, 0x3ff, 0x3}], "a37f1d"}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x55, 0x0, 0x45, 0x2}, @union={0x9, 0x7, 0x0, 0x5, 0x0, 0x0, [{0xc, 0x0, 0x9}, {0x9, 0x0, 0xc}, {0x2, 0x4, 0x9}, {0x8, 0x2, 0x3f}, {0x8, 0x0, 0x8}, {0x2, 0x2, 0x72}, {0x0, 0x4, 0x6}]}]}, {0x0, [0x30, 0x30, 0x30]}}, &(0x7f00000006c0)=""/131, 0x16d, 0x83, 0x1, 0x7, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x3, 0xb8, &(0x7f0000000880)=""/184, 0x0, 0x18, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x3, 0xb8, &(0x7f0000000880)=""/184, 0x0, 0x18, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES16=r1], &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r5, 0x0, 0x0}, 0x10) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x13) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000200)={{0x32, @remote, 0x4e20, 0x4, 'wrr\x00', 0x20, 0xb78, 0x3a}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e22, 0x10000, 0x6, 0x3d056dd4, 0x6}}, 0x44) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000400000006000000020800", @ANYRES32, @ANYBLOB="060000000000000000", @ANYRES32], 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) recvfrom(r0, &(0x7f0000003800)=""/4085, 0xffffffb6, 0x100, 0x0, 0x0) (async) recvfrom(r0, &(0x7f0000003800)=""/4085, 0xffffffb6, 0x100, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) sendto$phonet(r6, &(0x7f00000022c0)="dbdf97cdd2b8304d014f1147bef3fb61aaa3d31edbd65b032bbb7f6a98d864b189b1f136919141cd2788103df603379521f5537a73fca2e94b7ade9550a8af3d1c249ae452f0b4d428f8bbef3233b111420c523338a06c786650b73fd84d72766b091291a65cd8625a6ba1907f08c18a2b062a95bbbc243a47ba464c6c67e8a4dcfb1efaa363ed376f3fcbcf4c93f3683b7035a5e9d99793d9a8a1b19a2eb5bd7d275b8d25eb5420ed3b8b784acd8d52202368d4f610116df4a9e32d776c2c5437b2c6291f5fa5b4a727f30aa24c7c92582f2c541a453f2245f9934e7c77ef27d04e1f709d2eaf14dd3c855b0ab6572e25be8e6a9ce1d893044804f92576bbcfb51b379b7996ab10df659d50c92a1c67c757f9245d6239c3a1246763b77ad9987fd88b6385fd79b382c6525a53887123a5a293439fcdce26ec497c5e24da90d97b31775b73841faf0548cdd96dc76474e21b56094ec4764cf1b164ca23fb6e1e0e390263611ee51b00514e2cf204f3ccff2f7f2b2f5b905b4b25c81bd2de1639f968079b63c11612478b98fb75414c20953301797803d5d23bb34053e8f9a67f8102d2c99f3f38e2737fb33490bf00f971c3441861556495606af5f6ae19602aedc1bae0297e80d41f4d229940f5deb81c182d324639510e9fb97501ed8833df0c1f1dd24ddf870c0c5d9c121d75ded74777d2c2877e6c3e518ac336249c8c2a15033f28c873c8047a397d0f10ddaeac42c7c2a9a5e1bab24fe234b5688661ae505aa0c45a7f210a78b5cbc9f9aed58c8e875ed563cee5da4e1044eb9774479fbab5785bb5c40e8c5140286c711b1c06e91eb9cca673bf8007d9b98319e16c3f5379e828c17f11779b03f923bd1e5d19c2e158de3abc2111d67fbce60557b67d7ef16510bd7128b8e45c63be1e0a73382f4de37a9706aa628d2520e9a4247e68453018546a2dd7fdcaf7a272869a0be98bd3350a6a0cb89f332abe8b8202366c028455eb7439b7be0102fb74ff70a38b301757769d4db8c88f669a8e01299abab33a12d0963470c14e6b88c195e1f16e5041c506ace47360b4ad0e3741d2325cffa305f7aedb9e5979dc030e04b1eead4e7ed73538dae1bcae5d67f57c3c32e55f09f1e1084b9561d942edd601e518b9de7cafba0a99a266030c034741e9d5a6daadf8fb0312e3c317d46b4ea2efa36d5e481f153d8d5712d4553a4de22cebd22220b9326352849ee6a52983ad354833974d9e468afa42b39c0366b19d97b7dcf14d44dddbb36fa4d728da106e767a5b20123405de8b97150160ba8799afe3ef69a6a857ffb7b5b0aa5aff8db0089861849c396618e079c9af2fc2c56ef4b819228d3796295027b9f08157b19076cf369c82af8546049403e3ca1dce5215aa9df438b2bb38b360005328610fd04e4a30eeb5b48bd36b07ac748ebe71ba3b607270220b6446e5c6e6e068e29ef641cba42044bb664d1371ffc46fd3b12764dcdc6f095e01b4b9af000ad1f7a8ea5af54ffd8c3c381b5a59351a4e44da5f35c524d8fb4ffc9a91a5aec3a01f20bc20c01c1dad70807a7050344edb0a90eb2f1ab9709d70e8880692d24b52644b2b90d92d99e4c95f141d04d3811a5a92090fe4988e3712f8c6ab05bb6867cd605f722345644f22a7acc18ebeb41c147284b6163410986de9caed17e95629cc2ca3b5b5cd0d22734fcbbe37bd8964de186f1c48ecdb6dc4fbe52a5814cca95380e4cb0e7bfb7a6c71524b61fd38ad675d0846f44e2701936cf66fbc796046893cd8c64ed9ead8b24ac1e215ed25741106334fb6906006091eb8ab68d2a31700450bc624eb46a52d7571ff84fa119ef365a12caece28762f2f9f05d17301c0e3d222cbf00cf3c680fb4e6d813e66a45ff9d18515a989105dd26c8c1ba7a1a310d9bb50a315669d02fbe10df25a5bd2d760f3ef7dbfbf23a51f5c18caca1051e90e42dadc693748d3a9c26ac34030b347e0885e7638368bc6d2aaa97ede166ef15c7721c8c2143ef21c91681209c86cae0f4a3518fdf35d4b26ba8f85a692206bb7612723747d30adaa762200ec3e9177af598e87d7edc655d7a14f5c1e62b2e78c4eb850e03a79b34ff628ddf518335af0179ca8ffc83f584725c2ef392612bdd6d383a114605b0771f88e84bed91bcd22ebbcb5b880932fb1017793c0482502c20fccb03a2c996d21ff3275180266dc6e39c4df47797d3c56c698b8757b695084db71624a51d8fb76343409b53d1f8e36e8cc68e444a681b8afaf6dd567c8b430471cb5035e3e9b313d733890366014cb151cc31338710249e1a8f3d2c23d71cea2be939d047a89f232ce188e3ae30311721eb64b7295498762716bcd11275b323b7ead73c572c3e12c04df992d5a4850913d46a1be643a8dae3616d6aae78c6b2f0a5136aa64ddc5960bc3d3819db156e67ce09312ee1836b009f44c3ea2dca24033bb21bcb72569f4a623dd38bc44f09b3350df184c7179fbfbe3455ce594ba623ae20d4febe70409b481a4553b84418ceab8b2adcd44d15e1077dbe7a64770d7a189c3dbf3e2fb7039341c24263d71df58b88ca7f195534b584641c155e6c13a483fdac2e5ee8fa12795f022e3c659cad0bf894ce445f1e5f1ae69fbc65b66fd36a553bcf7f1439ac49c934978cfe87ffeac1609675c54dda645dca736a51f913a0709b965e7734965a20571b6a212fb508dbc1433aa29f80441194e1db625dc632baa12f29198f4e4b0d17271212cb75027378423452f6e48ac813c3d3404a13452ad3ec1601c9aa09171a881477f5aadca11594f833ade60d6d4246babf331c2e517dce597dba0744924ff85836501b66cf2ad828ad0137385394c2918bc1263f6651d0a6803e10d05acb10bf4deef7b38d56a9b11a2938e5a13c5c0f2e669b05f35e35a78bbf35efcb56c5f56a1ff5f79778a31ca844bcc5796cf0cb28c292f38f2065b408b7b284d5f751b45fd5de247081a1a2d14529160bc03dfb999dc6ce420e553553d7f6aaf8784c9e84723b2ef25e6eca9f2ba2d85e4b84b3bdfb42f38d9b076895c8652be474384a5dfe470818186f6bcad0b01da1e6ec13a7e845d9bde950fa9de5e01b97e38dd549ef145476f5194aa404761b9179a26a168496d5385751f5482a3a7d9e2e15008492064488b1f410a41c58e7254af1950e93eee4bce8ce342b608f7ef10b8277d1e11e80e58ad256cfa4d0b415b4c5ab8bee3ae2a32657064b7d4f30cb293947aaafa5904b5ca58981639f7e4af933e7624e941b1e23a4861a8ad5761dcb07616d86349437124fc9129c4e8aa3a58490196d5bb81362fb09abf2b6eaa905314fd4dc07a0f513f77d53c875f6ea94409d6a83840f097f3021f36c8d336b5f788214684941f91ed2924b44df645972ecc3ac0e9ac76cb19c8e8192cee4aaa0bf6bc1a376dbce0cb45c9d4b4cd94809c2946e027234b446775855dd5a1f2fd02341b054e44e7e7c3da008fd00c6ab545944351d59698046742d74505e4f402906a0e2066f6835dedd2733229e884801986709984286d02f006b454a76893e40a512c4b3accab5f02360c3aba49103d2e6e4c59813c92204b3fbe61defdddb4cd6d876f0e0be6ae55aaa0d2ff817449efc8991bde4d0743762a7432b7cb698c30dbbed0d2b4520b32be824008842b86485c69489a48612056bbd7319d0e0caac0dbae034d41ad2eb8b980ae33b0a7f6ba6cd110b1b6e02c5ca87ab64a8c0b1fb439e8c52370165a3305a4b2c523e7fb75ea6e8af6e3ca02ec66e518134aacb1f6846d3920622300fce34d33e6838519b6bd82e6497060c23c0cd045fd012c099be127a4c36f2b665e958ad7ef355ef6dcbbcef7723364cc3a181880f97f94ef7f2edb6704c4bc7ef1113492738ac9ad4dcb49c3509fd034d3762efa84e730c705bf66540a06aaf4f8acb4c055828601a645d0b1a9d5ab406eac156a3c74c8491a820c3e9fc9ace3b5f67f05c2971478db6fd5d0dd62915cceaa2d447ad8645599f812ba7f27d82684816b3ac12a1f18a680c5fdbf1d83deee75748a37f794e3adc67b7b30a9a10f45c3b6243ddf6a5904789a92b17773139f1d7055a140623b8b3416cb6ab56baa84f4bfb4ae2e3b9f5e2b5ed106d55350a294ad5209260098718cc2d1d43a55eefe7d90a900be8504faf81b43f5a29852b097a378a29114d82db40b426159c19f3a114858a46bab7113728a5fe4b3061e687ecc52ab25eb557efd02528c91c552f65fcd65773f17c2bbb9efc4137a8fd547d92a6081bd34d4a30ae580300d809b799d4be3c71867ccf04b9f8d77564a11697e0a8962487f8836c14b1ef590bd6e1a6f3be577a7290edd5ed4e1d437ce14258c3b85e9b79aa5e2ea903cc761bf7e2e42dc562cfe597ddc099296e2ed29c82d39d513a2550e2a6ad2cc00ca6a7c8514fbb02fd44835c251fa20fdb7c3c9ec4e032494211b9337c68be8a99d9826c9be3ff070d6168952032550f51871f9e1d4f927768018bb6c7b1cfc308559e1860e24d5b6d635ac49f5dbd55d1a365aabaad6af2db80d6845e0a9fb6884a3d0510c3145d6284987ce44fec4bcf941851e47b4c892e4b08b60aafc38aed0fa0d39240d3091769221613fed88f9365794b1b9db77e0b023f10d4729f30f27377b8cb9940d10e406d7eb9126f12ff190cfbca74ae348e4f32203ae18ef62fca2bca9a7f356fabfc03f5b4404b9be525a5df78733f035650b96a83cb9c5d8a691b5bf255a1faf10b265e8702cade0db979593f55d3c603e5dc55e3d425d9d9c8ce12275e1fa2b952857b4703b8375d675aaeb312a65eca39d9150455e38bfc664a77ee2ce09e72c36936ea69c5cc50b2ef4f473eb836a483b6c224b15dfd01cf0977d634033e8a0a03161ed4119bb4d0837cffc82af0cad6b185a0f70570506bb45a06f61fbed0c22666cbe7a3bade0f8b66f6e7c86e7168b8413025ac92f7264ec0a12066976c01f50e98b09cd3e84234ab0ced1603ab8772a93ee02bf5c338b46932f4985789f3527eb06636ce8b1c08a2b235d0dafa2f8df05a09d695288b32f09cdf0a287b4906536763978d31603c125277346011fab16bd594657455017ac5457559967757cce51622b7ed9533667fd994fbba06c448608f356acdded5c320e3140400379a62ab6a9dcd0d4f3e79e4ba1806b5c7414b18d75bc59790693e4c55b6d10dd93cdab6faf1a400df69478cc0b1e53f29fc6db765836d92327cbad23364f42b068a2b8482cddacc2bd46b8c4b73853d53eafcb9c34b941e425ca8e4ccaacb28455e32d6a552f6d0ec9d0a894a493f51d08a05a2df8a724d94506c175af5fec5dfea0de8839534fe2a06b46c003397dea8f7c8bcb068739539865aa59d5a387366f65c01f6ec35fd9928e37f169df763e86077b079501ccf18c8212965d693336f92ac72303655962940dd177be958287383ff01032aee748cd233de5335804bd94410c56abe13f8d9de4c96530cf35498a668a167a563ba511cfc22192a760a0a64330182ee4859e6ebd18da59148925f79caad9ce983fcd77af91453ff77a2a1db370f5912e7aacd3638b6cf84ba376e92a76e72875f3e69fac549d272acd64a504af4ca20617b5babc5fa28073b0800d2d00f58b897a494e9f692ea6b264e8fe95633bd7b82e1759cfb5c07730995521e73473c88dee3473704e8a62ad7a22539c0e01c9556d30073afb356133c935986ac2299e18236cd238e9a90137221e8ac0dd780c2042875ccf34a6db84b035a288bfcf90c5c96695d82ea6", 0x1000, 0x4, &(0x7f00000032c0)={0x23, 0x7, 0x7, 0xb8}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.404909354s ago: executing program 1 (id=2770): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001800010020000000000000000200940000000009000100400600150006000000100016800c000180080002"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x2}]}, {0x0, [0x0, 0x5f, 0x5f, 0x61]}}, 0x0, 0x2a, 0x0, 0x1, 0xe2}, 0x28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000f957e59c873adf92c71b3001300050026bd7000ffa55c2473d12e538970171d05e9334fbdaee4670078bbc42c58d29428cc55fe1eea85e09e66b493b39755286031ef72bcea48d036c8237e69bdc659566f3070a4263b35841df3a0d854ea89f996", @ANYRES32=r1, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r2, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x6, 0xf2, 0x7, 0x6, 0x3, 0x0, 0x7, 0x2, 0x3, 0x5, 0x2, 0x25, 0x2, 0x2}, 0xe) recvmmsg(r2, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000140)=""/155}, {&(0x7f0000000200)=""/252}, {&(0x7f0000000300)=""/127}, {&(0x7f0000000380)=""/232}, {&(0x7f0000000940)=""/4096}, {&(0x7f0000001940)=""/225}, {&(0x7f0000001a40)=""/152}, {&(0x7f0000001b00)=""/24}, {&(0x7f0000001b40)=""/10}], 0x0, &(0x7f0000001c40)=""/176}, 0x48}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000001d00)=""/147}, {&(0x7f0000001dc0)=""/222}, {&(0x7f0000001ec0)=""/3}, {&(0x7f0000001f00)}, {&(0x7f0000001f40)=""/4096}, {&(0x7f0000002f40)=""/47}, {&(0x7f0000002f80)=""/241}, {&(0x7f0000003080)=""/71}, {&(0x7f0000003100)=""/161}, {&(0x7f00000031c0)=""/5}], 0x0, &(0x7f00000032c0)=""/81}, 0x3549}], 0x1, 0x40010060, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.340683942s ago: executing program 3 (id=2771): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000b80)={0x610, 0x0, 0x8, 0x70bd27, 0x25dfdbfa, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x14}}}}, [@NL80211_ATTR_TX_RATES={0x33c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x5, 0x30, 0x24, 0x9, 0x30, 0xb, 0x48, 0x16, 0x2c, 0x5, 0x2, 0x36, 0x12, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x11c, 0x2, 0xa, 0x6, 0x4, 0x1, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x1, 0x0, 0x4, 0x2, 0x8, 0x4]}}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5fe1, 0x40, 0x61, 0x74b3, 0xfff]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x5}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x8}, {0x4, 0x6}, {0x2, 0x1}, {0x1, 0x4}, {0x7, 0x3}, {0x4, 0x4}, {0x2, 0x9}, {0x2, 0x6}, {0x0, 0x5}, {0x7, 0x4}, {0x5, 0x2}, {0x6}, {0x7}, {0x6, 0x5}, {0x1, 0x6}, {0x1, 0x3}, {0x6}, {0x2, 0x3}, {0x1, 0x2}, {0x2, 0x5}, {0x7, 0x8}, {0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x3, 0x5}, {0x1, 0x9}, {}, {}, {0x7}, {0x3, 0x8}, {0x0, 0x7}, {0x4, 0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x2, 0x3}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x6}, {0x0, 0x4}, {0x5, 0x2}, {0x1, 0x7}, {0x7}, {0x5, 0x1}, {0x4, 0x8}, {0x7}, {0x5, 0x4}, {0x5, 0x4}, {0x5, 0xa}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x4}, {0x2, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdef, 0x2, 0x2, 0xe, 0x5, 0x8001, 0xfff, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x236, 0xc000, 0x3, 0x8, 0x3, 0x1, 0x2d0, 0x2]}}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x9, 0xa8b, 0x2, 0x2, 0x0, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x9, 0xf214, 0x1, 0x8bc8, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x81, 0x5, 0x4, 0x2, 0x6, 0xfffd, 0xf75]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x6, 0xf001, 0x3826, 0x7, 0x7, 0x3, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x0, 0x8, 0x1, 0x7, 0x3b, 0x28, 0x400]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x24, 0x3, 0x16, 0x1, 0x24, 0x4, 0x1, 0x2, 0x18, 0xc, 0x60, 0x1b, 0x24, 0x18, 0xb, 0xc, 0x36, 0x6c, 0x36, 0x4, 0x48, 0xc, 0x36, 0x4, 0x3]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x27, 0xfcf1, 0xe, 0x5, 0x951a, 0x8, 0x55, 0xa]}}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x2}, {0x2, 0x5}, {0x7, 0x3}, {0x2}, {0x4, 0x3}, {0x5, 0x7}, {0x2, 0xa}, {0x4, 0x4}, {0x3, 0x4}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0x2}, {0x7, 0xa}, {0x7, 0x8}, {}, {0x0, 0x1}, {0x4, 0x5}, {0x6}, {0x4}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0x7}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x2, 0x3}, {0x1}, {0x1, 0x9}, {0x3}, {0x6, 0x7}, {0x2, 0x5}, {0x6, 0x7}, {0x7, 0x2}, {0x0, 0x8}, {0x7, 0x5}, {0x0, 0x4}, {0x4, 0xa}, {0x6, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x1, 0xa}, {0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x5}, {0x7, 0x4}, {0x0, 0x7}, {0x6, 0x7}, {0x7, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x5, 0x2}, {0x1, 0x9}, {0x7, 0x1}, {0x7, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x6, 0x4}, {0x5, 0x8}, {0x1, 0x2}, {0x1, 0x6}, {0x1}, {0x2, 0x5}, {0x2, 0xa}, {0x0, 0x7}, {0x2, 0x9}, {0x6, 0x9}, {0x3}, {0x4, 0xa}, {0x7, 0x3}, {0x2, 0x6}, {0x1, 0x2}, {0x7, 0x3}, {0x5, 0x6}, {0x5, 0x4}, {0x1}, {0x7, 0x5}, {0x2, 0x6}, {0x3, 0xa}, {0x3, 0x2}, {0x1, 0x8}, {0x5}, {0x5, 0x9}, {0x5, 0x5}, {0x5, 0x6}, {0x5, 0xa}, {0x0, 0x2}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x9}, {0x4, 0x9}, {0x2, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0xfff3, 0x0, 0x8f83, 0x101, 0xb6dd, 0x3, 0x7fff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd6, 0x40, 0xc28, 0x1, 0x1, 0xf, 0x8000, 0x3]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x8}, {0x1, 0x8}, {0x4, 0x6}, {0x3, 0xa}, {0x1, 0x7}, {0x0, 0x2}, {0x6, 0x9}, {0x3, 0x9}, {0x6, 0x7}, {0x1, 0x9}, {0x5}, {0x5, 0x4}, {0x4, 0x1}, {0x0, 0x4}, {0x3, 0x6}, {0x0, 0x4}, {0x3, 0x9}, {0x3, 0x9}, {0x0, 0x5}, {0x1, 0x6}, {0x4}, {0x5}, {0x3, 0x8}, {0x6, 0x9}, {0x7, 0x2}, {0x4, 0x4}, {0x4, 0x4}, {}, {0x5, 0xa}, {0x7, 0x1}, {0x1, 0xa}, {0x7}, {0x7, 0x15}, {0x1, 0x7}, {0x4, 0x2}, {0x5, 0x6}, {0x3, 0x9}, {0x2, 0x4}, {0x2, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x5, 0x9}, {0x1, 0x9}, {0x7, 0x8}, {0x7, 0x5}, {0x2, 0x7}, {0x2, 0x8}, {0x2, 0x7}, {0x1, 0xa}, {0x3, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x2, 0x3}, {0x3}, {0x1, 0x3}, {0x7, 0x4}, {0x1, 0x8}, {0x2, 0x5}, {0x6, 0x4}, {0x1, 0x3}, {0x2, 0x9}, {0x6, 0x2}, {0x4, 0x9}, {0x4, 0x4}, {0x4, 0xa}, {0x5, 0x4}, {0x2, 0x5}, {0x7, 0x2}, {0x6, 0x4}, {0x3, 0x5}, {0x4, 0x1e}, {0x7, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x7, 0xa}, {}, {0x2, 0x4}, {0x0, 0x6}, {0x6}, {0x1, 0x5}, {0x1, 0x3}, {0x7, 0x5}, {0x0, 0x8}, {0x4, 0x9}, {0x4, 0x1}, {0x7}, {0x2, 0x5}, {0x3, 0x2}, {0x1, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x7, 0x2}, {0x0, 0xa}, {0x1, 0x2}, {0x4, 0x1}, {0x4, 0x9}, {0x3, 0x1}, {0x1, 0x4}, {0x3, 0x6}, {0x0, 0x3}, {0x3, 0x8}, {0x1, 0xa}, {0x4, 0x5}, {0x7, 0x7}, {0x4, 0x11}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffd, 0x9, 0xf965, 0x95a, 0x401, 0x5, 0x326d]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x2}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfffd, 0x6, 0x7, 0xc, 0xf4, 0x7, 0xf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x81, 0x8, 0x6, 0xfffe, 0x3, 0x101, 0xc39]}}]}]}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x1b, 0x6, 0x16, 0x90f15a5eb26cbf5f, 0x16, 0x36, 0x0, 0x12, 0x24, 0x0, 0x9, 0x0, 0x24, 0x3, 0x66, 0x12, 0x18, 0x30, 0x5, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x9, 0x1, 0x7f, 0x0, 0xa4, 0xcc8, 0x9]}}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xf8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x12, 0x39, 0x48, 0x2, 0x2, 0x16, 0x2, 0x1b, 0x12, 0x30, 0x18, 0x2, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x8}, {0x3, 0xa}, {0x6, 0x3}, {0x1}, {0x6, 0x9}, {0x3, 0x1}, {0x4, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x6}, {0x4, 0x9}, {0x1, 0x5}, {}, {0x7, 0x2}, {0x1, 0x3}, {0x7, 0x7}, {0x5, 0x1}, {0x1, 0x5}, {0x6, 0x4}, {0x0, 0x2}, {0x7, 0x4}, {}, {0x3, 0xa}, {0x3, 0x6}, {}, {}, {0x1, 0x5}, {0x7, 0x6}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x7, 0x1}, {0x4, 0x5}, {0x0, 0x2}, {0x0, 0x9}, {0x7, 0x1}, {0x7, 0x4}, {0x4, 0x1c}, {0x2, 0xa}, {0x6, 0x3}, {0x2, 0x1c}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1, 0x16, 0x36, 0x5, 0x0, 0x12, 0x1b, 0x1, 0x6c, 0x60, 0x4, 0x1b, 0x60, 0x6c, 0x12, 0x24, 0x77, 0x9, 0x48, 0x36, 0x4a, 0x5, 0xb, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x8000, 0x4da, 0xfffb, 0x800, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x9, 0x3, 0x1000, 0x9, 0x0, 0x8, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0xfff9, 0x4, 0x2, 0x7, 0x55bf, 0x7ff]}}]}]}, @NL80211_ATTR_TX_RATES={0xd8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x29ae, 0xee9e, 0xc, 0x4, 0x49b0, 0x8, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8001, 0x1, 0x1, 0xb71, 0x2, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x9, 0x1a, 0x1ff, 0x6, 0x40, 0xfc00]}}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8b, 0x9, 0x80, 0xfff, 0xd, 0xdb9, 0x9, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbac7, 0x62, 0x100, 0x5, 0x5, 0x0, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0x2}, {0x6}, {0x0, 0x7}, {0x3, 0x6}, {0x6, 0x4}, {0x4, 0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x2, 0x5}, {0x5, 0x4}, {0x6}, {0x3, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x3, 0x7}, {0x7, 0x3}, {0x0, 0x9}, {0x6, 0x2}, {0x7, 0x5}, {0x5}, {0x5, 0x5}, {0x0, 0x8}, {0x5}, {0x6, 0x8}, {0x2, 0x4}, {0x2, 0x5}, {0x1, 0x1}, {0x2, 0x5}, {0x3, 0x6}, {0x4, 0x7}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x5, 0x0, 0x0, 0x36, 0x1b, 0x1b, 0x6]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4, 0x27, 0x48, 0xb, 0x36, 0x18, 0x18, 0x48, 0x1b, 0x4, 0x12, 0x6c, 0x1b, 0x5, 0x5, 0x3, 0x48, 0x1b, 0x5, 0x18, 0x12, 0x36, 0x30, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x36, 0x2, 0x16, 0x12, 0x48, 0x7e, 0x36, 0x4c, 0x2, 0x5, 0x2, 0x24, 0x4, 0x60, 0x16, 0x1b, 0x16, 0x36, 0x9, 0x48, 0x9, 0x18, 0x1, 0x30]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x7, 0x4d, 0xfffc, 0x640, 0x8, 0x5, 0xf85]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x610}, 0x1, 0x0, 0x0, 0x24048004}, 0x40000) unshare(0x2c020400) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 972.282009ms ago: executing program 4 (id=2772): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) (async) recvmmsg(r0, &(0x7f0000000700), 0x0, 0x2003, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="79129800000000006113280000000000bf2020000000000004000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000002c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc4cab575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 741.829636ms ago: executing program 4 (id=2773): setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0x9, 0x4e23, 0x9, 0x2, 0x80, 0x80, 0x89}, {0x1, 0x98, 0x5, 0x9, 0x1, 0x8, 0x4, 0x5}, {0xffffffffffffff22, 0xe0, 0x823}, 0x68a4, 0x6e6bb9, 0x2, 0x1, 0x3, 0x1}, {{@in=@multicast2, 0x4d3, 0x3c}, 0x2, @in=@loopback, 0x3501, 0x1, 0x2, 0x1, 0xffff7fff, 0x3}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x14, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}, [@FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x24, 0x2d, 0x107, 0x70bd25, 0x25dfdbfe, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 388.570165ms ago: executing program 1 (id=2775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000000900020073797a32000000002c0004802800018007000100637400001c0002800500030200000000080001400000000908000240000000041400000011000100000000ffffffffff0000000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200027bd7000fddbdf250e0000000800060006000000240002800800060000800000080005007f00000006000e004e210000060002af56c9d300"], 0x40}}, 0x80) r4 = accept4(r0, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000340)=0x80, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r2) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x358, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70f6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb7b4a88}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x23b}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8211}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xedd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x831}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x93}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xceabd409}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20000000}]}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x1}, 0x4080) 294.328092ms ago: executing program 2 (id=2776): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth0_to_bridge\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xe}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 163.06217ms ago: executing program 4 (id=2777): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@loopback, 0x0}, &(0x7f0000000340)=0x14) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @dev, @dev}, &(0x7f0000000400)=0xc) (rerun: 64) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ce0025bd25f841fb01d4a2127cde19b706f8753fb34e407836115dce11abfa9361aaa9cdcd9250557bc021aa69e2b82027d63b8797aacfb8", @ANYRES32=r3, @ANYBLOB="300001801400020064766d72703100000000000000000000080003000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@map_fd={0x18, 0x7, 0x1, 0x0, r0}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(r6, &(0x7f0000000500)='blkio.bfq.dequeue\x00', 0x75324cc7ada9, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x200c0, 0x0) (async, rerun: 32) r7 = socket(0x1e, 0x805, 0x0) bind$inet6(r7, &(0x7f0000000040)={0x1e, 0x4e22, 0x0, @mcast2, 0x8001}, 0x1c) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_ASSERT(r8, 0x29, 0xcf, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000001a00)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4bafbe3fca97a7d1e13b210b26bbf3dad5525c8771a6e3a3378d149b0080000000000000e781751bdc36520381239ecc82ad41b2141ae09773552caa5764e17ea9cd1f8ebb6dd963ea2df73ea571d959a9297484c1344a5c8548b48c0cb4dd56c06bf109fb43587254e14dd240ca42f17ace663e3a448036dbeff3942175e87bcc039489d75ee27ff214d139a21ec1b96ba32de69bddad147ea918cde389ec95c14fd43a335739e526bc40922dc1c8", 0xaf}], 0x1, &(0x7f0000000140), 0x0, 0x20008000}, {0x0, 0x0, &(0x7f00000019c0), 0x5d, 0x0, 0x0, 0x1}], 0x2, 0x1) 44.920451ms ago: executing program 1 (id=2778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x440) (async) r7 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3}, &(0x7f0000000280), &(0x7f00000006c0)=r4}, 0x20) (async) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000001c0)=r4, 0x4) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) (async) r8 = accept(r1, 0x0, 0x0) (async) r9 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000340)={0x0, 0x2, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, 0x18) (async) sendmsg$tipc(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="19fd9bed22ac2a90d79729758c8eec869f68cc1cb5ef9a2b0f9efd6cf7828e49625b6a74403aa1a11329ff614cfb541aee3bb1de75901f0d44a30d7b651c6cb50594c012cf6cf0d736b1d8071d01c8093f87bd95554dd0832726e46f997c2d55c36a9f5562b9f882c8cd13d63719c6f50fe9f8b568afa7e1c8c4dc2da3e90caa9a72772d3f7058c2c0ee41599cd19d0ef13242b7456d49c487c3aede74eec7e347e07d7e8c0e7578cc5b2c11", 0xac}, {&(0x7f00000002c0)="3009e8e4c2c988ca4cd4d6736eacbb5dc9dc23db", 0xffffff0a}], 0x2, 0x0, 0x0, 0x4000411}, 0x80) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x80}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x0, 0x0, 0x0, {0xd, 0x0, 0x4}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWTABLE={0x50, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x32, 0x6, "64d62db6c08e30594bc004dc33df9001a38c6d9dc2a9facc5cb5bc4b4636e7836ea14466ac3108b71d8f72d9671d"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xfc}}, 0x0) (async, rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x59}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 0s ago: executing program 0 (id=2779): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280"], 0x24}}, 0x0) kernel console output (not intermixed with test programs): 155.456998][ T8400] bond4: entered promiscuous mode [ 155.502567][ T8400] bond4: entered allmulticast mode [ 155.528529][ T8400] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.604026][ T5604] Bluetooth: hci4: link tx timeout [ 155.609321][ T5604] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 155.617291][ T5604] Bluetooth: hci4: link tx timeout [ 155.622550][ T5604] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.643983][ T8385] macvtap1: entered allmulticast mode [ 155.779162][ T8403] erspan1: entered allmulticast mode [ 155.824940][ T8403] bond4: (slave erspan1): making interface the new active one [ 155.880649][ T8403] erspan1: entered promiscuous mode [ 156.006446][ T8403] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 156.087724][ T5604] Bluetooth: hci4: command 0x0406 tx timeout [ 156.140771][ T8386] bond3: (slave bridge1): making interface the new active one [ 156.194865][ T8386] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 156.239905][ T8406] syz.0.651 (8406) used obsolete PPPIOCDETACH ioctl [ 156.476853][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 156.531205][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 156.630416][ T8436] netlink: 'syz.0.663': attribute type 6 has an invalid length. [ 156.648199][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 157.111941][ T8461] netlink: 'syz.2.670': attribute type 10 has an invalid length. [ 157.156565][ T8461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.156734][ T8456] netlink: 104 bytes leftover after parsing attributes in process `syz.3.671'. [ 157.201847][ T8461] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 157.844144][ T8492] netlink: 'syz.0.678': attribute type 11 has an invalid length. [ 157.895178][ T8492] netlink: 'syz.0.678': attribute type 4 has an invalid length. [ 157.941136][ T8492] netlink: 224 bytes leftover after parsing attributes in process `syz.0.678'. [ 158.038404][ T8503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.680'. [ 158.163393][ T5604] Bluetooth: hci4: command 0x0406 tx timeout [ 158.887421][ T8521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.044522][ T8528] netlink: 'syz.0.686': attribute type 12 has an invalid length. [ 159.375302][ T8536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.689'. [ 159.391177][ T8515] netlink: 'syz.1.683': attribute type 2 has an invalid length. [ 159.425033][ T8515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.683'. [ 159.511500][ T29] audit: type=1804 audit(1786301845.786:10): pid=8542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.691" name="/newroot/136/cgroup.controllers" dev="tmpfs" ino=708 res=1 errno=0 [ 159.558393][ T29] audit: type=1800 audit(1786301845.786:11): pid=8542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.691" name="cgroup.controllers" dev="tmpfs" ino=708 res=0 errno=0 [ 160.402535][ T8565] netlink: Unknown conntrack attr (0) [ 160.583909][ T8573] 8021q: adding VLAN 0 to HW filter on device bond4 [ 160.771457][ T8577] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20004 [ 160.831479][ T8583] pimreg: entered allmulticast mode [ 160.973090][ T8586] syzkaller0: entered promiscuous mode [ 160.993473][ T8586] syzkaller0: entered allmulticast mode [ 161.025448][ T8586] netlink: 'syz.3.703': attribute type 21 has an invalid length. [ 161.062760][ T8587] syzkaller0: entered promiscuous mode [ 161.078953][ T8587] syzkaller0: entered allmulticast mode [ 161.108494][ T8586] netlink: 132 bytes leftover after parsing attributes in process `syz.3.703'. [ 161.136364][ T8586] netlink: 'syz.3.703': attribute type 1 has an invalid length. [ 161.237250][ T8601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.271270][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 161.349017][ T8599] netlink: 20 bytes leftover after parsing attributes in process `syz.1.706'. [ 161.546765][ T8602] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 161.626383][ T8603] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 161.713111][ T8604] virt_wifi0 speed is unknown, defaulting to 1000 [ 161.750216][ T8604] xfrm0 speed is unknown, defaulting to 1000 [ 162.997920][ T8653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.390105][ T8664] syzkaller0: entered promiscuous mode [ 163.396712][ T8664] syzkaller0: entered allmulticast mode [ 163.802270][ T8676] netlink: 148 bytes leftover after parsing attributes in process `syz.4.721'. [ 163.811864][ T8676] netlink: 116 bytes leftover after parsing attributes in process `syz.4.721'. [ 163.821419][ T8676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.721'. [ 163.857833][ T761] tipc: Subscription rejected, illegal request [ 166.355044][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 166.591800][ T8697] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 166.970806][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033a86800: rx timeout, send abort [ 167.159798][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 167.347728][ T8717] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 167.368574][ T8717] bond5 (unregistering): Released all slaves [ 167.470863][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033a84000: rx timeout, send abort [ 167.490928][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033a86800: abort rx timeout. Force session deactivation [ 167.601769][ T8733] netlink: 'syz.4.734': attribute type 5 has an invalid length. [ 167.979155][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033a84000: abort rx timeout. Force session deactivation [ 168.052244][ T8745] syzkaller0: entered promiscuous mode [ 168.072725][ T8745] syzkaller0: entered allmulticast mode [ 168.760390][ T8722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.791277][ T8722] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.934594][ T1090] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 168.989245][ T1090] bond2: (slave veth3): making interface the new active one [ 169.024708][ T1090] bond2: active interface up! [ 169.358250][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'. [ 169.462137][ T8803] netlink: 'syz.3.751': attribute type 2 has an invalid length. [ 169.805686][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 169.825897][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 169.845684][ T8810] syzkaller0: entered promiscuous mode [ 169.847519][ T5616] block nbd1: Receive control failed (result -32) [ 169.862620][ T8810] syzkaller0: entered allmulticast mode [ 169.943124][ T985] xfrm0 speed is unknown, defaulting to 1000 [ 170.053007][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'. [ 170.322046][ T8826] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 170.505628][ T8835] tipc: Enabling of bearer rejected, failed to enable media [ 170.979258][ T8849] netlink: 36 bytes leftover after parsing attributes in process `syz.3.764'. [ 171.068996][ T8849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.764'. [ 171.112057][ T8849] netlink: 36 bytes leftover after parsing attributes in process `syz.3.764'. [ 171.836165][ T8878] dummy0: left allmulticast mode [ 171.938565][ T8878] bridge0: port 3(dummy0) entered disabled state [ 172.318888][ T8896] tipc: Enabled bearer , priority 0 [ 172.351345][ T8910] syzkaller0: entered promiscuous mode [ 172.378147][ T8910] syzkaller0: entered allmulticast mode [ 172.429752][ T8878] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 172.710999][ T8879] netlink: 116 bytes leftover after parsing attributes in process `syz.3.771'. [ 172.742028][ T8896] tipc: Resetting bearer [ 172.775684][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 172.807449][ T8877] tipc: Resetting bearer [ 172.911715][ T8877] tipc: Disabling bearer [ 172.937059][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 173.036104][ T8924] 8021q: adding VLAN 0 to HW filter on device bond5 [ 173.106271][ T8929] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.114225][ T8929] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.243927][ T8929] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.251159][ T8929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.258754][ T8929] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.265971][ T8929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.368022][ T8929] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 174.476231][ T8954] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 175.243514][ T8968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.548528][ T8965] __nla_validate_parse: 3 callbacks suppressed [ 176.548547][ T8965] netlink: 96 bytes leftover after parsing attributes in process `syz.0.789'. [ 176.692570][ T8982] netlink: 40 bytes leftover after parsing attributes in process `syz.4.791'. [ 176.776497][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 176.949099][ T8982] dummy0: entered allmulticast mode [ 177.153551][ T9002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.795'. [ 177.277557][ T9002] netlink: 32 bytes leftover after parsing attributes in process `syz.1.795'. [ 177.303662][ T9002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.795'. [ 177.322409][ T29] audit: type=1804 audit(1786301863.596:12): pid=9011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.797" name="/newroot/162/cgroup.controllers" dev="tmpfs" ino=855 res=1 errno=0 [ 177.430244][ T29] audit: type=1800 audit(1786301863.596:13): pid=9011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.797" name="cgroup.controllers" dev="tmpfs" ino=855 res=0 errno=0 [ 177.678937][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.802'. [ 177.699634][ T9028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.803'. [ 177.705691][ T9025] block nbd2: Unsupported socket: should be TCP or UNIX. [ 177.812922][ T9028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.803'. [ 178.280529][ T9046] netlink: 'syz.3.808': attribute type 1 has an invalid length. [ 178.664431][ T9046] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.765513][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 180.861635][ T9078] bond0: (slave bond_slave_1): Releasing backup interface [ 181.618413][ T9133] __nla_validate_parse: 6 callbacks suppressed [ 181.618432][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'. [ 181.840207][ T9147] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 181.858746][ T9147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.130579][ T9151] bond6: entered promiscuous mode [ 182.143322][ T9151] bond6: entered allmulticast mode [ 182.149095][ T9151] 8021q: adding VLAN 0 to HW filter on device bond6 [ 182.891409][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'. [ 182.922884][ T9178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.837'. [ 183.163025][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'. [ 183.260229][ T9190] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 183.324988][ T9190] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 183.754298][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.846'. [ 183.957239][ T9201] virt_wifi0 speed is unknown, defaulting to 1000 [ 183.974642][ T9222] netlink: 36 bytes leftover after parsing attributes in process `syz.2.849'. [ 183.985951][ T9201] xfrm0 speed is unknown, defaulting to 1000 [ 184.301371][ T9232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.851'. [ 184.371407][ T9232] netlink: 64 bytes leftover after parsing attributes in process `syz.2.851'. [ 186.364498][ T9284] xt_connbytes: Forcing CT accounting to be enabled [ 186.410759][ T9290] netlink: 36 bytes leftover after parsing attributes in process `syz.2.865'. [ 186.619155][ T9295] Cannot find del_set index 17 as target [ 187.430326][ T9323] netlink: 'syz.3.872': attribute type 11 has an invalid length. [ 187.468678][ T9323] netlink: 224 bytes leftover after parsing attributes in process `syz.3.872'. [ 187.676909][ T9333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.874'. [ 188.279695][ T9355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.878'. [ 188.747619][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.881'. [ 188.769119][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.881'. [ 188.882410][ T9384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.096816][ T9372] team0: Port device team_slave_0 removed [ 189.153852][ T9394] netlink: 'syz.2.885': attribute type 3 has an invalid length. [ 189.193612][ T9394] netlink: 'syz.2.885': attribute type 3 has an invalid length. [ 189.474863][ T9402] netlink: 68 bytes leftover after parsing attributes in process `syz.2.888'. [ 189.616473][ T9406] netlink: 'syz.3.887': attribute type 2 has an invalid length. [ 189.670807][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'. [ 189.993563][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 190.044651][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'. [ 190.626568][ T9445] netlink: 'syz.4.897': attribute type 9 has an invalid length. [ 190.684952][ T9445] netlink: 'syz.4.897': attribute type 6 has an invalid length. [ 190.729619][ T9445] netlink: 'syz.4.897': attribute type 7 has an invalid length. [ 190.742490][ T9448] netlink: 'syz.1.898': attribute type 16 has an invalid length. [ 190.774104][ T9448] netlink: 'syz.1.898': attribute type 3 has an invalid length. [ 190.807831][ T9445] netlink: 'syz.4.897': attribute type 8 has an invalid length. [ 190.808342][ T9451] syzkaller0: entered promiscuous mode [ 190.832153][ T9451] syzkaller0: entered allmulticast mode [ 190.838678][ T9448] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.898'. [ 190.926140][ T9451] tipc: Started in network mode [ 190.973516][ T9451] tipc: Node identity 1afc3444239a, cluster identity 4711 [ 191.010223][ T9451] tipc: Enabled bearer , priority 0 [ 191.049764][ T9451] tipc: Resetting bearer [ 191.102269][ T9470] netlink: 'syz.0.903': attribute type 11 has an invalid length. [ 191.201405][ T9449] tipc: Resetting bearer [ 191.331218][ T9449] tipc: Disabling bearer [ 191.488706][ T9484] batman_adv: batadv0: Adding interface: dummy0 [ 191.520420][ T9484] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.631544][ T9484] batman_adv: batadv0: Interface activated: dummy0 [ 191.863542][ T9489] batadv0: mtu less than device minimum [ 191.907111][ T9489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.920035][ T9489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.931752][ T9489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.944767][ T9489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.956484][ T9489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.968149][ T9489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.979880][ T9489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.991813][ T9489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.003553][ T9489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.494112][ T9511] netlink: 'syz.0.911': attribute type 1 has an invalid length. [ 192.603443][ T9514] syzkaller0: entered promiscuous mode [ 192.646968][ T9514] syzkaller0: entered allmulticast mode [ 193.151692][ T9533] __nla_validate_parse: 4 callbacks suppressed [ 193.151710][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'. [ 193.191881][ T9535] netlink: 52 bytes leftover after parsing attributes in process `syz.3.917'. [ 193.414802][ T9542] bridge_slave_0: left allmulticast mode [ 193.447664][ T9542] bridge_slave_0: left promiscuous mode [ 193.478550][ T9542] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.538430][ T9542] bridge_slave_1: left promiscuous mode [ 193.556932][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.920'. [ 193.560889][ T9542] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.620270][ T9542] bond0: (slave bond_slave_0): Releasing backup interface [ 193.656072][ T9542] bond0: (slave bond_slave_1): Releasing backup interface [ 193.680724][ T9542] team0: Port device team_slave_1 removed [ 193.698539][ T9542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.716644][ T9542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.736184][ T9542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.747754][ T9542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.977612][ T9560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'. [ 194.227776][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.921'. [ 194.247961][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.450927][ T9560] bond3: entered promiscuous mode [ 194.497452][ T9560] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.567410][ T9563] bond3: entered allmulticast mode [ 194.759047][ T9571] bond3: (slave bridge2): making interface the new active one [ 194.795557][ T9571] bridge2: entered promiscuous mode [ 194.830439][ T9571] bridge2: entered allmulticast mode [ 194.872194][ T9571] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 195.240779][ T9613] IPv6: NLM_F_CREATE should be specified when creating new route [ 195.611298][ T9617] virt_wifi0 speed is unknown, defaulting to 1000 [ 195.635045][ T9617] xfrm0 speed is unknown, defaulting to 1000 [ 195.755356][ T9631] syzkaller0: entered promiscuous mode [ 195.763649][ T5604] Bluetooth: hci4: command 0x0406 tx timeout [ 195.793596][ T9631] syzkaller0: entered allmulticast mode [ 195.960910][ T9639] netlink: 316 bytes leftover after parsing attributes in process `syz.3.938'. [ 196.225255][ T9644] validate_nla: 1 callbacks suppressed [ 196.225273][ T9644] netlink: 'syz.1.939': attribute type 2 has an invalid length. [ 196.559406][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 196.597271][ T9654] Timeout policy `syz1' can only be used by L3 protocol number 35064 [ 197.136731][ T9666] syzkaller0: entered promiscuous mode [ 197.191889][ T9666] syzkaller0: entered allmulticast mode [ 197.412183][ T9678] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 197.891257][ T9715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.952'. [ 197.927468][ T9716] netlink: 'syz.1.953': attribute type 10 has an invalid length. [ 197.957746][ T9716] syz_tun: entered promiscuous mode [ 197.991628][ T9716] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 198.036962][ T35] bond0: (slave 45ÿ): interface is now down [ 198.066458][ T35] bond0: (slave syz_tun): interface is now down [ 198.121462][ T35] bond0: now running without any active interface! [ 198.647728][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.963'. [ 198.787213][ T9755] netlink: 44 bytes leftover after parsing attributes in process `syz.4.963'. [ 198.904709][ T9758] raw_sendmsg: syz.0.964 forgot to set AF_INET. Fix it! [ 198.948779][ T9748] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.518315][ T9771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.966'. [ 199.778996][ T9778] tap0: tun_chr_ioctl cmd 1074025677 [ 199.801936][ T9778] tap0: linktype set to 804 [ 199.826263][ T9778] netlink: 596 bytes leftover after parsing attributes in process `syz.4.967'. [ 200.534506][ T9790] netlink: 'syz.1.971': attribute type 7 has an invalid length. [ 200.552162][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.971'. [ 200.593306][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 200.962377][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.974'. [ 201.018123][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.974'. [ 201.153901][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 201.181209][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 201.452038][ T4922] Bluetooth: hci2: command 0x0406 tx timeout [ 201.452362][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 201.458242][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 201.511971][ T9829] tipc: Enabled bearer , priority 0 [ 201.704476][ T9836] net_ratelimit: 11 callbacks suppressed [ 201.704494][ T9836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.940878][ T9843] netlink: 'syz.4.986': attribute type 5 has an invalid length. [ 202.026039][ T9843] geneve3: entered promiscuous mode [ 202.031396][ T9843] geneve3: entered allmulticast mode [ 202.063582][ T761] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 35910 - 0 [ 202.102849][ T761] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 35910 - 0 [ 202.153539][ T761] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 35910 - 0 [ 202.417160][ T9820] tipc: Disabling bearer [ 202.562167][ T761] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 35910 - 0 [ 203.849753][ T9905] bridge0: port 3(syz_tun) entered blocking state [ 203.883719][ T9905] bridge0: port 3(syz_tun) entered disabled state [ 203.903059][ T9905] syz_tun: entered allmulticast mode [ 203.947634][ T9905] syz_tun: entered promiscuous mode [ 204.543243][ T9925] __nla_validate_parse: 36 callbacks suppressed [ 204.543260][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'. [ 205.218759][ T9966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1018'. [ 205.628593][ T9986] sctp: [Deprecated]: syz.3.1023 (pid 9986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.628593][ T9986] Use struct sctp_sack_info instead [ 206.332939][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 206.346430][T10012] netlink: 'syz.1.1031': attribute type 1 has an invalid length. [ 206.370215][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 206.377392][T10012] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1031'. [ 206.612765][T10015] vlan0: entered promiscuous mode [ 206.641545][T10015] bridge0: entered promiscuous mode [ 206.815331][T10021] bond5: ARP target 9.0.0.0 is already present [ 206.857730][T10021] bond5: option arp_ip_target: invalid value (9) [ 206.902700][T10021] bond5 (unregistering): Released all slaves [ 207.004709][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 207.059129][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 207.253744][T10037] IPv6: Can't replace route, no match found [ 207.283099][T10037] IPv6: Can't replace route, no match found [ 207.317003][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 207.333475][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.362436][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.387918][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 207.422667][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.478074][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.657955][T10044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1040'. [ 207.709789][T10042] team0 (unregistering): Port device team_slave_0 removed [ 207.745375][T10044] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.786068][T10042] team0 (unregistering): Port device team_slave_1 removed [ 207.829326][T10051] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.838873][T10051] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.897479][T10060] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.928292][T10060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.935608][T10060] IPv6: NLM_F_CREATE should be set when creating new route [ 207.942923][T10060] IPv6: NLM_F_CREATE should be set when creating new route [ 207.950184][T10060] IPv6: NLM_F_CREATE should be set when creating new route [ 208.127801][T10061] bond7 (unregistering): Released all slaves [ 208.182742][T10060] SET target dimension over the limit! [ 208.537080][T10073] ieee802154 phy0 wpan0: encryption failed: -90 [ 209.284514][T10097] syzkaller1: entered promiscuous mode [ 209.297132][T10097] syzkaller1: entered allmulticast mode [ 209.648071][T10113] macsec1: entered promiscuous mode [ 209.676682][T10122] __nla_validate_parse: 2 callbacks suppressed [ 209.676699][T10122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1052'. [ 209.722775][T10113] dummy0: entered promiscuous mode [ 209.752829][T10113] macsec1: entered allmulticast mode [ 209.991612][ T5720] dummy0: left promiscuous mode [ 210.009908][T10121] netlink: 'syz.1.1053': attribute type 4 has an invalid length. [ 210.032530][T10121] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 210.057784][T10121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.065851][T10127] veth0: entered promiscuous mode [ 210.071931][T10118] syzkaller1: entered promiscuous mode [ 210.090332][T10118] syzkaller1: entered allmulticast mode [ 210.099823][T10127] veth0: left promiscuous mode [ 210.813473][T10160] netlink: 'syz.4.1061': attribute type 2 has an invalid length. [ 210.826980][T10160] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1061'. [ 210.928825][T10168] sctp: [Deprecated]: syz.1.1064 (pid 10168) Use of int in max_burst socket option. [ 210.928825][T10168] Use struct sctp_assoc_value instead [ 210.993885][T10167] syzkaller0: entered promiscuous mode [ 211.035578][T10167] syzkaller0: entered allmulticast mode [ 211.080029][T10170] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 211.127013][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 211.177141][T10177] Cannot find del_set index 4 as target [ 211.375054][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 211.411663][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1068'. [ 211.441913][T10187] netlink: 'syz.4.1068': attribute type 18 has an invalid length. [ 212.170715][T10215] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1070'. [ 212.222714][T10219] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1072'. [ 212.300808][T10209] virt_wifi0 speed is unknown, defaulting to 1000 [ 212.417208][T10215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.529092][T10209] xfrm0 speed is unknown, defaulting to 1000 [ 212.617395][T10237] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1074'. [ 212.741096][T10239] netlink: 'syz.2.1072': attribute type 6 has an invalid length. [ 213.007881][T10245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.144666][T10247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.188774][T10248] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20004 [ 213.606520][T10263] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 214.231284][T10295] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1083'. [ 214.440590][T10305] netlink: 'syz.0.1086': attribute type 11 has an invalid length. [ 214.895590][T10311] macvtap1: entered allmulticast mode [ 214.915559][T10311] dummy0: entered allmulticast mode [ 214.951999][T10311] dummy0: left allmulticast mode [ 214.972447][T10320] netlink: 'syz.0.1089': attribute type 1 has an invalid length. [ 215.057038][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 215.074098][T10317] netlink: 'syz.1.1088': attribute type 1 has an invalid length. [ 215.090709][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1089'. [ 215.261730][T10320] 8021q: adding VLAN 0 to HW filter on device bond8 [ 215.309836][T10315] bond8: entered promiscuous mode [ 215.610494][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1093'. [ 215.658327][T10344] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1093'. [ 215.796121][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1093'. [ 216.808490][T10389] tipc: Can't bind to reserved service type 2 [ 217.195402][T10397] bond0: (slave ip6tnl0): refused to change device type [ 217.256549][T10396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1104'. [ 217.288473][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 217.788092][T10413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.835039][T10415] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.842358][T10415] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.884662][T10415] bridge0: entered allmulticast mode [ 217.951825][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1112'. [ 218.177665][T10420] bond4 (unregistering): Released all slaves [ 218.257193][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'. [ 219.234137][T10455] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 219.605619][T10474] netlink: 'syz.2.1125': attribute type 10 has an invalid length. [ 219.716375][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 219.911870][T10471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.941114][T10482] syzkaller1: entered promiscuous mode [ 219.969041][T10482] syzkaller1: entered allmulticast mode [ 221.193828][T10521] batman_adv: batadv0: Adding interface: gretap1 [ 221.265739][T10521] batman_adv: batadv0: The MTU of interface gretap1 is too small (1454) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.382275][T10521] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 221.486225][T10525] __nla_validate_parse: 1 callbacks suppressed [ 221.486272][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1139'. [ 221.540210][T10528] bond5 (unregistering): Released all slaves [ 221.649320][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1139'. [ 221.754007][T10533] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.761308][T10533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.769079][T10533] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.776273][T10533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.868707][T10539] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1143'. [ 221.898770][T10533] veth0_to_bridge: left promiscuous mode [ 221.995566][T10533] veth1_virt_wifi: left promiscuous mode [ 222.013010][T10533] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 222.108645][T10528] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 223.100408][ T47] IPVS: starting estimator thread 0... [ 223.166215][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1152'. [ 223.182003][T10570] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 223.199242][T10575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.237566][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 223.246631][T10571] IPVS: using max 30 ests per chain, 72000 per kthread [ 223.290972][T10578] netlink: 'syz.2.1154': attribute type 1 has an invalid length. [ 223.310465][T10581] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1152'. [ 223.342965][T10582] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1154'. [ 223.421031][T10575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.478598][T10586] netlink: 'syz.1.1155': attribute type 4 has an invalid length. [ 223.528237][T10570] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.535622][T10570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.544499][T10570] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.551672][T10570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.654927][T10570] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 223.673043][T10591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'. [ 224.674193][T10629] netlink: 'syz.4.1165': attribute type 39 has an invalid length. [ 224.781047][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1167'. [ 225.439804][T10643] netlink: 'syz.1.1170': attribute type 1 has an invalid length. [ 225.479639][T10643] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 225.590881][T10650] netlink: 'syz.3.1171': attribute type 23 has an invalid length. [ 225.831217][T10655] bond5: (slave bridge0): Releasing backup interface [ 225.883956][T10660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1174'. [ 226.071137][T10655] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.078945][T10655] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.198445][T10655] bond3: (slave team0): Releasing active interface [ 226.223102][T10655] team0: left promiscuous mode [ 226.238902][T10655] team_slave_0: left promiscuous mode [ 226.249549][T10655] team_slave_1: left promiscuous mode [ 226.255822][T10655] team0: left allmulticast mode [ 226.260917][T10655] team_slave_0: left allmulticast mode [ 226.266990][T10655] team_slave_1: left allmulticast mode [ 226.289269][T10655] batman_adv: batadv0: Interface deactivated: dummy0 [ 226.301154][T10655] batman_adv: batadv0: Removing interface: dummy0 [ 226.316404][T10655] bridge_slave_0: left allmulticast mode [ 226.322328][T10655] bridge_slave_0: left promiscuous mode [ 226.337917][T10655] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.352741][T10655] bridge_slave_1: left allmulticast mode [ 226.358851][T10655] bridge_slave_1: left promiscuous mode [ 226.364785][T10655] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.379818][T10655] bond0: (slave bond_slave_0): Releasing backup interface [ 226.410322][T10655] team0: Port device team_slave_0 removed [ 226.431279][T10655] team0: Port device team_slave_1 removed [ 226.445251][T10655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.455390][T10655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.464615][T10655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.472146][T10655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.483100][T10655] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 227.271651][T10696] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1184'. [ 227.615953][T10704] netlink: 1696 bytes leftover after parsing attributes in process `syz.2.1188'. [ 227.640752][T10709] netlink: 'syz.0.1187': attribute type 3 has an invalid length. [ 227.655382][T10704] netlink: 1696 bytes leftover after parsing attributes in process `syz.2.1188'. [ 227.673191][T10709] netlink: 'syz.0.1187': attribute type 1 has an invalid length. [ 227.691171][T10710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.703966][T10709] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1187'. [ 227.772668][T10724] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 228.183051][T10743] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1195'. [ 228.310842][T10743] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1195'. [ 228.481153][T10724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.457478][T10787] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1205'. [ 229.503825][T10797] syzkaller0: entered promiscuous mode [ 229.534323][T10787] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 229.547021][T10797] syzkaller0: entered allmulticast mode [ 229.791737][T10806] syzkaller0: entered promiscuous mode [ 229.813855][T10806] syzkaller0: entered allmulticast mode [ 229.859861][T10806] tipc: Enabled bearer , priority 0 [ 229.922384][T10806] tipc: Resetting bearer [ 230.079346][T10805] tipc: Resetting bearer [ 230.141897][T10805] tipc: Disabling bearer [ 230.618356][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1218'. [ 231.346532][T10838] syzkaller0: entered promiscuous mode [ 231.375450][T10838] syzkaller0: entered allmulticast mode [ 231.611823][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 231.784394][T10849] pim6reg: entered allmulticast mode [ 231.877134][T10863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1224'. [ 231.929312][T10865] netlink: 'syz.3.1225': attribute type 6 has an invalid length. [ 231.997917][T10865] netlink: 'syz.3.1225': attribute type 5 has an invalid length. [ 232.018353][T10874] netlink: 'syz.2.1227': attribute type 11 has an invalid length. [ 232.450207][T10894] Bluetooth: MGMT ver 1.23 [ 232.681150][T10905] netlink: 'syz.4.1235': attribute type 4 has an invalid length. [ 232.713320][T10905] __nla_validate_parse: 4 callbacks suppressed [ 232.713336][T10905] netlink: 3581 bytes leftover after parsing attributes in process `syz.4.1235'. [ 232.822728][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'. [ 232.892048][T10907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.276587][T10894] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 233.462445][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1242'. [ 233.839434][T10939] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1248'. [ 233.998050][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 234.327877][T10951] block nbd3: not configured, cannot reconfigure [ 234.859467][T10970] netlink: 524 bytes leftover after parsing attributes in process `syz.0.1253'. [ 234.899408][T10966] syzkaller0: entered promiscuous mode [ 234.931869][T10966] syzkaller0: entered allmulticast mode [ 234.984575][T10967] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.993036][T10967] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.035534][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1256'. [ 235.090454][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1256'. [ 235.127373][T10966] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.134659][T10966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.142181][T10966] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.149473][T10966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.279674][T10966] bridge0: entered promiscuous mode [ 235.289429][T10966] bridge0: entered allmulticast mode [ 235.557207][ T29] audit: type=1800 audit(1786301921.836:14): pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1261" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1266 res=0 errno=0 [ 236.296407][T11002] veth0: entered promiscuous mode [ 236.331593][T11002] veth0: left promiscuous mode [ 236.396225][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 236.680167][T11013] ipip0: entered promiscuous mode [ 236.688047][T11013] ipip0: entered allmulticast mode [ 236.765458][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 236.836621][T11018] dvmrp0: entered allmulticast mode [ 237.205862][T11028] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 237.265028][T11028] bond3 (unregistering): Released all slaves [ 237.944009][T11067] __nla_validate_parse: 4 callbacks suppressed [ 237.944027][T11067] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1282'. [ 237.975653][T11063] netlink: 'syz.4.1280': attribute type 1 has an invalid length. [ 238.029007][T11063] bond4: entered promiscuous mode [ 238.034320][T11063] bond4: entered allmulticast mode [ 238.039994][T11063] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.115018][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'. [ 238.221546][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1284'. [ 238.647343][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1289'. [ 238.657703][T11100] tap0: tun_chr_ioctl cmd 1074025676 [ 238.680449][T11100] tap0: owner set to 0 [ 238.687925][T11097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1289'. [ 239.035714][T11110] syzkaller0: entered promiscuous mode [ 239.041372][T11110] syzkaller0: entered allmulticast mode [ 239.084814][T11115] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 4, id = 0 [ 239.096383][T11114] ªªªªªª: renamed from vlan0 (while UP) [ 239.420519][T11125] vlan0: entered promiscuous mode [ 239.882191][T11141] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 240.237127][T11155] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1303'. [ 242.656972][T11133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.979517][T11187] netlink: 'syz.0.1312': attribute type 7 has an invalid length. [ 243.026662][T11187] netlink: 'syz.0.1312': attribute type 7 has an invalid length. [ 243.064690][T11192] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1313'. [ 243.084194][T11192] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1313'. [ 243.119637][T11199] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 243.146018][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 243.180727][T11199] SET target dimension over the limit! [ 243.245062][T11200] xt_hashlimit: size too large, truncated to 1048576 [ 243.608893][T11218] netlink: 'syz.0.1319': attribute type 1 has an invalid length. [ 243.868324][T11228] netlink: 'syz.3.1321': attribute type 27 has an invalid length. [ 244.219740][T11240] netlink: 'syz.4.1326': attribute type 3 has an invalid length. [ 244.302008][T11241] syzkaller1: entered promiscuous mode [ 244.318575][T11241] syzkaller1: entered allmulticast mode [ 244.639513][T11253] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1328'. [ 244.668836][T11234] PKCS7: Unknown OID: [4] (bad) [ 244.682476][T11234] PKCS7: Only support pkcs7_signedData type [ 244.729872][T11255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1329'. [ 245.158780][T11266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1332'. [ 245.231245][T11266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1332'. [ 245.383065][T11281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1336'. [ 245.405872][T11284] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1335'. [ 245.747424][T11290] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 245.758620][T11293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1339'. [ 245.822237][T11295] netlink: 'syz.0.1338': attribute type 83 has an invalid length. [ 245.960441][T11299] xt_hashlimit: size too large, truncated to 1048576 [ 246.040034][ T7607] nci: nci_rsp_packet: unknown rsp opcode 0x229 [ 246.071338][T11305] netlink: 'syz.3.1340': attribute type 1 has an invalid length. [ 246.295815][T11305] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.521441][T11318] vlan0: entered promiscuous mode [ 246.527635][T11318] macvlan0: entered promiscuous mode [ 246.668902][T11295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.675779][T11373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.755530][T11373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.116508][T11397] __nla_validate_parse: 6 callbacks suppressed [ 248.116526][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1361'. [ 248.160404][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1360'. [ 248.770033][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 248.830260][T11400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1362'. [ 248.956607][T11413] netlink: 'syz.0.1365': attribute type 1 has an invalid length. [ 249.318098][T11425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1369'. [ 249.698502][T11433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1372'. [ 250.032111][T11447] netlink: 'syz.4.1375': attribute type 4 has an invalid length. [ 250.068245][T11447] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1375'. [ 250.142705][T11447] .`: renamed from bond0 (while UP) [ 250.589391][T11467] openvswitch: netlink: Missing key (keys=40, expected=100) [ 251.041807][T11486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1384'. [ 251.284903][T11490] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1386'. [ 251.516734][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'. [ 251.990669][T11512] unsupported nla_type 97 [ 252.149131][T11520] netlink: 'syz.0.1393': attribute type 10 has an invalid length. [ 252.602903][T11536] SET target dimension over the limit! [ 252.720722][T11533] syzkaller0: entered promiscuous mode [ 252.777627][T11533] syzkaller0: entered allmulticast mode [ 253.049731][T11544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.380524][T11551] netlink: 'syz.2.1404': attribute type 1 has an invalid length. [ 253.496903][T11557] __nla_validate_parse: 6 callbacks suppressed [ 253.496921][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1406'. [ 254.280170][T11560] bridge0: port 3(syz_tun) entered blocking state [ 254.286830][T11560] bridge0: port 3(syz_tun) entered forwarding state [ 254.309059][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'. [ 254.354915][T11560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.395147][T11560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.495513][T11560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.529632][T11560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.565686][T11560] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 255.156216][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1411'. [ 255.347720][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880315a6800: rx timeout, send abort [ 255.500080][T11594] block nbd0: reconnected socket [ 255.684666][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.853822][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067f71000: rx timeout, send abort [ 255.862302][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880315a6800: abort rx timeout. Force session deactivation [ 256.241676][ T5607] block nbd0: Receive control failed (result -32) [ 256.364156][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067f71000: abort rx timeout. Force session deactivation [ 256.809005][T11603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1416'. [ 258.008346][ T7607] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.015570][ T7607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.025119][ T7607] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.032303][ T7607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.294797][T11614] netlink: 'syz.3.1418': attribute type 39 has an invalid length. [ 258.699188][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1420'. [ 258.786463][T11627] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 259.120471][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'. [ 260.684699][T11693] netlink: 'syz.0.1428': attribute type 1 has an invalid length. [ 262.156983][T11755] xt_hashlimit: max too large, truncated to 1048576 [ 262.167765][T11759] IPVS: length: 218 != 8 [ 262.183475][T11755] xt_hashlimit: overflow, try lower: 137438953472/8 [ 263.492692][T11773] netlink: 'syz.0.1441': attribute type 4 has an invalid length. [ 263.575401][T11778] netlink: 'syz.2.1443': attribute type 1 has an invalid length. [ 263.620225][T11780] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1444'. [ 263.646729][T11778] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1443'. [ 263.746713][T11781] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1443'. [ 263.829202][T11778] netlink: 'syz.2.1443': attribute type 1 has an invalid length. [ 263.888493][T11783] netlink: 'syz.3.1445': attribute type 7 has an invalid length. [ 263.971448][T11783] netlink: 'syz.3.1445': attribute type 7 has an invalid length. [ 264.038228][ T761] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.155726][ T761] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.213394][ T761] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.266247][ T761] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.480716][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1450'. [ 264.557477][T11805] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 264.775679][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1451'. [ 265.192936][T11811] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 265.243437][T11811] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.308560][T11811] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 35910 - 0 [ 265.361125][T11821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1455'. [ 265.732945][T11824] IPv6: Can't replace route, no match found [ 265.820570][T11832] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 266.621190][T11854] syz_tun: entered allmulticast mode [ 266.727445][T11857] pim6reg: entered allmulticast mode [ 266.772509][T11854] pim6reg: left allmulticast mode [ 266.844072][T11854] syz_tun: left allmulticast mode [ 267.132536][T11867] netlink: 'syz.1.1464': attribute type 32 has an invalid length. [ 267.180840][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'. [ 267.333221][T11867] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 267.367949][T11872] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1465'. [ 267.447531][ T5268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.782298][T11876] team0: Port device xfrm0 added [ 267.830591][ T5720] xfrm0 speed is unknown, defaulting to 1000 [ 267.883837][ T5614] xfrm0 speed is unknown, defaulting to 1000 [ 267.959830][ T5614] xfrm0 speed is unknown, defaulting to 1000 [ 268.131400][T11887] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1470'. [ 268.185979][T11887] openvswitch: netlink: Flow key attr not present in new flow. [ 268.215671][T11894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1472'. [ 268.433069][T11904] netlink: 'syz.2.1475': attribute type 23 has an invalid length. [ 268.468436][T11904] netlink: 'syz.2.1475': attribute type 21 has an invalid length. [ 268.479628][T11902] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 268.521349][T11904] IPv6: NLM_F_CREATE should be specified when creating new route [ 269.035188][T11929] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 269.764279][T11929] infiniband syz2: set active [ 269.773979][T11929] infiniband syz2: added bridge_slave_0 [ 269.872072][T11929] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 269.903786][T11929] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 269.934660][T11943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1488'. [ 269.978053][T11929] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 269.989918][T11943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1488'. [ 270.021843][T11943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1488'. [ 270.061094][T11929] RDS/IB: syz2: added [ 270.075053][T11929] smc: adding ib device syz2 with port count 1 [ 270.087784][T11943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1488'. [ 270.102192][T11929] smc: ib device syz2 port 1 has no pnetid [ 270.164365][T11943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1488'. [ 270.186081][T11943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1488'. [ 270.240166][T11943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1488'. [ 270.320223][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 270.359205][T11958] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 270.442363][T11943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1488'. [ 270.501822][T11943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1488'. [ 271.189852][T11983] netlink: 'syz.3.1500': attribute type 1 has an invalid length. [ 271.569112][T11992] virt_wifi0 speed is unknown, defaulting to 1000 [ 271.626213][T11992] xfrm0 speed is unknown, defaulting to 1000 [ 272.118816][ T13] IPVS: starting estimator thread 0... [ 272.243325][T12020] IPVS: using max 30 ests per chain, 72000 per kthread [ 272.631675][T12035] netlink: 'syz.4.1514': attribute type 5 has an invalid length. [ 273.009648][T12045] bond9: option lacp_active: invalid value (5) [ 273.097350][T12045] bond9 (unregistering): Released all slaves [ 274.190025][T12078] xt_hashlimit: size too large, truncated to 1048576 [ 275.002854][T12099] syzkaller0: entered promiscuous mode [ 275.023260][T12099] syzkaller0: entered allmulticast mode [ 276.591828][T12122] __nla_validate_parse: 20 callbacks suppressed [ 276.591847][T12122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1535'. [ 278.440190][T12131] syzkaller1: entered promiscuous mode [ 278.463196][T12131] syzkaller1: entered allmulticast mode [ 278.860784][T12141] ipt_REJECT: TCP_RESET invalid for non-tcp [ 278.868289][T12147] vlan1: entered promiscuous mode [ 278.876871][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 278.887673][T12147] .`: entered promiscuous mode [ 278.895271][T12141] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 278.897966][T12147] bond_slave_0: entered promiscuous mode [ 278.914338][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 278.927009][T12147] bond_slave_1: entered promiscuous mode [ 280.273034][T12153] netlink: 'syz.0.1542': attribute type 3 has an invalid length. [ 280.569716][T12143] virt_wifi0 speed is unknown, defaulting to 1000 [ 280.603096][T12143] xfrm0 speed is unknown, defaulting to 1000 [ 281.000091][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1548'. [ 281.064066][T12177] dvmrp0: entered allmulticast mode [ 281.076731][T12178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1548'. [ 281.099985][T12176] dvmrp0: left allmulticast mode [ 281.559499][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'. [ 281.605381][T12185] ip6erspan0: entered promiscuous mode [ 281.628924][T12185] ip6erspan0: entered allmulticast mode [ 282.340563][T12193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.062562][T12222] xt_hashlimit: size too large, truncated to 1048576 [ 283.383871][T12227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1564'. [ 283.726664][T12242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1567'. [ 283.771222][T12244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.139476][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'. [ 284.714268][T12285] netlink: 'syz.2.1579': attribute type 2 has an invalid length. [ 285.102371][T12308] bond5: option downdelay: invalid value (18446744073709551487) [ 285.110428][T12308] bond5: option downdelay: allowed values 0 - 2147483647 [ 285.162936][T12308] bond5 (unregistering): Released all slaves [ 285.756472][T12330] Cannot find del_set index 17 as target [ 285.931473][T12336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'. [ 285.957547][T12336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1591'. [ 286.021996][T12336] geneve2: entered promiscuous mode [ 286.045816][T12336] geneve2: entered allmulticast mode [ 286.183573][T12349] netlink: 'syz.1.1594': attribute type 29 has an invalid length. [ 286.378071][T12351] syzkaller0: entered promiscuous mode [ 286.384515][T12357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1598'. [ 286.393487][T12351] syzkaller0: entered allmulticast mode [ 286.400931][T12356] netlink: 'syz.0.1597': attribute type 5 has an invalid length. [ 286.429247][T12351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1595'. [ 286.694575][T12364] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1596'. [ 286.812729][T12378] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.1602'. [ 287.140969][T12385] vlan2: entered promiscuous mode [ 287.155108][T12385] bond0: entered promiscuous mode [ 287.552066][T12409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1608'. [ 287.974791][T12423] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 288.072938][T12433] netlink: 'syz.3.1612': attribute type 5 has an invalid length. [ 288.791243][T12467] tipc: Failed to remove unknown binding: 66,0,0/10463914:2632901931/2632901932 [ 289.344789][T12475] __nla_validate_parse: 1 callbacks suppressed [ 289.344809][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1623'. [ 289.695605][T12467] xt_hashlimit: size too large, truncated to 1048576 [ 289.858858][T12484] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1627'. [ 289.998830][T12497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1630'. [ 290.191171][T12504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1632'. [ 290.211547][T12504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1632'. [ 290.239396][T12504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1632'. [ 290.275838][T12504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1632'. [ 290.324465][T12508] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1633'. [ 290.348151][T12508] nbd: must specify at least one socket [ 290.534838][T12520] veth1_to_bond: entered allmulticast mode [ 290.809025][T12520] veth1_to_bond: left allmulticast mode [ 290.858662][T12531] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1639'. [ 290.930653][T12531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.004882][T12531] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 291.084252][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1641'. [ 291.162878][T12545] netlink: 'syz.3.1641': attribute type 20 has an invalid length. [ 291.674219][T11684] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 291.714895][T11684] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 291.763762][T11684] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 291.915061][T12562] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 292.060522][T12566] x_tables: duplicate underflow at hook 1 [ 292.444561][ T13] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 292.585950][T12589] netlink: 'syz.3.1652': attribute type 3 has an invalid length. [ 292.649219][T12584] netlink: 'syz.3.1652': attribute type 3 has an invalid length. [ 292.839559][T12593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.003047][T12599] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20003 [ 293.094215][T12595] 8021q: adding VLAN 0 to HW filter on device bond9 [ 293.138417][T12602] bond9 (unregistering): Released all slaves [ 293.921794][T12641] xt_hashlimit: size too large, truncated to 1048576 [ 293.974603][T12641] xt_hashlimit: max too large, truncated to 1048576 [ 294.072276][T12647] vlan2: entered promiscuous mode [ 294.121230][T12647] bond_slave_1: entered promiscuous mode [ 294.345104][T12647] netlink: NAT attribute has 5 unknown bytes [ 294.353587][T12647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.411785][T12667] __nla_validate_parse: 10 callbacks suppressed [ 294.411805][T12667] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1668'. [ 294.890272][T12686] veth1_macvtap: left promiscuous mode [ 294.899878][T12688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1673'. [ 294.907766][T12686] macsec0: entered allmulticast mode [ 294.926397][T12688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1673'. [ 295.123247][T12661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.299468][T12686] veth1_macvtap: entered promiscuous mode [ 295.335803][T12686] veth1_macvtap: entered allmulticast mode [ 295.345169][T12686] macsec0: left allmulticast mode [ 295.405313][T12686] veth1_macvtap: left allmulticast mode [ 295.512958][T12708] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1679'. [ 295.552265][T12708] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 295.578566][T12710] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1679'. [ 295.588422][T12710] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 295.780947][T12721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1680'. [ 295.914460][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'. [ 295.990499][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 296.457722][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1688'. [ 296.740709][T12745] netlink: 'syz.2.1689': attribute type 32 has an invalid length. [ 296.762713][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1689'. [ 297.078948][T12745] bond6: option coupled_control: invalid value (2) [ 297.163211][T12745] bond6 (unregistering): Released all slaves [ 300.061167][T12894] netlink: 'syz.1.1726': attribute type 3 has an invalid length. [ 300.140533][T12894] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 300.201090][T12902] netlink: 'syz.1.1726': attribute type 3 has an invalid length. [ 300.262182][T12888] __nla_validate_parse: 4 callbacks suppressed [ 300.262202][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 301.578286][T12944] syzkaller0: entered promiscuous mode [ 301.611768][T12944] syzkaller0: entered allmulticast mode [ 301.919976][T12961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1744'. [ 302.398355][T12978] netlink: 'syz.0.1749': attribute type 12 has an invalid length. [ 302.531650][T12979] netlink: 'syz.0.1749': attribute type 12 has an invalid length. [ 302.531978][T12980] virt_wifi0 speed is unknown, defaulting to 1000 [ 302.577786][T12980] xfrm0 speed is unknown, defaulting to 1000 [ 302.912851][T12992] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 303.610823][T13013] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1760'. [ 303.661675][T13013] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1760'. [ 303.748092][T13013] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1760'. [ 304.366635][T13030] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1764'. [ 304.389811][T13027] syzkaller1: entered allmulticast mode [ 304.397362][T13030] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1764'. [ 304.408617][T13030] netlink: 'syz.2.1764': attribute type 6 has an invalid length. [ 304.932164][T13041] bond0: entered promiscuous mode [ 304.951287][T13041] bond_slave_0: entered promiscuous mode [ 304.969278][T13041] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 305.041641][T13041] batadv0: entered promiscuous mode [ 305.091080][T13041] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 305.112845][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1768'. [ 305.346982][T13049] hsr_slave_1 (unregistering): left promiscuous mode [ 305.664489][T13062] netlink: 'syz.3.1772': attribute type 21 has an invalid length. [ 305.688735][T13062] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1772'. [ 305.703942][T13062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1772'. [ 306.595645][T13099] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1785'. [ 307.066510][T13116] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1789'. [ 307.297763][T13121] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1790'. [ 307.583056][T13130] syzkaller0: entered promiscuous mode [ 307.623022][T13130] syzkaller0: entered allmulticast mode [ 307.700180][T13134] veth0: entered promiscuous mode [ 307.721715][T13135] tipc: Started in network mode [ 307.739540][T13135] tipc: Node identity 860ed0defd87, cluster identity 4711 [ 307.761159][T13135] tipc: Enabled bearer , priority 0 [ 307.806171][T13130] tipc: Resetting bearer [ 307.829735][T13133] veth0: left promiscuous mode [ 307.841752][T13127] tipc: Resetting bearer [ 307.953584][T13127] tipc: Disabling bearer [ 308.005237][T13139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1795'. [ 308.127239][T13145] netlink: 64595 bytes leftover after parsing attributes in process `syz.2.1796'. [ 308.337127][T13154] netlink: Invalid conntrack helper [ 308.342631][T13154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.354325][T13154] xt_hashlimit: size too large, truncated to 1048576 [ 308.361129][T13154] xt_hashlimit: max too large, truncated to 1048576 [ 308.368601][T13154] xt_hashlimit: overflow, rate too high: 0 [ 308.380960][T13149] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 308.398627][T13149] bond5 (unregistering): Released all slaves [ 308.758031][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 308.793182][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1801'. [ 308.839764][T13165] netlink: 'syz.1.1801': attribute type 14 has an invalid length. [ 308.896985][T13165] netlink: 'syz.1.1801': attribute type 13 has an invalid length. [ 309.349785][T13180] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1805'. [ 309.389266][T13177] syzkaller0: entered promiscuous mode [ 309.412670][T13177] syzkaller0: entered allmulticast mode [ 309.442442][T13182] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 309.590821][T13184] syzkaller0: entered promiscuous mode [ 309.625396][T13184] syzkaller0: entered allmulticast mode [ 309.978584][T13197] netlink: 'syz.3.1812': attribute type 10 has an invalid length. [ 310.075331][T13197] geneve3: entered promiscuous mode [ 310.107279][T13197] geneve3: entered allmulticast mode [ 310.478675][ T29] audit: type=1804 audit(1786301996.756:15): pid=13218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1819" name="/newroot/383/cgroup.controllers" dev="tmpfs" ino=1973 res=1 errno=0 [ 310.607409][T13231] xt_TCPMSS: Only works on TCP SYN packets [ 310.631562][ T29] audit: type=1800 audit(1786301996.756:16): pid=13218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1819" name="cgroup.controllers" dev="tmpfs" ino=1973 res=0 errno=0 [ 310.675750][T13227] syzkaller0: entered promiscuous mode [ 310.698248][T13227] syzkaller0: entered allmulticast mode [ 310.791540][T13240] __nla_validate_parse: 5 callbacks suppressed [ 310.791558][T13240] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1824'. [ 311.368663][T13255] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1828'. [ 313.302168][T13215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.748748][T13266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1831'. [ 313.752438][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1833'. [ 313.800980][T13270] SET target dimension over the limit! [ 313.931630][T13290] bond6: entered promiscuous mode [ 313.961992][T13290] bond6: entered allmulticast mode [ 314.233781][T13296] netlink: 'syz.0.1839': attribute type 1 has an invalid length. [ 314.276304][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1841'. [ 314.470625][T13296] 8021q: adding VLAN 0 to HW filter on device bond9 [ 314.554779][T13306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1838'. [ 314.560129][T13300] virt_wifi0 speed is unknown, defaulting to 1000 [ 314.662490][T13300] xfrm0 speed is unknown, defaulting to 1000 [ 315.816001][T13369] tipc: Enabling of bearer rejected, failed to enable media [ 316.060701][T13378] tipc: Enabling of bearer rejected, failed to enable media [ 316.239727][T13387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1850'. [ 316.558732][T13397] syzkaller0: entered promiscuous mode [ 316.585743][T13397] syzkaller0: entered allmulticast mode [ 316.662383][T13397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1849'. [ 316.808808][ T5610] udevd[5610]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 317.129416][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.196576][T13428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1856'. [ 317.523779][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1857'. [ 317.562108][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1857'. [ 317.582776][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1857'. [ 317.651425][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1857'. [ 319.065513][T13477] netlink: 2736 bytes leftover after parsing attributes in process `syz.0.1867'. [ 319.424529][T13499] syzkaller0: entered promiscuous mode [ 319.471205][T13499] syzkaller0: entered allmulticast mode [ 319.627879][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1869'. [ 320.140292][T13515] syzkaller0: entered promiscuous mode [ 320.153567][T13515] syzkaller0: entered allmulticast mode [ 320.631087][T13535] bridge2: entered promiscuous mode [ 320.657563][T13535] bridge2: entered allmulticast mode [ 321.237973][T13553] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 321.386309][T13567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1887'. [ 321.630178][T13575] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1890'. [ 322.517188][T13611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1899'. [ 322.917085][T13631] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 322.948237][T13631] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 323.125503][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1909'. [ 323.162131][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1911'. [ 323.258460][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 323.358141][T13647] bond0: Unable to set down delay as MII monitoring is disabled [ 323.414144][T13647] ip_tables: iptables: counters copy to user failed while replacing table [ 323.458714][T13647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1912'. [ 324.424428][T13682] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1922'. [ 324.647021][T13696] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.728391][T13697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1926'. [ 324.888302][T13705] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1928'. [ 325.220033][T13710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.371897][T13717] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 325.601467][T13719] netlink: 'syz.1.1934': attribute type 2 has an invalid length. [ 325.641359][T13721] Unsupported ieee802154 address type: 0 [ 325.923852][T13732] netlink: 'syz.4.1937': attribute type 1 has an invalid length. [ 326.060102][T13732] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 326.218922][T13750] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 326.616860][T13767] __nla_validate_parse: 3 callbacks suppressed [ 326.616881][T13767] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1947'. [ 327.706530][T13806] netlink: 'syz.3.1956': attribute type 1 has an invalid length. [ 327.852718][T13806] bond5: entered promiscuous mode [ 327.893614][T13806] 8021q: adding VLAN 0 to HW filter on device bond5 [ 328.090760][T13813] bond5: (slave bridge4): making interface the new active one [ 328.145702][T13813] bridge4: entered promiscuous mode [ 328.218764][T13813] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 328.467467][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1962'. [ 328.830689][T13843] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1966'. [ 328.887352][T13843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1966'. [ 329.253130][T13851] netlink: 'syz.0.1967': attribute type 12 has an invalid length. [ 329.478901][T13862] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1970'. [ 329.822047][T13866] bond5: option arp_all_targets: invalid value (3) [ 329.867289][T13866] bond5 (unregistering): Released all slaves [ 329.919779][T13870] bridge0: port 3(syz_tun) entered disabled state [ 329.950288][T13870] syz_tun: left allmulticast mode [ 329.986225][T13870] syz_tun: left promiscuous mode [ 330.016656][T13870] bridge0: port 3(syz_tun) entered disabled state [ 330.289757][T13876] syzkaller0: entered promiscuous mode [ 330.302894][T13899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 330.312565][T13876] syzkaller0: entered allmulticast mode [ 333.113591][T13896] tipc: Enabled bearer , priority 0 [ 333.201704][T13904] netlink: 'syz.2.1981': attribute type 10 has an invalid length. [ 333.221436][T13901] syzkaller0: entered promiscuous mode [ 333.228274][T13901] syzkaller0: entered allmulticast mode [ 333.284363][T13909] tipc: Resetting bearer [ 333.311053][T13887] tipc: Resetting bearer [ 333.384386][T13887] tipc: Disabling bearer [ 333.465612][T13912] virt_wifi0 speed is unknown, defaulting to 1000 [ 333.492267][T13912] xfrm0 speed is unknown, defaulting to 1000 [ 333.735167][T13937] syzkaller0: entered promiscuous mode [ 333.751609][T13937] syzkaller0: entered allmulticast mode [ 333.782832][T13937] tipc: Enabled bearer , priority 0 [ 333.836518][T13936] tipc: Resetting bearer [ 333.954013][T13941] netlink: 'syz.2.1990': attribute type 11 has an invalid length. [ 333.966760][T13936] tipc: Disabling bearer [ 334.214178][T13943] netlink: 'syz.3.1991': attribute type 13 has an invalid length. [ 334.271942][T13957] netlink: 320 bytes leftover after parsing attributes in process `syz.0.1993'. [ 334.316692][T13957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1993'. [ 334.369087][T13957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1993'. [ 334.430081][T13957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1993'. [ 334.907588][T13985] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2000'. [ 334.926696][T13984] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2000'. [ 334.946041][T13985] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.953831][T13985] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.102377][T13991] netlink: 'syz.1.2001': attribute type 2 has an invalid length. [ 335.176258][T13991] : entered promiscuous mode [ 335.412233][T13995] syzkaller0: entered promiscuous mode [ 335.434761][T13995] syzkaller0: entered allmulticast mode [ 335.460641][T13995] tipc: Enabled bearer , priority 0 [ 335.492737][T13995] tipc: Resetting bearer [ 335.549243][T13994] tipc: Resetting bearer [ 335.598063][T13994] tipc: Disabling bearer [ 335.652354][T14002] netlink: 'syz.0.2004': attribute type 30 has an invalid length. [ 335.661617][T14002] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2004'. [ 335.801235][T14006] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2005'. [ 335.961138][T14013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2006'. [ 336.052432][T14016] ip_tables: iptables: counters copy to user failed while replacing table [ 336.678786][T14038] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 336.800945][T14044] sock: sock_set_timeout: `syz.1.2015' (pid 14044) tries to set negative timeout [ 336.869140][T14042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2014'. [ 337.833834][T14072] nbd: socks must be embedded in a SOCK_ITEM attr [ 338.685907][T14061] ip_tables: iptables: counters copy to user failed while replacing table [ 339.091772][T14119] veth0_macvtap: left promiscuous mode [ 339.287540][T14129] netlink: 'syz.4.2035': attribute type 8 has an invalid length. [ 339.289931][T14130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.302635][T14130] IPv6: NLM_F_CREATE should be set when creating new route [ 339.309946][T14130] IPv6: NLM_F_CREATE should be set when creating new route [ 339.596593][T14144] __nla_validate_parse: 5 callbacks suppressed [ 339.596620][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2041'. [ 340.331811][T14169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.634139][T14180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2055'. [ 340.784668][T14180] 8021q: adding VLAN 0 to HW filter on device bond6 [ 340.835982][T14183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.909441][T14192] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2059'. [ 340.949545][T14196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2060'. [ 341.212079][T14209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2061'. [ 341.240610][T14211] netlink: 'syz.3.2063': attribute type 2 has an invalid length. [ 341.280025][T14211] netlink: 'syz.3.2063': attribute type 8 has an invalid length. [ 341.324873][T14211] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2063'. [ 341.817627][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'. [ 341.871303][T14229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2066'. [ 342.001931][T14229] bond7 (unregistering): Released all slaves [ 342.215172][T14236] gretap0: entered promiscuous mode [ 342.265496][T14236] macsec2: entered allmulticast mode [ 342.293187][T14236] gretap0: entered allmulticast mode [ 342.318772][T14236] gretap0: left allmulticast mode [ 342.331227][T14236] gretap0: left promiscuous mode [ 342.482135][T14237] gretap0: entered promiscuous mode [ 342.500004][T14237] macsec2: entered allmulticast mode [ 342.517439][T14237] gretap0: entered allmulticast mode [ 342.547095][T14237] gretap0: left allmulticast mode [ 342.553549][T14237] gretap0: left promiscuous mode [ 342.729064][T14261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2072'. [ 342.756275][T14261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2072'. [ 343.302507][T14260] syzkaller0: entered promiscuous mode [ 343.324700][T14260] syzkaller0: entered allmulticast mode [ 346.415617][T14298] TC_ACT_REPEAT abuse ? [ 346.486273][T14300] veth1_to_team: entered promiscuous mode [ 346.495163][T14300] veth1_to_team: entered allmulticast mode [ 346.523793][T14300] Bluetooth: MGMT ver 1.23 [ 346.547095][T14301] sctp: [Deprecated]: syz.4.2081 (pid 14301) Use of int in maxseg socket option. [ 346.547095][T14301] Use struct sctp_assoc_value instead [ 347.095434][T14325] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 347.138326][T14328] __nla_validate_parse: 3 callbacks suppressed [ 347.138342][T14328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2089'. [ 347.905399][T14361] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2095'. [ 348.133976][T14371] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2098'. [ 349.081356][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2106'. [ 349.219973][T14423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2108'. [ 349.328851][T14426] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2109'. [ 349.455708][T14432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2111'. [ 349.684677][T14439] syzkaller0: entered promiscuous mode [ 349.712819][T14439] syzkaller0: entered allmulticast mode [ 349.781858][T14439] IPVS: length: 15 != 8 [ 350.067846][T14448] netlink: 'syz.2.2115': attribute type 10 has an invalid length. [ 350.122707][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2115'. [ 350.448805][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2119'. [ 350.464816][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2119'. [ 350.513230][T14464] netlink: 'syz.0.2119': attribute type 12 has an invalid length. [ 350.586968][T14464] netlink: 'syz.0.2119': attribute type 11 has an invalid length. [ 351.626262][T14507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.807694][T14515] netlink: 'syz.2.2132': attribute type 1 has an invalid length. [ 351.904239][T14504] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 352.159468][T14521] gretap1: entered allmulticast mode [ 352.207838][T14521] bond7: (slave gretap1): making interface the new active one [ 352.230748][T14521] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 352.921037][T14545] pim6reg: left allmulticast mode [ 352.942737][T14545] dummy0: left allmulticast mode [ 352.980430][T14547] __nla_validate_parse: 1 callbacks suppressed [ 352.980451][T14547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'. [ 352.983878][T14548] tipc: Failed to remove unknown binding: 66,0,0/0:1070658849/1070658850 [ 353.054238][T14548] tipc: Failed to remove unknown binding: 66,0,0/0:1070658849/1070658850 [ 353.433260][T14557] netlink: 'syz.4.2144': attribute type 1 has an invalid length. [ 353.642025][ T12] tipc: Subscription rejected, illegal request [ 353.780410][T14561] bond0 (unregistering): Released all slaves [ 353.848521][T14573] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2144'. [ 353.906827][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2147'. [ 354.020211][T14581] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2148'. [ 354.193016][T14586] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2148'. [ 355.296166][T14612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.370766][T14612] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 356.027720][T14641] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2162'. [ 356.200123][T14647] netlink: 'syz.4.2163': attribute type 21 has an invalid length. [ 356.208423][T14638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2162'. [ 356.247741][T14647] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2163'. [ 356.331952][T14647] netlink: 'syz.4.2163': attribute type 5 has an invalid length. [ 356.395902][T14647] netlink: 'syz.4.2163': attribute type 6 has an invalid length. [ 356.419101][T14647] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2163'. [ 357.081972][T14665] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 357.458585][T14676] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2172'. [ 358.038060][T14684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2175'. [ 358.393462][T14394] Set syz1 is full, maxelem 65536 reached [ 358.597776][T14700] netlink: 'syz.1.2178': attribute type 10 has an invalid length. [ 358.618193][T14700] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2178'. [ 359.179233][T14721] netlink: 'syz.2.2184': attribute type 2 has an invalid length. [ 359.187477][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2184'. [ 359.323852][T14724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2185'. [ 360.079180][T14737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2186'. [ 360.942940][T14766] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2192'. [ 360.997918][T14754] 8021q: adding VLAN 0 to HW filter on device .` [ 361.076010][T14778] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2192'. [ 361.324857][T14783] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2197'. [ 361.391596][T14783] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2197'. [ 361.589576][T14787] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2198'. [ 361.670782][T14783] virt_wifi0 speed is unknown, defaulting to 1000 [ 361.699509][T14783] xfrm0 speed is unknown, defaulting to 1000 [ 361.814927][T14794] netlink: 'syz.1.2201': attribute type 14 has an invalid length. [ 361.937718][T14799] virt_wifi0 speed is unknown, defaulting to 1000 [ 362.805565][ T5607] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 362.958396][T14799] xfrm0 speed is unknown, defaulting to 1000 [ 363.140690][T14856] __nla_validate_parse: 8 callbacks suppressed [ 363.140709][T14856] netlink: 472 bytes leftover after parsing attributes in process `syz.3.2211'. [ 363.195813][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2211'. [ 363.247555][T14856] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2211'. [ 363.366576][T14856] geneve3: entered promiscuous mode [ 363.395584][T14856] geneve3: entered allmulticast mode [ 363.864355][T14876] netlink: 'syz.2.2216': attribute type 2 has an invalid length. [ 363.930836][T14877] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 363.970741][T14877] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2215'. [ 364.064971][T11676] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.354007][T14889] netlink: 'syz.2.2220': attribute type 1 has an invalid length. [ 364.393883][T14889] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2220'. [ 364.572670][T14889] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 365.280521][T14916] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2226'. [ 365.591121][T14929] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2229'. [ 365.922934][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2232'. [ 365.983290][T14938] geneve2: entered promiscuous mode [ 366.045786][ T1090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.094456][ T1090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.143439][ T1090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.179574][ T1090] netdevsim netdevsim2 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.646617][T14956] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2235'. [ 367.828127][T14995] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 368.031875][T14995] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 368.506619][T15015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.509259][T15016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.684161][T15026] sctp: [Deprecated]: syz.4.2255 (pid 15026) Use of int in maxseg socket option. [ 368.684161][T15026] Use struct sctp_assoc_value instead [ 369.013983][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2261'. [ 369.041786][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'. [ 369.082134][T15049] netlink: 'syz.0.2261': attribute type 11 has an invalid length. [ 369.157316][T15037] bond8: option fail_over_mac: invalid value (127) [ 369.221468][T15037] bond8 (unregistering): Released all slaves [ 369.301304][T15057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2259'. [ 369.432843][T15056] ip6gre1: entered promiscuous mode [ 369.462242][T15062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2263'. [ 369.470259][T15056] ip6gre1: entered allmulticast mode [ 369.655924][T15067] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 369.742207][T15065] sctp: [Deprecated]: syz.1.2265 (pid 15065) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.742207][T15065] Use struct sctp_sack_info instead [ 369.881702][T15074] ieee802154 phy0 wpan0: encryption failed: -22 [ 369.997213][T15070] netlink: 'syz.1.2265': attribute type 10 has an invalid length. [ 370.062378][T15070] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.086632][T15070] bond0: (slave team0): Enslaving as an active interface with an up link [ 370.087462][ T13] bond0: (slave team0): interface is now down [ 370.117159][ T13] bond0: now running without any active interface! [ 370.665750][T15105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2274'. [ 370.780578][T15105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2274'. [ 371.011483][T15105] 8021q: adding VLAN 0 to HW filter on device bond6 [ 371.049665][T15105] bond5: (slave bond6): Enslaving as an active interface with an up link [ 371.311306][T15142] netlink: 'syz.1.2282': attribute type 1 has an invalid length. [ 371.337423][T15142] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2282'. [ 371.408852][T15143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.351901][T15183] syzkaller0: entered promiscuous mode [ 372.391110][T15183] syzkaller0: entered allmulticast mode [ 372.897169][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.935568][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.953173][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.986806][ T12] netdevsim netdevsim2 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.033647][T15217] xt_hashlimit: size too large, truncated to 1048576 [ 374.218700][T15249] pim6reg: entered allmulticast mode [ 375.103792][T15171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.153508][T15323] netlink: 'syz.2.2321': attribute type 9 has an invalid length. [ 376.985965][T15347] x_tables: duplicate underflow at hook 2 [ 377.277558][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2331'. [ 377.558271][T15364] tipc: New replicast peer: 255.255.255.255 [ 377.636017][T15364] tipc: Enabled bearer , priority 10 [ 377.696739][T15364] netlink: 'syz.0.2332': attribute type 1 has an invalid length. [ 377.713003][T15380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2332'. [ 377.907360][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2332'. [ 377.984596][T15364] bond10: entered promiscuous mode [ 378.015105][T15364] 8021q: adding VLAN 0 to HW filter on device bond10 [ 378.047891][T15383] bond10: entered allmulticast mode [ 378.214790][T15364] bond10: (slave bridge6): making interface the new active one [ 378.242800][T15364] bridge6: entered promiscuous mode [ 378.264457][T15405] xt_hashlimit: size too large, truncated to 1048576 [ 378.273597][T15364] bridge6: entered allmulticast mode [ 378.308909][T15364] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 378.571851][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.748884][T15421] team0: No ports can be present during mode change [ 378.765569][T15418] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 378.791220][ T985] tipc: Node number set to 2492870781 [ 379.936480][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2350'. [ 380.262656][T15481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2351'. [ 380.327676][T15484] ip6t_srh: unknown srh match flags 4000 [ 380.335351][T15487] netlink: 'syz.1.2351': attribute type 3 has an invalid length. [ 380.347736][T15486] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2356'. [ 380.388084][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'. [ 380.435045][T15492] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2355'. [ 380.449877][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2356'. [ 380.629344][T15493] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 380.650802][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2358'. [ 380.869256][T15505] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.876641][T15505] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.939130][T15505] bridge0: entered allmulticast mode [ 381.026683][T15514] bridge_slave_1: left allmulticast mode [ 381.047406][T15514] bridge_slave_1: left promiscuous mode [ 381.064240][T15514] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.088087][T15514] bridge_slave_0: left allmulticast mode [ 381.111438][T15514] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.493401][ T5607] block nbd4: Receive control failed (result -32) [ 381.502675][ T5616] block nbd4: Receive control failed (result -32) [ 382.452335][T15577] __nla_validate_parse: 1 callbacks suppressed [ 382.452355][T15577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2376'. [ 382.492887][T15577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2376'. [ 382.530310][T15580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2376'. [ 383.321910][T15623] netlink: 'syz.3.2387': attribute type 210 has an invalid length. [ 383.451092][T15624] netlink: 'syz.0.2386': attribute type 13 has an invalid length. [ 384.161257][T15642] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2389'. [ 384.455524][T15644] virt_wifi0 speed is unknown, defaulting to 1000 [ 384.527070][T15644] xfrm0 speed is unknown, defaulting to 1000 [ 385.191895][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2392'. [ 385.235913][T15676] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2394'. [ 385.310941][T15676] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2394'. [ 385.346258][T15665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2392'. [ 385.451209][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2394'. [ 386.292963][T15723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2399'. [ 387.494568][T15734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2403'. [ 389.986813][T15718] virt_wifi0 speed is unknown, defaulting to 1000 [ 389.999174][T15718] xfrm0 speed is unknown, defaulting to 1000 [ 390.323577][T15744] netlink: 'syz.2.2405': attribute type 1 has an invalid length. [ 390.371455][T15744] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2405'. [ 391.127626][T15757] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 391.198492][T15778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2411'. [ 391.339706][T15757] bond7 (unregistering): Released all slaves [ 391.955893][T15769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.399644][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2417'. [ 393.170408][T15840] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2422'. [ 393.836714][T15864] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2428'. [ 394.423420][T15891] x_tables: duplicate underflow at hook 1 [ 395.199834][ T29] audit: type=1804 audit(1786302081.466:17): pid=15908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2435" name="/newroot/479/memory.events" dev="tmpfs" ino=2469 res=1 errno=0 [ 395.285537][ T29] audit: type=1800 audit(1786302081.476:18): pid=15908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2435" name="memory.events" dev="tmpfs" ino=2469 res=0 errno=0 [ 395.329837][ T29] audit: type=1804 audit(1786302081.486:19): pid=15908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2435" name="/newroot/479/memory.events" dev="tmpfs" ino=2469 res=1 errno=0 [ 395.856635][T15932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2443'. [ 396.307095][T15956] netlink: 'syz.2.2447': attribute type 1 has an invalid length. [ 396.560050][T15956] 8021q: adding VLAN 0 to HW filter on device bond9 [ 396.589014][T15965] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 396.615224][T15965] netlink: 'syz.4.2448': attribute type 13 has an invalid length. [ 396.779547][T15967] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2450'. [ 396.815559][T15967] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2450'. [ 397.676410][T15971] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 397.719213][T15996] syzkaller0: entered promiscuous mode [ 397.729435][T15996] syzkaller0: entered allmulticast mode [ 397.888887][T16006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2458'. [ 398.162325][T16010] vlan1: entered allmulticast mode [ 398.180258][T16011] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 398.225945][T16010] veth0_vlan: entered allmulticast mode [ 398.627060][T16000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.911396][T16050] IPv6: addrconf: prefix option has invalid lifetime [ 398.974306][T16056] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2469'. [ 399.269797][T16068] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2474'. [ 399.305720][T16070] netlink: 198796 bytes leftover after parsing attributes in process `syz.4.2472'. [ 399.333921][T16068] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2474'. [ 399.366008][T16075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2471'. [ 399.424888][T16070] netlink: 'syz.4.2472': attribute type 2 has an invalid length. [ 400.073514][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2478'. [ 400.188886][T16092] virt_wifi0 speed is unknown, defaulting to 1000 [ 400.260896][T16092] xfrm0 speed is unknown, defaulting to 1000 [ 400.292772][T16102] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2482'. [ 400.376085][T16102] netlink: 'syz.3.2482': attribute type 30 has an invalid length. [ 400.750931][T16112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2485'. [ 400.828938][T16116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2485'. [ 400.894049][T16114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2484'. [ 400.933270][T16117] gre2: entered promiscuous mode [ 400.983766][T16117] gre2: entered allmulticast mode [ 401.546197][T16134] syzkaller0: entered promiscuous mode [ 401.576450][T16134] syzkaller0: entered allmulticast mode [ 402.467669][T16176] netlink: 'syz.0.2495': attribute type 15 has an invalid length. [ 403.706481][ T3270] netdevsim netdevsim0 eth0: set [0, 2] type 1 family 0 port 2816 - 0 [ 403.759601][ T3270] netdevsim netdevsim0 eth3: set [0, 2] type 1 family 0 port 2816 - 0 [ 403.819791][ T3270] netdevsim netdevsim0 eth2: set [0, 2] type 1 family 0 port 2816 - 0 [ 404.221326][T16215] tc_dump_action: action bad kind [ 404.236951][T16230] __nla_validate_parse: 2 callbacks suppressed [ 404.236969][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2505'. [ 404.285323][ T1090] netdevsim netdevsim0 eth1: set [0, 2] type 1 family 0 port 2816 - 0 [ 404.310418][T16237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2506'. [ 404.390818][T16238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2505'. [ 404.458728][T16238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2505'. [ 404.615736][T16230] virt_wifi0 speed is unknown, defaulting to 1000 [ 404.662426][T16240] ipt_REJECT: TCP_RESET invalid for non-tcp [ 404.697292][T16230] xfrm0 speed is unknown, defaulting to 1000 [ 404.711897][T16240] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2507'. [ 404.779538][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2508'. [ 404.797151][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2507'. [ 404.820187][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2508'. [ 406.605748][T16302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2516'. [ 406.606440][T16301] syzkaller1: entered promiscuous mode [ 406.659588][T16301] syzkaller1: entered allmulticast mode [ 407.032216][T16311] netlink: 'syz.3.2519': attribute type 1 has an invalid length. [ 407.342951][T16325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.407503][T16328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2522'. [ 407.423292][T16329] IPv6: NLM_F_CREATE should be specified when creating new route [ 407.439502][T16329] IPv6: Can't replace route, no match found [ 407.468584][T16328] IPv6: Can't replace route, no match found [ 407.512985][T16328] sch_tbf: burst 959 is lower than device syzkaller0 mtu (1500) ! [ 407.620080][T16327] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 407.667073][T16327] syzkaller0: entered promiscuous mode [ 407.702004][T16327] syzkaller0: entered allmulticast mode [ 408.198494][T16344] netlink: 'syz.4.2526': attribute type 1 has an invalid length. [ 408.343254][T16344] 8021q: adding VLAN 0 to HW filter on device bond7 [ 408.636685][T16361] netlink: 'syz.3.2530': attribute type 1 has an invalid length. [ 409.402348][T16390] sctp: [Deprecated]: syz.2.2539 (pid 16390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.402348][T16390] Use struct sctp_sack_info instead [ 410.777233][T16440] bond8: option miimon: invalid value (18446744073709551615) [ 410.786797][T16440] bond8: option miimon: allowed values 0 - 2147483647 [ 410.806024][T16440] bond8 (unregistering): Released all slaves [ 410.849859][T16444] __nla_validate_parse: 8 callbacks suppressed [ 410.849880][T16444] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2556'. [ 411.189046][T16459] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2560'. [ 411.254301][T16459] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2560'. [ 411.416327][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2564'. [ 411.501527][ T12] smbdirect: ib_dev[syz1] removed [ 411.588368][T16477] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.2566'. [ 411.613644][T16477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2566'. [ 411.623005][T16477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2566'. [ 411.702974][T16477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2566'. [ 411.746314][T16488] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2569'. [ 411.802392][T16489] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 411.839802][T16489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.990801][T16497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2573'. [ 412.015747][T16497] hsr0: entered allmulticast mode [ 412.034548][T16497] hsr_slave_0: entered allmulticast mode [ 412.640981][T16519] xfrm0 speed is unknown, defaulting to 1000 [ 412.985275][T16542] openvswitch: netlink: IP tunnel dst address not specified [ 413.300735][T16550] netlink: 'syz.3.2587': attribute type 10 has an invalid length. [ 413.821551][T16560] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 413.846855][T16560] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.994058][T16567] syzkaller0: entered promiscuous mode [ 414.018904][T16567] syzkaller0: entered allmulticast mode [ 414.100633][T16569] netlink: 'syz.1.2594': attribute type 5 has an invalid length. [ 414.456190][T16577] tipc: Enabled bearer , priority 10 [ 415.100474][T16601] lo: Caught tx_queue_len zero misconfig [ 415.293310][T11676] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 415.335948][ T10] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 415.351978][T11676] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 415.583565][ T24] tipc: Node number set to 2072629470 [ 415.624763][ T5763] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 415.874461][ T5763] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 416.077191][T16618] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 416.169258][T16618] bond5 (unregistering): Released all slaves [ 416.685967][T16638] __nla_validate_parse: 17 callbacks suppressed [ 416.685984][T16638] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2613'. [ 417.137582][T16657] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2617'. [ 417.150315][T16656] netlink: 'syz.1.2618': attribute type 5 has an invalid length. [ 417.169913][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2618'. [ 417.611429][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2621'. [ 417.718105][T16677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2624'. [ 418.222271][T16693] syzkaller0: entered promiscuous mode [ 418.238481][T16693] syzkaller0: entered allmulticast mode [ 418.324380][T16693] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2627'. [ 419.130214][T16724] syzkaller0: entered promiscuous mode [ 419.157170][T16724] syzkaller0: entered allmulticast mode [ 419.603209][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 428.483203][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 432.897451][T16737] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2640'. [ 433.550255][T16736] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2640'. [ 434.502712][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2650'. [ 434.579294][T16805] xfrm0 speed is unknown, defaulting to 1000 [ 435.050912][T16839] FAULT_INJECTION: forcing a failure. [ 435.050912][T16839] name failslab, interval 1, probability 0, space 0, times 1 [ 435.064228][T16839] CPU: 1 UID: 0 PID: 16839 Comm: syz.0.2657 Not tainted syzkaller #0 PREEMPT(full) [ 435.064251][T16839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.064266][T16839] Call Trace: [ 435.064273][T16839] [ 435.064279][T16839] dump_stack_lvl+0xe8/0x150 [ 435.064305][T16839] should_fail_ex+0x40c/0x560 [ 435.064328][T16839] should_failslab+0xa8/0x100 [ 435.064354][T16839] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 435.064375][T16839] ? local_lock_release+0x9c/0x160 [ 435.064402][T16839] ? __alloc_skb+0x1d7/0x7a0 [ 435.064416][T16839] ? __alloc_skb+0x1d7/0x7a0 [ 435.064440][T16839] __alloc_skb+0x1d7/0x7a0 [ 435.064461][T16839] __ip_append_data+0x2aa9/0x3cf0 [ 435.064479][T16839] ? __lock_acquire+0x683/0x2cf0 [ 435.064506][T16839] ? register_lock_class+0x31/0x2e0 [ 435.064531][T16839] ? __pfx_raw_getfrag+0x10/0x10 [ 435.064570][T16839] ? ipv4_mtu+0x23/0x670 [ 435.064587][T16839] ? __pfx___ip_append_data+0x10/0x10 [ 435.064606][T16839] ? ipv4_mtu+0x561/0x670 [ 435.064619][T16839] ? ipv4_mtu+0x23/0x670 [ 435.064634][T16839] ? __pfx_ipv4_mtu+0x10/0x10 [ 435.064650][T16839] ? ip_setup_cork+0x4ed/0x8f0 [ 435.064672][T16839] ip_append_data+0x10d/0x190 [ 435.064694][T16839] ? __pfx_raw_getfrag+0x10/0x10 [ 435.064714][T16839] raw_sendmsg+0x1406/0x1a20 [ 435.064748][T16839] ? __pfx_raw_sendmsg+0x10/0x10 [ 435.064763][T16839] ? __lock_acquire+0x683/0x2cf0 [ 435.064801][T16839] ? aa_sk_perm+0x6d5/0x900 [ 435.064835][T16839] ? sock_rps_record_flow+0x19/0x350 [ 435.064857][T16839] ? inet_sendmsg+0x298/0x320 [ 435.064878][T16839] ? __pfx_inet_sendmsg+0x10/0x10 [ 435.064896][T16839] sock_sendmsg_nosec+0x10e/0x180 [ 435.064922][T16839] ____sys_sendmsg+0x54e/0x850 [ 435.064948][T16839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.064976][T16839] ? import_iovec+0x73/0xa0 [ 435.065001][T16839] ___sys_sendmsg+0x2a5/0x360 [ 435.065019][T16839] ? __lock_acquire+0x683/0x2cf0 [ 435.065043][T16839] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.065095][T16839] ? __fget_files+0x2a/0x420 [ 435.065116][T16839] ? __fget_files+0x3a2/0x420 [ 435.065145][T16839] __x64_sys_sendmsg+0x1b1/0x290 [ 435.065167][T16839] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.065204][T16839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.065223][T16839] do_syscall_64+0x174/0x580 [ 435.065244][T16839] ? trace_irq_disable+0x3b/0x140 [ 435.065263][T16839] ? clear_bhb_loop+0x70/0xc0 [ 435.065283][T16839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.065304][T16839] RIP: 0033:0x7f430a19e0d9 [ 435.065320][T16839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.065332][T16839] RSP: 002b:00007f430b0e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.065354][T16839] RAX: ffffffffffffffda RBX: 00007f430a425fa0 RCX: 00007f430a19e0d9 [ 435.065365][T16839] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 435.065375][T16839] RBP: 00007f430b0e5090 R08: 0000000000000000 R09: 0000000000000000 [ 435.065385][T16839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.065395][T16839] R13: 00007f430a426038 R14: 00007f430a425fa0 R15: 00007fff6fd37c38 [ 435.065423][T16839] [ 435.597454][T16819] xfrm0 speed is unknown, defaulting to 1000 [ 436.047109][T16856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2660'. [ 436.100837][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2660'. [ 436.380384][T16864] xt_TCPMSS: Only works on TCP SYN packets [ 436.458207][T16866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2662'. [ 437.959621][T16832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.227996][T16889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2667'. [ 438.928803][T16919] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2671'. [ 440.011078][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.281884][T16927] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2672'. [ 442.840889][T16965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2681'. [ 442.884769][T16965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2681'. [ 445.123214][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 456.901511][T16980] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2686'. [ 457.681407][T17013] netlink: 'syz.3.2695': attribute type 13 has an invalid length. [ 457.726173][T17013] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2695'. [ 458.048701][T17028] netlink: 'syz.2.2698': attribute type 3 has an invalid length. [ 458.074233][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 458.119344][T17030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2698'. [ 458.194087][T17030] veth1_to_team: entered promiscuous mode [ 458.227533][T17030] gretap0: entered promiscuous mode [ 458.260785][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'. [ 458.275144][T17030] hsr2: entered promiscuous mode [ 458.304316][T17037] veth0_macvtap: left promiscuous mode [ 458.310972][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2700'. [ 458.525943][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2702'. [ 458.571142][T17017] bond8: option lacp_rate: invalid value (3) [ 458.590668][T17017] bond8 (unregistering): Released all slaves [ 458.602407][T17042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2702'. [ 459.155438][T17069] openvswitch: netlink: IP tunnel dst address not specified [ 459.271973][T17057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2705'. [ 459.518988][T17079] SET target dimension over the limit! [ 459.525303][T17079] SET target dimension over the limit! [ 459.531118][T17079] SET target dimension over the limit! [ 459.538250][T17079] SET target dimension over the limit! [ 459.544271][T17079] SET target dimension over the limit! [ 459.550081][T17079] SET target dimension over the limit! [ 459.557320][T17079] SET target dimension over the limit! [ 459.565307][T17079] SET target dimension over the limit! [ 459.578935][T17079] SET target dimension over the limit! [ 459.588929][T17079] SET target dimension over the limit! [ 459.781011][T17089] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.2712'. [ 460.452430][T17107] bond8: entered promiscuous mode [ 460.477250][T17107] 8021q: adding VLAN 0 to HW filter on device bond8 [ 460.916467][T17124] nbd5: detected capacity change from 0 to 63 [ 460.946735][T17129] bridge8: entered promiscuous mode [ 460.999980][T17129] bridge8: entered allmulticast mode [ 461.012712][ T5607] block nbd5: Receive control failed (result -32) [ 461.025595][ T1605] block nbd5: Dead connection, failed to find a fallback [ 461.036188][ T1605] block nbd5: shutting down sockets [ 461.042392][ T1605] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 461.058797][ T1605] Buffer I/O error on dev nbd5, logical block 0, async page read [ 461.068493][ T1605] Buffer I/O error on dev nbd5, logical block 1, async page read [ 461.076382][ T1605] Buffer I/O error on dev nbd5, logical block 2, async page read [ 461.084439][ T1605] Buffer I/O error on dev nbd5, logical block 3, async page read [ 461.097781][ T1605] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 461.107543][ T1605] Buffer I/O error on dev nbd5, logical block 0, async page read [ 461.115421][ T1605] Buffer I/O error on dev nbd5, logical block 1, async page read [ 461.120742][T17129] team0: Port device bridge8 added [ 461.129202][ T1605] Buffer I/O error on dev nbd5, logical block 2, async page read [ 461.142714][ T1605] Buffer I/O error on dev nbd5, logical block 3, async page read [ 461.151122][ T1605] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 461.160827][ T1605] Buffer I/O error on dev nbd5, logical block 0, async page read [ 461.168978][ T1605] Buffer I/O error on dev nbd5, logical block 1, async page read [ 461.177013][ T1605] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 461.187401][ T1605] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 461.197846][ T1605] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 461.209823][ T1605] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 461.220688][ T1605] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 461.230680][ T1605] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 461.240843][T17105] ldm_validate_partition_table(): Disk read failed. [ 461.263351][ T1605] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 461.275460][T17105] Dev nbd5: unable to read RDB block 0 [ 461.290521][T17105] nbd5: unable to read partition table [ 461.561012][T17105] ldm_validate_partition_table(): Disk read failed. [ 461.620453][T17145] netlink: 'syz.4.2730': attribute type 6 has an invalid length. [ 461.642201][T17105] Dev nbd5: unable to read RDB block 0 [ 461.680768][T17145] netlink: 'syz.4.2730': attribute type 5 has an invalid length. [ 461.691326][T17105] nbd5: unable to read partition table [ 461.902529][T17155] netlink: zone id is out of range [ 461.952116][T17155] netlink: zone id is out of range [ 462.071741][T17155] netlink: zone id is out of range [ 462.121209][T17155] netlink: zone id is out of range [ 462.227381][T17155] netlink: zone id is out of range [ 462.297692][T17155] netlink: zone id is out of range [ 462.382055][T17155] netlink: zone id is out of range [ 462.772597][T17172] team0 (unregistering): Port device xfrm0 removed [ 462.912735][ T985] xfrm0 speed is unknown, defaulting to 1000 [ 462.930872][ T985] syz0: Port: 1 Link DOWN [ 462.986823][ T24] xfrm0 speed is unknown, defaulting to 1000 [ 463.209333][T17186] __nla_validate_parse: 7 callbacks suppressed [ 463.209351][T17186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2741'. [ 463.305447][T17186] netlink: 'syz.1.2741': attribute type 2 has an invalid length. [ 463.343885][T17186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2741'. [ 463.570262][T17203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2744'. [ 463.603703][T17203] batadv0: entered promiscuous mode [ 464.169602][ T5607] block nbd6: Receive control failed (result -32) [ 464.251726][T17221] netlink: 4412 bytes leftover after parsing attributes in process `syz.2.2748'. [ 464.479451][T17236] sctp: [Deprecated]: syz.0.2752 (pid 17236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.479451][T17236] Use struct sctp_sack_info instead [ 464.826468][T17236] xfrm0 speed is unknown, defaulting to 1000 [ 465.172993][T17264] ip6gre1: entered promiscuous mode [ 465.229225][T17264] ip6gre1: entered allmulticast mode [ 465.278133][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 465.322477][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 465.330299][ T985] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 465.578539][T17271] netlink: 564 bytes leftover after parsing attributes in process `syz.3.2759'. [ 465.953489][ T985] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 466.042666][T17283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2763'. [ 466.071059][T17283] netlink: zone id is out of range [ 466.115827][T17283] netlink: zone id is out of range [ 466.129685][T17283] netlink: zone id is out of range [ 466.140832][T17283] netlink: zone id is out of range [ 466.158333][T17283] netlink: zone id is out of range [ 466.180120][T17285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2763'. [ 466.211022][T17283] netlink: zone id is out of range [ 466.228143][T17283] netlink: zone id is out of range [ 466.245921][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 466.257066][T17283] netlink: zone id is out of range [ 466.282341][T17283] netlink: zone id is out of range [ 466.390967][T17283] netlink: zone id is out of range [ 467.709820][T17316] IPVS: set_ctl: invalid protocol: 46 172.20.20.13:20000 [ 468.041545][T17323] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000 [ 468.947270][T17336] netlink: 'syz.4.2773': attribute type 2 has an invalid length. [ 469.003688][T17338] netlink: 'syz.4.2773': attribute type 1 has an invalid length. [ 469.021842][T17338] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2773'. [ 469.065064][T17338] netlink: 'syz.4.2773': attribute type 1 has an invalid length. [ 469.105246][T17338] netlink: 2016 bytes leftover after parsing attributes in process `syz.4.2773'. [ 469.243732][T17342] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 469.283309][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 469.420588][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 469.438816][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 469.450127][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 469.468911][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 469.477145][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 469.489985][ T5607] [ 469.492352][ T5607] ====================================================== [ 469.499410][ T5607] WARNING: possible circular locking dependency detected [ 469.506432][ T5607] syzkaller #0 Not tainted [ 469.510844][ T5607] ------------------------------------------------------ [ 469.517859][ T5607] kworker/u9:3/5607 is trying to acquire lock: [ 469.524007][ T5607] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 469.534450][ T5607] [ 469.534450][ T5607] but task is already holding lock: [ 469.541802][ T5607] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 469.551197][ T5607] [ 469.551197][ T5607] which lock already depends on the new lock. [ 469.551197][ T5607] [ 469.561602][ T5607] [ 469.561602][ T5607] the existing dependency chain (in reverse order) is: [ 469.570601][ T5607] [ 469.570601][ T5607] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 469.578584][ T5607] down_write+0x96/0x200 [ 469.583476][ T5607] kernfs_add_one+0x41/0x5e0 [ 469.588582][ T5607] kernfs_create_dir_ns+0x1a1/0x230 [ 469.594292][ T5607] internal_create_group+0x440/0x1180 [ 469.600175][ T5607] cpuhp_invoke_callback+0x434/0x810 [ 469.605976][ T5607] cpuhp_issue_call+0x3f0/0x750 [ 469.611333][ T5607] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 469.617908][ T5607] __cpuhp_setup_state+0x3f/0x60 [ 469.623351][ T5607] do_one_initcall+0x250/0x870 [ 469.628710][ T5607] do_initcall_level+0x10a/0x1a0 [ 469.634154][ T5607] do_initcalls+0x59/0xa0 [ 469.638995][ T5607] kernel_init_freeable+0x29d/0x3e0 [ 469.644790][ T5607] kernel_init+0x1d/0x1d0 [ 469.649716][ T5607] ret_from_fork+0x514/0xb70 [ 469.654814][ T5607] ret_from_fork_asm+0x1a/0x30 [ 469.660098][ T5607] [ 469.660098][ T5607] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 469.667904][ T5607] [ 469.667904][ T5607] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 469.675625][ T5607] cpus_read_lock+0x42/0x160 [ 469.680822][ T5607] static_key_slow_inc+0x12/0x30 [ 469.686275][ T5607] nbd_genl_reconfigure+0x1301/0x1e80 [ 469.692257][ T5607] genl_family_rcv_msg_doit+0x233/0x340 [ 469.698388][ T5607] genl_rcv_msg+0x614/0x7a0 [ 469.703407][ T5607] netlink_rcv_skb+0x226/0x4a0 [ 469.708682][ T5607] genl_rcv+0x28/0x40 [ 469.713184][ T5607] netlink_unicast+0x7bb/0x940 [ 469.718452][ T5607] netlink_sendmsg+0x813/0xb40 [ 469.723731][ T5607] sock_sendmsg_nosec+0x13a/0x180 [ 469.729368][ T5607] ____sys_sendmsg+0x54e/0x850 [ 469.734652][ T5607] ___sys_sendmsg+0x2a5/0x360 [ 469.739863][ T5607] __x64_sys_sendmsg+0x1b1/0x290 [ 469.745330][ T5607] do_syscall_64+0x174/0x580 [ 469.750532][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.756939][ T5607] [ 469.756939][ T5607] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 469.764595][ T5607] __mutex_lock+0x19d/0x1550 [ 469.769727][ T5607] nbd_queue_rq+0x373/0x1150 [ 469.774876][ T5607] blk_mq_dispatch_rq_list+0x499/0x1990 [ 469.781849][ T5607] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 469.789188][ T5607] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 469.795803][ T5607] blk_mq_run_work_fn+0x16c/0x300 [ 469.801380][ T5607] process_scheduled_works+0xa8e/0x14e0 [ 469.807937][ T5607] worker_thread+0xa47/0xfb0 [ 469.813073][ T5607] kthread+0x388/0x470 [ 469.817763][ T5607] ret_from_fork+0x514/0xb70 [ 469.823135][ T5607] ret_from_fork_asm+0x1a/0x30 [ 469.828447][ T5607] [ 469.828447][ T5607] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 469.835669][ T5607] __mutex_lock+0x19d/0x1550 [ 469.840814][ T5607] nbd_queue_rq+0xc1/0x1150 [ 469.845837][ T5607] blk_mq_dispatch_rq_list+0x499/0x1990 [ 469.851898][ T5607] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 469.859001][ T5607] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 469.865496][ T5607] blk_mq_run_work_fn+0x16c/0x300 [ 469.871141][ T5607] process_scheduled_works+0xa8e/0x14e0 [ 469.877377][ T5607] worker_thread+0xa47/0xfb0 [ 469.882482][ T5607] kthread+0x388/0x470 [ 469.887068][ T5607] ret_from_fork+0x514/0xb70 [ 469.892185][ T5607] ret_from_fork_asm+0x1a/0x30 [ 469.897490][ T5607] [ 469.897490][ T5607] -> #4 (set->srcu){.+.+}-{0:0}: [ 469.904617][ T5607] __synchronize_srcu+0xc9/0x2f0 [ 469.910688][ T5607] elevator_switch+0x1e8/0x7b0 [ 469.916140][ T5607] elevator_change+0x2fa/0x480 [ 469.921435][ T5607] elevator_set_default+0x375/0x440 [ 469.927149][ T5607] blk_register_queue+0x3f3/0x4e0 [ 469.932767][ T5607] __add_disk+0x6cb/0xe30 [ 469.937610][ T5607] add_disk_fwnode+0x100/0x3a0 [ 469.942888][ T5607] nbd_dev_add+0x733/0xb60 [ 469.947812][ T5607] nbd_init+0x15f/0x1e0 [ 469.952474][ T5607] do_one_initcall+0x250/0x870 [ 469.957747][ T5607] do_initcall_level+0x10a/0x1a0 [ 469.963194][ T5607] do_initcalls+0x59/0xa0 [ 469.968030][ T5607] kernel_init_freeable+0x29d/0x3e0 [ 469.973756][ T5607] kernel_init+0x1d/0x1d0 [ 469.978696][ T5607] ret_from_fork+0x514/0xb70 [ 469.983828][ T5607] ret_from_fork_asm+0x1a/0x30 [ 469.989122][ T5607] [ 469.989122][ T5607] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 469.996931][ T5607] __mutex_lock+0x19d/0x1550 [ 470.002038][ T5607] elevator_change+0x1af/0x480 [ 470.007309][ T5607] elevator_set_none+0xb5/0x140 [ 470.012665][ T5607] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 470.018983][ T5607] nbd_start_device+0x189/0xb30 [ 470.024345][ T5607] nbd_genl_connect+0x1597/0x1c10 [ 470.029879][ T5607] genl_family_rcv_msg_doit+0x233/0x340 [ 470.035941][ T5607] genl_rcv_msg+0x614/0x7a0 [ 470.040966][ T5607] netlink_rcv_skb+0x226/0x4a0 [ 470.046328][ T5607] genl_rcv+0x28/0x40 [ 470.050820][ T5607] netlink_unicast+0x7bb/0x940 [ 470.056102][ T5607] netlink_sendmsg+0x813/0xb40 [ 470.061396][ T5607] sock_sendmsg_nosec+0x13a/0x180 [ 470.066949][ T5607] ____sys_sendmsg+0x54e/0x850 [ 470.072228][ T5607] ___sys_sendmsg+0x2a5/0x360 [ 470.077413][ T5607] __x64_sys_sendmsg+0x1b1/0x290 [ 470.082859][ T5607] do_syscall_64+0x174/0x580 [ 470.087969][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.094471][ T5607] [ 470.094471][ T5607] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 470.103123][ T5607] blk_alloc_queue+0x544/0x690 [ 470.108412][ T5607] __blk_mq_alloc_disk+0x194/0x390 [ 470.114040][ T5607] nbd_dev_add+0x494/0xb60 [ 470.118971][ T5607] nbd_init+0x15f/0x1e0 [ 470.123641][ T5607] do_one_initcall+0x250/0x870 [ 470.128918][ T5607] do_initcall_level+0x10a/0x1a0 [ 470.134365][ T5607] do_initcalls+0x59/0xa0 [ 470.139201][ T5607] kernel_init_freeable+0x29d/0x3e0 [ 470.144911][ T5607] kernel_init+0x1d/0x1d0 [ 470.149748][ T5607] ret_from_fork+0x514/0xb70 [ 470.154850][ T5607] ret_from_fork_asm+0x1a/0x30 [ 470.160126][ T5607] [ 470.160126][ T5607] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 470.167323][ T5607] fs_reclaim_acquire+0x71/0x100 [ 470.172770][ T5607] kmem_cache_alloc_noprof+0x64/0x5f0 [ 470.178647][ T5607] __kernfs_iattrs+0xdd/0x380 [ 470.183838][ T5607] kernfs_iop_setattr+0xe6/0x3f0 [ 470.189293][ T5607] notify_change+0xbba/0xea0 [ 470.194390][ T5607] do_truncate+0x1c2/0x250 [ 470.199327][ T5607] path_openat+0x2fed/0x3830 [ 470.204428][ T5607] do_file_open+0x23e/0x4a0 [ 470.209443][ T5607] do_sys_openat2+0x115/0x200 [ 470.214628][ T5607] __x64_sys_openat+0x138/0x170 [ 470.219987][ T5607] do_syscall_64+0x174/0x580 [ 470.225093][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.231494][ T5607] [ 470.231494][ T5607] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 470.240013][ T5607] __lock_acquire+0x1520/0x2cf0 [ 470.245380][ T5607] lock_acquire+0x106/0x350 [ 470.250393][ T5607] down_write+0x96/0x200 [ 470.255140][ T5607] kernfs_link_sibling+0x4c7/0x5a0 [ 470.260765][ T5607] kernfs_add_one+0x1d2/0x5e0 [ 470.265961][ T5607] kernfs_create_dir_ns+0x1a1/0x230 [ 470.271669][ T5607] sysfs_create_dir_ns+0x12f/0x2a0 [ 470.277289][ T5607] kobject_add_internal+0x622/0xcd0 [ 470.283169][ T5607] kobject_add+0x163/0x240 [ 470.288103][ T5607] device_add+0x3fa/0xb80 [ 470.293010][ T5607] hci_conn_add_sysfs+0xd5/0x210 [ 470.298651][ T5607] hci_conn_complete_evt+0x8a8/0x1350 [ 470.304630][ T5607] hci_event_packet+0x6cd/0xf10 [ 470.310099][ T5607] hci_rx_work+0x3ee/0x1020 [ 470.315464][ T5607] process_scheduled_works+0xa8e/0x14e0 [ 470.321537][ T5607] worker_thread+0xa47/0xfb0 [ 470.326666][ T5607] kthread+0x388/0x470 [ 470.331269][ T5607] ret_from_fork+0x514/0xb70 [ 470.336381][ T5607] ret_from_fork_asm+0x1a/0x30 [ 470.341690][ T5607] [ 470.341690][ T5607] other info that might help us debug this: [ 470.341690][ T5607] [ 470.351911][ T5607] Chain exists of: [ 470.351911][ T5607] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 470.351911][ T5607] [ 470.366341][ T5607] Possible unsafe locking scenario: [ 470.366341][ T5607] [ 470.373785][ T5607] CPU0 CPU1 [ 470.379151][ T5607] ---- ---- [ 470.384500][ T5607] lock(&root->kernfs_rwsem); [ 470.389254][ T5607] lock(cpuhp_state_mutex); [ 470.396357][ T5607] lock(&root->kernfs_rwsem); [ 470.403627][ T5607] lock(&root->kernfs_iattr_rwsem); [ 470.408896][ T5607] [ 470.408896][ T5607] *** DEADLOCK *** [ 470.408896][ T5607] [ 470.417212][ T5607] 4 locks held by kworker/u9:3/5607: [ 470.422478][ T5607] #0: ffff888032f36940 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 470.434086][ T5607] #1: ffffc90003937c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 470.446280][ T5607] #2: ffff8880575440b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 470.456133][ T5607] #3: ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 470.465968][ T5607] [ 470.465968][ T5607] stack backtrace: [ 470.471854][ T5607] CPU: 0 UID: 0 PID: 5607 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 470.471886][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 470.471905][ T5607] Workqueue: hci5 hci_rx_work [ 470.471941][ T5607] Call Trace: [ 470.471949][ T5607] [ 470.471957][ T5607] dump_stack_lvl+0xe8/0x150 [ 470.471978][ T5607] print_circular_bug+0x2e1/0x300 [ 470.472002][ T5607] check_noncircular+0x12e/0x150 [ 470.472025][ T5607] __lock_acquire+0x1520/0x2cf0 [ 470.472046][ T5607] ? __lock_acquire+0x683/0x2cf0 [ 470.472069][ T5607] ? kernfs_link_sibling+0x4c7/0x5a0 [ 470.472089][ T5607] lock_acquire+0x106/0x350 [ 470.472107][ T5607] ? kernfs_link_sibling+0x4c7/0x5a0 [ 470.472132][ T5607] down_write+0x96/0x200 [ 470.472151][ T5607] ? kernfs_link_sibling+0x4c7/0x5a0 [ 470.472172][ T5607] ? __pfx_down_write+0x10/0x10 [ 470.472185][ T5607] ? kernfs_root+0x1c/0x230 [ 470.472203][ T5607] ? kernfs_root+0x1c/0x230 [ 470.472221][ T5607] ? kernfs_root+0x1c/0x230 [ 470.472240][ T5607] ? kernfs_root+0x1ea/0x230 [ 470.472259][ T5607] kernfs_link_sibling+0x4c7/0x5a0 [ 470.472283][ T5607] kernfs_add_one+0x1d2/0x5e0 [ 470.472304][ T5607] kernfs_create_dir_ns+0x1a1/0x230 [ 470.472327][ T5607] sysfs_create_dir_ns+0x12f/0x2a0 [ 470.472347][ T5607] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 470.472366][ T5607] ? do_raw_spin_unlock+0xf5/0x210 [ 470.472383][ T5607] kobject_add_internal+0x622/0xcd0 [ 470.472402][ T5607] kobject_add+0x163/0x240 [ 470.472419][ T5607] ? __pfx_kobject_add+0x10/0x10 [ 470.472436][ T5607] ? get_device_parent+0x366/0x3a0 [ 470.472459][ T5607] device_add+0x3fa/0xb80 [ 470.472481][ T5607] hci_conn_add_sysfs+0xd5/0x210 [ 470.472503][ T5607] hci_conn_complete_evt+0x8a8/0x1350 [ 470.472525][ T5607] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 470.472547][ T5607] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 470.472568][ T5607] ? skb_pull_data+0xf0/0x200 [ 470.472689][ T5607] hci_event_packet+0x6cd/0xf10 [ 470.472711][ T5607] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 470.472731][ T5607] ? __pfx_hci_event_packet+0x10/0x10 [ 470.472753][ T5607] ? audit_tree_freeing_mark+0x8d0/0xb20 [ 470.472770][ T5607] ? hci_send_to_monitor+0xe2/0x590 [ 470.472788][ T5607] hci_rx_work+0x3ee/0x1020 [ 470.472810][ T5607] ? process_scheduled_works+0xa20/0x14e0 [ 470.472825][ T5607] process_scheduled_works+0xa8e/0x14e0 [ 470.472849][ T5607] ? __pfx_process_scheduled_works+0x10/0x10 [ 470.472867][ T5607] ? assign_work+0x3cf/0x5d0 [ 470.472882][ T5607] worker_thread+0xa47/0xfb0 [ 470.472906][ T5607] kthread+0x388/0x470 [ 470.472925][ T5607] ? __pfx_worker_thread+0x10/0x10 [ 470.472940][ T5607] ? __pfx_kthread+0x10/0x10 [ 470.472958][ T5607] ret_from_fork+0x514/0xb70 [ 470.472979][ T5607] ? __pfx_ret_from_fork+0x10/0x10 [ 470.472997][ T5607] ? __switch_to+0xc89/0x1420 [ 470.473016][ T5607] ? __pfx_kthread+0x10/0x10 [ 470.473035][ T5607] ret_from_fork_asm+0x1a/0x30 [ 470.473061][ T5607] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 471.665834][T17357] bond0: (slave syz_tun): Releasing backup interface [ 477.123216][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!