last executing test programs: 13m45.468993027s ago: executing program 0 (id=306): socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x14, 0x20000241, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0xb881}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r2, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000100000001800018014000200776c616e310000000000000000000000080006000300000008"], 0x3c}}, 0x0) close(0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000380), 0x0, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_retopts={{0x74, 0x0, 0x7, {[@rr={0x7, 0x1b, 0xbd, [@multicast2, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, @private=0xa010100, @rand_addr=0x64010102]}, @generic={0x94, 0x2}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x27, 0x7d, [@local, @rand_addr=0x64010102, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2, @multicast1, @rand_addr=0x64010101, @loopback, @multicast1]}, @rr={0x7, 0x1b, 0x29, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @private=0xa010102, @loopback]}]}}}], 0xe0}}, {{&(0x7f00000003c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000880)=[{&(0x7f00000023c0)="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", 0x1000}, {&(0x7f0000000540)="a93c27a431a201675e9c026b720874dd59ce4d35cf21ebf2402fbae810a3d1a3dffaec71299ef768ab78cf826cdb292921562c57f76ee9b3ed2b92388c907e77935960c53edaec97c81b03ce5ad4b33c9a2863e3791f1021e7d4899820be4aa1ab919cf6d14bd9d540d5aac2cd69acb2dc1078f9231dbb5e9bf09f97f837b99ba85dce42d98b1674134cb41adae5b15d3bf337261ddb", 0x96}, {&(0x7f0000000600)="b14224f3303cc0fdfa19870e0f28274d72a880bab27e7d887cd06fa9af6354f3f46a5a5c5f6379780b8a04688c84c95a9c942e155fb406f6f1a008", 0x3b}, {&(0x7f0000000740)="a6c30c2aa9652c16971a90a787b475ff83bb9fdaeab279df1fc382f9201f657b3922978782f1cecf0567d3a73895fb1a895d157fc3a2400aa037cf726d10dec46c6fbf7a9d368edccd3311d23a8b458fd19f8ad65af6b9aaf9b4a18a0434ce86", 0x60}, {&(0x7f0000000dc0)="4a3965c1283de46ec4199990a6f5c3eb833425f2af034e64d5085e001a9098981e95c733f8f9e6fb72343e8467c203d0d8fff022753d7b2048439a1443eaf2b8acfd42aaf68244fa739f0110e3453326f1b0924b2df016b407bd00245861db72226287353617dfcbcc4e6b9d3dfce69489a8baf2bc9ddd3dff3aff0f2ede5b5c71eb05b21089b160b26cb3d98bac661d3e091772f42ba2ae1479a6a36d6454b7cfe5921949d98a24b7c2381e423143fecd1603ea0e7093fc9da66ed4c90bb71bc4680552014177dee4db82d7808d4c1472b1b561", 0xd4}, {&(0x7f00000007c0)="e4ffebe1a88ce153750bf36e0f4fed449d3b13122c3cb982841c97b21b3748ba73aa3d833883d44097141032972dc353572a303b4c9368a24c88d9c2e759f60e21cab89a2cd189b80b50a2437ffe5f204f3e3f9e8b71a8d7f014f568cd8cf79b8c977215dbc18d38a9355496895874d0ba34b5312d3429de763e1eaec9687babc9a7428ff4829f2562d0baa21d314d06f54d0c83bbe19cfcd6f35370ca2d792d52ab41b0479487fd33fe1e67b83e5f332ec3", 0xb2}], 0x6, &(0x7f0000000900)=[@ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast2}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000980)="f732e56933f78ebdd5869a05fcf03bad1741141d6b62b844abfff30599e74957ff1d19b76257ec06c822a2b4838c608bdae13e351d7a193d956f76ad894709ad1c87099587cfb9ecb89d0e7777745bbbe155db62ce2c093dae2affd83b", 0x5d}], 0x1, &(0x7f0000000a40)}}, {{&(0x7f0000000a80)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000ec0)="ee73cb2425b830607c6d1ed49f079f6f5e984a7b7c011fdee0113a5670613c6a27036c4b61a07a498f2afdf4a5a945b8914599bb1028f235181d8f34fd102e538c692a70779f71ed08918217ba0d2d90e08bd1dcae7d9ea65f3a845eba7f885b9e9210cc580329ebf7fd39a92dd4043841cc59e93f2fa19861a93012844fddf5c5d6beda54676d4714ddb0aa37ecd8ca877d3b40f9ea5013e7cb4f0d6d4228c798a5e5b52c500ca8eae93c225c62b4784bb3d622f242782c23ddf560471f769446047515d720796a04297ff2760f42928b940cb235b7298e774b9fb40ea75b1e48fc8afbe6a988ada04d0b0d8dec", 0xee}, {&(0x7f0000000b40)="b0dd9aa78f31ad6f4fe750890dc900fada7f4233d40a56a4d6dbee27f761d79f6483d7a92738169c206a3b26ce22808a0a908101e2acffc9034f03cbe48276048fe82a1c5adbe66c03e43f3cf8543da75a094531486fad014ecf52748b4e900459313d0c356627e5865c3e5734a25b2383e93d10b7304d2a218c3bffd4faf8daee0c3f9ecc1c5b64b63730c54f0b4a90edd186a94bc0a9e67662a8f1b434bd0532e5d29ecd33b1ef74abb74eb246835dc22f3249956036253603fbcd", 0xbc}], 0x2, &(0x7f0000000c40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}], 0x78}}], 0x4, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4, 0x25dfdbfd, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) syz_emit_ethernet(0x46, &(0x7f0000001640)=ANY=[@ANYBLOB="b8192300100000fe8000000000000000000000000000aafe80000000000000000000000000000000000000000000000700000000010007e405090000000000000006000000000000000010ad00000000000102015a0000"], 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000002c0)={r8, 0x7}, 0x8) syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc3"}}}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x68, r10, 0x510, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x68}}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 13m45.218167491s ago: executing program 1 (id=310): socket$inet6_mptcp(0xa, 0x1, 0x106) 13m45.13538232s ago: executing program 0 (id=311): syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c20476"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000020756c2500000000002020207b1af8ff00000017bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000825a47f399"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m45.126174652s ago: executing program 1 (id=312): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x18000, 0x8}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x4}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x18000, 0x8}, 0x1c) (async) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x4}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) (async) 13m44.959990783s ago: executing program 0 (id=315): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000700)={0xa, 0x2, 0x0, @rand_addr, 0x2}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000010400000000000000000800c28a", @ANYRES32=0x0, @ANYBLOB="0002000000000000140012800b00010067656e6576650000040002800a0001000f"], 0x40}}, 0x0) 13m44.863324674s ago: executing program 1 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004811}, 0x80) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5450d5f3bc6ac5ab}, 0xc004) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = accept4(r0, &(0x7f0000000280)=@tipc=@name, &(0x7f0000000300)=0x80, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x5, 0x0, 0xd, @loopback, @rand_addr=' \x01\x00', 0x8, 0x10, 0x2, 0x318e}}) recvfrom$unix(r4, &(0x7f0000000400)=""/1, 0x1, 0x10111, 0x0, 0x0) sendto$phonet(r4, &(0x7f0000000440)="081d0b01cecc6d4dc197", 0xa, 0x30, &(0x7f0000000480)={0x23, 0x0, 0x1, 0x6}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000001f80)=0x0) sendmsg$netlink(r4, &(0x7f00000020c0)={&(0x7f00000004c0)=@kern={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002080)=[{&(0x7f0000000500)={0x68, 0x3f, 0x400, 0x70bd29, 0x25dfdbfe, "", [@generic="d7b9a23eda15b9f637368df73c475d4545a429ab083338cbe1fd90850573124fda9e514e0923b6b1dde5155326b5974ab0ac992b09f1df7f5f61d513daf4f62bd2bfe7e28de2a7e887eba901e673dc2d298b7c19cb"]}, 0x68}, {&(0x7f0000000600)={0x1958, 0x2a, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x1131, 0x115, 0x0, 0x1, [@generic="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", @generic="693f98ff82a4183ded7a7bc402e524c1b35b779100568868169b2a30c807139c05fffe059cdb128fce7c35ee0d191cc0285b9f4c9e0a407344ace331e595b831ac158908fefba8acbe108592bd76e188e1908759be287942223052f40b8c398c6d3e87d09cb2ee952f4b04f9cbc99579b2c66542aeed86fdfa21d08e8c70e8504751d39c2379299ab1689b010b9ffce36fb94870af8fe67be0539a575848962998f347cf59b107f7d04a6c821d9e9006803a02ee8402e70a52aaee5d9a267d34c9b573ea990601fb9551", @nested={0x4, 0xad}, @generic="62d82f0b72e37e609fcd4129fa488603bb4e4d9dc438229c1616650a387a64295727bff3df6f29480e5dc6445ce0d12e3054205b361d41ca6c068b56151df9a0be7332d74ffdcfc6e175246345e4b9eebc7491a39f4e93d55a919030e819e8"]}, @typed={0x14, 0xb2, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}, @nested={0x276, 0x4c, 0x0, 0x1, [@generic="2b7f5a290635be986c8468b09e0fe689742d74bc010b3ea37c76a026a5398d8c25c2ebd9b27efb577df54d6955d2ac0690c20a32cbfc85ab5c2df1bd8de5781bbb538fbb35eacd88dc415018694ef6668264b9f5e64d91cfab8751f4f69ee281bafd6e", @nested={0x4, 0x60}, @typed={0x14, 0x82, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="7d05aa1c2d81710131c177524b8354ec2d063f38e38b397f356f8db8b7273db7e6066116265a89e9a683a2c72f3f4a40f8ff2b0ef712191d7bbe0d294507c6551d9645acf9e108b28c7949e674560503b737415dfa6f74d68fb016fe779bca77131dd92b87be5282d258e0ca19b8a3d53c66b685191568ea88a6cf70bbce1b9895e6a35e90c7fa89dbbc80b1b16e4c5ac39d4c70c33b15e58879ca", @generic="dabad96b83ba436562e82c7260f51a25c3a73bafdbe222867fc19098c006db77bb9631efeb689e15c708a21411b835770cfedbd04cdd51f6bc34ed53006ce47c7dddd3a5531b897051a8e6fdab5b8cd89b28d21f709c8c9bf1d0573cffb1317440b4f0375d2f523dd6cbb302edf06a97215135d55ef3b256196549001a295942539e59b023ddc9e90b748124f4909fc2", @nested={0x4, 0x100}, @generic="2bd59b4f4ba789f8ba75dcfe396b7889a7e0f5608f79c30c98ae49dc86c2cfea2fa553a17b6f64f91185d9e1c72b7b28cec2896af28d0374951c18c72e38b2f94a0dc3307384f850851bf3409dc3c81079414e70e4e47325713d1eec20a039a06ee3ddfd63ece0461dcda6157093b23b1362df5da46a541a2d3459d8566230d65afeb09ae25125e1cc76260e5c3b5234f991dd37a95bf1afcb78f288fd3e17edf41079834481ebed387f316261100277221ffa5374cbf95517fc776ad2d75eda8830191e1f88c66e"]}, @typed={0x8, 0x139, 0x0, 0x0, @u32=0xc8e}, @nested={0x1a6, 0x5b, 0x0, 0x1, [@generic="9cc903f60176eb12ff26aaa41a7cab6bc671ef29cf31a6c40bccd1e7eb3212ddc41a9498f73814800aeedfa101f00a26071a5fbd87b988425efb0baba7457e9ae00a54d90d533e1cd25ae0b453f03290bb496e7fe2a26686a990cb09b35dfd7ec39b69f668f2438a06c25c817b0a69a397b24ec709d0d7ce5fe4b591dd542d24c9983606158fa5719a153fc0e64fbaf45c562c6f0a4e058b76fd37d0f1136cb006b1b9217ce979303b1751686b3b4ab7feccdeccf721509126c3db08", @generic="5554af08afef863a4ed417cfb54426021d08aa2cb1e09352dcf865d62f0f5eb70028e9cbc8f1839e2f6bc8f902aa4deefa321b54684b42694d518dcd4a9300ddd3fba630fbf39be736fccedf6340beffdeaaf0ca6fdb7ef4c8e5a47ac52e8bcd5351c41d4bb6a8ccce972b3c6d738624e335011945c96b79c971424b0ef33ec6d6d909074f271fdada783459fe5efe5fe4e3e1257d3250a7dd75837ebe7d3dfca712df3dfe1fa41d4e", @generic="539d0d803cdb53b811be93c7dfd9516ae67a368046a2d11dc651b0b0cc2fee5e799e76027600505a06f04535f9131684a3", @typed={0x8, 0xd8, 0x0, 0x0, @u32=0x6}, @typed={0x4, 0x10f}]}, @generic="9c90a7dc71639e010ba84e2d5df5c8417450414f5d69174c3803b0fb62f4a833783ddfecf3f6313a9dd02b4a3c9210d87f4cfb9e4c824eca4e1a1fe477c314098e57a79d44d34785fbe8bef95e79cf5bf8e547e8e7ac61b9404fcb50783e30410c01cde7fd9dee1b5a70731a458745be249c7c263ed8e5ecb7b403dcac27a6779770e4f3818b16ac53363624bd9758f41cc72b295f3fd76dfe22214008bbfbade6d827f41d62a6042027983b28a8c21802090d2fc569281bfdd41c85afeb45576febaf49d314d2cdb8f26cd6855c8860018ea57fdaf30ec83a9a05be1c10e381552968592f610853f4cad794ec8890de44a3644afe5fb91f", @nested={0x266, 0x117, 0x0, 0x1, [@typed={0x8, 0x103, 0x0, 0x0, @u32=0x8}, @typed={0x89, 0xeb, 0x0, 0x0, @binary="a25b81bf60787b65d1f4cf032d8bf8ea00b65750ff60e8482df27e6c2f726ec13eb7ed99c291a1c8e5177cbd661bb6855a2e2ec2e1e75a4fc9edd6fa0b6003d377a3b4cd7e63a8d4ce2335807889f693f2539546da6ebee16039da9654f28a7fd2d245b02e89ec8dffc46e44aee6ba5f50caa65ac1ccffbb265dcedda3799ec937019092ff"}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="a5e8e6484b7ee65623087cfa87364ebfb5fc940154586b48a2a993204670b4b51bc39d851419c7e5aa9d5b36926850b6c459b46b422238f9041d01f4c4a7d25cb8000cd78bd1b3481590939b701b43c309674d8ca750150f4b187fe046d9f2eae6253e294f6aa3aa4dd56836be0d0db54a27806fb1e1303afba5d2820fbb7e6cab06eee21ab12fb2e2d54b2d74800780223e8174d5baacb3486e3c64cfadfdbc8fdc54dd6c01656f76b06c275e718e37c02c8c", @nested={0x4, 0xd2}, @generic="32373b81b87b3af1f6e6fcc9bf184eabd4566b1534241dd4bc65e31e307b858ada82133893c8059fd614deafe819739d00faa454d88b389828b1d0eb8be46d00a17271507cf418b3db1e6f2872ed453db043d701a2bbf2019bab4e3a1e23b274fe8ee181b9085b47f5ca500ab7b754a836a7d949d94a50eba342f650535a937a150331216a65447801bf19afda9ccfc67a1ba710f7b369ee70bd53ac9d79297289739068897b6c9abe365ed64f32893cbefaf80be242d67a2fa95dc8384db28c8f3d3649a94ce7ef570c8854d73823d79b0d0f41d7e489c39e6b66297218e4527f81f8a03646f844f64e615d45fb005b1adfda539a9c18", @nested={0x4, 0xd1}, @typed={0x8, 0xe8, 0x0, 0x0, @uid=0xee00}]}, @typed={0x8, 0x20, 0x0, 0x0, @uid=r7}, @nested={0x5a, 0x14c, 0x0, 0x1, [@nested={0x4, 0x6}, @generic="33b93b23d7f3e9da72880a0671644a9631cfa6778bda2cf32c3bc5d3e15c7dc40ab1b2396cd290677367ac129b2412d6b7727b0505847dc3771487ec33d4f6756b14598bac3fd66eccc823b8e824", @nested={0x4, 0x5b}]}]}, 0x1958}, {&(0x7f0000001fc0)={0xc0, 0x21, 0x200, 0x70bd2d, 0x25dfdbff, "", [@nested={0xaf, 0x6e, 0x0, 0x1, [@typed={0xc, 0xf2, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x14a, 0x0, 0x0, @pid=r8}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@multicast1}, @generic="f9415d697a78552d6c71a1f1c0dc35f75f353b86ec29e07ddae455193c63470ff37aac7c312883ba1fc8985534562fcac80dce53ae8ed347f534ac7bbab9c30f3a2c3532257a286917aef963640d901da7d2c11ef32aeb725f59ac6514647ef0023a2463e4dca4fde2a00f511101f72bb7ff8cf849958b344da565586c133ec1f04b0c2b4a547375aa595c09fb103d"]}]}, 0xc0}], 0x3, 0x0, 0x0, 0x4000000}, 0x40040c1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x2c, r9, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x880) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000002240)="bb39a30002b2761cecc46083a805b3c0", 0x10) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000002280)=0x1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x28, r2, 0x221, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000023c0), 0x8000, 0x0) ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f0000002400)=r5) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000002500)={&(0x7f0000002440)=""/142, 0x8e, 0xfffff51d, 0x5}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002580), r4) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x64, r11, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random='/FfBT4'}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x56}, @NL80211_ATTR_PMKID={0x14, 0x55, "d19bfa18fd78d1aefa7885f92da834e7"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004050}, 0x20008000) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f00000026c0)={0x5, 0x7, 0x6}, 0xc) close(r3) listen(r0, 0x16598c35) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x28, 0x1412, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x10004000) getsockopt$inet_tcp_buf(r4, 0x6, 0x2, &(0x7f0000002800)=""/48, &(0x7f0000002840)=0x30) 13m44.82756001s ago: executing program 0 (id=317): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000002f00)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000004f80)=[{{&(0x7f0000003940)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0xc802) 13m44.731202771s ago: executing program 1 (id=319): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0x2, @in=@multicast2, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 13m44.630045827s ago: executing program 0 (id=320): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000280), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000083b7cfd193027be3ab0d2209d9d13030c66a30182793af8c8487c796fae3692ccb3a4bb8f5649eeeeec38245e9a7ee9fac34d462f119445981a8da7f629dc62f8998b83cd3272d061cf88222d9809114a0900d1057e338988222c50ababcae37d60c51f39d874fa1519518aefe2ab8ad6e77885862a31faab38a12", @ANYRES16=r3, @ANYBLOB="010028bd7004040000008900000008000300", @ANYRES32=r4, @ANYBLOB="04001d80"], 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00'}) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x2c, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) 13m44.544024547s ago: executing program 1 (id=321): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES16=r1, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="05002abd7000fddbdf250100000008000100", @ANYRESOCT=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40080) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x4}]}}]}, 0x3c}}, 0x40000) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0xd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x32, 0x20, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}]}, 0x28}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0294000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x6020400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r12, 0x0, 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 13m44.007239084s ago: executing program 0 (id=326): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x30, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80c}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800) ioctl$sock_SIOCETHTOOL(r0, 0x894a, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'vlan0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x1cc, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x40000000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9a}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf14}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd82}]}]}, @NL80211_ATTR_REG_RULES={0x144, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xb}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x35}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7a}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800) 13m43.616288737s ago: executing program 32 (id=326): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x30, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80c}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800) ioctl$sock_SIOCETHTOOL(r0, 0x894a, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'vlan0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x1cc, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x40000000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9a}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf14}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd82}]}]}, @NL80211_ATTR_REG_RULES={0x144, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xb}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x35}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7a}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800) 13m43.605583654s ago: executing program 1 (id=328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x2, 0x4) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x2, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000180)="984bb480", 0x4, 0x4004000, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0xf59}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x10162, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000080)={r0}) listen(r0, 0x0) 13m43.534680841s ago: executing program 33 (id=328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x2, 0x4) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x2, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000180)="984bb480", 0x4, 0x4004000, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0xf59}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x10162, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000080)={r0}) listen(r0, 0x0) 13m27.164261511s ago: executing program 4 (id=445): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x89e1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000000)={0x44, r4, 0x805, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev}]}, 0x44}}, 0x0) 13m26.980126525s ago: executing program 4 (id=449): r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'macvlan0\x00', @local}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='veth1_to_bond\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x2ce0, &(0x7f0000000140)="ce1be0b702dfdfc907eadb3bed0ab2054ea55f19e6320e263963d84144f728104f7688cfcd5e2e9cbc10751f5d324aab19905c3330") socketpair(0x9, 0x803, 0x5, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$qrtr(r3, &(0x7f00000001c0), &(0x7f0000000200)=0xc) ioctl$TUNSETLINK(r1, 0x400454cd, 0x110) r5 = accept4$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r6, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x12}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000004c0)={r3, 0x1, 0x3a, 0x6}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000500)={'bridge0\x00', @broadcast}) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f0000000540)) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000580)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000005c0), 0x3) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000600)={{r9}, 0x1ff, 0xfffffffffffffff7, 0x9}) setsockopt$sock_int(r9, 0x1, 0x22, &(0x7f0000000640)=0x81, 0x4) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000680), 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000006c0)={0xf5, 0xcb, 0x4, 0x5, 0x24, 0x1, 0x2, 0x0, 0x61, 0x0, 0x3, 0x1, 0xfe, 0x6}, 0xe) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r10, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x85422}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "608a0fc423484f662f3566e362"}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5c7312281d"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5a1fec30ced3e30b85dbfcad9c"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000840), 0x4) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000880), &(0x7f00000008c0)=0x40) 13m26.750020392s ago: executing program 4 (id=451): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r4, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='lp', 0x2) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0xa, [{0xc, 0x10}, {0x2, 0x5}, {0x7, 0x8}, {0x8, 0x7}, {0x5, 0x4}, {0x927c, 0x6}, {0x234, 0xfff}, {0x50, 0x8}, {0x262, 0x8}, {0x9, 0xfffffffb}]}}) 13m25.764672307s ago: executing program 4 (id=463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socketpair(0xb, 0xe361bcd883a26e46, 0x2, 0x0) (async) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) (async) close(0x3) 13m25.592991374s ago: executing program 4 (id=465): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101f02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x4c21, 0x2, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0xa, 0x0, 0x80000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0xfd58, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) write$ppp(r0, &(0x7f0000000080)="5b6a95fea1d89012ee46875655053187b7327a76188d64482e8b1108ffcce7a795", 0x21) 13m24.62274731s ago: executing program 4 (id=477): r0 = socket$inet6(0x10, 0x3, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_emit_ethernet(0x36, &(0x7f0000001800)={@local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe001, 0x2}}}}}, 0x0) 13m24.189629519s ago: executing program 34 (id=477): r0 = socket$inet6(0x10, 0x3, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_emit_ethernet(0x36, &(0x7f0000001800)={@local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe001, 0x2}}}}}, 0x0) 5.47723974s ago: executing program 6 (id=8138): r0 = socket(0x10, 0x800, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c}, 0x20) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000003100)=@id, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) (async) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0xffffffff, 0x3, 0x0, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\r\v'], 0x20}}, 0x0) (async, rerun: 32) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000100)) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x4cdf}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async, rerun: 64) r5 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) (rerun: 64) setsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f00000000c0)={@empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x14}}, 0xc) 5.279563644s ago: executing program 6 (id=8141): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="f9c5a167cb38dda420ea5c8df4a8cd54ee6a15dd703866bdf6941944c13871e24bf76ab70541cf1ba39fabff51d3066b24dd3d3e542ab2bfb5d149cc2e75a50b", 0x40}], 0x1}, 0x8001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r2, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xbf, 0x0}}], 0x73d, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 4.271254734s ago: executing program 6 (id=8150): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, 0x26, 0x2, 0x70bd2c, 0x25dfdbfd, {0x6}, [@generic="d57d383163ce69ffca408bc744bf3277dccc32beb365fd765a15fe63e4e3d99a6cafa0a120726996c245f8b79e375247a6a4d8d4419cf781372797264302b7f3b38fe220f745e13b", @typed={0x4, 0x69}, @nested={0x31, 0x6, 0x0, 0x1, [@generic="6dd71e83536819a28cf9c71225bfd010576475bc81f6dd29a79bac7b2a94d262c19e7ba30551177202", @typed={0x4, 0xc1}]}, @typed={0x8, 0xca, 0x0, 0x0, @uid=r1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x18200, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000300)={'dvmrp1\x00', @local}) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getroute={0x24, 0x1a, 0x200, 0x70bd2b, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x4, 0x0, 0x1, 0xfd, 0x6, 0x100}, [@RTA_PREF={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x850) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x48683, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x468, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, &(0x7f0000000600), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x3, 0x3, 0x2}}}, @common=@icmp6={{0x28}, {0xb, "063b", 0x1}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xf48}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x1ff, {0x9ea8}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x4, 0x1, 0xb, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @loopback}, [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0x0, 0xff000000], 0x4, 0x1411}}, @common=@icmp6={{0x28}, {0xb, "f6a1"}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) (async) write$tun(r2, &(0x7f0000000b40)={@val={0x0, 0x8100}, @void, @llc={@snap={0xaa, 0x0, 'L0', "ddb71a", 0x1b, "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"}}}, 0x108) (async, rerun: 32) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000c80)={'rose0\x00', 0x6}) (rerun: 32) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000cc0), &(0x7f0000000d00)=0x8) socket$inet_icmp(0x2, 0x2, 0x1) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000001040)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000dc0)={0x234, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4ec3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2cf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @remote, 0x1ff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @mcast1, 0x2}}}}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb96}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3fff800}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x44081}, 0x20000000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0xa00000, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x50, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5eab}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000081}, 0x80) (async) pipe(&(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r8, &(0x7f0000001240)=0x7, 0x12) (async, rerun: 64) close(r6) (async, rerun: 64) pipe(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r10, 0x65, 0x4, &(0x7f00000012c0), &(0x7f0000001300)=0x4) (async, rerun: 32) recvmsg(r8, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001340)=""/165, 0xa5}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/37, 0x25}, {&(0x7f00000014c0)=""/239, 0xef}, {&(0x7f00000015c0)=""/246, 0xf6}, {&(0x7f00000016c0)=""/134, 0x86}, {&(0x7f0000001780)}], 0x7, &(0x7f0000001840)=""/27, 0x1b}, 0x12060) (async, rerun: 32) write$nci(r9, &(0x7f00000018c0)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x4, 0x1}, 0x4) (async) r11 = openat$cgroup_ro(r9, &(0x7f0000001900)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$FICLONE(r11, 0x40049409, r0) 3.959658914s ago: executing program 6 (id=8154): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1411, 0x828949ab3fe143d7, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x9c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81e}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x10001}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000805}, 0x0) 3.751218033s ago: executing program 6 (id=8160): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265"], 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265"], 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x2000800) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 3.588041409s ago: executing program 6 (id=8163): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd700200000025090002007379fb0000000000080041007278650014003300626f6e645f736c6176655f300000"], 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd700200000025090002007379fb0000000000080041007278650014003300626f6e645f736c6176655f300000"], 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x3, @loopback, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x3c}}}], 0x40}}], 0x1, 0x400c404) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf2501000000080003000000000048000180050002005800000014000400ff010000000000000000000000000001060005004e20000008000300ac1414aa0500020001", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4804}, 0x200000c1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r9) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, r10, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x90, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x54}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x90}, 0x1, 0x0, 0x0, 0xc5}, 0x8084) (async) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x90, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x54}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x90}, 0x1, 0x0, 0x0, 0xc5}, 0x8084) 3.496901938s ago: executing program 5 (id=8165): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40091}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x437, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40091}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x437, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) (async) 3.314203693s ago: executing program 5 (id=8167): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f0000000080)) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e20, 0x3, @remote, 0x9}, @in6={0xa, 0x4e20, 0xfc8, @rand_addr=' \x01\x00', 0xffff8001}], 0x68) 3.313918813s ago: executing program 2 (id=8168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001200010400000000000000000000ffff", @ANYBLOB="00000000000000001c001280090001007866726d000000000c0002800800020003000000140003"], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xdcee729b7a9faec8) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 3.18386482s ago: executing program 5 (id=8169): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x4, 0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=@ethtool_channels={0x1, 0x4, 0x4, 0x1ff, 0x3, 0x7fffffff, 0x80, 0x101, 0x8}}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=ANY=[], 0xd0}], 0x1}, 0x84) 2.862342108s ago: executing program 2 (id=8172): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="010000fdfd00"}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18a8000000000000000000000006000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0xc}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r3}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r4}, 0x10) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x80000001, 0x277, 0x100}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c0001000000000000", @ANYRES32=r9, @ANYBLOB], 0x28}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r11, 0x2, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 2.861740522s ago: executing program 5 (id=8173): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x401, 0x4, 0x0, 0x4, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) 2.650220726s ago: executing program 2 (id=8174): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000005, 0x40010, r0, 0x53f19000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x1c, 0xff, 0xfffff014}, {0x6}]}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4) 2.621424356s ago: executing program 5 (id=8176): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x8, 0xf2}, 0x8) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}, 0x401}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e1c, 0x806, @local, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x24, 0x14, 0x65c28d33709e660d, 0x0, 0x0, {0x11, 0x36}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "91fabc0b03e55e3719"}]}, 0x24}}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) shutdown(r4, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000002c0)={0xf21b, 0x4, 0x8000, 0x4, 0xffff, 0x4, 0x9, 0x4}, &(0x7f0000000380)=0x20) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="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", 0x200}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20044881) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.249297091s ago: executing program 5 (id=8179): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000001200)={r0, 0x9, 0xfff8}) unshare(0x40000000) 1.687461946s ago: executing program 2 (id=8183): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$MRT6(r1, 0x29, 0x1e, 0x0, &(0x7f00000000c0)=0xfffffffffffffe6f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0xeed0b46ffaee1393, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x8001, 0x12010}}, 0x20}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000009c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000280)={{r4, 0xf40, 0x6, 0x8, 0xfffffffffffffff9, 0x2, 0x5, 0x360a, 0x2, 0x7, 0x2, 0x3, 0x5, 0x0, 0x38}, 0x10, [0x0, 0x0]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000180)={0x8, 'vcan0\x00', {'caif0\x00'}, 0x8000}) setsockopt$inet6_tcp_int(r5, 0x6, 0x6, &(0x7f0000000040)=0x100000001, 0x4) recvfrom(r5, &(0x7f0000000100)=""/85, 0x55, 0x2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x4, 0x4, 0x0, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}, 0x80) 1.598898669s ago: executing program 2 (id=8185): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x54}, {0x6}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, 0x0, 0x40) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x1000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_raw(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1}, 0x120) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xa1c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7b}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc80}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c000280080002000300000008000a00", @ANYRES32=r3, @ANYBLOB="4127f40422383688ce13ced4454fc0ae65072d0d8a9da42ca7ad47ae75e03dd50210ce05eacb61b321bab402ae605646d5f86b3c5010ed6d7c53d9b423f6"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r10 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r11 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x24}}, 0x0) 1.451145141s ago: executing program 7 (id=8186): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket(0x2a, 0x2, 0x13) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xbc, 0x1, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffff7}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASTER={0x58, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @empty}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4044110}, 0x40850) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x2, 0x8, 0x7, 0x10001}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r2, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 1.27715599s ago: executing program 7 (id=8188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x48000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, 0x0, 0x40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xa1c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7b}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc80}, 0x48) 1.017102499s ago: executing program 7 (id=8190): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000100)={r4, 0x0, 0x30, 0x10020000000009, 0xb1aa}, &(0x7f00000004c0)=0x18) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x1}}, 0x10) r6 = socket$tipc(0x1e, 0x7, 0x0) sendmsg$tipc(r6, &(0x7f0000000580)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x8001, 0x3}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000005c0)="b0b28eafa967c084f891759f30863202a41f927bc80e49c0b8ef98e8a23db61913df77549a9159faefcade918baa9adba73b2e88f96781d8624ee96090833aa746edf362d578699c8a39024e5568a40d80680a96e455862504bc22294c5a6072a89197e0d3c18535b73a72f586db4c8db4e0f28521329e0538ae458aff145ce5348730f1bed44bb67461d3296e6217fbb7da2c1a17b9053212a446280a3f", 0x9e}], 0x1, 0x0, 0x0, 0x20000851}, 0x0) recvmmsg(r6, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/195, 0xc3}], 0x1, &(0x7f00000000c0)=""/75, 0x4b}, 0x9}], 0x1, 0x40010000, 0x0) getsockopt$sock_int(r5, 0x1, 0x10, 0x0, &(0x7f0000000f00)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xa}, {0x6, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x4000003}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3fe9380e05b6e57d53c7da9806351053dc69357e1a4f7297696ba6c4aa02d147c706e448060e942944c67e2bc4c23ca2f2836258ca955841db83bc85ea3d85cf4131d4a490a4ffc86884d8200ff29d6eca6f452d6a6ed2926ae57cd50473088270da1d68e0d0aae00a8e76cac73f81909df1c2de0082fd13c7f9a0a83f9950d2302473f7c0445e42a21556922f58af5743931e906ead6d0467806960a511688550cda8e377e4f03725d699c8fe3e86fef22eb1eed434b68217ba0c60843ea95ea9271c0dbc9cf61fdf7900b9052ad90e7e9fe1ff8f5bc504078fa9688db889c08ee272a48541a3a902546716222f9d3a79d9acb21e"], 0x100}}, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003"], 0x18, 0x40045}], 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000010c0)=@newchain={0xacc, 0x64, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xfff1, 0x6}, {0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_fw={{0x7}, {0xa90, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xffe0}}, @TCA_FW_POLICE={0x898, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1a, 0x3, 0x4000000, 0x1, 0x1, {0x2, 0x0, 0x7, 0x8000, 0x6, 0x96}, {0xe8, 0x1, 0x81, 0x7, 0x3, 0xa}, 0x80000000, 0x4, 0x86}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x10000000, 0x8, 0x8, 0x8, {0xf7, 0x0, 0x2, 0x7a, 0x800, 0x8}, {0x3, 0x0, 0x4, 0x5c3, 0x9, 0x40}, 0xff, 0x8000, 0x40}}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x2, 0x3, 0x401, 0x9, 0x6, 0xfff, 0xd71, 0x200, 0x2, 0x7, 0x40, 0xc771, 0x3000000, 0x1, 0x9, 0x5, 0x2, 0xfffff6f9, 0xfffffff2, 0xffffff0b, 0x10000, 0x8000, 0x9, 0xd, 0x9, 0x0, 0x10000, 0x4, 0xffff0000, 0x4d01, 0x7fff, 0x3, 0x5, 0xb27d, 0x6, 0x4, 0x6, 0xcb, 0x5, 0x4, 0x3, 0x0, 0x153, 0x3, 0x4, 0xcb, 0x6, 0x7c8, 0xff, 0x4, 0x6, 0x1, 0x1, 0x7, 0xffffffff, 0x4, 0x7, 0x0, 0x5, 0xfffffffe, 0x48, 0x2, 0x9, 0x7, 0x7, 0x4, 0x578, 0x3, 0x9, 0x400, 0x8, 0x4, 0x7, 0x5867, 0x8, 0x9e, 0xc, 0xfff, 0x400, 0x9, 0x0, 0xff6, 0xd4a, 0x5, 0xfffffff9, 0x3ff, 0x7f, 0x1000000, 0x7, 0x1200000, 0x7, 0x1, 0x81, 0x8, 0x1, 0x7, 0x0, 0x70a298f4, 0xd, 0x9, 0x1, 0x7, 0x0, 0x6, 0x566, 0xb1, 0x1, 0xfd, 0xc2d5, 0x5, 0x2, 0x5, 0x80, 0xf1f2, 0x8, 0x5, 0xad6, 0xc, 0x401, 0x0, 0x9, 0x0, 0x2, 0x401, 0x2, 0x8, 0x1, 0x0, 0x2, 0x8, 0xc2604c6, 0x4f9f358a, 0x6, 0x2efd, 0x7f, 0x401, 0x6, 0xfffffff7, 0xfffffc19, 0xb, 0x3, 0x0, 0xbf, 0x1, 0xe3f2, 0x3, 0x2f8d, 0x97, 0x6, 0x7, 0x0, 0x9, 0x0, 0x4, 0xffffffff, 0x80, 0x70f, 0x7, 0x70, 0xbc2d, 0x6, 0xe2c, 0x8000, 0x4, 0x3, 0xb, 0x3, 0x4, 0x10001, 0xd, 0x2, 0x81, 0x20b, 0x80, 0x7, 0xa884, 0x3, 0x0, 0x4, 0x7, 0x4, 0x0, 0x8001, 0x1, 0x101, 0x256d, 0x6, 0x3d, 0x8, 0x2, 0x1000, 0x1, 0xff, 0x80, 0x3, 0x3, 0x6, 0x8, 0x1, 0x2, 0xf0, 0x10001, 0x2, 0x8, 0x3, 0x7, 0x100, 0xd, 0x4, 0xffffffff, 0xf, 0x2, 0x9, 0x4003da5f, 0x54b8, 0x3, 0x2, 0x7fff, 0x9, 0x6, 0x0, 0x8, 0x8, 0x3ff, 0x2, 0x15, 0xc, 0x8, 0x3, 0xffff, 0x4, 0x5, 0x1, 0x29, 0x4, 0x4, 0x6, 0x9, 0x8, 0x7, 0x80, 0x658, 0x5, 0x8, 0x1000, 0x10001, 0x1b, 0x2, 0x8, 0xda1, 0xffff8001, 0xb4e, 0x7, 0x4, 0x8c02]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3, 0x9, 0x7, 0x401, 0x800, 0x8, 0xb, 0xc, 0x4, 0x2, 0xff, 0x2, 0x3ff, 0x1ff, 0x9, 0x4, 0xd6f4, 0x1, 0x80000000, 0xb4fc, 0xffffffff, 0x2, 0x751f, 0xff, 0x101, 0xcc9, 0x6, 0xba7, 0xffff5995, 0x4892, 0x73e, 0x5, 0x40, 0xfff, 0xa, 0x1a5, 0x7ff, 0xd, 0x3, 0xfffffff9, 0x6, 0x8, 0xc, 0x9, 0xd48, 0x27, 0x9, 0xfffffffd, 0x9, 0x6, 0x1, 0xc, 0xc59e, 0x4, 0x5, 0x1, 0x0, 0x0, 0x3, 0x2, 0x9, 0x1, 0x8001, 0x8001, 0x8, 0x80000001, 0x8, 0x9, 0x80002, 0x9, 0x2, 0x4, 0x200, 0x9f6, 0x88, 0x9, 0x4, 0x0, 0xc5, 0x4, 0x70, 0x0, 0x5, 0x10000, 0xfffffff8, 0x1, 0x5, 0xfffffffd, 0xd, 0x3, 0xd5, 0x9, 0x6, 0xe, 0x5, 0x8, 0x1, 0x9, 0x6, 0x0, 0x9, 0xff, 0x3ff, 0x7e6, 0x5, 0x3, 0x6, 0x10001, 0x8c, 0x3, 0x4, 0x197e, 0x8a, 0xd9b, 0x9, 0x5, 0xb, 0x10001, 0x31a, 0x3, 0x9, 0xffff, 0x3, 0x5, 0xe2, 0x1, 0xfffffffd, 0x7ff, 0x5, 0x32, 0x3ff, 0x1, 0x8, 0x80000000, 0x6, 0x4, 0x4, 0x0, 0x1, 0x0, 0x4b, 0x1, 0xfffffffe, 0x2, 0xffff0001, 0x4, 0x5f6, 0x6, 0x8, 0x7, 0x1, 0x6, 0x5, 0x7, 0x5990, 0x3, 0x4, 0x7, 0x3, 0x0, 0x5, 0x1, 0x1, 0x1e8, 0x1, 0x1, 0x6, 0x40, 0x7, 0x10, 0x5, 0x6, 0x81, 0x6, 0x9, 0xffffffff, 0x40, 0x0, 0x0, 0x1, 0x380, 0x6, 0x2, 0x8000, 0x2afa, 0xfff, 0x4, 0x9, 0xd352, 0x81, 0x5, 0x3aa, 0xe18d, 0x3, 0x6, 0xf5, 0xffffffff, 0x3, 0xe, 0x1, 0x101, 0x7, 0xa000, 0x4, 0x40, 0x8, 0x4, 0x401, 0x1, 0x4, 0xd, 0x7, 0x5, 0x4, 0x642a, 0x4, 0xfff, 0x2, 0x1, 0x4, 0x9, 0xf8c5, 0xb, 0xf788, 0x5043, 0x10000, 0x9, 0xffffffff, 0x86, 0x9, 0xff34, 0xe249, 0x3, 0x1, 0x20000000, 0x7ff, 0x6, 0x3, 0x5, 0x707, 0x96cd, 0x3, 0x3, 0x7, 0x3f8f, 0x200, 0x4, 0x1, 0xfffffffb, 0x0, 0x33500000, 0x8, 0x7, 0x4, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}, @TCA_FW_ACT={0x1ec, 0x4, [@m_skbmod={0x150, 0x3, 0x0, 0x0, {{0xb}, {0xb0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xe}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x7f, 0x20000000, 0xffffff01, 0x3}, 0xc}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6ca4, 0x6, 0x2, 0x1, 0x92a}, 0x5}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff7}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xfffffff8, 0x10000000, 0x1, 0x100}, 0x2}}]}, {0x77, 0x6, "f7cbcbae4ff4b3686dae3100d2bdce1cb48cea25d7f2eec84bf336b2771cdee4b8c1445752f4f45b7aa6cb12694644e73390a9ac618e0e7ba38b7022519bc07a357329d60cfe7c7a2ba5d562e9003039f99ee41d2eeec7862f6152ce51a70d89cae855aae23349d62987eb0a81c041b03558f6"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x98, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xc, 0x7, 0xfffffff6, 0x9}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0xfffeffff, 0x1, 0x5ab, 0x861}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x40, 0x2, 0x2, 0x3ff, 0x6}, 0x2, r1}}]}, {0xc, 0x6, "edc23692bb7fafcb"}, {0xc}, {0xc}}}]}]}}]}, 0xacc}, 0x1, 0x0, 0x0, 0x8005}, 0x80) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="40280000075005001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB="1e40332d9d59ff7943e1079095e073fc17118db6793d1f1a1c87d8f4f27456329294cd2af8"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x6a0eb000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x448301, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000240)={'batadv0\x00', @local}) r13 = accept4(r7, &(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x80, 0x800) setsockopt$bt_rfcomm_RFCOMM_LM(r13, 0x12, 0x3, &(0x7f0000000340)=0x4a, 0x4) 1.007508648s ago: executing program 2 (id=8191): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}}, 0x48004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x5, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000001d00df4a6ee4d5271c904bc90654c913ec0081008e8facb701c7f95cbcaa59c319a0dadacc2f2201e70b1489d60289837e4e58e3e8d96a2046385dc409da1ebcbfbc5a79b0ea5369adefed0a724d126810a0709ef123705e5bf941d3373729763c47fd88efe679136e043c166440486865c9969992b073fdf0217e0ac1e7", @ANYRES32=r7, @ANYBLOB="0a000600ffffffffffff00001c003300080100000802110000010802110000010802110000001000"], 0x44}}, 0x0) 927.432462ms ago: executing program 3 (id=8192): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x32}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (async) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) (async) close(r0) 810.231624ms ago: executing program 7 (id=8193): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x18, 0x43, 0x107, 0x1, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 747.508168ms ago: executing program 7 (id=8194): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 700.17758ms ago: executing program 3 (id=8195): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x91030000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x25c, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x47, 0x3, "613caac0229c92b7dc2177e4a0c4960f677e93705e1b5099ca5199a9c09b9887f8af55a2b124cec8f4763507384328f0a1ffb90c3dcdb8e65333eedf1a21995aa2674c"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "685c4d764e92d1565476214a1525666a6794cbeab34ed6a7448c128ca3267f7f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffff017}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "46b75fe6b18a6f4b7135049aff06272f23deda3a76"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "a25d9752c55f6cf8ab405b59f37bc4ebb87f7dc49e5786bd"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 574.568367ms ago: executing program 7 (id=8196): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110a380000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x301, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x7e) ioctl$PPPIOCSMAXCID(r1, 0x4004743c, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x840, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@gettaction={0x8c, 0x32, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xca5}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8800}, 0x24004003) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f75", 0xa0}, {0x0}, {&(0x7f0000000380)="dfd1db17f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f07000000000000008d4f9447506fd73cec3c99b717e119d15432e9d46da8a0c25e7e3771", 0x41}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88", 0xae}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff9", 0x6d}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334", 0x7d}, {&(0x7f0000002380)="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", 0x5b8}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) socket$netlink(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000100)=""/5, 0x1fe4}) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socketpair(0x9, 0x5, 0x1, &(0x7f0000000080)) 500.185119ms ago: executing program 3 (id=8197): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x56) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r2, r3, 0x0, 0x800) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x20000}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r5) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, r6, 0x301, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c840) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r6, 0x876eb99dbd844003, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_FAMILY={0x5, 0xd, 0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x40001) 339.495302ms ago: executing program 3 (id=8198): r0 = socket(0x10, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl(r2, 0x8b1b, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100000ff001500"/20, @ANYRES8=r3, @ANYBLOB="00000000000000001800128008000100707070003900028008000100", @ANYRES32, @ANYBLOB="08001f0000000000"], 0x40}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e00010000000000fddbdf2508000000010000000b"], 0x1c}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'syz_tun\x00', {0x4ca}, 0x3}) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) socket(0x10, 0x803, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) (async) accept4(r1, 0x0, 0x0, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl(r2, 0x8b1b, &(0x7f0000000040)) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100000ff001500"/20, @ANYRES8=r3, @ANYBLOB="00000000000000001800128008000100707070003900028008000100", @ANYRES32, @ANYBLOB="08001f0000000000"], 0x40}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e00010000000000fddbdf2508000000010000000b"], 0x1c}], 0x1}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'syz_tun\x00', {0x4ca}, 0x3}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) bind$l2tp(r7, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) (async) 241.390338ms ago: executing program 3 (id=8199): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)={0x40, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0xa}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004881}, 0x40000) 0s ago: executing program 3 (id=8200): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) sendmsg$inet_sctp(r0, &(0x7f00000009c0)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000200)="7da5", 0x2}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00\x00'], 0x30, 0x4040081}, 0x90f0) kernel console output (not intermixed with test programs): 040][T27933] dump_stack_lvl+0xe8/0x150 [ 756.588074][T27933] should_fail_ex+0x414/0x560 [ 756.588114][T27933] _copy_from_user+0x2d/0xb0 [ 756.588141][T27933] ___sys_sendmsg+0x158/0x2a0 [ 756.588172][T27933] ? __pfx____sys_sendmsg+0x10/0x10 [ 756.588249][T27933] ? __fget_files+0x2a/0x420 [ 756.588274][T27933] ? __fget_files+0x3a0/0x420 [ 756.588311][T27933] __x64_sys_sendmsg+0x19b/0x260 [ 756.588340][T27933] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 756.588376][T27933] ? __pfx_ksys_write+0x10/0x10 [ 756.588409][T27933] do_syscall_64+0xec/0xf80 [ 756.588432][T27933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.588452][T27933] ? trace_irq_disable+0x37/0x100 [ 756.588478][T27933] ? clear_bhb_loop+0x60/0xb0 [ 756.588503][T27933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.588524][T27933] RIP: 0033:0x7fc543b8f749 [ 756.588550][T27933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.588568][T27933] RSP: 002b:00007fc541df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 756.588591][T27933] RAX: ffffffffffffffda RBX: 00007fc543de6090 RCX: 00007fc543b8f749 [ 756.588607][T27933] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 756.588625][T27933] RBP: 00007fc541df6090 R08: 0000000000000000 R09: 0000000000000000 [ 756.588637][T27933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.588649][T27933] R13: 00007fc543de6128 R14: 00007fc543de6090 R15: 00007ffe66628e68 [ 756.588702][T27933] [ 756.829178][ T180] hsr_slave_1: left promiscuous mode [ 756.867279][ T180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 756.895584][ T180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 756.938475][T27938] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6151'. [ 756.984373][ T180] veth0_macvtap: left promiscuous mode [ 757.011761][ T180] veth1_vlan: left promiscuous mode [ 757.017193][ T180] veth0_vlan: left promiscuous mode [ 757.131178][T27950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6155'. [ 757.366480][ T180] pimreg (unregistering): left allmulticast mode [ 758.033111][ T180] team0 (unregistering): Port device team_slave_1 removed [ 758.087779][ T180] team0 (unregistering): Port device team_slave_0 removed [ 759.000860][T27963] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6158'. [ 759.408510][T27990] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6164'. [ 759.410324][T27991] FAULT_INJECTION: forcing a failure. [ 759.410324][T27991] name failslab, interval 1, probability 0, space 0, times 0 [ 759.492425][T27991] CPU: 1 UID: 0 PID: 27991 Comm: syz.5.6165 Not tainted syzkaller #0 PREEMPT(full) [ 759.492458][T27991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 759.492472][T27991] Call Trace: [ 759.492491][T27991] [ 759.492501][T27991] dump_stack_lvl+0xe8/0x150 [ 759.492534][T27991] should_fail_ex+0x414/0x560 [ 759.492586][T27991] should_failslab+0xa8/0x100 [ 759.492614][T27991] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 759.492646][T27991] ? __alloc_skb+0x198/0x3a0 [ 759.492668][T27991] ? __alloc_skb+0x1dc/0x3a0 [ 759.492687][T27991] ? __local_bh_enable_ip+0xd0/0x130 [ 759.492709][T27991] ? __alloc_skb+0x198/0x3a0 [ 759.492731][T27991] __alloc_skb+0x1dc/0x3a0 [ 759.492758][T27991] netlink_sendmsg+0x5c6/0xb30 [ 759.492798][T27991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.492829][T27991] ? aa_sock_msg_perm+0xf1/0x1b0 [ 759.492857][T27991] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 759.492875][T27991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.492903][T27991] __sock_sendmsg+0x21c/0x270 [ 759.492935][T27991] ____sys_sendmsg+0x505/0x820 [ 759.492964][T27991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 759.492998][T27991] ? import_iovec+0x74/0xa0 [ 759.493026][T27991] ___sys_sendmsg+0x21f/0x2a0 [ 759.493053][T27991] ? __pfx____sys_sendmsg+0x10/0x10 [ 759.493118][T27991] ? __fget_files+0x2a/0x420 [ 759.493144][T27991] ? __fget_files+0x3a0/0x420 [ 759.493181][T27991] __x64_sys_sendmsg+0x19b/0x260 [ 759.493208][T27991] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 759.493243][T27991] ? __pfx_ksys_write+0x10/0x10 [ 759.493275][T27991] do_syscall_64+0xec/0xf80 [ 759.493299][T27991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.493319][T27991] ? trace_irq_disable+0x37/0x100 [ 759.493345][T27991] ? clear_bhb_loop+0x60/0xb0 [ 759.493370][T27991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.493390][T27991] RIP: 0033:0x7fe7e918f749 [ 759.493409][T27991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.493426][T27991] RSP: 002b:00007fe7e9f91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.493447][T27991] RAX: ffffffffffffffda RBX: 00007fe7e93e6090 RCX: 00007fe7e918f749 [ 759.493461][T27991] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 759.493473][T27991] RBP: 00007fe7e9f91090 R08: 0000000000000000 R09: 0000000000000000 [ 759.493495][T27991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.493507][T27991] R13: 00007fe7e93e6128 R14: 00007fe7e93e6090 R15: 00007ffefa8b6bc8 [ 759.493542][T27991] [ 759.561687][T27994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6168'. [ 759.811018][ T180] IPVS: stop unused estimator thread 0... [ 759.845224][T28002] netlink: 'syz.6.6169': attribute type 1 has an invalid length. [ 759.861781][T28003] netlink: 'syz.6.6169': attribute type 1 has an invalid length. [ 760.028564][T28002] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 760.041115][T28014] netlink: 'syz.5.6172': attribute type 10 has an invalid length. [ 760.071456][T28003] 8021q: adding VLAN 0 to HW filter on device bond10 [ 760.178279][T28014] netlink: 2 bytes leftover after parsing attributes in process `syz.5.6172'. [ 760.188738][T28017] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.6173'. [ 760.224288][T28017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6173'. [ 760.262218][T28014] team0: entered promiscuous mode [ 760.277760][T28014] team_slave_0: entered promiscuous mode [ 760.311602][T28025] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6173'. [ 760.319095][T28014] team_slave_1: entered promiscuous mode [ 760.361741][T28014] dummy0: entered promiscuous mode [ 760.470019][T28030] syzkaller0: entered promiscuous mode [ 760.475569][T28030] syzkaller0: entered allmulticast mode [ 760.555173][T28041] netlink: 'syz.5.6179': attribute type 10 has an invalid length. [ 761.034616][T28072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 761.181438][T28084] bond1 (unregistering): Released all slaves [ 761.326579][T28092] __nla_validate_parse: 2 callbacks suppressed [ 761.326600][T28092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6194'. [ 761.430167][T28098] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6195'. [ 761.602547][T28102] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6197'. [ 761.633103][T28102] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6197'. [ 761.825063][T28119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6202'. [ 761.913276][T28124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6204'. [ 762.111577][T28133] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6206'. [ 762.146144][T28133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6206'. [ 762.434334][T28153] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6213'. [ 762.557250][T28161] netdevsim netdevsim2: Direct firmware load for qM failed with error -2 [ 762.578489][T28161] netdevsim netdevsim2: Falling back to sysfs fallback for: qM [ 762.720379][T28170] vlan1: entered allmulticast mode [ 762.725747][T28170] hsr0: entered allmulticast mode [ 762.732714][T28170] hsr_slave_0: entered allmulticast mode [ 762.739278][T28174] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 762.751532][T28170] hsr_slave_1: entered allmulticast mode [ 762.912570][T28187] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6222'. [ 762.999485][T28187] vlan2: entered allmulticast mode [ 763.006789][T28187] erspan0: entered allmulticast mode [ 763.061036][T28187] bond5: Removing last arp target with arp_interval on [ 763.155350][T28190] netlink: 'syz.2.6223': attribute type 1 has an invalid length. [ 763.411063][T28212] netlink: 'syz.3.6230': attribute type 1 has an invalid length. [ 763.923585][T28238] vxcan1 speed is unknown, defaulting to 1000 [ 763.944741][T28238] vxcan1 speed is unknown, defaulting to 1000 [ 763.963981][T28238] vxcan1 speed is unknown, defaulting to 1000 [ 764.091823][T28253] netlink: 'syz.6.6241': attribute type 1 has an invalid length. [ 764.112117][T28252] netlink: 'syz.6.6241': attribute type 1 has an invalid length. [ 764.227114][T28253] 8021q: adding VLAN 0 to HW filter on device bond11 [ 764.257302][T28265] netlink: 'syz.5.6245': attribute type 1 has an invalid length. [ 764.265880][T28265] netlink: 'syz.5.6245': attribute type 1 has an invalid length. [ 764.345763][T28271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.355096][T28271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.372077][T28271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.387772][T28271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.581323][T28238] infiniband syz2: set active [ 764.586181][T17085] vxcan1 speed is unknown, defaulting to 1000 [ 764.613933][T28238] infiniband syz2: added vxcan1 [ 764.788113][T28291] tipc: Enabling not permitted [ 764.793775][T28291] tipc: Enabling of bearer rejected, failed to enable media [ 764.816433][T28238] RDS/IB: syz2: added [ 764.821243][T28238] smc: adding ib device syz2 with port count 1 [ 764.827631][T28238] smc: ib device syz2 port 1 has no pnetid [ 764.837362][T14607] vxcan1 speed is unknown, defaulting to 1000 [ 764.845345][T28238] vxcan1 speed is unknown, defaulting to 1000 [ 765.039804][T28304] validate_nla: 2 callbacks suppressed [ 765.039825][T28304] netlink: 'syz.3.6255': attribute type 2 has an invalid length. [ 765.094346][T28304] netlink: 'syz.3.6255': attribute type 10 has an invalid length. [ 765.570981][T28238] vxcan1 speed is unknown, defaulting to 1000 [ 765.590858][T28333] tipc: Enabled bearer , priority 0 [ 765.610969][T28333] syzkaller0: entered promiscuous mode [ 765.627109][T28333] syzkaller0: entered allmulticast mode [ 765.691015][T28333] tipc: Resetting bearer [ 765.728355][T28331] tipc: Resetting bearer [ 765.808409][T28331] tipc: Disabling bearer [ 765.880109][T28343] 8021q: adding VLAN 0 to HW filter on device bond6 [ 765.974633][T28343] wireguard0: entered allmulticast mode [ 766.202281][T28238] vxcan1 speed is unknown, defaulting to 1000 [ 766.278483][T28356] team0: Caught tx_queue_len zero misconfig [ 766.494221][T28364] __nla_validate_parse: 11 callbacks suppressed [ 766.494250][T28364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6271'. [ 766.522864][T28365] bond0: (slave caif0): Error: Device type is different from other slaves [ 766.637208][T28369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6272'. [ 766.649319][T28369] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6272'. [ 766.723519][T28238] vxcan1 speed is unknown, defaulting to 1000 [ 766.753193][T28374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6274'. [ 767.201729][T28238] vxcan1 speed is unknown, defaulting to 1000 [ 767.245305][T28387] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6278'. [ 767.376506][T28395] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6280'. [ 767.810281][T28391] vxcan1 speed is unknown, defaulting to 1000 [ 767.872086][T28418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6287'. [ 767.882100][T28418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6287'. [ 767.985405][T28425] dvmrp0: entered allmulticast mode [ 768.051672][T28430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6291'. [ 768.160587][T28432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6293'. [ 768.169850][T28432] netlink: 'syz.5.6293': attribute type 1 has an invalid length. [ 768.342731][T28238] vxcan1 speed is unknown, defaulting to 1000 [ 768.575469][T28450] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 768.648236][T28450] team0: Port device batadv1 added [ 768.798700][T28461] netlink: 'syz.3.6301': attribute type 1 has an invalid length. [ 769.174671][T28238] vxcan1 speed is unknown, defaulting to 1000 [ 770.289661][T28535] syzkaller0: entered promiscuous mode [ 770.295631][T28535] syzkaller0: entered allmulticast mode [ 770.299021][T28540] netlink: 'syz.3.6321': attribute type 11 has an invalid length. [ 773.824565][T28567] __nla_validate_parse: 5 callbacks suppressed [ 773.824585][T28567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6330'. [ 773.863733][ T180] tipc: Subscription rejected, illegal request [ 774.198644][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 774.209628][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 774.212145][T28586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6333'. [ 774.247897][T28586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6333'. [ 774.260197][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 774.272116][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 774.280894][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 774.414900][T28583] vxcan1 speed is unknown, defaulting to 1000 [ 774.547427][T17572] bond0: (slave syz_tun): Releasing backup interface [ 774.628041][T28594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 774.670052][T28595] veth5: entered promiscuous mode [ 775.105173][T28612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6342'. [ 775.271719][T28618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6344'. [ 775.303299][T28616] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6343'. [ 775.368415][T28583] chnl_net:caif_netlink_parms(): no params data found [ 775.479311][T28626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6346'. [ 775.536203][T28626] macsec1: entered promiscuous mode [ 775.542071][T28626] bridge0: entered promiscuous mode [ 775.549139][T28626] macsec1: entered allmulticast mode [ 775.554825][T28626] bridge0: entered allmulticast mode [ 775.581412][T28626] bridge0: port 3(macsec1) entered blocking state [ 775.594169][T28626] bridge0: port 3(macsec1) entered disabled state [ 775.651525][T28626] bridge0: left allmulticast mode [ 775.675833][T28626] bridge0: left promiscuous mode [ 775.784442][T28643] netlink: 'syz.7.6348': attribute type 29 has an invalid length. [ 775.870212][T28583] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.879762][T28583] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.887124][T28583] bridge_slave_0: entered allmulticast mode [ 775.907669][T28648] netlink: 500 bytes leftover after parsing attributes in process `syz.7.6348'. [ 775.919804][T28651] netlink: 'syz.3.6350': attribute type 8 has an invalid length. [ 775.939531][T28583] bridge_slave_0: entered promiscuous mode [ 775.955503][T28643] netlink: 'syz.7.6348': attribute type 29 has an invalid length. [ 775.966697][T28583] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.977744][T28583] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.000206][T28583] bridge_slave_1: entered allmulticast mode [ 776.019650][T28583] bridge_slave_1: entered promiscuous mode [ 776.095689][T28664] netlink: 'syz.7.6353': attribute type 1 has an invalid length. [ 776.307878][T28667] 8021q: adding VLAN 0 to HW filter on device bond6 [ 776.318048][T28667] bond5: (slave bond6): making interface the new active one [ 776.326261][T28667] bond5: (slave bond6): Enslaving as an active interface with an up link [ 776.343889][T28583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.362026][T28671] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 776.374825][ T5836] Bluetooth: hci2: command tx timeout [ 776.384557][T28671] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 776.418935][T28583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.524657][T28583] team0: Port device team_slave_0 added [ 776.564743][T28583] team0: Port device team_slave_1 added [ 776.573275][T28686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6356'. [ 776.626513][T28690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6356'. [ 776.673575][T28583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.695844][T28583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.746565][T28583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.761311][T28583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.770403][T28583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.829995][T28583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.885267][T28700] netlink: 'syz.3.6362': attribute type 3 has an invalid length. [ 776.995364][T28704] vlan4: entered allmulticast mode [ 777.001029][T28704] veth1: entered allmulticast mode [ 777.035096][T28583] hsr_slave_0: entered promiscuous mode [ 777.043120][T28583] hsr_slave_1: entered promiscuous mode [ 777.052895][T28583] debugfs: 'hsr0' already exists in 'hsr' [ 777.059150][T28583] Cannot create hsr debugfs directory [ 777.443659][T28725] tipc: Enabling of bearer rejected, already enabled [ 777.513138][T28583] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 777.583129][T28731] bridge_slave_1: left allmulticast mode [ 777.593121][T28731] bridge_slave_1: left promiscuous mode [ 777.603534][T28731] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.655265][T28731] bridge_slave_0: left allmulticast mode [ 777.680583][T28731] bridge_slave_0: left promiscuous mode [ 777.686492][T28731] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.873561][T28583] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 778.021866][T28747] netlink: 'syz.7.6380': attribute type 1 has an invalid length. [ 778.037929][T28583] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 778.152750][T28583] batman_adv: batadv0: Removing interface: netdevsim0 [ 778.170479][T28583] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 778.447946][ T5836] Bluetooth: hci2: command tx timeout [ 778.726447][T28784] tipc: Started in network mode [ 778.735167][T28784] tipc: Node identity e0000002, cluster identity 4711 [ 778.748323][T28784] tipc: Enabling of bearer rejected, failed to enable media [ 778.771131][T28583] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 778.812545][T28583] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 778.839950][T28583] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 778.874332][T28583] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 778.939221][T28803] openvswitch: netlink: Missing key (keys=40, expected=100) [ 779.245967][T28583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.293447][T28583] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.338226][ T1900] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.345462][ T1900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.396891][ T1900] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.404196][ T1900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.515103][T28832] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 779.570957][T28834] __nla_validate_parse: 9 callbacks suppressed [ 779.570980][T28834] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6401'. [ 779.922219][T28583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.031633][T28854] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 780.227299][T28865] nicvf0: mtu less than device minimum [ 780.240736][T28864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6412'. [ 780.269959][T28859] syzkaller0: entered promiscuous mode [ 780.279180][T28859] syzkaller0: entered allmulticast mode [ 780.314541][T28864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6412'. [ 780.540514][ T5836] Bluetooth: hci2: command tx timeout [ 780.662121][T28583] veth0_vlan: entered promiscuous mode [ 780.734469][T28583] veth1_vlan: entered promiscuous mode [ 780.801999][T28890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6417'. [ 780.902670][T28583] veth0_macvtap: entered promiscuous mode [ 780.930095][T28890] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6417'. [ 780.978766][T28583] veth1_macvtap: entered promiscuous mode [ 781.041537][T28583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.086210][T28583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.131298][T23344] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.166703][T23344] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.210692][T23344] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.240978][T23344] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.347140][T28909] syzkaller0: entered promiscuous mode [ 781.355287][T28909] syzkaller0: entered allmulticast mode [ 781.371962][T28909] netlink: 'syz.3.6423': attribute type 10 has an invalid length. [ 781.403355][T28913] : renamed from hsr0 (while UP) [ 781.438249][T28909] team0: Port device dummy0 added [ 781.478452][T28916] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6425'. [ 781.490454][T23346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.507903][T23346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.619460][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.640656][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.690271][T28923] netlink: 108 bytes leftover after parsing attributes in process `syz.5.6426'. [ 781.706171][T28923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6426'. [ 781.896592][T28938] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6431'. [ 781.943970][T28943] netlink: 'syz.7.6432': attribute type 1 has an invalid length. [ 781.964034][T28943] netlink: 2088 bytes leftover after parsing attributes in process `syz.7.6432'. [ 781.979448][T28938] dummy0 (unregistering): left promiscuous mode [ 781.986747][T28941] netlink: 'syz.7.6432': attribute type 1 has an invalid length. [ 782.010603][T28938] team0: Port device dummy0 removed [ 782.283771][T28957] xt_l2tp: invalid flags combination: 0 [ 782.313057][T28962] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 782.313902][T28952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 782.607717][ T5836] Bluetooth: hci2: command tx timeout [ 782.908442][T29007] netlink: 'syz.3.6448': attribute type 21 has an invalid length. [ 783.215617][T29029] tipc: MTU too low for tipc bearer [ 783.253748][T29024] tipc: Started in network mode [ 783.259310][T29024] tipc: Node identity d2a58e67d852, cluster identity 4711 [ 783.272671][T29024] tipc: Enabled bearer , priority 0 [ 783.389830][T29038] xt_cgroup: path and classid specified [ 783.487177][T29035] syzkaller0: entered promiscuous mode [ 783.493836][T29035] syzkaller0: entered allmulticast mode [ 783.500648][T29035] tipc: Resetting bearer [ 783.563104][T29022] tipc: Resetting bearer [ 787.464771][T29022] tipc: Disabling bearer [ 787.523972][T14612] tipc: Node number set to 183996007 [ 787.544978][T23345] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 787.632067][T29099] netlink: 'syz.5.6471': attribute type 32 has an invalid length. [ 787.641664][T29099] __nla_validate_parse: 2 callbacks suppressed [ 787.641688][T29099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6471'. [ 787.686094][T29099] bond7: option coupled_control: invalid value (110) [ 787.720128][T29099] bond7 (unregistering): Released all slaves [ 787.779421][T29110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6474'. [ 787.924106][T29113] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6472'. [ 788.096578][T29128] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6480'. [ 788.277780][T29140] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6481'. [ 788.546704][T29149] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 788.553574][T29111] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 788.569807][T29111] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 788.800539][T29156] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6487'. [ 788.807934][T29158] x_tables: duplicate underflow at hook 1 [ 788.883205][T29161] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 788.932951][T29156] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6487'. [ 789.162004][T29170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6490'. [ 789.180569][T29169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6490'. [ 789.201332][T29170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6490'. [ 789.247245][ T6077] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.259899][ T6077] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.296738][ T6077] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.366888][ T6077] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.543526][T29193] netdevsim netdevsim6: Direct firmware load for . failed with error -2 [ 789.564087][T29193] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 789.630722][ T6077] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.646271][ T6077] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.659451][ T6077] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.669661][ T6077] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.751201][T29209] xt_hashlimit: size too large, truncated to 1048576 [ 789.846239][T29213] netlink: 'syz.7.6504': attribute type 11 has an invalid length. [ 790.288813][ T5836] Bluetooth: hci2: command tx timeout [ 790.364972][T29237] netlink: 'syz.3.6510': attribute type 10 has an invalid length. [ 790.639736][T29246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 790.733185][T29258] netlink: 'syz.7.6516': attribute type 25 has an invalid length. [ 790.751983][T29258] netlink: 'syz.7.6516': attribute type 25 has an invalid length. [ 790.765628][T29257] openvswitch: netlink: Key type 208 is out of range max 32 [ 790.910283][T29261] ipvlan2: entered allmulticast mode [ 790.915764][T29261] batadv_slave_1: entered allmulticast mode [ 791.054021][T29269] syzkaller1: entered promiscuous mode [ 791.060764][T29269] syzkaller1: entered allmulticast mode [ 791.226474][T29276] xt_l2tp: invalid flags combination: 8 [ 791.510410][T29253] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 791.516394][T29253] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 791.553878][T29289] bond2: option mode: invalid value (133) [ 791.593814][T29289] bond2 (unregistering): Released all slaves [ 791.740619][T29253] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 791.746653][T29253] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 791.785728][T29253] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 791.819511][T29253] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 791.929960][T29253] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 791.946167][T29253] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 792.025865][T29253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 792.032848][T29253] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 792.067205][T29317] netlink: 'syz.6.6538': attribute type 2 has an invalid length. [ 792.076864][T29317] netlink: 'syz.6.6538': attribute type 2 has an invalid length. [ 792.687193][T29349] sctp: [Deprecated]: syz.5.6549 (pid 29349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 792.687193][T29349] Use struct sctp_sack_info instead [ 792.735320][T29348] __nla_validate_parse: 22 callbacks suppressed [ 792.735340][T29348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6546'. [ 792.761161][T29351] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6548'. [ 792.850900][T29359] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6550'. [ 792.922942][T29362] bond_slave_0: Caught tx_queue_len zero misconfig [ 792.941073][T29368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6553'. [ 793.275435][T29383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6555'. [ 793.427729][T29394] netlink: 240 bytes leftover after parsing attributes in process `syz.7.6560'. [ 793.588896][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 793.603307][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 793.614310][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 793.625241][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 793.633620][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 793.662783][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 793.672345][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 793.680597][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 793.688986][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 793.696822][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 793.793838][T29408] "syz.6.6563" (29408) uses obsolete ecb(arc4) skcipher [ 793.850749][T29405] tipc: Enabled bearer , priority 0 [ 793.898848][T29401] vxcan1 speed is unknown, defaulting to 1000 [ 793.951050][T29410] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6564'. [ 793.970119][T29410] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6564'. [ 794.001074][T29410] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6564'. [ 794.057010][T29410] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 794.445561][T29429] tipc: Enabled bearer , priority 0 [ 794.456795][T29429] syzkaller0: entered promiscuous mode [ 794.463844][T29429] syzkaller0: entered allmulticast mode [ 794.736320][T29440] tipc: Resetting bearer [ 794.797160][T29428] tipc: Resetting bearer [ 794.823088][T29428] tipc: Disabling bearer [ 794.920091][T29453] netlink: 'syz.6.6576': attribute type 1 has an invalid length. [ 794.953024][ T5895] tipc: Node number set to 3324505730 [ 794.967579][T29453] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6576'. [ 795.008375][T29456] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 795.097539][T29459] netlink: 'syz.7.6579': attribute type 1 has an invalid length. [ 795.206425][T29459] 8021q: adding VLAN 0 to HW filter on device bond7 [ 795.232273][T29449] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 795.275822][T29401] chnl_net:caif_netlink_parms(): no params data found [ 795.731116][ T5836] Bluetooth: hci4: command tx timeout [ 795.919430][T29401] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.935800][T29401] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.948915][T29401] bridge_slave_0: entered allmulticast mode [ 795.965937][T29401] bridge_slave_0: entered promiscuous mode [ 795.977661][T29401] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.985132][T29401] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.992663][T29401] bridge_slave_1: entered allmulticast mode [ 796.001820][T29401] bridge_slave_1: entered promiscuous mode [ 796.100833][T29401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.123221][T29401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.253815][T29401] team0: Port device team_slave_0 added [ 796.279990][T29401] team0: Port device team_slave_1 added [ 796.354605][T29401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.364040][T29401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.393988][T29401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.431083][T29401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.443942][T29401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.477589][T29401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.570196][T29526] netlink: 'syz.3.6597': attribute type 2 has an invalid length. [ 796.613226][T29401] hsr_slave_0: entered promiscuous mode [ 796.621629][T29401] hsr_slave_1: entered promiscuous mode [ 796.628695][T29401] debugfs: 'hsr0' already exists in 'hsr' [ 796.639240][T29401] Cannot create hsr debugfs directory [ 796.761520][T29530] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 797.348919][T29401] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.360945][T29401] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.390086][T29572] netlink: 'syz.7.6611': attribute type 2 has an invalid length. [ 797.811513][ T5836] Bluetooth: hci4: command tx timeout [ 799.898271][ T5836] Bluetooth: hci4: command tx timeout [ 799.981427][T29572] 9: entered promiscuous mode [ 800.049293][T29581] netlink: 'syz.7.6614': attribute type 39 has an invalid length. [ 800.114332][T29401] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.134558][T29584] __nla_validate_parse: 14 callbacks suppressed [ 800.134582][T29584] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6615'. [ 800.151990][T29401] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.169182][T29586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6616'. [ 800.290606][T29401] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.317656][T29401] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.384656][T29593] netlink: 'syz.6.6618': attribute type 32 has an invalid length. [ 800.542381][T29401] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.581748][T29401] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.828675][T29606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 800.855822][T29617] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6623'. [ 800.900786][T29617] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6623'. [ 801.005898][T29617] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6623'. [ 801.025263][T29617] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6623'. [ 801.092234][T29617] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6623'. [ 801.121272][T29617] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6623'. [ 801.134208][T29627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6625'. [ 801.180684][T29627] bridge_slave_1: left allmulticast mode [ 801.192366][T29627] bridge_slave_1: left promiscuous mode [ 801.212216][T29627] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.223645][T29627] bridge_slave_0: left allmulticast mode [ 801.231828][T29627] bridge_slave_0: left promiscuous mode [ 801.240742][T29627] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.355436][T29617] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6623'. [ 801.449940][T29401] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 801.496099][T29401] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 801.527584][T29401] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 801.845349][T29647] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 801.889773][T29647] team1: entered promiscuous mode [ 801.905172][T29647] team1: entered allmulticast mode [ 801.910619][T29648] netlink: 'syz.2.6629': attribute type 27 has an invalid length. [ 801.943368][T29401] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 801.978306][ T5836] Bluetooth: hci4: command tx timeout [ 802.270268][T29401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.303180][T29401] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.331237][T23345] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.338481][T23345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.415636][T23345] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.422914][T23345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.493756][T29682] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 802.534412][T29401] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 802.545052][T29401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 803.036255][T29706] syzkaller0: entered promiscuous mode [ 803.046666][T29706] syzkaller0: entered allmulticast mode [ 803.115413][T29401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.582994][T29734] netlink: 'syz.2.6649': attribute type 10 has an invalid length. [ 803.616722][T29734] veth0_vlan: left promiscuous mode [ 803.631955][T29734] veth0_vlan: entered promiscuous mode [ 803.650893][T29734] team0: Device veth0_vlan failed to register rx_handler [ 803.729153][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 803.865223][T29401] veth0_vlan: entered promiscuous mode [ 803.881678][T29401] veth1_vlan: entered promiscuous mode [ 803.972115][T29401] veth0_macvtap: entered promiscuous mode [ 804.016637][T29401] veth1_macvtap: entered promiscuous mode [ 804.070096][T29401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.118990][T29401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.162154][ T3474] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.180555][ T3474] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.214571][ T3474] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.283369][ T3474] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.480423][ T9784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.501503][ T9784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.584140][ T9784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.618481][ T9784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.834109][T29788] syzkaller1: entered promiscuous mode [ 804.867006][T29788] syzkaller1: entered allmulticast mode [ 804.930315][T29793] syzkaller1: entered promiscuous mode [ 804.936314][T29793] syzkaller1: entered allmulticast mode [ 805.000452][T29797] netlink: 'syz.5.6669': attribute type 1 has an invalid length. [ 805.091333][T29804] netlink: 'syz.3.6671': attribute type 1 has an invalid length. [ 805.280399][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 805.293388][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 805.302952][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 805.319352][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 805.338940][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 805.347724][T29811] __nla_validate_parse: 34 callbacks suppressed [ 805.347744][T29811] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6674'. [ 805.384966][T29813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6673'. [ 805.503842][T29813] 8021q: adding VLAN 0 to HW filter on device bond2 [ 805.641177][T29813] wireguard0: entered allmulticast mode [ 805.844114][T29807] vxcan1 speed is unknown, defaulting to 1000 [ 805.860852][T29858] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 805.873452][T29860] netlink: 'syz.6.6679': attribute type 10 has an invalid length. [ 805.883575][T29860] syz_tun: entered promiscuous mode [ 805.931105][T29860] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 805.990351][T29860] syzkaller1: entered promiscuous mode [ 805.995898][T29860] syzkaller1: entered allmulticast mode [ 806.006999][T29860] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 806.019702][T29860] netlink: 'syz.6.6679': attribute type 10 has an invalid length. [ 806.095999][T29860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.131110][T29860] team0: Port device bond0 added [ 806.179341][T29865] bond0: (slave syz_tun): Releasing backup interface [ 806.301400][T29865] team0: Port device bond0 removed [ 806.333609][T29865] bridge_slave_0: left allmulticast mode [ 806.350605][T29865] bridge_slave_0: left promiscuous mode [ 806.356635][T29865] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.372438][T29865] bridge_slave_1: left allmulticast mode [ 806.379133][T29865] bridge_slave_1: left promiscuous mode [ 806.385062][T29865] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.402028][T29865] bond0: (slave bond_slave_0): Releasing backup interface [ 806.425428][T29865] bond0: (slave bond_slave_1): Releasing backup interface [ 806.460756][T29865] team0: Port device team_slave_0 removed [ 806.489725][T29865] team0: Port device team_slave_1 removed [ 806.496492][T29865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.517185][T29865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.526533][T29865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.535105][T29865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.544637][T29865] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 806.793297][T29887] team_slave_0: entered promiscuous mode [ 806.799521][T29887] team_slave_1: entered promiscuous mode [ 806.805312][T29887] batadv1: entered promiscuous mode [ 806.814048][T29887] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 806.840324][T29890] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 807.215458][T29904] syzkaller1: entered promiscuous mode [ 807.229346][T29904] syzkaller1: entered allmulticast mode [ 807.426058][ T52] Bluetooth: hci3: command tx timeout [ 807.426271][T29807] chnl_net:caif_netlink_parms(): no params data found [ 807.514343][T29927] tipc: Started in network mode [ 807.530655][T29927] tipc: Node identity ca7844743f48, cluster identity 4711 [ 807.541210][T29927] tipc: Enabled bearer , priority 0 [ 807.607339][T29934] syzkaller0: entered promiscuous mode [ 807.640486][T29934] syzkaller0: entered allmulticast mode [ 807.878779][T29934] tipc: Resetting bearer [ 807.946240][T29926] tipc: Resetting bearer [ 807.985962][T29926] tipc: Disabling bearer [ 808.013051][T29960] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 808.024677][T29807] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.055654][T29807] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.079523][T29807] bridge_slave_0: entered allmulticast mode [ 808.106301][T29807] bridge_slave_0: entered promiscuous mode [ 808.116730][T29807] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.125602][T29807] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.135681][T29807] bridge_slave_1: entered allmulticast mode [ 808.175058][T29807] bridge_slave_1: entered promiscuous mode [ 808.229088][T29965] tls_set_device_offload: netdev not found [ 808.275294][T29807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.306564][T29807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.429912][T29976] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 808.444029][T29976] bond3 (unregistering): Released all slaves [ 808.491219][T29982] sctp: [Deprecated]: syz.2.6713 (pid 29982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 808.491219][T29982] Use struct sctp_sack_info instead [ 808.544850][T29807] team0: Port device team_slave_0 added [ 808.575385][T29807] team0: Port device team_slave_1 added [ 808.812417][T29807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.827801][T29807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.874111][T29807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.999590][T29807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.006620][T29807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.068230][T29807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.298259][T29807] hsr_slave_0: entered promiscuous mode [ 809.311123][T29807] hsr_slave_1: entered promiscuous mode [ 809.331649][T29807] debugfs: 'hsr0' already exists in 'hsr' [ 809.350333][T29807] Cannot create hsr debugfs directory [ 809.357628][T30022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6722'. [ 809.490493][ T52] Bluetooth: hci3: command tx timeout [ 810.616809][ T3446]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.630632][ T3446]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.640472][ T3446]  (unregistering): Released all slaves [ 810.662957][ T3446] bond1 (unregistering): Released all slaves [ 810.676863][ T3446] bond2 (unregistering): Released all slaves [ 810.847050][ T3446] bond3 (unregistering): Released all slaves [ 811.009663][ T3446] bond4 (unregistering): Released all slaves [ 811.234611][ T3446] tipc: Left network mode [ 811.489286][T30043] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6728'. [ 811.576142][ T52] Bluetooth: hci3: command tx timeout [ 811.862032][T30054] ip6t_srh: unknown srh match flags 4000 [ 812.202678][T29807] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 812.273208][T29807] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.292553][T30066] netlink: 'syz.6.6735': attribute type 24 has an invalid length. [ 812.309952][T30065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6737'. [ 812.383745][ T3446] hsr_slave_1: left promiscuous mode [ 812.485995][T30072] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6738'. [ 812.505087][ T3446] pim6reg (unregistering): left allmulticast mode [ 812.506144][T30072] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 813.058587][ T3446] team0 (unregistering): Port device team_slave_1 removed [ 813.124691][ T3446] team0 (unregistering): Port device team_slave_0 removed [ 813.654496][ T52] Bluetooth: hci3: command tx timeout [ 813.871700][T29807] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 813.883508][T29807] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.972436][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 814.055665][T29807] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 814.071262][T29807] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.108939][T30087] netlink: 61 bytes leftover after parsing attributes in process `syz.6.6743'. [ 814.175024][T29807] netdevsim netdevsim7 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 814.186043][T29807] netdevsim netdevsim7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.238913][T30086] syzkaller0: entered promiscuous mode [ 814.244477][T30086] syzkaller0: entered allmulticast mode [ 814.333319][T30094] netlink: 'syz.2.6745': attribute type 11 has an invalid length. [ 814.352635][T30094] netlink: 'syz.2.6745': attribute type 11 has an invalid length. [ 814.385042][T30094] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6745'. [ 814.452346][T30098] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6747'. [ 814.561727][T29807] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 814.601030][T30102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6748'. [ 814.615308][T29807] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 814.633409][T29807] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 814.661503][T30102] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 814.673167][T30102] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 814.682959][T30102] gretap2: entered promiscuous mode [ 814.688620][T30102] gretap2: entered allmulticast mode [ 814.707173][T29807] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 814.980770][T30123] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6754'. [ 815.032255][T30126] syzkaller0: entered promiscuous mode [ 815.040651][T30128] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 815.050377][T30126] syzkaller0: entered allmulticast mode [ 815.168968][T30130] netlink: 'syz.6.6757': attribute type 11 has an invalid length. [ 815.180499][T30130] netlink: 'syz.6.6757': attribute type 4 has an invalid length. [ 815.190343][T30130] netlink: 'syz.6.6757': attribute type 5 has an invalid length. [ 815.198394][T30130] netlink: 'syz.6.6757': attribute type 6 has an invalid length. [ 815.211187][T30130] netlink: 199748 bytes leftover after parsing attributes in process `syz.6.6757'. [ 815.234117][T29807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.303382][T29807] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.353384][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.360668][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.436753][T23344] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.444089][T23344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.707126][T30160] openvswitch: netlink: Flow key attr not present in new flow. [ 815.727746][ T52] Bluetooth: hci3: command tx timeout [ 815.744144][T30159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6764'. [ 816.026204][ T3446] IPVS: stop unused estimator thread 0... [ 816.049454][T29807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.792463][T29807] veth0_vlan: entered promiscuous mode [ 816.825639][T29807] veth1_vlan: entered promiscuous mode [ 816.834400][T30216] __nla_validate_parse: 2 callbacks suppressed [ 816.834423][T30216] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6780'. [ 816.910496][T29807] veth0_macvtap: entered promiscuous mode [ 816.960204][T29807] veth1_macvtap: entered promiscuous mode [ 817.015421][T29807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.079857][T30226] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6783'. [ 817.092702][T29807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.111347][T26122] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.128783][T26122] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.151736][T26122] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.176699][T26122] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.323049][T30241] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6789'. [ 817.336111][T30241] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6789'. [ 817.348015][T30241] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6789'. [ 817.360746][T30241] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6789'. [ 817.381998][T30241] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6789'. [ 817.392824][T30241] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6789'. [ 817.405820][T30241] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6789'. [ 817.421968][T30241] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6789'. [ 817.446811][T26141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.462544][T26141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.564582][T26141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.586600][T26141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.673141][T30245] vxcan1 speed is unknown, defaulting to 1000 [ 817.815939][T29853] IPVS: starting estimator thread 0... [ 817.908955][T30255] IPVS: using max 24 ests per chain, 57600 per kthread [ 817.991675][T30261] netlink: 'syz.7.6795': attribute type 13 has an invalid length. [ 818.025324][T30261] gretap0: refused to change device tx_queue_len [ 818.052518][T30261] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 818.141958][T30266] netlink: 'syz.5.6798': attribute type 1 has an invalid length. [ 818.384221][T30277] netlink: 'syz.7.6799': attribute type 1 has an invalid length. [ 818.425520][T30277] netlink: 'syz.7.6799': attribute type 2 has an invalid length. [ 818.556406][T30266] syzkaller0: entered promiscuous mode [ 818.563606][T30266] syzkaller0: entered allmulticast mode [ 820.379011][T30326] netlink: 'syz.2.6814': attribute type 28 has an invalid length. [ 820.428325][T30326] netlink: 'syz.2.6814': attribute type 3 has an invalid length. [ 820.877625][T30353] bond0: (slave gre0): Error: Device type is different from other slaves [ 820.942578][T30353] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 821.304956][T30369] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 821.371926][T30369] bond3 (unregistering): Released all slaves [ 821.801619][T30398] syzkaller0: entered promiscuous mode [ 821.807302][T30398] syzkaller0: entered allmulticast mode [ 822.209318][T30415] netlink: 'syz.6.6839': attribute type 15 has an invalid length. [ 822.237643][T30415] __nla_validate_parse: 70 callbacks suppressed [ 822.237666][T30415] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6839'. [ 822.299141][T30418] syzkaller0: entered promiscuous mode [ 822.311586][T30418] syzkaller0: entered allmulticast mode [ 822.480708][T30428] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6843'. [ 823.036925][T30451] netlink: 240 bytes leftover after parsing attributes in process `syz.5.6849'. [ 823.139070][T30453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6850'. [ 823.337669][T30466] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6854'. [ 823.366884][T30469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6855'. [ 823.368117][T30466] nbd: socks must be embedded in a SOCK_ITEM attr [ 823.537123][T30475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6856'. [ 823.963021][T30490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6863'. [ 824.168112][T30498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6864'. [ 824.853183][T30516] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6873'. [ 824.884138][T30516] netlink: 'syz.6.6873': attribute type 2 has an invalid length. [ 824.908373][T30516] netlink: 'syz.6.6873': attribute type 3 has an invalid length. [ 825.102608][T30526] netlink: 'syz.6.6877': attribute type 1 has an invalid length. [ 825.570747][T30543] netlink: 'syz.3.6882': attribute type 13 has an invalid length. [ 825.984557][T30576] bridge_slave_1: left allmulticast mode [ 825.990796][T30576] bridge_slave_1: left promiscuous mode [ 826.000862][T30576] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.030268][T30576] bridge_slave_0: left allmulticast mode [ 826.036112][T30576] bridge_slave_0: left promiscuous mode [ 826.049772][T30576] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.121166][T30587] netlink: 'syz.5.6895': attribute type 21 has an invalid length. [ 826.191631][T30593] netlink: 'syz.6.6897': attribute type 5 has an invalid length. [ 827.182222][T30657] lo: Caught tx_queue_len zero misconfig [ 827.376658][T30666] __nla_validate_parse: 11 callbacks suppressed [ 827.376680][T30666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6917'. [ 827.734993][T30682] : renamed from hsr0 (while UP) [ 828.013943][T30690] ip6gre1: entered promiscuous mode [ 828.021685][T30690] ip6gre1: entered allmulticast mode [ 864.165607][T30708] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6931'. [ 864.271523][T30719] sock: sock_timestamping_bind_phc: sock not bind to device [ 864.352284][T30727] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6936'. [ 864.520451][T30735] tipc: Enabled bearer , priority 0 [ 864.538716][T30733] gtp1: entered promiscuous mode [ 864.545432][T30733] gtp1: entered allmulticast mode [ 864.554153][T30735] syzkaller0: entered promiscuous mode [ 864.561325][T30735] syzkaller0: entered allmulticast mode [ 864.613372][T30740] team0: Device ip6gre1 is of different type [ 864.622690][T30744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6942'. [ 864.704519][T30748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6942'. [ 864.755186][T30735] tipc: Resetting bearer [ 864.825845][T30734] tipc: Resetting bearer [ 864.871414][T30734] tipc: Disabling bearer [ 865.123697][T30768] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 865.163294][T30768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6947'. [ 865.189835][T30773] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 865.202428][T14600] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 865.268378][T23118] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 865.330091][T30786] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6953'. [ 865.356128][T30786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6953'. [ 865.440937][T30788] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6954'. [ 865.450168][T30788] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6954'. [ 865.611486][T30803] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6958'. [ 865.667660][T30803] sch_tbf: burst 0 is lower than device bridge1 mtu (1514) ! [ 865.879152][T23118] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 867.331535][T30871] bridge: RTM_NEWNEIGH with invalid ether address [ 868.059845][T30903] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 868.560329][T30935] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 868.865196][T30960] tipc: Failed to remove unknown binding: 66,0,0/0:152536407/152536408 [ 868.885235][T30960] tipc: Failed to remove unknown binding: 66,0,0/0:152536407/152536408 [ 868.984374][T30967] netlink: 'syz.5.7009': attribute type 2 has an invalid length. [ 869.013010][ T5836] Bluetooth: hci3: command 0x0405 tx timeout [ 869.127987][T30976] sctp: [Deprecated]: syz.7.7012 (pid 30976) Use of int in maxseg socket option. [ 869.127987][T30976] Use struct sctp_assoc_value instead [ 869.189148][T30983] __nla_validate_parse: 13 callbacks suppressed [ 869.189172][T30983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7014'. [ 869.204973][T30983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7014'. [ 869.231239][T30983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7014'. [ 869.255487][T30983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7014'. [ 869.264748][ T6077] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 869.284687][ T6077] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 869.305079][ T6077] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 869.315341][ T6077] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 869.600382][T31001] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7019'. [ 869.612157][T31003] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7020'. [ 869.628438][T31000] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7019'. [ 869.642462][T31003] syzkaller1: entered promiscuous mode [ 869.650339][T31003] syzkaller1: entered allmulticast mode [ 869.774773][T31011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7022'. [ 869.785029][T31011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7022'. [ 869.951597][T31021] netlink: 'syz.2.7026': attribute type 6 has an invalid length. [ 869.963834][T31021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7026'. [ 869.977762][T31021] netlink: 'syz.2.7026': attribute type 13 has an invalid length. [ 870.130315][T31021] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 870.166139][T31021] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 870.174204][T31021] bridge1: left promiscuous mode [ 870.185040][T31021] bridge1: left allmulticast mode [ 870.213625][T31021] gretap2: left promiscuous mode [ 870.219749][T31021] gretap2: left allmulticast mode [ 870.227510][T31021] ip6gre1: left promiscuous mode [ 870.232599][T31021] ip6gre1: left allmulticast mode [ 870.649648][T31047] netlink: 'syz.2.7033': attribute type 1 has an invalid length. [ 871.350307][T31079] syzkaller0: entered promiscuous mode [ 871.357187][T31079] syzkaller0: entered allmulticast mode [ 872.209112][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 874.962811][T31118] netlink: 'syz.5.7053': attribute type 12 has an invalid length. [ 874.975424][T31084] vxcan1 speed is unknown, defaulting to 1000 [ 875.114920][T31124] xt_socket: unknown flags 0x50 [ 875.140934][T31123] __nla_validate_parse: 8 callbacks suppressed [ 875.140960][T31123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7054'. [ 875.293193][T31123] bond4 (unregistering): Released all slaves [ 875.307852][T31135] netlink: 'syz.7.7060': attribute type 21 has an invalid length. [ 875.391074][T31135] netlink: 'syz.7.7060': attribute type 1 has an invalid length. [ 875.414955][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 875.613276][T31146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7063'. [ 875.637607][T31146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7063'. [ 875.660626][T31146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.781969][T31146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.051220][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.060799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.078042][T31166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.470779][T31188] netlink: 'syz.3.7074': attribute type 6 has an invalid length. [ 876.495883][T31190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7075'. [ 876.525323][T31192] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7075'. [ 876.534892][T14613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.535450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.656690][T31197] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7077'. [ 876.692587][T29834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.866051][T31206] syzkaller0: entered promiscuous mode [ 876.876434][T31210] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7082'. [ 876.886514][T31206] syzkaller0: entered allmulticast mode [ 877.194691][T31224] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.202616][T31224] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.216147][T31226] netlink: 'syz.6.7086': attribute type 26 has an invalid length. [ 877.278452][T31226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7086'. [ 877.298224][T31226] netlink: 'syz.6.7086': attribute type 26 has an invalid length. [ 877.306107][T31226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7086'. [ 877.386003][T31233] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7087'. [ 877.639638][T31244] tipc: Enabled bearer , priority 0 [ 877.646714][T31245] syzkaller0: entered promiscuous mode [ 877.659945][T31245] syzkaller0: entered allmulticast mode [ 877.730891][T29834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.743477][T31245] tipc: Resetting bearer [ 877.794116][T31245] tipc: Disabling bearer [ 877.851397][T31254] tipc: Enabled bearer , priority 0 [ 877.862029][T31249] syzkaller0: entered promiscuous mode [ 877.868685][T31249] syzkaller0: entered allmulticast mode [ 877.883030][T31249] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 877.968967][T31249] tipc: Resetting bearer [ 878.087646][T31267] veth1_to_bond: entered allmulticast mode [ 878.124886][T31264] tipc: Resetting bearer [ 878.211390][T31264] tipc: Disabling bearer [ 878.370962][T31267] bond0: (slave bond_slave_1): Releasing backup interface [ 878.597690][T31284] tipc: Enabled bearer , priority 0 [ 878.771460][T29834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.792810][T31291] syzkaller0: entered promiscuous mode [ 878.798606][T31291] syzkaller0: entered allmulticast mode [ 878.804997][T31291] tipc: Resetting bearer [ 878.903278][T31279] tipc: Resetting bearer [ 879.250833][T26133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.259809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.831895][T29834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.856812][T23118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.809741][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.818571][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.898574][T29834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.297802][T14600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.525921][T31279] tipc: Disabling bearer [ 882.543311][T31314] IPv6: sit1: Disabled Multicast RS [ 882.550018][T31314] sit1: entered allmulticast mode [ 882.596233][T31319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.661048][T31319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.934189][T29834] net_ratelimit: 1 callbacks suppressed [ 882.934212][T29834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.024158][T31342] netlink: 'syz.3.7119': attribute type 9 has an invalid length. [ 883.050673][T31342] netlink: 'syz.3.7119': attribute type 11 has an invalid length. [ 883.068520][T31342] netlink: 'syz.3.7119': attribute type 12 has an invalid length. [ 883.076696][T31342] __nla_validate_parse: 4 callbacks suppressed [ 883.076715][T31342] netlink: 199280 bytes leftover after parsing attributes in process `syz.3.7119'. [ 883.095759][T31346] netlink: 'syz.7.7120': attribute type 11 has an invalid length. [ 883.114270][T31343] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 883.129990][T31344] syzkaller0: entered promiscuous mode [ 883.135532][T31344] syzkaller0: entered allmulticast mode [ 883.158005][T31348] netlink: 'syz.5.7121': attribute type 1 has an invalid length. [ 883.166231][T31348] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7121'. [ 883.187594][T31348] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7121'. [ 883.296963][T31352] netlink: 'syz.7.7122': attribute type 1 has an invalid length. [ 883.305239][T31352] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7122'. [ 883.602438][T31374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7129'. [ 883.844567][T31392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7133'. [ 883.877978][T31392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7133'. [ 883.891997][T31392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7133'. [ 883.916363][T31392] netlink: 'syz.3.7133': attribute type 12 has an invalid length. [ 883.924520][T31392] netlink: 'syz.3.7133': attribute type 11 has an invalid length. [ 883.961620][T31397] netlink: 'syz.2.7135': attribute type 23 has an invalid length. [ 883.969785][T23118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.260962][T31415] netlink: 'syz.7.7139': attribute type 1 has an invalid length. [ 884.314394][T31418] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7140'. [ 884.406011][T31415] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7139'. [ 884.435268][T31420] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 884.507008][T31420] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 884.566075][T31420] bond1: (slave xfrm1): making interface the new active one [ 884.587106][T31420] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 884.666928][T31422] bond4: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 884.685251][T31422] bond4: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 884.698343][T31422] bond4: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 884.794984][T31415] bond1 (unregistering): (slave xfrm1): Releasing backup interface [ 884.811488][T31415] bond1 (unregistering): Released all slaves [ 885.008613][T23118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.020360][T26140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.029076][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.402599][T31474] tipc: New replicast peer: 255.255.255.255 [ 885.410316][T31474] tipc: Enabled bearer , priority 10 [ 885.476977][T31476] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 885.513888][T31476] netdevsim netdevsim5: Falling back to sysfs fallback for:  [ 885.715726][T31488] syzkaller0: entered promiscuous mode [ 885.737083][T31488] syzkaller0: entered allmulticast mode [ 885.819849][T31499] openvswitch: netlink: Missing key (keys=40, expected=80) [ 885.831289][T31500] openvswitch: netlink: Missing key (keys=40, expected=80) [ 885.847092][T31501] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 886.074248][T23118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.493289][T31527] bond1: Unable to set down delay as MII monitoring is disabled [ 886.513642][T31527] bond1 (unregistering): Released all slaves [ 886.533496][T31535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.737855][T31526] bond2: entered promiscuous mode [ 886.742979][T31526] bond2: entered allmulticast mode [ 886.772586][T31526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 887.344492][T31564] bond0: (slave veth1_to_hsr): Error: Device can not be enslaved while up [ 887.477629][T31568] bond1: Unable to set up delay as MII monitoring is disabled [ 887.512727][T31568] bond1 (unregistering): Released all slaves [ 888.050558][T14607] net_ratelimit: 10 callbacks suppressed [ 888.050583][T14607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.065725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.130916][T23118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.984857][T31630] __nla_validate_parse: 16 callbacks suppressed [ 888.984879][T31630] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7201'. [ 889.063760][T31632] syzkaller0: entered promiscuous mode [ 889.075141][T31632] syzkaller0: entered allmulticast mode [ 889.168336][T29834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.284116][T31643] vxcan1 speed is unknown, defaulting to 1000 [ 889.312874][T31650] validate_nla: 5 callbacks suppressed [ 889.312898][T31650] netlink: 'syz.3.7208': attribute type 10 has an invalid length. [ 889.450060][T31653] netlink: 'syz.2.7209': attribute type 11 has an invalid length. [ 889.488150][T31653] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7209'. [ 889.588139][T31658] nbd: must specify an index to disconnect [ 889.779926][T31666] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7213'. [ 889.924044][T31671] netlink: 'syz.3.7215': attribute type 1 has an invalid length. [ 889.947081][T31671] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 890.052186][T31679] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 890.118757][T31678] syzkaller0: entered promiscuous mode [ 890.124408][T31678] syzkaller0: entered allmulticast mode [ 890.152980][T31682] syzkaller1: entered promiscuous mode [ 890.197829][T31682] syzkaller1: entered allmulticast mode [ 890.224383][T29851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.614525][T31710] xt_nat: multiple ranges no longer supported [ 890.773372][ T3558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.781801][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.916910][T31727] x_tables: unsorted entry at hook 1 [ 890.929191][T31727] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7233'. [ 891.258536][T29851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.662218][T31797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7249'. [ 891.684144][T31796] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 891.982474][T31814] netlink: 'syz.3.7257': attribute type 10 has an invalid length. [ 891.995429][T31814] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7257'. [ 892.080827][T31817] netlink: 'syz.5.7258': attribute type 4 has an invalid length. [ 892.190591][T31826] netlink: 'syz.6.7263': attribute type 1 has an invalid length. [ 892.203719][T31830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7262'. [ 892.215364][T31831] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7260'. [ 892.800664][T31865] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 893.298926][T31895] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 893.600699][T31912] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7284'. [ 893.898347][T31922] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7287'. [ 893.922686][T31928] netlink: 'syz.6.7290': attribute type 9 has an invalid length. [ 893.935513][T31922] sctp: [Deprecated]: syz.5.7287 (pid 31922) Use of int in maxseg socket option. [ 893.935513][T31922] Use struct sctp_assoc_value instead [ 894.073308][T31933] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 894.370066][T31948] netlink: 'syz.6.7297': attribute type 10 has an invalid length. [ 894.378281][T31948] syz_tun: left promiscuous mode [ 894.710594][T31956] netlink: 332 bytes leftover after parsing attributes in process `syz.7.7300'. [ 894.960950][T31977] netlink: 'syz.3.7307': attribute type 3 has an invalid length. [ 894.976679][T14600] IPVS: starting estimator thread 0... [ 895.004249][T31980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7308'. [ 895.013430][T31977] openvswitch: netlink: Missing key (keys=40, expected=80) [ 895.024308][T31986] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7310'. [ 895.073814][T31987] netlink: 'syz.7.7310': attribute type 10 has an invalid length. [ 895.083057][T31982] IPVS: using max 28 ests per chain, 67200 per kthread [ 895.093315][T31987] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7310'. [ 895.136111][T31987] dummy0: entered promiscuous mode [ 895.138582][T31991] netlink: 'syz.7.7310': attribute type 10 has an invalid length. [ 895.148650][T31987] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 895.249611][T31991] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7310'. [ 895.294544][T31991] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 895.372791][T32001] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7312'. [ 895.470240][T32005] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7313'. [ 895.499848][T32005] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7313'. [ 895.784493][T32018] geneve2: entered promiscuous mode [ 895.802800][T32024] xt_CT: You must specify a L4 protocol and not use inversions on it [ 896.062913][T32037] openvswitch: netlink: Key 4 has unexpected len 4 expected 12 [ 896.101917][T32042] netlink: 'syz.6.7321': attribute type 5 has an invalid length. [ 896.337515][T32052] syzkaller1: entered promiscuous mode [ 896.343061][T32052] syzkaller1: entered allmulticast mode [ 897.080414][T32090] netlink: 'syz.6.7338': attribute type 1 has an invalid length. [ 897.163004][T32098] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7339'. [ 897.216722][T32104] netlink: 212048 bytes leftover after parsing attributes in process `syz.7.7339'. [ 897.531088][T32119] bridge: RTM_NEWNEIGH with invalid ether address [ 897.661502][T32126] netlink: 'syz.2.7349': attribute type 1 has an invalid length. [ 897.801459][T32133] bond1: (slave ip6gretap1): making interface the new active one [ 897.848119][T32133] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 897.860464][T32133] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 897.882318][T32133] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 898.054986][T32146] netlink: 'syz.6.7354': attribute type 12 has an invalid length. [ 898.585394][T32170] sch_fq: defrate 0 ignored. [ 899.304133][T32230] tipc: Started in network mode [ 899.310311][T32230] tipc: Node identity b27cbfa8dcfe, cluster identity 4711 [ 899.317815][T32230] tipc: Enabled bearer , priority 0 [ 899.386140][T32230] syzkaller0: entered promiscuous mode [ 899.391935][T32230] syzkaller0: entered allmulticast mode [ 899.398574][T32230] tipc: Resetting bearer [ 899.418922][T32229] tipc: Resetting bearer [ 902.399314][T32229] tipc: Disabling bearer [ 902.460399][T29851] tipc: Node number set to 1854062504 [ 902.602598][T32262] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 902.683318][T32268] __nla_validate_parse: 13 callbacks suppressed [ 902.683339][T32268] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7388'. [ 902.711160][T32264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7387'. [ 902.740600][T32271] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7389'. [ 903.040036][T32293] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7395'. [ 903.273928][T32309] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7396'. [ 903.475251][T32323] netlink: 'syz.7.7404': attribute type 27 has an invalid length. [ 903.964860][T32347] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7412'. [ 904.082615][T32352] x_tables: duplicate underflow at hook 2 [ 904.177572][T32358] x_tables: duplicate underflow at hook 3 [ 904.200847][T32358] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7415'. [ 904.201924][T32360] x_tables: duplicate underflow at hook 2 [ 904.349211][T32362] xt_TCPMSS: Only works on TCP SYN packets [ 904.456271][T32372] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7421'. [ 904.544261][T32377] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7423'. [ 904.602137][T32377] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7423'. [ 904.647994][T32385] vlan0: entered promiscuous mode [ 904.653446][T32385] vlan0: entered allmulticast mode [ 904.663455][T32385] veth0_vlan: entered allmulticast mode [ 905.092342][T32415] netlink: 'syz.5.7432': attribute type 2 has an invalid length. [ 906.154308][T32453] netlink: 'syz.2.7443': attribute type 83 has an invalid length. [ 906.466142][T32463] netlink: 'syz.6.7445': attribute type 1 has an invalid length. [ 906.525829][T32469] netlink: 'syz.6.7445': attribute type 1 has an invalid length. [ 906.679956][T32482] vcan0: tx address claim with dest, not broadcast [ 906.747845][T32484] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 906.978846][T32506] netlink: 'syz.7.7458': attribute type 3 has an invalid length. [ 907.059870][T32508] netlink: 'syz.6.7459': attribute type 9 has an invalid length. [ 907.099494][T32508] netlink: 'syz.6.7459': attribute type 11 has an invalid length. [ 907.126954][T32508] netlink: 'syz.6.7459': attribute type 12 has an invalid length. [ 907.245711][T32521] netlink: 'syz.7.7462': attribute type 1 has an invalid length. [ 907.283897][T32523] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 907.739421][T32546] __nla_validate_parse: 17 callbacks suppressed [ 907.739444][T32546] netlink: 212 bytes leftover after parsing attributes in process `syz.6.7472'. [ 907.806265][T32546] tipc: Enabled bearer , priority 0 [ 907.817221][T32550] syzkaller0: entered promiscuous mode [ 907.823530][T32550] syzkaller0: entered allmulticast mode [ 907.842277][T32546] syzkaller0: entered promiscuous mode [ 907.853372][T32546] syzkaller0: entered allmulticast mode [ 907.878315][T32550] x_tables: duplicate entry at hook 1 [ 907.886897][T32546] tipc: Resetting bearer [ 907.902506][T29851] IPVS: starting estimator thread 0... [ 907.903628][T32544] tipc: Resetting bearer [ 907.987828][T32544] tipc: Disabling bearer [ 908.007537][T32552] netlink: 64897 bytes leftover after parsing attributes in process `syz.2.7474'. [ 908.018317][T32555] IPVS: using max 28 ests per chain, 67200 per kthread [ 908.890165][T32586] tipc: Enabled bearer , priority 0 [ 908.909235][T32586] syzkaller0: entered promiscuous mode [ 908.915059][T32586] syzkaller0: entered allmulticast mode [ 909.048326][T32585] tipc: Resetting bearer [ 909.083440][T32585] tipc: Disabling bearer [ 909.386544][T32611] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 909.431659][T32613] netlink: 'syz.2.7493': attribute type 11 has an invalid length. [ 909.451242][T32613] validate_nla: 4 callbacks suppressed [ 909.451264][T32613] netlink: 'syz.2.7493': attribute type 4 has an invalid length. [ 909.500870][T32613] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.7493'. [ 909.526405][T32620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7494'. [ 909.547830][T32620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7494'. [ 909.556933][T32620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7494'. [ 909.586885][T32624] netlink: 'syz.6.7496': attribute type 11 has an invalid length. [ 909.594582][T32620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7494'. [ 909.625615][T32620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7494'. [ 909.639912][T32620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7494'. [ 909.651397][T32620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7494'. [ 909.912147][T32638] netlink: 'syz.5.7500': attribute type 3 has an invalid length. [ 910.009651][T32647] 8021q: VLANs not supported on ip6_vti0 [ 910.016915][T32647] netlink: 'syz.3.7503': attribute type 17 has an invalid length. [ 910.142776][T32656] xt_HMARK: proto mask must be zero with L3 mode [ 910.332377][T32666] IPVS: set_ctl: invalid protocol: 60 172.30.0.3:20002 [ 910.442156][T32669] syzkaller0: entered promiscuous mode [ 910.458928][T32669] syzkaller0: entered allmulticast mode [ 910.484165][T32679] netlink: 'syz.5.7514': attribute type 1 has an invalid length. [ 910.555820][T32679] bond3: entered promiscuous mode [ 910.561694][T32679] 8021q: adding VLAN 0 to HW filter on device bond3 [ 910.645002][T32689] netlink: 'syz.3.7516': attribute type 4 has an invalid length. [ 910.709627][T32694] netlink: 'syz.3.7516': attribute type 4 has an invalid length. [ 913.598230][T32709] lo: entered allmulticast mode [ 913.605530][T32709] lo: left allmulticast mode [ 913.739820][T32720] vlan2: entered promiscuous mode [ 913.759941][T32720] geneve1: entered promiscuous mode [ 913.769999][T32722] netlink: 'syz.5.7525': attribute type 1 has an invalid length. [ 913.779118][T32720] vlan2: entered allmulticast mode [ 913.794687][T32720] geneve1: entered allmulticast mode [ 913.856267][T32722] bond4: entered promiscuous mode [ 913.871651][T32722] 8021q: adding VLAN 0 to HW filter on device bond4 [ 913.891441][T32733] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 913.940193][T32722] bond4: (slave bridge4): making interface the new active one [ 913.964871][T32722] bridge4: entered promiscuous mode [ 914.012199][T32722] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 914.079713][T32738] netlink: 'syz.3.7528': attribute type 12 has an invalid length. [ 914.153550][T32743] tipc: New replicast peer: 255.255.255.255 [ 914.174433][T32745] __nla_validate_parse: 20 callbacks suppressed [ 914.174457][T32745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7531'. [ 914.182458][T32743] tipc: Enabled bearer , priority 10 [ 914.191566][T32745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7531'. [ 914.352680][T32753] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7534'. [ 914.410990][T32756] bond6: Unable to set down delay as MII monitoring is disabled [ 914.441785][T32756] bond6 (unregistering): Released all slaves [ 914.642936][ T306] pim6reg: entered allmulticast mode [ 914.702500][ T309] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7538'. [ 915.051371][ T336] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 915.066151][ T336] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 915.093108][ T340] xt_l2tp: invalid flags combination: 8 [ 915.206756][ T344] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7547'. [ 915.662894][ T375] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7560'. [ 915.940469][ T395] netlink: 'syz.3.7564': attribute type 1 has an invalid length. [ 916.214412][ T414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7570'. [ 916.458189][ T418] netlink: 'syz.5.7572': attribute type 3 has an invalid length. [ 916.498796][ T418] netlink: 766 bytes leftover after parsing attributes in process `syz.5.7572'. [ 916.688142][ T426] netlink: 'syz.3.7574': attribute type 24 has an invalid length. [ 916.703866][ T428] netlink: 'syz.7.7575': attribute type 2 has an invalid length. [ 916.831072][ T426] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7574'. [ 917.065840][ T444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7580'. [ 917.366851][ T460] vlan2: entered promiscuous mode [ 917.376837][ T460] bridge0: entered promiscuous mode [ 917.608867][ T473] gre0: entered promiscuous mode [ 917.628099][ T473] gre0: entered allmulticast mode [ 918.161891][ T495] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 918.252445][ T499] syzkaller0: entered promiscuous mode [ 918.258749][ T499] syzkaller0: entered allmulticast mode [ 918.486820][ T513] mac80211_hwsim hwsim76 : renamed from wlan1 (while UP) [ 918.605671][ T520] syzkaller0: entered promiscuous mode [ 918.612935][ T520] syzkaller0: entered allmulticast mode [ 918.898729][ T532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 919.439229][ T550] __nla_validate_parse: 3 callbacks suppressed [ 919.439250][ T550] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7609'. [ 919.569748][ T558] FAULT_INJECTION: forcing a failure. [ 919.569748][ T558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 919.616971][ T558] CPU: 0 UID: 0 PID: 558 Comm: syz.2.7615 Not tainted syzkaller #0 PREEMPT(full) [ 919.617017][ T558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 919.617038][ T558] Call Trace: [ 919.617049][ T558] [ 919.617059][ T558] dump_stack_lvl+0xe8/0x150 [ 919.617097][ T558] should_fail_ex+0x414/0x560 [ 919.617139][ T558] _copy_from_user+0x2d/0xb0 [ 919.617170][ T558] kstrtouint_from_user+0xc4/0x170 [ 919.617196][ T558] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 919.617239][ T558] proc_fail_nth_write+0x88/0x200 [ 919.617264][ T558] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 919.617294][ T558] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 919.617323][ T558] vfs_write+0x27e/0xb30 [ 919.617353][ T558] ? __pfx_vfs_write+0x10/0x10 [ 919.617377][ T558] ? __fget_files+0x2a/0x420 [ 919.617409][ T558] ? __fget_files+0x3a0/0x420 [ 919.617435][ T558] ? __fget_files+0x2a/0x420 [ 919.617473][ T558] ksys_write+0x145/0x250 [ 919.617498][ T558] ? __pfx_ksys_write+0x10/0x10 [ 919.617533][ T558] do_syscall_64+0xec/0xf80 [ 919.617558][ T558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.617579][ T558] ? trace_irq_disable+0x37/0x100 [ 919.617607][ T558] ? clear_bhb_loop+0x60/0xb0 [ 919.617634][ T558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.617656][ T558] RIP: 0033:0x7f0297f8e1ff [ 919.617677][ T558] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 919.617696][ T558] RSP: 002b:00007f02961ee030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 919.617719][ T558] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0297f8e1ff [ 919.617735][ T558] RDX: 0000000000000001 RSI: 00007f02961ee0a0 RDI: 0000000000000003 [ 919.617748][ T558] RBP: 00007f02961ee090 R08: 0000000000000000 R09: 0000000000000000 [ 919.617761][ T558] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 919.617774][ T558] R13: 00007f02981e6038 R14: 00007f02981e5fa0 R15: 00007ffc4b165138 [ 919.617811][ T558] [ 920.689230][ T608] syzkaller1: entered promiscuous mode [ 920.695837][ T608] syzkaller1: entered allmulticast mode [ 920.911394][ T613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7627'. [ 921.046081][ T619] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 921.063176][ T614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7626'. [ 921.102063][ T614] bridge_slave_1: left allmulticast mode [ 921.110537][ T614] bridge_slave_1: left promiscuous mode [ 921.132799][ T614] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.185028][ T614] bridge_slave_0: left allmulticast mode [ 921.193450][ T614] bridge_slave_0: left promiscuous mode [ 921.203138][ T614] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.880950][ T669] openvswitch: netlink: Key 15 has unexpected len 10908 expected 4 [ 922.015182][ T679] xt_TCPMSS: Only works on TCP SYN packets [ 922.286422][ T695] openvswitch: netlink: Missing valid actions attribute. [ 922.317290][ T698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7646'. [ 922.318443][ T695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 922.357581][ T698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7646'. [ 922.395990][ T698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7646'. [ 922.447767][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 922.477033][ T698] 8021q: adding VLAN 0 to HW filter on device bond6 [ 922.633639][ T707] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7648'. [ 922.673654][ T707] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7648'. [ 923.075622][ T739] netlink: 'syz.6.7658': attribute type 5 has an invalid length. [ 923.084733][ T739] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7658'. [ 923.330505][ T751] vcan0: tx address claim with different name [ 923.371876][ T753] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7664'. [ 923.458913][ T750] pimreg: entered allmulticast mode [ 923.600121][ T771] bridge_slave_0: entered promiscuous mode [ 923.909110][ T793] x_tables: duplicate underflow at hook 1 [ 923.924949][ T795] x_tables: duplicate underflow at hook 1 [ 923.956036][ T797] netlink: 'syz.5.7673': attribute type 1 has an invalid length. [ 924.088625][ T806] sctp: [Deprecated]: syz.7.7677 (pid 806) Use of int in maxseg socket option. [ 924.088625][ T806] Use struct sctp_assoc_value instead [ 924.179930][ T811] netlink: 'syz.2.7678': attribute type 10 has an invalid length. [ 924.199254][ T811] batman_adv: batadv0: Adding interface: netdevsim0 [ 924.205964][ T811] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.277519][ T811] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 924.506462][ T828] syzkaller0: entered promiscuous mode [ 924.512468][ T828] syzkaller0: entered allmulticast mode [ 924.610825][ T828] tipc: Enabled bearer , priority 0 [ 924.671733][ T838] bond0: entered promiscuous mode [ 924.684245][ T838] bond_slave_0: entered promiscuous mode [ 924.700831][ T840] __nla_validate_parse: 1 callbacks suppressed [ 924.700853][ T840] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7688'. [ 924.702887][ T838] bond_slave_1: entered promiscuous mode [ 924.759054][ T828] tipc: Resetting bearer [ 924.864517][ T828] tipc: Disabling bearer [ 925.084207][ T854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7690'. [ 925.157050][ T862] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7690'. [ 925.170773][ T862] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7690'. [ 925.444023][ T875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7696'. [ 925.512124][ T882] syzkaller0: entered promiscuous mode [ 925.520101][ T882] syzkaller0: entered allmulticast mode [ 925.535684][ T882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 925.784539][ T899] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7704'. [ 928.691840][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 929.066696][ T951] mac80211_hwsim hwsim80 wlan0: entered promiscuous mode [ 929.229816][ T959] "syz.6.7714" (959) uses obsolete ecb(arc4) skcipher [ 929.468260][ T975] netlink: 'syz.2.7718': attribute type 4 has an invalid length. [ 929.502224][ T975] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7718'. [ 929.516786][ T968] syzkaller1: entered promiscuous mode [ 929.533440][ T968] syzkaller1: entered allmulticast mode [ 929.562806][ T975] `: renamed from bond0 [ 929.652419][ T981] xfrm1: entered allmulticast mode [ 930.124096][ T1007] netlink: 80 bytes leftover after parsing attributes in process `syz.6.7728'. [ 930.521672][ T1028] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7732'. [ 930.567123][ T1033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7733'. [ 930.833838][ T1033] hsr_slave_1 (unregistering): left promiscuous mode [ 931.060044][ T1059] pimreg: entered allmulticast mode [ 931.263571][ T1067] syzkaller0: entered promiscuous mode [ 931.273910][ T1067] syzkaller0: entered allmulticast mode [ 931.469818][ T1093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7750'. [ 931.733271][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 931.885227][ T1112] netlink: 'syz.5.7754': attribute type 1 has an invalid length. [ 934.160859][ T1090] netlink: 11 bytes leftover after parsing attributes in process `syz.7.7747'. [ 934.170468][ T1090] netlink: 11 bytes leftover after parsing attributes in process `syz.7.7747'. [ 934.181921][ T1095] netlink: 11 bytes leftover after parsing attributes in process `syz.7.7747'. [ 934.193758][ T1095] netlink: 11 bytes leftover after parsing attributes in process `syz.7.7747'. [ 934.205371][ T1112] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 934.377016][ T1121] netlink: 'syz.3.7756': attribute type 21 has an invalid length. [ 934.406729][ T1121] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7756'. [ 934.541745][ T1133] vlan4: entered promiscuous mode [ 934.546975][ T1133] bridge0: entered promiscuous mode [ 934.670097][ T1137] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7762'. [ 934.711730][ T1124] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.744713][ T1124] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.956478][ T1124] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.997512][ T1124] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.118790][ T1159] gretap1: entered promiscuous mode [ 935.142598][ T1159] gretap1: entered allmulticast mode [ 935.174734][ T1166] __nla_validate_parse: 3 callbacks suppressed [ 935.174755][ T1166] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7767'. [ 935.333957][ T1124] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.349660][ T1124] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.502493][ T1124] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.520393][ T1124] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.594956][ T1194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 935.715409][ T1194] syzkaller1: entered promiscuous mode [ 935.723989][ T1194] syzkaller1: entered allmulticast mode [ 935.751463][ T1194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7773'. [ 935.777005][ T180] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.798182][ T180] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.815121][ T1200] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7776'. [ 935.880544][ T34] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.897110][ T34] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.913811][ T1200] bridge0: entered promiscuous mode [ 935.924899][ T1200] macsec4: entered promiscuous mode [ 935.931075][ T1200] macsec4: entered allmulticast mode [ 935.936689][ T1200] bridge0: entered allmulticast mode [ 935.964092][ T1200] bridge0: port 1(macsec4) entered blocking state [ 935.989204][ T1200] bridge0: port 1(macsec4) entered disabled state [ 936.015481][ T1200] bridge0: left allmulticast mode [ 936.023142][ T1200] bridge0: left promiscuous mode [ 936.104059][T23344] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.116566][T23344] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.169546][T26122] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.190980][T26122] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.313820][ T1224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7783'. [ 936.546739][ T1238] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 936.548511][T29851] IPVS: starting estimator thread 0... [ 936.698047][ T1242] IPVS: using max 26 ests per chain, 62400 per kthread [ 936.858609][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 937.065771][ T1270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7796'. [ 937.291871][ T1274] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7798'. [ 937.480828][ T1274] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7798'. [ 937.608326][ T1289] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7802'. [ 937.628535][ T1294] netlink: 'syz.2.7803': attribute type 1 has an invalid length. [ 937.649260][ T1292] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 937.988983][ T1315] netlink: 'syz.3.7809': attribute type 10 has an invalid length. [ 938.019554][ T1315] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7809'. [ 938.043786][ T1315] team0: entered promiscuous mode [ 938.065316][ T1315] team_slave_0: entered promiscuous mode [ 938.087854][ T1315] team_slave_1: entered promiscuous mode [ 938.104397][ T1315] dummy0: entered promiscuous mode [ 938.194693][ T1325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 938.205864][ T1331] netlink: 'syz.3.7814': attribute type 5 has an invalid length. [ 938.313102][ T1333] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7811'. [ 938.517782][ T1343] netlink: 'syz.6.7818': attribute type 30 has an invalid length. [ 938.621068][ T1352] tipc: Enabled bearer , priority 0 [ 938.638462][ T1352] syzkaller0: entered promiscuous mode [ 938.644038][ T1352] syzkaller0: entered allmulticast mode [ 938.701658][ T1352] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 938.767139][ T1352] tipc: Resetting bearer [ 938.830898][ T1359] veth9: entered allmulticast mode [ 938.893982][ T1350] tipc: Resetting bearer [ 938.934772][ T1350] tipc: Disabling bearer [ 939.234575][ T1379] netlink: 'syz.2.7830': attribute type 5 has an invalid length. [ 939.265397][ T1379] geneve2: entered promiscuous mode [ 939.271836][ T1379] geneve2: entered allmulticast mode [ 939.283727][ T3558] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 939.308273][ T3558] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 939.326155][ T3558] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 939.389706][ T3558] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 939.673196][ T1397] netlink: 'syz.5.7836': attribute type 24 has an invalid length. [ 939.703754][ T1398] tipc: Invalid UDP bearer configuration [ 939.703809][ T1398] tipc: Enabling of bearer rejected, failed to enable media [ 940.024012][ T1410] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 940.038282][ T1410] syzkaller1: Refused to change device type [ 940.059139][ T1414] syzkaller0: entered promiscuous mode [ 940.067910][ T1414] syzkaller0: entered allmulticast mode [ 940.083091][T26141] TC_ACT_REPEAT abuse ? [ 940.224042][ T1422] __nla_validate_parse: 7 callbacks suppressed [ 940.224065][ T1422] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7845'. [ 940.263446][ T1424] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7844'. [ 940.392612][ T1429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7846'. [ 940.408552][ T1429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7846'. [ 940.455909][T26124] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.456192][ T1429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7846'. [ 940.468624][T26124] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.495113][T26124] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.505961][ T1433] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 940.523146][ T1429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7846'. [ 940.538940][T26124] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.593263][ T1437] netlink: 'syz.7.7850': attribute type 1 has an invalid length. [ 940.862113][ T1454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7854'. [ 940.892244][ T1454] bond0: Error: Cannot enslave bond to itself. [ 940.914524][ T1456] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.7855'. [ 940.970135][ T1460] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7856'. [ 941.005006][ T1459] gtp1: entered promiscuous mode [ 941.064479][ T1462] tipc: Failed to remove unknown binding: 66,0,0/0:3721732424/3721732425 [ 941.080332][ T1462] tipc: Failed to remove unknown binding: 66,0,0/0:3721732424/3721732425 [ 941.099778][ T1464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7859'. [ 941.247937][T29834] IPVS: starting estimator thread 0... [ 941.330168][ T1483] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 941.349432][ T1478] IPVS: using max 30 ests per chain, 72000 per kthread [ 941.780936][ T1507] netlink: 'syz.3.7871': attribute type 58 has an invalid length. [ 941.913769][ T1517] unsupported nlmsg_type 40 [ 942.269195][ T1545] netlink: 'syz.7.7880': attribute type 1 has an invalid length. [ 942.547972][ T1538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.560953][ T1538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.574189][ T1538] bond0 (unregistering): Released all slaves [ 942.682338][ T1547] 8021q: adding VLAN 0 to HW filter on device bond5 [ 942.692476][ T1547] bond4: (slave bond5): making interface the new active one [ 942.703407][ T1547] bond4: (slave bond5): Enslaving as an active interface with an up link [ 942.731974][ T1550] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 942.782860][ T1550] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 942.806441][ T1553] netlink: 'syz.3.7881': attribute type 29 has an invalid length. [ 945.801322][ T1549] netlink: 'syz.3.7881': attribute type 29 has an invalid length. [ 945.965676][ T1575] netlink: 'syz.3.7885': attribute type 9 has an invalid length. [ 945.994085][ T1575] netlink: 'syz.3.7885': attribute type 9 has an invalid length. [ 946.262033][ T1593] __nla_validate_parse: 11 callbacks suppressed [ 946.262058][ T1593] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7892'. [ 946.324322][ T1593] 8021q: adding VLAN 0 to HW filter on device bond3 [ 946.515364][ T1606] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7896'. [ 946.526863][ T1606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7896'. [ 946.734772][ T1621] netlink: 9572 bytes leftover after parsing attributes in process `syz.7.7900'. [ 946.835197][ T1628] netlink: 'syz.6.7904': attribute type 2 has an invalid length. [ 947.366287][ T1656] xt_hashlimit: size too large, truncated to 1048576 [ 947.670598][ T1662] netlink: 116 bytes leftover after parsing attributes in process `syz.2.7912'. [ 947.722464][ T1662] openvswitch: netlink: Flow key attr not present in new flow. [ 947.726153][ T1663] netlink: 116 bytes leftover after parsing attributes in process `syz.2.7912'. [ 947.812389][ T1663] openvswitch: netlink: Flow key attr not present in new flow. [ 947.973733][ T1676] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7917'. [ 947.997083][ T1679] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7916'. [ 948.441727][ T1708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7924'. [ 948.480943][ T1708] chnl_net:caif_netlink_parms(): no params data found [ 948.572212][ T1712] netlink: 'syz.6.7926': attribute type 1 has an invalid length. [ 948.730345][ T1712] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 948.740250][ T1724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7929'. [ 948.968327][ T1734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 949.052544][ T1743] netlink: 'syz.2.7935': attribute type 30 has an invalid length. [ 949.086053][ T1746] : entered promiscuous mode [ 949.793270][ T1785] syzkaller0: entered allmulticast mode [ 950.011881][ T1793] 8021q: adding VLAN 0 to HW filter on device bond7 [ 950.523673][ T1819] sctp: [Deprecated]: syz.6.7957 (pid 1819) Use of int in maxseg socket option. [ 950.523673][ T1819] Use struct sctp_assoc_value instead [ 950.878258][ T1839] syzkaller0: entered promiscuous mode [ 950.899644][ T1839] syzkaller0: entered allmulticast mode [ 951.320495][ T1868] __nla_validate_parse: 12 callbacks suppressed [ 951.320511][ T1868] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7976'. [ 951.561038][ T1886] Bluetooth: MGMT ver 1.23 [ 951.571445][ T1884] vxcan1 speed is unknown, defaulting to 1000 [ 951.892934][ T1907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7984'. [ 951.967952][ T1907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7984'. [ 951.989085][ T1907] netlink: 'syz.2.7984': attribute type 15 has an invalid length. [ 952.141354][ T1907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7984'. [ 952.177086][ T1907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7984'. [ 952.202776][ T1907] netlink: 'syz.2.7984': attribute type 15 has an invalid length. [ 952.339525][ T1927] netlink: 204 bytes leftover after parsing attributes in process `syz.5.7990'. [ 952.363502][ T1929] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 952.575654][ T1941] netlink: 340 bytes leftover after parsing attributes in process `syz.6.7992'. [ 952.916810][ T1956] netlink: 'syz.3.7996': attribute type 16 has an invalid length. [ 952.925694][ T1956] netlink: 'syz.3.7996': attribute type 17 has an invalid length. [ 953.072322][ T1956] team0: left promiscuous mode [ 953.077148][ T1956] team_slave_0: left promiscuous mode [ 953.084582][ T1956] team_slave_1: left promiscuous mode [ 953.096309][ T1956] dummy0: left promiscuous mode [ 953.186937][ T1956] veth5: left promiscuous mode [ 953.199642][ T1956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 953.210983][ T1956] ipvlan2: left allmulticast mode [ 953.216084][ T1956] batadv_slave_1: left allmulticast mode [ 953.232294][ T1956] team1: left promiscuous mode [ 953.237108][ T1956] team1: left allmulticast mode [ 953.243627][ T1956] 8021q: adding VLAN 0 to HW filter on device team1 [ 953.255152][ T1956] 8021q: adding VLAN 0 to HW filter on device bond3 [ 953.270233][ T1956] gtp1: left promiscuous mode [ 953.275052][ T1956] gtp1: left allmulticast mode [ 953.285794][ T1956] 8021q: adding VLAN 0 to HW filter on device bond4 [ 953.324924][ T1956] 8021q: adding VLAN 0 to HW filter on device bond5 [ 953.333785][ T1956] vlan2: left promiscuous mode [ 953.339553][ T1956] geneve1: left promiscuous mode [ 953.344755][ T1956] vlan2: left allmulticast mode [ 953.352455][ T1956] geneve1: left allmulticast mode [ 953.363064][ T1956] xfrm1: left allmulticast mode [ 953.371347][ T1956] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 953.501746][ T1969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8000'. [ 953.535187][ T1969] vlan4: entered allmulticast mode [ 953.555531][ T1969] mac80211_hwsim hwsim66 wlan0: entered allmulticast mode [ 953.644502][ T1974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8003'. [ 953.700259][ T1976] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8003'. [ 953.804713][ T1981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 954.010345][ T1997] netlink: 'syz.2.8010': attribute type 9 has an invalid length. [ 954.200539][ T2008] netlink: 'syz.7.8015': attribute type 3 has an invalid length. [ 954.583017][ T2037] lo: entered promiscuous mode [ 954.614216][ T2037] netlink: 'syz.6.8023': attribute type 2 has an invalid length. [ 954.633851][ T2042] x_tables: duplicate underflow at hook 2 [ 954.643060][ T2037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 958.229854][ T2081] ip6erspan0: entered allmulticast mode [ 958.442492][ T2090] __nla_validate_parse: 12 callbacks suppressed [ 958.442515][ T2090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8039'. [ 958.601884][ T2090] 8021q: adding VLAN 0 to HW filter on device bond8 [ 958.689927][ T2106] netlink: 112 bytes leftover after parsing attributes in process `syz.5.8044'. [ 958.709064][ T2102] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8043'. [ 958.881440][ T2119] netlink: 'syz.2.8050': attribute type 1 has an invalid length. [ 958.930533][ T2121] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8049'. [ 958.931691][ T2119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 959.027154][ T2125] bond2: (slave gretap3): making interface the new active one [ 959.047043][ T2116] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8048'. [ 959.059557][ T2121] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8049'. [ 959.072338][ T2125] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 959.252617][ T2141] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8056'. [ 959.504173][ T2145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 959.646289][ T2168] netlink: 192 bytes leftover after parsing attributes in process `syz.2.8063'. [ 959.779725][ T2171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8064'. [ 959.789975][ T2173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8064'. [ 959.853506][ T2172] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 959.947084][ T2177] 8021q: adding VLAN 0 to HW filter on device bond9 [ 960.251362][ T2200] xt_hashlimit: max too large, truncated to 1048576 [ 960.390650][ T2205] netlink: 'syz.3.8074': attribute type 1 has an invalid length. [ 960.402155][ T2205] netlink: 'syz.3.8074': attribute type 4 has an invalid length. [ 960.520908][ T2211] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 960.735544][ T2221] vxcan1 speed is unknown, defaulting to 1000 [ 961.494012][ T2251] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 962.108248][ T2281] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 962.483678][ T2293] syzkaller0: entered promiscuous mode [ 962.507419][ T2293] syzkaller0: entered allmulticast mode [ 962.571328][ T2304] netlink: 'syz.3.8099': attribute type 15 has an invalid length. [ 962.613716][ T3446] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 962.614088][ T2304] netlink: 'syz.3.8099': attribute type 15 has an invalid length. [ 962.714750][ T3446] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 962.731781][ T3446] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 962.746756][ T3446] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 964.524011][ T2385] __nla_validate_parse: 20 callbacks suppressed [ 964.524033][ T2385] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8121'. [ 964.628642][ T2391] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8124'. [ 964.701034][ T2401] netlink: 'syz.5.8126': attribute type 1 has an invalid length. [ 964.785387][ T2407] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8127'. [ 964.836000][ T2401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.845269][ T2396] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8125'. [ 964.892151][ T2410] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 964.910007][ T2418] bond0: (slave batadv1): Opening slave failed [ 965.174086][ T2435] netlink: 'syz.5.8135': attribute type 1 has an invalid length. [ 965.233061][ T2435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8135'. [ 965.560365][ T2469] Bluetooth: MGMT ver 1.23 [ 965.566334][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.581062][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.588214][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.595084][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.603794][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.625460][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.633308][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.640405][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.647340][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.654185][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.663006][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.670045][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.677036][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.684038][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.691861][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.698813][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.705694][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.712664][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.720551][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.730945][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.737836][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.746041][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.753141][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.760121][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.767116][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.774187][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.792373][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.811125][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.829284][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.850648][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.864700][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.871735][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 965.881145][ T2469] Bluetooth: hci1: too big key_count value 32778 [ 966.246163][ T2491] netlink: 'syz.5.8146': attribute type 1 has an invalid length. [ 966.528846][ T2516] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8152'. [ 966.551911][ T2519] netlink: 'syz.7.8151': attribute type 10 has an invalid length. [ 966.596735][ T2519] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 966.820902][ T2539] xt_hashlimit: overflow, try lower: 3/0 [ 966.983587][ T2549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8157'. [ 967.187254][ T2572] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 967.439712][ T2592] netlink: 'syz.3.8166': attribute type 4 has an invalid length. [ 967.498565][ T2596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8168'. [ 967.536144][ T2596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8168'. [ 967.612496][ T2599] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.8169'. [ 967.670740][ T2602] block nbd3: Unsupported socket: should be TCP or UNIX. [ 967.772861][ T2569] infiniband sy: set down [ 967.789520][ T2569] infiniband sy: added bond_slave_0 [ 967.895423][ T2569] RDS/IB: sy: added [ 967.900370][ T2569] smc: adding ib device sy with port count 1 [ 967.906755][ T2569] smc: ib device sy port 1 has no pnetid [ 968.568274][ T2642] netlink: 'syz.7.8178': attribute type 1 has an invalid length. [ 968.593137][ T2643] vxcan1 speed is unknown, defaulting to 1000 [ 968.776551][ T2645] openvswitch: netlink: Key 9 has unexpected len 2 expected 4 [ 968.791674][ T2646] netlink: 'syz.7.8180': attribute type 3 has an invalid length. [ 969.124490][ T2658] sit0: entered promiscuous mode [ 969.155569][ T2658] netlink: 'syz.3.8182': attribute type 1 has an invalid length. [ 969.229217][ T2662] netlink: 'syz.2.8185': attribute type 1 has an invalid length. [ 969.418952][ T2665] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 969.457819][ T2665] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 969.480308][ T2665] bond3: (slave xfrm1): making interface the new active one [ 969.491359][ T2665] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 969.508705][ T2668] bond3 (unregistering): (slave xfrm1): Releasing backup interface [ 969.526356][ T2668] bond3 (unregistering): Released all slaves [ 969.568339][ T2678] tipc: Enabling of bearer rejected, failed to enable media [ 969.878898][ T2684] __nla_validate_parse: 5 callbacks suppressed [ 969.878912][ T2684] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8191'. [ 970.324955][ T2708] netlink: 'syz.7.8196': attribute type 1 has an invalid length. [ 970.333999][ T2708] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8196'. [ 970.357444][ T2708] netlink: 658 bytes leftover after parsing attributes in process `syz.7.8196'. [ 970.366556][ T2708] netlink: 1 bytes leftover after parsing attributes in process `syz.7.8196'. [ 970.393435][ T2712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8198'. [ 970.405764][ T2712] netlink: 'syz.3.8198': attribute type 2 has an invalid length. [ 970.414430][ T2712] netlink: 'syz.3.8198': attribute type 1 has an invalid length. [ 970.487810][T14607] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 970.611523][ T2691] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 970.619967][ T2691] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 970.658663][T14607] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 970.749560][ T2691] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 970.765807][ T2691] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 970.818919][ T2691] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 970.830898][ T2691] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 970.839370][ T2691] CPU: 0 UID: 0 PID: 2691 Comm: syz.2.8191 Not tainted syzkaller #0 PREEMPT(full) [ 970.848706][ T2691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 970.859006][ T2691] RIP: 0010:klist_remove+0x14a/0x340 [ 970.864370][ T2691] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 19 a5 d6 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 fa a4 d6 f6 49 8b 44 24 58 48 89 44 24 08 [ 970.884018][ T2691] RSP: 0018:ffffc9000c087820 EFLAGS: 00010202 [ 970.890138][ T2691] RAX: 000000000000000b RBX: ffff888037d09e80 RCX: 0000000000000000 [ 970.898146][ T2691] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 970.906160][ T2691] RBP: ffffc9000c087920 R08: ffffffff8f68dc43 R09: 1ffffffff1ed1b88 [ 970.914165][ T2691] R10: dffffc0000000000 R11: fffffbfff1ed1b89 R12: 0000000000000000 [ 970.922200][ T2691] R13: 1ffff1100aa6980c R14: ffff88805534c060 R15: dffffc0000000000 [ 970.930217][ T2691] FS: 00007f02961cd6c0(0000) GS:ffff888125e1e000(0000) knlGS:0000000000000000 [ 970.939266][ T2691] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 970.945885][ T2691] CR2: 00007fc543c51763 CR3: 0000000089adc000 CR4: 00000000003526f0 [ 970.953890][ T2691] Call Trace: [ 970.957198][ T2691] [ 970.960154][ T2691] ? __pfx_klist_remove+0x10/0x10 [ 970.965213][ T2691] ? kobject_move+0x5a6/0x6e0 [ 970.969947][ T2691] ? __pfx_kobject_move+0x10/0x10 [ 970.975024][ T2691] ? do_raw_spin_unlock+0x122/0x240 [ 970.980265][ T2691] ? get_device_parent+0x366/0x3a0 [ 970.985402][ T2691] device_move+0x193/0x730 [ 970.989846][ T2691] hci_conn_del_sysfs+0xb8/0x1a0 [ 970.994816][ T2691] hci_conn_del+0xc36/0x1240 [ 970.999509][ T2691] hci_conn_hash_flush+0x191/0x260 [ 971.004642][ T2691] hci_dev_close_sync+0x821/0x1100 [ 971.009805][ T2691] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 971.015411][ T2691] hci_dev_do_close+0x30/0xc0 [ 971.020225][ T2691] hci_rfkill_set_block+0x21d/0x330 [ 971.025460][ T2691] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 971.031209][ T2691] rfkill_set_block+0x1d2/0x440 [ 971.036102][ T2691] rfkill_fop_write+0x44b/0x570 [ 971.040987][ T2691] ? __pfx_rfkill_fop_write+0x10/0x10 [ 971.046384][ T2691] ? security_kernfs_init_security+0x220/0x290 [ 971.052582][ T2691] ? rw_verify_area+0x255/0x4d0 [ 971.057498][ T2691] ? __pfx_rfkill_fop_write+0x10/0x10 [ 971.062902][ T2691] vfs_write+0x27e/0xb30 [ 971.067179][ T2691] ? __pfx_vfs_write+0x10/0x10 [ 971.071974][ T2691] ? __fget_files+0x2a/0x420 [ 971.076609][ T2691] ? __fget_files+0x2a/0x420 [ 971.081320][ T2691] ? __fget_files+0x3a0/0x420 [ 971.086045][ T2691] ? __fget_files+0x2a/0x420 [ 971.090703][ T2691] ksys_write+0x145/0x250 [ 971.095070][ T2691] ? __pfx_ksys_write+0x10/0x10 [ 971.099954][ T2691] do_syscall_64+0xec/0xf80 [ 971.104491][ T2691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.110575][ T2691] ? trace_irq_disable+0x37/0x100 [ 971.115631][ T2691] ? clear_bhb_loop+0x60/0xb0 [ 971.120343][ T2691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.126271][ T2691] RIP: 0033:0x7f0297f8f749 [ 971.130726][ T2691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.150359][ T2691] RSP: 002b:00007f02961cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 971.158802][ T2691] RAX: ffffffffffffffda RBX: 00007f02981e6090 RCX: 00007f0297f8f749 [ 971.166798][ T2691] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 971.174793][ T2691] RBP: 00007f0298013f91 R08: 0000000000000000 R09: 0000000000000000 [ 971.182788][ T2691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.190808][ T2691] R13: 00007f02981e6128 R14: 00007f02981e6090 R15: 00007ffc4b165138 [ 971.198915][ T2691] [ 971.201966][ T2691] Modules linked in: [ 971.207738][ T2691] ---[ end trace 0000000000000000 ]--- [ 971.227420][ T2691] RIP: 0010:klist_remove+0x14a/0x340 [ 971.232826][ T2691] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 19 a5 d6 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 fa a4 d6 f6 49 8b 44 24 58 48 89 44 24 08 [ 971.277395][ T2691] RSP: 0018:ffffc9000c087820 EFLAGS: 00010202 [ 971.283663][ T2691] RAX: 000000000000000b RBX: ffff888037d09e80 RCX: 0000000000000000 [ 971.292335][ T2691] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 971.300656][ T2691] RBP: ffffc9000c087920 R08: ffffffff8f68dc43 R09: 1ffffffff1ed1b88 [ 971.311197][ T2691] R10: dffffc0000000000 R11: fffffbfff1ed1b89 R12: 0000000000000000 [ 971.321169][ T2691] R13: 1ffff1100aa6980c R14: ffff88805534c060 R15: dffffc0000000000 [ 971.330497][ T2691] FS: 00007f02961cd6c0(0000) GS:ffff888125e1e000(0000) knlGS:0000000000000000 [ 971.339847][ T2691] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 971.346569][ T2691] CR2: 00007fc543db7198 CR3: 0000000089adc000 CR4: 00000000003526f0 [ 971.355263][ T2691] Kernel panic - not syncing: Fatal exception [ 971.362088][ T2691] Kernel Offset: disabled [ 971.366433][ T2691] Rebooting in 86400 seconds..