last executing test programs: 7m36.676757428s ago: executing program 32 (id=1463): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r2, @ANYBLOB='\x00', @ANYRES32], 0x24}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e40)={0x14, 0x1, 0x9, 0x401}, 0x14}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r2, @ANYBLOB='\x00', @ANYRES32], 0x24}], 0x1}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e40)={0x14, 0x1, 0x9, 0x401}, 0x14}}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) 7m28.840384584s ago: executing program 33 (id=1553): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x5766ca4d7ea1f3e5}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x18, 0x140b, 0x300, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x44080}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) connect$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x7f}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x5766ca4d7ea1f3e5}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x18, 0x140b, 0x300, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x44080}, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) (async) connect$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x7f}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) 7m22.402835464s ago: executing program 34 (id=1652): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 7m14.964600908s ago: executing program 35 (id=1743): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r2, 0x1, 0x9, 0x0, &(0x7f0000000dc0)) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000002c0)={{0x5c, @dev={0xac, 0x14, 0x14, 0x29}, 0x4e23, 0x1, 'wrr\x00', 0x20, 0x4, 0x37}, {@private=0xa010102, 0x4e24, 0x1, 0x0, 0x94, 0x9}}, 0x44) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r3, 0x0, 0x7f}, 0x18) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000000)={'veth1_vlan\x00', 0x1ba}) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 7m4.61214033s ago: executing program 36 (id=1840): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m36.33242364s ago: executing program 37 (id=4455): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000025000100fdffffff00000000060200000c51d92fe6ab81c0cc59728d8db7e239daefd5e0c152eacb983d4d477356fa5f582a9080289281c5edaaf69033218b82040d39fb14a4c24d76aa24825ce86cc1999bdeac1a3c88b7421f6bdd32177eb766bb408e3f6db03fe126e91b005403ce1fa2e1d947bc5500e64f3a23d95094887f12066be61920942e51d7c49fd2f4d557b9"], 0x14}}, 0x20000090) 2m13.448412853s ago: executing program 38 (id=4702): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x140, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r7, @ANYBLOB="200000000000000014001a80100004800c000980"], 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x20, r4, 0x1, 0x70bd2d, 0x2, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000001e000100000000000000000007"], 0x28}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000001e000100000000000000000007"], 0x28}}, 0x0) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000180)=0x3, &(0x7f00000001c0)=0x4) (async) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000180)=0x3, &(0x7f00000001c0)=0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0) (async) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) r10 = accept$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r10, 0xf504, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110bc000000001000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = accept4$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14, 0x80000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r11, 0x8010661b, &(0x7f00000003c0)) 1m59.435437124s ago: executing program 39 (id=4824): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001580)=""/3, 0x3}], 0x1}, 0x10000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r5, 0x0, 0x7f}, 0x18) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000100)={0x8, 0x2, 0x2, 0x1, 0x1}, 0x8) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2c24b9baa5cbff4b58c87e402f0c4232777c062eebb171b53c0d7981f6bd775d0a06995513ac604dfb5983797dfb11d30a48408fbcc6738671bddc1f0b0a9eccc06488092371c7ab67c7c0ee9792a1f3165214", @ANYRESDEC, @ANYRESDEC=r8, @ANYRES16=r6, @ANYRES16=r5, @ANYRES64=r8], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r9, 0x0, 0x7f}, 0x18) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x4, r3, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xd}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000) 1m43.930522929s ago: executing program 40 (id=5048): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="080005"], 0x24}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {0x3}, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in6=@mcast2}, {{@in6=@remote, 0x4d4, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x1bc}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x18}}], 0x1, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, 0x0, 0x5c) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m27.744236042s ago: executing program 0 (id=5343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000004480), 0x10) connect$inet6(r3, &(0x7f0000004980)={0xa, 0x4e23, 0x6, @private0, 0x7fff}, 0x1c) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYRES64=r2], 0xfce) 1m27.378582966s ago: executing program 0 (id=5348): pipe(&(0x7f0000000000)={0xffffffffffffffff}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) splice(r0, 0x0, r1, 0x0, 0xfffffffffffffff1, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4098000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1fff01e3bb9ad809d5e1cace81ed0b66bce0b42a9e1b518077c20708215c2c4b4ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300000000000000", 0xd8}], 0x1}, 0x48013) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) 1m27.260561696s ago: executing program 0 (id=5352): accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois', 0x8) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0xa, 0x1f}]}, 0x34}}, 0x0) 1m27.071295023s ago: executing program 0 (id=5357): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20001001) (async) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344}, 0x1, 0x0) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080008000500000000036100000045f0006300000000032f9078ac1e0001ac1414aa220022eb", @ANYRES32=r5, @ANYRES32=0x41424344, @ANYBLOB="50000000907800004adcda08f6e83e2aa00e133f88a8349f88a8d34258b7ce59c9f907afa16494c9529c474f408faf3b9f94bd27baf2da8080408833ba4d60cbac74d7c771cfc9cdc2824782bc042b93309af039"], 0x71) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x48, 0x30, 0x4, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x4000000) 1m24.999577192s ago: executing program 0 (id=5372): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto]}}, 0x0, 0x32, 0x0, 0x0, 0x3}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) 1m24.84008038s ago: executing program 0 (id=5374): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000a40)='%ps \x00'}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1a, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf889}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x10, 0x70, &(0x7f00000003c0)=""/112, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x2, 0xffffff6f, 0x8001}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440), &(0x7f0000000480)=[{0x1, 0x3, 0xd, 0xa}, {0x1, 0x1, 0xb, 0xb}, {0x2, 0x4, 0x2, 0x4}, {0x2, 0x3, 0xe}], 0x10, 0xffff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@cgroup, 0x8, 0x0, 0x80, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x9, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query]}, &(0x7f0000000780)='syzkaller\x00', 0x9, 0xae, &(0x7f00000007c0)=""/174, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x8, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r0, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@fallback=r1, r1, 0x2d, 0xa, r3, @void, @value=r6, @void, @void, r4}, 0x20) sendto(r0, &(0x7f0000000a00)="cafd00e223f83adefaaca7f299a993360121b3bdec8bc4bf9e41414d6709590260ae5b5246f81b8959f953", 0x2b, 0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='kvm_dirty_ring_reset\x00', r1, 0x0, 0x7f}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m14.475382004s ago: executing program 2 (id=5542): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="e891cfed4771069a91d9002a3d5f38f704ffd1c307ef3519164d0f6e3f4acee234c9a7eb3bf166252a9b31f7ca2bbdf3d7b9ac74541e984bb3eecfcaa2fdcecaf39849b0cf60e920896f205d311935b1560b4627391973f53747d5f7fc7b92dafe0389ac5aeb6bb3d7b92ad0c3c314742e2e1c804a", 0x75}, {&(0x7f0000000200)="0de78916e688709ffef46c76dfb73365df853d5c0eefc86d16dd71cf34c070f2c454fb8d6f4ffc4ff9131b970752c39a477f10a668e580141cd229ee1cc4972b04c05c9aacb82c80d7d48f4b115dc94f43", 0x51}, {&(0x7f0000000280)="8252c1446ed3a66d1b31d9f7c0adfa00ed8a27777af8edde7ddd59dba1ce66101d6cab479383de1434d0fb8fd592db20181b64abb74df3555e046be8cbf26b705126b1820fc9eaccc6f301c139e375f8c76dddf627289ee532c604c74caace3621690a2ac38a3d5f3ecb9be179bbe29f9b66fd24566d546efaa467003486a60b4432ded2c0", 0x85}, {&(0x7f0000000340)="c7742aca2430ba3d413495af13200df374b1dbecedecf370967a68766cbda8a5d7c5b8f2a65b3cb7605cb120e1fc8381b0d178e02d67281ab7d4484d7e52a258963d61c20416254c114f907f193f11ee4e9c7e2d38e7062206f1231fec85d4eeda72b824d8f068", 0x67}, {&(0x7f00000003c0)="5f0fbda337e05a11611db68b1e840286683207520f3d13f3e12b15550820e452f1b59adaa18bfd5546cbef2c3b97f5717fba3ab747ea21f0f7bcf4048c1b730a6ed52fea12336a76c5e933a50665200444c23eb4ecd2ffa7239dfdf4e48f8bfde87f7080508f49888b48a81f67be530b0395e5a72dbfe6528652f3acea5f7df5595659317176e19f86b7a85df5015b59de0edcc7e28f18332a7392eaed630912", 0xa0}], 0x5, 0x0, 0x0, 0x8000}, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="e891cfed4771069a91d9002a3d5f38f704ffd1c307ef3519164d0f6e3f4acee234c9a7eb3bf166252a9b31f7ca2bbdf3d7b9ac74541e984bb3eecfcaa2fdcecaf39849b0cf60e920896f205d311935b1560b4627391973f53747d5f7fc7b92dafe0389ac5aeb6bb3d7b92ad0c3c314742e2e1c804a", 0x75}, {&(0x7f0000000200)="0de78916e688709ffef46c76dfb73365df853d5c0eefc86d16dd71cf34c070f2c454fb8d6f4ffc4ff9131b970752c39a477f10a668e580141cd229ee1cc4972b04c05c9aacb82c80d7d48f4b115dc94f43", 0x51}, {&(0x7f0000000280)="8252c1446ed3a66d1b31d9f7c0adfa00ed8a27777af8edde7ddd59dba1ce66101d6cab479383de1434d0fb8fd592db20181b64abb74df3555e046be8cbf26b705126b1820fc9eaccc6f301c139e375f8c76dddf627289ee532c604c74caace3621690a2ac38a3d5f3ecb9be179bbe29f9b66fd24566d546efaa467003486a60b4432ded2c0", 0x85}, {&(0x7f0000000340)="c7742aca2430ba3d413495af13200df374b1dbecedecf370967a68766cbda8a5d7c5b8f2a65b3cb7605cb120e1fc8381b0d178e02d67281ab7d4484d7e52a258963d61c20416254c114f907f193f11ee4e9c7e2d38e7062206f1231fec85d4eeda72b824d8f068", 0x67}, {&(0x7f00000003c0)="5f0fbda337e05a11611db68b1e840286683207520f3d13f3e12b15550820e452f1b59adaa18bfd5546cbef2c3b97f5717fba3ab747ea21f0f7bcf4048c1b730a6ed52fea12336a76c5e933a50665200444c23eb4ecd2ffa7239dfdf4e48f8bfde87f7080508f49888b48a81f67be530b0395e5a72dbfe6528652f3acea5f7df5595659317176e19f86b7a85df5015b59de0edcc7e28f18332a7392eaed630912", 0xa0}], 0x5, 0x0, 0x0, 0x8000}, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) (async) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) (async) 1m14.375369872s ago: executing program 2 (id=5544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xfff8}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x40, 0x0, 0x0, 0x0, 0x2009, 0x0, 0x200001, 0x1ff, 0x9}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c010000f5000047020000006f000900", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000008500000056000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062019c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1m14.165207763s ago: executing program 2 (id=5548): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x914) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1184, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m14.007796642s ago: executing program 2 (id=5552): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x150) unshare(0x400) r3 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r3, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x800442d4, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000016000000000000000071103600000000009500000000000000", @ANYRESOCT=r4, @ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1e, r4}, 0x94) 1m13.827805771s ago: executing program 2 (id=5556): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0xffffffffffffff8a, &(0x7f0000000000)="e6", 0x9, 0x1, 0xd45, 0x1012, 0xc7, 0x2, 0x7, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0500"], 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000006e02000000000000000000000d03000000020000000000000c0200000000006100c5bda43d7b1dce33cbf62b60850d88d6504eb3fb87ec899363a4c979ad70872072bd4a50f110eb92494c66652a16645f533409b0e15ff7d64a9adbc256db0f33f1b18b5f6a6e4390b058bb170bdccb424fea5b4320debe936cb4ee62b781baf6e23e77f3e97a1c45b478fa6adda1708a43ce0d6709d7"], 0x0, 0x40}, 0x28) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd1, 0x0, 0x4) r5 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote, @default, 0x1, @netrom}, &(0x7f0000000080)=0x1c, 0x80800) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f00000000c0)={0x80}) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x7, 0xffffffff, 0x5, 0x9, 0x1, 0xb7d0, 0x1}, 0x1c) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r3, 0x8, 0x70b92a, 0x25dfdbfb, {}, [{@nsim={{0x33}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}, {0xfffffffffffffee8, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0xb8e1f102156fe82d) 1m13.657449165s ago: executing program 2 (id=5557): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f0000000080)=0x1c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x13, r1, 0xc252d000) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, &(0x7f0000000380)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000007060102000000000000000002000003080006400000078e0500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x13c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xc7, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x1, @default, 0x1, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x2, 0xcb}}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void, [{0xdd, 0x95, "d3130f9e837609ff26e3979ccff7033e90ce8ac77f45ee925e381e594ae1f985e7929d568d970d5ee29ed1448e50d8223a91981c241c1d0e5eab037d5104309671271c7537c5ef06c2954390a1f9dfadf826527468223c8cc7d48374b6e45c0e195560cee6c4b9aa51898568b4a1aa16770d2b65615ec6a37a80fbec45420223d4edd49950c427dc9fac03b3207e1a44a674f90916"}]}}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_PMK={0x3f, 0xfe, "045f104faeeb7821603e3e968359c05f0b85b684a24123126c993855ce03888d66652f498f4b56f81f860a7babcb3785a7f4f0cb60c5f6bf4ef607"}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x13c}}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) (async) r9 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f0000000040)=0x7, 0x4) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x9, 0x10, 0x4, 0x3}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r11, 0x8, 0x4}, 0xc) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r12) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r13, 0xd7b825ccd16be7b5, 0x70bd29, 0x25dfd9fb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x2000c800) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x54, 0x1, 0x4, 0x0, 0x0, 0x0, {0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x3}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x4000055) 1m13.425257308s ago: executing program 4 (id=5562): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) (async) r1 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r1, 0x29, 0x24, 0x0, 0x2000005d) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='THAWED\x00', 0x7) (async) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1m13.236952096s ago: executing program 4 (id=5566): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) (async) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0xb6}, &(0x7f0000000180)=0x8) (async) close(0xffffffffffffffff) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0x4, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={r2, 0x81}, 0x8) 1m13.121332478s ago: executing program 4 (id=5568): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) 1m12.943672431s ago: executing program 4 (id=5570): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r1}, 0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYBLOB="ca580af6e3a752a759ca6a38deacbfc42ad7f10e4c9792dc4b1a32500b7c58cc2dade85a528a67c52a2ab67fabd01bd0f3cd8d48ecaefa38629c442334ddf7a69967c7629f3929bfd48542a08a4a7d1d88b18038b6cce764610c7685ebd1defa42460fe65a33100f4861efd2d950efdbe7e4dcc837d78ce12c19cda18de25054b63ff921be50370345beef8e464138cae88997325925f8bca2a1d405a611976f229be59ff9ca88d2f7c2e5386abb9566529588de74e06dbdac1eb476eea12e6ebadfdb54072bb84a9355", @ANYBLOB="020000000a000100aaaaaaaaaabb000008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x68eaadec9089c22b}, 0x20020094) r2 = socket$inet(0xa, 0x801, 0x84) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3ffc}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="0500000014010100fc02000000000000000000000000000114000100ff010000000000000000000000000001140001000000000000000000000de8395c00000114000101fe8000000000000000000200000000bb1400010000000000000000000000ffff00000000179c18afaa30636d25c2dd9107cf6a7c002d0280f376825106dbdbb6d6400d724f4ede6c01484eba23ab4be189c1cb068e2c3bb85baece589deead53d44fb51f"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x48011) r4 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4}, &(0x7f0000000200)=0x90) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) 1m12.81258491s ago: executing program 4 (id=5572): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) socket$nl_rdma(0x10, 0x3, 0x14) 1m12.5967643s ago: executing program 4 (id=5575): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r5, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 1m9.845482684s ago: executing program 41 (id=5374): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000a40)='%ps \x00'}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1a, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf889}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x10, 0x70, &(0x7f00000003c0)=""/112, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x2, 0xffffff6f, 0x8001}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440), &(0x7f0000000480)=[{0x1, 0x3, 0xd, 0xa}, {0x1, 0x1, 0xb, 0xb}, {0x2, 0x4, 0x2, 0x4}, {0x2, 0x3, 0xe}], 0x10, 0xffff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@cgroup, 0x8, 0x0, 0x80, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x9, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query]}, &(0x7f0000000780)='syzkaller\x00', 0x9, 0xae, &(0x7f00000007c0)=""/174, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x8, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r0, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@fallback=r1, r1, 0x2d, 0xa, r3, @void, @value=r6, @void, @void, r4}, 0x20) sendto(r0, &(0x7f0000000a00)="cafd00e223f83adefaaca7f299a993360121b3bdec8bc4bf9e41414d6709590260ae5b5246f81b8959f953", 0x2b, 0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='kvm_dirty_ring_reset\x00', r1, 0x0, 0x7f}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m9.493300513s ago: executing program 1 (id=5620): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r1, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100040c0}, 0x20040080) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000027bd7000fddbdf2508003d080040000008000100010000000800030002000001"], 0x28}, 0x1, 0x0, 0x0, 0x50004810}, 0x80) 1m9.352422211s ago: executing program 1 (id=5622): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.events\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="bc09fe1ddf30345bc10eb24392f2655c1e92a9e0fefdbbe4ed10f9ffd2096b7d94aafa8f3e281bef7f4fcee81b09222ca1c522a5ccdb9b8ffaa4c35f7b171c0ea13f4f390905037b7877c05682a2bb19bf55c34655021c50c14a4c94d7d043c9d68f82832cc242c6e888642e6e18c85652d828ebdaf532b3dcf5f936f729bad96196eaf36fc6ccf3a234f03f2166260f57ea154c9e63197379e89eb025b02154b26733ec8a43", 0xa6) (async) r1 = socket(0x400000000010, 0x3, 0x0) bind$802154_raw(r0, &(0x7f00000005c0)={0x24, @none={0x0, 0x1}}, 0x14) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c000000190001002abd7000fcdbdf251d01010008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x6c}}, 0x0) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0xe8, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xd4, 0x1, [@m_skbmod={0xd0, 0x9, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x7, 0x2, 0x7, 0x7bf}, 0xe}}]}, {0x7f, 0x6, "2db11a87a09d54c01b3b70ed9005060ef8b6af667ea4c76daffea445bc2fb7c9fd4004d6e64050eb8ba2292682969bc2caf59d843b5fa03ed6753f25849a4536ca5dd55eac0a07e56eacf72261c07ff3b76584c56f4638752d7ffc16bf75bb48473585b87ddb2ad5e2cbc0225e620f3c307467a5f60c474ff885c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xe8}}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff000000007110bd000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000585ea88508e5000000000000001801000020696c2500000000002020207b0a00fe00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000242020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b703000000000000c5000000ca0000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x1007, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_INIT={0xf}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}]}}, @qdisc_kind_options=@q_fq_codel={{}, {0x0, 0x2, [@TCA_FQ_CODEL_INTERVAL]}}]}, 0xc8}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000225bd7000fedbdf250100000008000be90100000014002000fe8000000000000000000000000000bb080011000100000006000e0004000000060003000700000008000b0001000000060002000000000006000200010000008b9a48fdf2fd48ed27184d3d391e8d10a2fa219051eb1d9b16974f69147deb9f539b1d8cfc7a7e5d9deffe3dc877ecffffff7f0000000026fee9bbe43ec143aa9b72a04c70cbae9eb849a1ea1b0c84104da76cadb98832cd29b79b07ab826b913be029b4be19a6d26583ded317ca250181460ab210cf1f285ea4b2e17ae300ec5941e674"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 1m9.221559529s ago: executing program 1 (id=5623): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xffff0f00}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x6, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x20) getsockopt$sock_buf(r1, 0x1, 0x35, 0x0, &(0x7f0000000280)) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x130}}], 0x1, 0x40000000) 1m9.153275791s ago: executing program 1 (id=5624): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10002, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000100)) unshare(0x10020080) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x42, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) unshare(0x14050000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000140)=0x800, 0x4) 1m8.992650744s ago: executing program 1 (id=5625): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e640000000004000280080003"], 0x3c}}, 0x0) 1m8.967902037s ago: executing program 1 (id=5626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x7f}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000080)={{r2}, 0x9e, 0x8000000000000000, 0x67f9800000000000}) 58.603519805s ago: executing program 42 (id=5557): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f0000000080)=0x1c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x13, r1, 0xc252d000) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, &(0x7f0000000380)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000007060102000000000000000002000003080006400000078e0500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x13c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xc7, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x1, @default, 0x1, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x2, 0xcb}}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void, [{0xdd, 0x95, "d3130f9e837609ff26e3979ccff7033e90ce8ac77f45ee925e381e594ae1f985e7929d568d970d5ee29ed1448e50d8223a91981c241c1d0e5eab037d5104309671271c7537c5ef06c2954390a1f9dfadf826527468223c8cc7d48374b6e45c0e195560cee6c4b9aa51898568b4a1aa16770d2b65615ec6a37a80fbec45420223d4edd49950c427dc9fac03b3207e1a44a674f90916"}]}}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_PMK={0x3f, 0xfe, "045f104faeeb7821603e3e968359c05f0b85b684a24123126c993855ce03888d66652f498f4b56f81f860a7babcb3785a7f4f0cb60c5f6bf4ef607"}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x13c}}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) (async) r9 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f0000000040)=0x7, 0x4) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x9, 0x10, 0x4, 0x3}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r11, 0x8, 0x4}, 0xc) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r12) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r13, 0xd7b825ccd16be7b5, 0x70bd29, 0x25dfd9fb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x2000c800) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x54, 0x1, 0x4, 0x0, 0x0, 0x0, {0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x3}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x4000055) 58.048316804s ago: executing program 3 (id=5724): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000340)=0x1c, 0x800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000ffdbdf251e00000008000300", @ANYRES32=r8, @ANYBLOB="3c002f800c0002000200aaaaaaaaaaaa2c00038008000100000000002000038006000100ffff0000080002"], 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) 57.772530355s ago: executing program 3 (id=5725): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket(0x1e, 0x4, 0x0) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x2, 0x400122a0, 0x0) (async) recvmmsg$unix(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x2, 0x400122a0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000300000004"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000300000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) tee(r2, r1, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprtrdma_post_send\x00', r2, 0x0, 0x5}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f00000000c0)) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)) (async) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128)\x00'}, 0x6e) close(r5) 57.696183457s ago: executing program 3 (id=5726): socketpair(0x10, 0x6, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc0000003ab69dd3d4504ed20cd463a1c7dfd9fae7c178908e66b47a45f2d286818632858601f99489", @ANYRES16=r4, @ANYBLOB="cd3e0000000000000000010000000800020000000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd26792040200006f64e62cd3404917f3be657330adc6bf2f2ab6286f917412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e85283000008000700ffffffff0400080000000000"], 0xfc}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r5}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x400c4}, 0x480c0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r5, 0xb1, {0x1, 0xff}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) socketpair(0x10, 0x6, 0x1, &(0x7f0000000000)) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) (async) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc0000003ab69dd3d4504ed20cd463a1c7dfd9fae7c178908e66b47a45f2d286818632858601f99489", @ANYRES16=r4, @ANYBLOB="cd3e0000000000000000010000000800020000000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd26792040200006f64e62cd3404917f3be657330adc6bf2f2ab6286f917412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e85283000008000700ffffffff0400080000000000"], 0xfc}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r5}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r7) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x400c4}, 0x480c0) (async) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) close(0x3) (async) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r5, 0xb1, {0x1, 0xff}}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) 57.588166742s ago: executing program 43 (id=5575): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r5, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 57.582463473s ago: executing program 3 (id=5728): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async, rerun: 64) r3 = socket$inet6(0xa, 0x5, 0x0) (rerun: 64) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) (async) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x18, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8}}, 0x18}}, 0x0) accept4$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14, 0x0) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000800)={0x0, 0x1000, "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"}, &(0x7f0000000080)=0x1008) (rerun: 64) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r11, 0x1, 0x10}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c394f305916c4516999da286dddd75957a17", 0x13, 0x0, &(0x7f0000000340)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="fb76f11b713b"}, 0x14) 57.320487826s ago: executing program 3 (id=5729): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x100}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x29, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) recvfrom$ax25(r3, &(0x7f0000000380)=""/171, 0xab, 0x22100, &(0x7f0000000440)={{0x3, @default, 0x7}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@random="e973abc7ac22", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xfffffffffffffffa}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000800000000000000907800000000000000000000000700109078220600010000e9c6d579b8ad648adef3660c4f5adde27386cec1994c466d52e65eb76e70c1612801ef56b89098832f06293c616842eb2f7037acc1439536f080c54a3eb1ad99b57e058b6db1d769fd20b1b979df89795dd6c18cb39e8e583cb0a565a8f714e9811cc1fa2240d706db2aa0afdb3ed605bcfdd9e1ac304cb97a9c776a593c82bd0123e09d2019c5bdd6011e4b164bf9b389f694b2"], 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYBLOB="0a0001"], 0x48}}, 0x0) 57.117621297s ago: executing program 3 (id=5730): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000400000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004", 0x37}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r7}, 0x10) r9 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r9, r8, 0x0, 0x0, 0x0}, 0x30) syz_open_procfs$namespace(r9, &(0x7f00000000c0)='ns/user\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r6, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 53.90611232s ago: executing program 44 (id=5626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x7f}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000080)={{r2}, 0x9e, 0x8000000000000000, 0x67f9800000000000}) 42.064136193s ago: executing program 45 (id=5730): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000400000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004", 0x37}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r7}, 0x10) r9 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r9, r8, 0x0, 0x0, 0x0}, 0x30) syz_open_procfs$namespace(r9, &(0x7f00000000c0)='ns/user\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r6, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 13.881904472s ago: executing program 6 (id=6190): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x16, 0x0, 0x0) 13.555396336s ago: executing program 6 (id=6194): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x58, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x35, 0xc}}]}]}, 0x58}}, 0x0) 13.243688447s ago: executing program 6 (id=6199): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0xa, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000080)=""/124, &(0x7f0000000040)=0x7c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00'}) r4 = socket$inet6(0xa, 0x80000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x8901, &(0x7f0000000040)={r4}) sendmsg$inet(r5, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_VS_SO_GET_TIMEOUT(r9, 0x0, 0x486, 0x0, 0x0) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r8) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000114a7", @ANYRES8], 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) read(r11, &(0x7f0000000200)=""/187, 0xbb) sendmsg$NLBL_CALIPSO_C_LISTALL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r10, @ANYBLOB="6502000009000000000000000000ad51dc9d2fad1cb1f02bd1c2f73cf12fcc1ce945f6bc15fbfa641ced45e636bf447415a4f0503f1b74c944096a5c53244ca55145eb955d9dd66e1cda3552165cf287a86ca6138befed1ade8f2887d1ce68c30902be4eea0f33961cc970ed0e23e8218fb75ddc6ae2c87cf51983e6ff5e6e7645e21200c4cb27b3df8cf63fdd035eb5a17570261f62f0040000001844ca15501d023c98f590c338115e9f455eb602f0e86b99881657d01234715ee362e6a7bb3637bbfaf9ae6670877e7bb103288ff7dd33e695de6e2409"], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x24004052) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="bf1f14500d9ef03921df250200000008000200020000000800024f000200000008eb0100020000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001e00010a0000000000000000070000000800260000000000040044807fe187c9141f3841c25e29b580420c11e6761c8c"], 0x20}}, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000240)=0x8000000000000001) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xa5a8, @vifc_lcl_ifindex=r2, @multicast1}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r12, 0x0, 0x0, 0x0) 12.382643392s ago: executing program 6 (id=6204): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000740)=0xffffffbf, 0x4) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x100000b, 0x13012, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xe0, &(0x7f0000000240)=""/224, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) 11.868350225s ago: executing program 6 (id=6207): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x103, 0xc, 0x1}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x10}, {0x0, 0x5}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x10}, {0x0, 0x5}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@link_local, @random="117863ac6e52", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x8}}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@link_local, @random="117863ac6e52", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x8}}]}]}}}}}}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x70bd29, 0x25dfdbff, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf2512000000050037000000000008000600", @ANYRES32=r6, @ANYBLOB="08003b000900000037fbfedc000000000500350004000000080039000100000008000600", @ANYRES32=0x0, @ANYBLOB="05003500eb00000008003a0006000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x20, r9, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x40000c0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x20, r9, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x40000c0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x3, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_QUANTUM={0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x8}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x3, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_QUANTUM={0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x8}]}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)=""/99, &(0x7f0000000480)=0x63) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xb, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000000070000000900010073797a3000000000640002001400018008000100e000000208000200000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1, 0x0, 0x14, 0x40c00c0}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) 10.768695943s ago: executing program 6 (id=6213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r2, 0x0, 0xfb2}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8f}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8b20, &(0x7f0000000000)={'veth1_to_bridge\x00', @remote}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x140}}, 0x0) 3.448822181s ago: executing program 7 (id=6263): socketpair(0x1a, 0x0, 0x4d6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$alg(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x4, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 3.120401846s ago: executing program 7 (id=6266): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd3, 0x1c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000084}, 0x40d1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x8, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xf0d6, 0x50}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 2.874870091s ago: executing program 9 (id=6269): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x68}}, 0x0) 2.816718676s ago: executing program 8 (id=6270): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) listen(r2, 0x0) close(r2) write$6lowpan_control(r0, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 2.668499037s ago: executing program 7 (id=6271): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r0, &(0x7f00000004c0)}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2.468542179s ago: executing program 8 (id=6273): syz_emit_ethernet(0xbe, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0xb0, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e22, 0x23, 0x0, @wg=@initiation={0x1, 0xffffffff, "c63585e7526aab9d42a8b6769138c30a26cd9a7a0950c019b7a55e8a8bfb3e7f", "b87b7a3b656030ba78a7fe3fc60f0232ad2ea02820b11bc983859cfd0f5885df6fe0994fe153a52dcd2c9a84cf7c7741", "874427be29c95b93303cd1be9716d01efc0c9ca574199dd700", {"45227a29c5acbb706c8d97cd14ba0aa2", "2984e0aeafde90bd933b89b3a4beac08"}}}}}}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x0, 0x3, 0x3}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x2, 0xc28, 0x7}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x4, 0x2}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r2, 0x29, 0xd3, 0x0, 0x0) r3 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, @dev, 0x0, 0x0, 0x0, 0x200}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', r4, 0x29, 0x0, 0x7, 0x3, 0x13, @dev={0xfe, 0x80, '\x00', 0x30}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x80, 0x6, 0x3}}) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004500005800000000002f9078ac141400ac1414ff0420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200"/102], 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000200)=0x4) 2.199049299s ago: executing program 9 (id=6275): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be820400e900d97922305b83096dbc8063bd8c4e19007dcb7b56f291b89a1720af7357088cec40c2d58617530f91703616aadbb4cf8874062fed272015777c22bbb7887e4edea89ab6"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x41) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500005c0000000000019078ac1e0001ac1414aa05019078e000000140d60009006700f7046c0008640101027f00000144149f93ac1e010100000003e00000017fffffff83175bac141432e000000264010101ac1e01017f00000100"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x40, 0x20, 0x7, 0x3, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x64, 0x0, 0x81, 0x4, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xb, 0x59, [@private=0xa010102, @remote]}, @timestamp_addr={0x44, 0x4c, 0x3d, 0x1, 0x5, [{@multicast2, 0x6}, {@empty, 0xf}, {@multicast2, 0x8b}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2a}}, {@empty, 0x98a}, {@local, 0xfffffffe}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e05}]}]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000007c0)={0x80, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x840) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), r6) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000b00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x1c, r8, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000850) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x25dfdbff, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r10}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f00000003c0)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2}, 0x98) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=@expire={0x150, 0x18, 0x8, 0x70bd2b, 0x25dfdbfb, {{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@private=0xa010100, 0x4e23, 0x5, 0x4e21, 0x2, 0x0, 0x0, 0x80, 0x2c, 0x0, r10}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d5, 0x32}, @in=@multicast2, {0x7, 0x3, 0x9, 0xfffffffffffffff8, 0xb3, 0x100}, {0x1, 0x6, 0x6, 0x7fffffffffffffff}, {0x6, 0xffffe1bd, 0x1}, 0x70bd28, 0x3500, 0x2, 0x3, 0x6, 0x40}, 0xa8}, [@user_kmaddress={0x2c, 0x13, {@in=@private=0xa010100, @in=@rand_addr=0x64010101, 0x0, 0xa}}, @tmpl={0x4}, @address_filter={0x28, 0x1a, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0xa, 0x9, 0x8}}]}, 0x150}}, 0x0) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x1f, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffffb}, @tail_call, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x9, 0x38, &(0x7f0000000380)=""/56, 0x41000, 0x2, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000500)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r4, r11], &(0x7f0000000600)=[{0x5, 0x5, 0x8, 0x9}], 0x10, 0x9}, 0x94) 1.911730764s ago: executing program 5 (id=6276): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001cb4d0d6850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x37d9dfc023281492, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e0000000000000040001e00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3ab991cd45da77b0, &(0x7f000000cf3d)=""/184, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000000)=0x400, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) 1.564723864s ago: executing program 8 (id=6277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}}, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r2, &(0x7f0000000780)={&(0x7f0000000300)=@in={0x2, 0x4e21, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@timestamping={{0x14}}], 0x18}, 0x80) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000400040002800800000041010000"], 0x3c}}, 0x0) connect$can_bcm(r1, &(0x7f0000000040), 0x10) 1.564320261s ago: executing program 7 (id=6278): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRES16=r0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="06000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) write$nci(r6, &(0x7f00000003c0)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0x8, {0x4, [{0x2, 0xf7}, {0x1, 0x6}, {0x3, 0x49}, {0x2, 0xfc}]}}, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xc4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0xc040) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) pipe(&(0x7f0000000180)={0xffffffffffffffff}) sendto$inet(r12, 0x0, 0x0, 0x0, 0x0, 0x0) connect$pppoe(r12, &(0x7f0000000380)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'syzkaller0\x00'}}, 0x1e) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r13}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r14 = socket(0x2, 0x5, 0x0) setsockopt$CAIFSO_REQ_PARAM(r14, 0x84, 0x80, 0x0, 0x0) 1.545211666s ago: executing program 9 (id=6279): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x8c}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300001d0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000200fe8000000000000000000000000000bb000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe880000000000000000000000000001000000000000000005000700000000000a00000000000000fc01000000000000000000000000000000000000000000000200130001"], 0xe8}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010027c61a7dd1dbdf250f000000080028"], 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xa, 0x4, 0x9}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) 1.544900035s ago: executing program 5 (id=6280): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x9, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.332343318s ago: executing program 8 (id=6281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000a0a0101"], 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x20004800) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000000980)) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES16], 0x48}}, 0x40000c4) 1.232667621s ago: executing program 5 (id=6282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b40900000000000061111000000000008510000002000000850000005000000095000000000000009500000000000000752791631222a4b4dbffcb3e429313c626d8575b733278661f13493d24a9e56d000045361df4f2d2d4f8c2f01b4ebc5e56040b1134ecdb1e1f38ce94b48a6e6325a3c0fa265afb4cfef8a901af313b77f13a966aeb27ccb654fac79ae10600000075fa8341a6875728e9a45938c338b7a958249211eb70d5d978eff738aa6be2d07fedb69c65b63dd665e66a92dec0189df1c319c72478e432b17c45bec66c923fb483a6d4e050bfaa8f8f85364f849802fa2c3b80975e8753560000f0c313d9c19ebc37219f14fbcdd539b9b96af3000000000000a5ba432868c94d89a587a608d4a2775463f6ac50a87677ff52cdc32c5ca6b15a0f7dd116bf074bdf18f78df0a7ea01bf1b70dc492fb776d382e53f33275334ab9055204cf808192fe7965d545adc3025140be6c4ce9c53a78654d285020c3ed1802e4905bdaf45b00ca255fc9720af279d003823d909e0028d0e54b3bbab4040064c8075fb861c0957378d1aa25363fe4e6ee692dbc22d130f06b86ea597aa9147723879c8f36b42109343d97e02186e240d1c455ab6e5bdd818e196a93467649726cd2c134ede56f61c9b8da92eee2a520a1de4078d326bb41cf0e5e83f9354fabeb8f726aa631253e5cb18e2268a4c530df35d2e40646363b84d6e3cc37809dc3dc91b1747d982b00d04f69400"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf254d000000080001007063690011000200303030303a30303a31302e3000000000f61614be669f7678d21b3914e6d37d46adf60117bcb37a1824d191978e471991bee9ccd8823a3f2ab061dba96df512ccca52"], 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x4040000) 905.574653ms ago: executing program 5 (id=6283): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebc]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x0, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ffffff7}}], 0x30}, 0x884) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r5, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x12}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/229, 0xe5}, {&(0x7f0000004100)=""/4104, 0x1008}, {&(0x7f0000000340)=""/240, 0xf0}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4097, 0x1001}, {&(0x7f0000006080)=""/4064, 0xfe0}, {&(0x7f00000004c0)=""/106, 0x6a}, {&(0x7f0000000100)=""/83, 0x53}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}], 0x8, 0x40010020, 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000140)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x2000000, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x9, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3d5]}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x7}}}}}}}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf250100000014000200776731000000000000000000000000007400088070000080"], 0x9c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x100, r6, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x11}, 0x4040001) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4$alg(r7, 0x0, 0x0, 0x800) sendmsg$alg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9496032", 0x5}], 0x1}, 0x55) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r11, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r10, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x9}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd2a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x104b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xff8}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x200400d0) 828.691986ms ago: executing program 9 (id=6284): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffdac, &(0x7f0000000140)="5b030023e0f6f1", 0x0}, 0x50) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00'}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b70000000000000095000010000000004e62011c3034fdb117168bd07ba08af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d458e17f791f4798c8eb484de03312c69b3edff5be26765ba5f8f2879021c2ea53ac547a654bbd2db5356b971d83dd12742be9087a3e7b7c0efd3e38c794eb06b0b8c392904ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057826ef4e912f01a201e694e3049b8c8fe8b65d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cff7f4d8b9d8eaf302f0b2e0c252b0000000000000000ee917bca4885bbf597a14ab6458e6272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36be115be3b325ecd201d2ffb0a7fa4f5d1106560cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b861299fcd9ed9d8679406419406bf0c5329bd5b4697336112b0b8756ce3574046bf611a108f8df4d1a88597840b702b6fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf39a43a66c5540b8762b42007c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4b19b53b60322af0aa66e8f448e1bd96822e6b70b62912c926dbe417cccd4f696d528fa8a3ea847f10e9b1106f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e171b3baae34c35987b0dda497ac3f5e97e60eaeea15c6d55badf9b86b1c000100006e60cd06c9ed24313ce607d403bb6030f800000000690db0221b1705c501f802ff59b4e683efa4b6e77e042072ec9eb8166f6e28b49a7705a1befc4d315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621fc0e3ba04020000c149ee6601728c750930519339b44197c22da865059b475afd96187d881e93b42a5fdfd686d8900c44c67133eeb0109dcb60dddad58037fda65885a15a42560ee3027a5ebf95254744f10fd607bc3100b94932b8d9447c42f6e21ee0e54f8be386bdc09decece910a481e648e0cb074536a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6ae00f0000000000006a8194479700a02b92bec8d05eae1f24fdd7b80d3dde04c22f689594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4acd7acf1dfe79d6771903b76e2ae47d972651390c22d641030e1ddac018dc3116e1803af10a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f00000000000000001000ba96edb95ede0e1957c2a2754258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548941d5d16297757310d9daebd5a3dabbced3b051129cd60a37d397643324e6f0aadf978d639650000000000000000570b0acbcaa196e6b46e213a34c1a550e7c2d8cee7a278cee591f360e345d37dc9f8991a16c08d72317e42d2ac9126acd76130ef1086016697e4d51c4b42b2efc8edab88d46bc3d5d6e5a634c912bc40513643bf44cb416b3149040220aa39035ae46d16d879fc815a5cb84b0d5c8ad970128adf8dec1171e860ca54ce5d6a5aa0327bca4f49a710bf8a8399071237fe5d764e2034873c94a4f21287f3bce3eeb69e94df2e14e4ab10cc7834b304bc879b80255991dd7aac2e92c9e7c411c019d229c1f1e563152f1c5ae9cda3e808000000a0c779d624c5a2b7491b8f73e767389ecd1dee951353bb22b7caf89468871520823715cfebd04189c6c6b34bd8a6541f6bc0630000000000f94e85f5111add3a3cb5bcace95f38465402c39df835754ef33056b0e1134187822c001a25304f3e00b44675d0a25a21dc4023c642cc6f5a75c45a29ab933600acf9a2d471b73a73178cdf309e5d53311996215b44295dfddc1dd6b81132e999366e460d15d366e84da02b8afc40c47e733f804460ed8300ec34eab2ed80097bd32ff1a6143ab1476037e474ca876187c85bed4391215cd77e6a1fd6399a498b96b9b0cca93255acb08c67e50004c5af6fd5b4ce7c1ebc9202bd7b329a4d2530486d5999dd7f90ebecca37f2869135438f0540801fd7481daf9ec94b799c12e714d573e2a6331f496254f254a60c52b2026ed6a72c82cd191490fabe7b151f92e5d700f21830d613fbe490f305b3845a78817e59bf7ed36471dbca01d39e50ae2535460e1d2f2614940647233a02d5000000000000000000f70e52f0d56f6a4dcf7e57c03d4b4add0500000000000000320304d0d2b308c5ed3956eae263035d703f862224e9818a3d7ac270793a7bf2af87585293960a80ac63c54e55063bf8d24639e561253ef0caf6c58118120d8acecc0528f0d81d291009fc46401baf9c22d1c452a5b61b7a1b9adfcc17f5ad99dcdf935923185db7b14a7fa7babc1f53df70618bb73aa810b756696f26653b84cf842ae433fda59fbe312be11bb7dfecdc38c1c1f688d2724568cc396fca7c74984b7f7bd000000000000003ff3e5857fc6598c933610be374909dc8622b0722259e922f40d7862f7ea72f1754f07711de7600000000000000000000000000c4cb643e73ad8a45f0c7164484540e66e29943aa72297d831ce6c978866a55ed53130c6747f569c9c9abe724b4fc647b17401d2201e8c201e7d6ffa1fa122677f7393ed4fe8a93306f048b6703b04544e42a9cd937ef8d98ee8d878a12a627791c5c2d9fc6de65356be92fd98fdbe819686c7bd3be5bd0ce627c8357675f752c73a502d25c31c831078f098c34295bfe90e882843003841f4c0c65dc1810a50000000000000015911cb03e743c482199757d35df5b59fe0a0c5240c85498d818578e2d65c4ff4acbee037498222b1f81f3726a244da1fd6b8c195f1303bedb744045f31e1547d7bc3c3eae68b8da059a59c8c37e3639c2c4eb3d8229ac24d2ce12bc0e5db4a8202d72e64d5c5eacd0d0c0cd7a879ed967f5a2bd39ae4cf7daf7c9fa1777d54fb5920c8434163f75062c62455bf6e23817a85d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000300), &(0x7f0000000380)=0x4) 317.156797ms ago: executing program 7 (id=6285): ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000041c039411199fd7a5b60779a67a9ff311109ee59af2a60d689c3fbbd602cbcc0eb71dd1167b2d6fdc0ab13f4d7871c1bdca08f50e92f4373e10f403fd0009c62fe119937e2bb9a83928cdef8ad92abb7ba8348b78035f9774ebe26b4c4f5d9a8e5776d0bcd97eb371a23cb733512f8c3b0398c1846e826d44c07f8f6c182b722a3bdd780b8d6e5499b516f077fdcafec6e364da4b5f78a5ef1fce3f6ffd98445b6c4a99c69ca601fb7033d1035be7939bd7b8b23c0cc935a5e05a1532581d76e80470b82857f9997ec1ca116a0ac5f", @ANYRES16=r1, @ANYRES8=r1, @ANYRES32=r0, @ANYRES64=r0, @ANYRES16=r1, @ANYRESOCT=r1], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) 316.863815ms ago: executing program 8 (id=6286): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0) ppoll(&(0x7f0000000600)=[{r2, 0x101}], 0x1, &(0x7f0000000640)={0x0, 0x3938700}, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000012c0)=0xe) accept4(r0, 0x0, 0x0, 0x80000) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, 0x0, &(0x7f0000000100)) setsockopt(r0, 0x8, 0x8923, &(0x7f0000000180)="3fef03739dc14af934ea06404e66015f2f4fb7be300eb760436254dd72b04c66e9950a8f968421cb898f604f75f5469443cbc2da98c454f8f923982918c372b91263bb0187dedbd408d472c19bbe381e9cd680398b3017270d5b119a02610252f6a1820c0e6ac9329e47452ac2e3623930aadc49753607cdb7261b24eda8009fdf11efd19984b8", 0x87) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x100, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x537b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x40}}, 0x0) 315.714892ms ago: executing program 9 (id=6287): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1401905b461a8dc3c60e73000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1401905b461a8dc3c60e73000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x810) (async) 314.998862ms ago: executing program 7 (id=6288): r0 = socket$inet(0xa, 0xa, 0x4) r1 = socket$inet6(0xa, 0x8080e, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x190) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000040), 0x4) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) listen(r0, 0x8) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x7, 0x5d6, 0x4}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004a80)=@newtaction={0x1008, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0xff4, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8}]}, {0x25, 0x6, "e0bc7743d52057483c234da7396aee1c1620232e9758fc402870746166594df527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0xf90, 0x7, 0x0, 0x0, {{0x8}, {0x4}, {0xf65, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1008}, 0x1, 0x0, 0x0, 0x40048c0}, 0x24040001) recvmmsg$unix(r7, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000011000100"/20, @ANYRES32=0x0, @ANYBLOB="090001f49f0800001400100300770000000000040000e4aeef68da87c9e74e12859497ba298b97a2f09d9750cf1c864a60547f3ae883dd7556634e1800f9c59aceb76fc026b6e9a8cd33c8c7d4909be895b8833800d55e58172179ef1fbf4efaa1c9ccf49f5d69e2a24b16045b3b8ec8bde0112fbcb9747fea551307e0c159f37adddbe789c313bbaef74a8952dbad68e77b29adca762798abeec271ce2a66d1992c6a5ba3dfa5b18aed23c08c5f458783c0fd9feb90d3171c2a97e0e9da6c25c68d98984ee4e5d4005fb7ff45a34fc9f1214522cd955cde5eba2282242b85117a14991b0c6ec482e6e5b29cb26c7ec2f1cca8407ec00f0148d344cac61e3d5496f28f6326db06f5da59afa85b98e658ad13411c792e7f0d07971105f0d913ce3a2afd23f93042300e2c656c9ee11907e0b8927ac209f6413d5cf6d2657fc5c9d280b06b5f6ae0925c32f9fbbfe4129793d7c2f3be948c0280bb111b8ac98a24878e40faee3a704ac2eadec8ac17a11d17397b49458b73cd1f54503bb12e1cc683ed86bdbc6dc2aea3eaefc789b277774077df9edf752c1af6a81272928d"], 0x34}}, 0x4084) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000140)={r9, @in6={{0xa, 0x0, 0x1, @empty}}, 0x7, 0x4}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000000)={r9, 0x8}, &(0x7f00000000c0)=0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) 314.289714ms ago: executing program 5 (id=6289): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x14, r2, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)={@broadcast, @multicast2, 0x0, 0x5, [@multicast1, @broadcast, @multicast1, @rand_addr=0x64010100, @multicast1]}, 0x24) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x100}}]}, 0x24}}, 0x0) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r0, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) 236.380157ms ago: executing program 9 (id=6290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x3c, &(0x7f0000000080)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x3ff, @private0={0xfc, 0x0, '\x00', 0xe2}}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)={r3, 0xdd, "33f4f92cf469e9db86f71dad75be4089af2f431181b6ed33b9eb3831546512502c30d3622205db1107833aa42a058f10bd3a0b0ae79897f007a2988ff8cea4723ef0ef58c310d311134fb1b56178e0fc4b999f53ac19d0fbeedfc3e14f271d75777bca8239c35a42ae0ef0df999b71a2057843ce17a0652a47929dab6490048c25c8ade08cdf66ea3276766153a313cedab326551f8b795294533d6ae52ba3f0279ee8767a27b5a718cf29b269abcc0905bdf65cded5aafc6314c4a91a2183b6394ae206455567c8e83152f1becb190060853819be347178bb7ab341e5"}, &(0x7f00000003c0)=0xe5) r4 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r4, &(0x7f0000000040), 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x14, r6, 0xb05, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r6, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x12c, 0x1, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_MASTER={0x94, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa38}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2f1}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xaee}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xfffff001}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x2400c800}, 0x4810) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x30, r12, 0xb97534d5fe9704cf, 0x70bd29, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4000040) r15 = socket(0x11, 0x1, 0x3) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r15, 0x84, 0x70, &(0x7f00000008c0)={r3, @in={{0x2, 0x4e23, @empty}}, [0x2, 0x2d11, 0x401, 0x10001, 0x0, 0x3, 0xe3f, 0x8, 0x6, 0x1, 0x80000000, 0x733, 0x81, 0x100000000, 0x9]}, &(0x7f0000000780)=0x100) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x14, 0x3f, 0x107, 0x0, 0x0, {0x42, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x8086}, 0xc000) 50.912708ms ago: executing program 5 (id=6291): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000028000002c0004802800018007000100637400001c000280050003000100000008000440000000160800024000000004090001c7e9d629ee432802d00073797a30000000000900020073797a32000000001400000011000100000000"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f00000001c0)="01", 0x1) setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000680)=""/17, &(0x7f00000000c0)=0x11) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001000000000000ec000007000000", @ANYRES32=r2, @ANYBLOB="000096000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 0s ago: executing program 8 (id=6292): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x400a012) (async) syz_emit_ethernet(0x15, &(0x7f0000000540)=ANY=[@ANYBLOB="fb570f0000"], 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x40, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000) (async) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a37f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9078ff030000b16b5d7a0c10a59f77b96bd2b900000000"], 0x0) kernel console output (not intermixed with test programs): device dummy0 via netlink (err -105) [ 546.516704][T24571] netlink: 'syz.6.5033': attribute type 2 has an invalid length. [ 546.524467][T24568] team0: Failed to send options change via netlink (err -105) [ 546.524493][T24568] team0: Port device dummy0 added [ 546.530240][T24560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5030'. [ 546.560312][T24560] netlink: 'syz.1.5030': attribute type 10 has an invalid length. [ 546.570675][T24560] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 546.676690][T24560] team0: Failed to send options change via netlink (err -105) [ 546.688192][T24560] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 546.697636][T24560] team0: Port device dummy0 removed [ 546.710901][T24560] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 546.889653][T24597] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5040'. [ 546.952028][T24599] netlink: 'syz.4.5041': attribute type 2 has an invalid length. [ 547.141234][T24609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5045'. [ 547.306963][T24615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5046'. [ 548.074018][ T5855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 548.086094][ T5855] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 548.095657][ T5855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 548.121769][ T5855] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 548.132193][ T5855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 548.203984][T24635] vxcan1 speed is unknown, defaulting to 1000 [ 548.412631][T24644] netem: change failed [ 548.567182][T24655] netlink: 'syz.1.5056': attribute type 21 has an invalid length. [ 548.714957][T24659] netlink: 'syz.4.5057': attribute type 21 has an invalid length. [ 548.737105][T24659] netlink: 'syz.4.5057': attribute type 22 has an invalid length. [ 548.780179][T24659] netlink: 'syz.4.5057': attribute type 23 has an invalid length. [ 548.798514][T24659] netlink: 'syz.4.5057': attribute type 25 has an invalid length. [ 548.845782][T24664] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 548.999325][T12091] net_ratelimit: 34 callbacks suppressed [ 548.999345][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 549.113441][T24677] netlink: 'syz.5.5063': attribute type 1 has an invalid length. [ 549.137260][T12079] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 549.206790][T24671] bond1: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 549.233393][T12079] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 549.362361][T24684] vxlan0: entered promiscuous mode [ 549.368893][T24684] vxlan0: entered allmulticast mode [ 549.383327][T12091] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.396054][T12091] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.416530][T12091] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.426279][T24635] chnl_net:caif_netlink_parms(): no params data found [ 549.440745][T12091] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.541911][T24635] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.552011][T24635] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.560515][T24635] bridge_slave_0: entered allmulticast mode [ 549.570620][T24635] bridge_slave_0: entered promiscuous mode [ 549.584078][T24635] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.592652][T24635] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.602848][T24635] bridge_slave_1: entered allmulticast mode [ 549.611847][T24635] bridge_slave_1: entered promiscuous mode [ 549.674307][T24635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.689774][T24635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.746507][T24635] team0: Port device team_slave_0 added [ 549.769200][T24697] netlink: 'syz.1.5068': attribute type 2 has an invalid length. [ 549.777050][T24635] team0: Port device team_slave_1 added [ 549.955058][T24635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.967972][T24635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.001743][T24635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.022535][T24635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.031092][T24635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.061085][T24635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.082443][T24707] pim6reg527: entered allmulticast mode [ 550.181694][T24704] syzkaller0: entered promiscuous mode [ 550.187220][T24704] syzkaller0: entered allmulticast mode [ 550.208057][ T5855] Bluetooth: hci6: command tx timeout [ 552.063180][T24715] __nla_validate_parse: 6 callbacks suppressed [ 552.063198][T24715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5075'. [ 552.106345][T24635] hsr_slave_0: entered promiscuous mode [ 552.141992][T24635] hsr_slave_1: entered promiscuous mode [ 552.163170][T24635] debugfs: 'hsr0' already exists in 'hsr' [ 552.189126][T24635] Cannot create hsr debugfs directory [ 552.251274][T24721] syzkaller0: entered promiscuous mode [ 552.257115][T24721] syzkaller0: entered allmulticast mode [ 552.268566][ T5855] Bluetooth: hci6: command 0x041b tx timeout [ 552.590822][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 552.622613][T24738] vxcan1 speed is unknown, defaulting to 1000 [ 552.812413][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 552.978423][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 553.016042][T24756] erspan0: entered allmulticast mode [ 553.039545][T24759] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5084'. [ 553.066061][T24759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5084'. [ 553.298498][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 553.394229][T24775] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.418170][T12081] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 553.656574][T12081] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 553.756458][T24635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 553.771823][T24787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5089'. [ 553.789171][T24787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5089'. [ 553.815728][T24635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 553.849202][T24635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 553.875058][T24635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 553.918288][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 554.026904][T24807] vxcan1: tx address claim with dest, not broadcast [ 554.260333][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 554.329256][T24635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.355727][ T5852] Bluetooth: hci6: command 0x041b tx timeout [ 554.396922][T24635] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.444664][T24818] netlink: 'syz.5.5094': attribute type 4 has an invalid length. [ 554.458844][T15243] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.466079][T15243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.509719][T15237] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.516980][T15237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.526749][T24821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5095'. [ 554.664527][T24826] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5095'. [ 554.675769][T15238] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 554.813948][T15238] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 554.939933][T15238] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 555.059566][T12081] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 555.140016][T24635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.225965][T24635] veth0_vlan: entered promiscuous mode [ 555.244338][T24635] veth1_vlan: entered promiscuous mode [ 555.299687][T24635] veth0_macvtap: entered promiscuous mode [ 555.313513][T24635] veth1_macvtap: entered promiscuous mode [ 555.341121][T15238] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 555.362970][T24635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.408889][T24635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.439967][T15238] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.461528][T15238] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.474066][T15238] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.488358][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 555.498918][T15238] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.599332][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 555.626693][T12081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.658196][T12081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.690203][T12081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.699416][T12081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.711586][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 555.796755][T24849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5043'. [ 555.850746][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 555.902240][T24853] sctp: [Deprecated]: syz.4.5096 (pid 24853) Use of struct sctp_assoc_value in delayed_ack socket option. [ 555.902240][T24853] Use struct sctp_sack_info instead [ 555.930577][T24857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5098'. [ 555.975603][T24857] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 555.986556][T24853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5096'. [ 556.317314][T24877] netlink: 'syz.4.5102': attribute type 1 has an invalid length. [ 556.385142][T24877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 556.428393][ T5852] Bluetooth: hci6: command 0x041b tx timeout [ 556.561720][T24886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 556.581977][T24886] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 556.597259][T24886] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 556.675440][T24877] veth3: entered promiscuous mode [ 557.854475][T24967] __nla_validate_parse: 7 callbacks suppressed [ 557.854494][T24967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5121'. [ 557.887132][T24969] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5122'. [ 557.909722][T24967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5121'. [ 558.095200][T24981] netlink: 'syz.5.5125': attribute type 32 has an invalid length. [ 558.104292][T24981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5125'. [ 558.153194][T24981] bond1: option coupled_control: invalid value (64) [ 558.163214][T24981] bond1 (unregistering): Released all slaves [ 558.513664][ T5852] Bluetooth: hci6: command 0x041b tx timeout [ 559.300468][T12091] net_ratelimit: 26 callbacks suppressed [ 559.300488][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 559.469740][T12081] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 559.838579][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 559.940650][ T30] audit: type=1107 audit(1759680523.178:6): pid=25080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¸JPÖ£žVÒ¶>ÙA;Á–']–Ùa\“ [ 559.940650][ T30] Ÿ`.¡ZJ§¿\=Õû«0;ÜŽDUó{9 Áž©dJfyÍ®c jÓ{}ûé%iv÷áô›g)' [ 559.990013][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 560.118371][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 560.238873][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 560.358454][T12081] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 560.425372][T25116] netlink: 'syz.4.5151': attribute type 10 has an invalid length. [ 560.469111][T12081] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 560.482265][T25116] batman_adv: batadv0: Adding interface: team0 [ 560.490070][T25116] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.517471][T25116] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 560.618334][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 560.729990][T12079] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 560.879481][T25142] netlink: 'syz.5.5158': attribute type 1 has an invalid length. [ 560.907753][T25142] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5158'. [ 560.919549][T25142] nbd: illegal input index 1048576 [ 560.944502][T25147] netlink: 'syz.5.5158': attribute type 1 has an invalid length. [ 560.957743][T25147] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5158'. [ 560.967167][T25147] nbd: illegal input index 1048576 [ 561.105111][T25156] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5164'. [ 561.144540][T25167] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5164'. [ 561.158846][T25162] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5165'. [ 561.462352][T25178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5168'. [ 561.650828][T25191] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 561.833341][T25191] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 561.842313][T25191] gretap1: entered promiscuous mode [ 561.852510][T25191] gretap1: entered allmulticast mode [ 561.870752][T25199] bond0: entered promiscuous mode [ 561.875832][T25199] bond_slave_0: entered promiscuous mode [ 561.915590][T25199] bond_slave_1: entered promiscuous mode [ 561.947614][T25199] bond0: left promiscuous mode [ 561.968875][T25199] bond_slave_0: left promiscuous mode [ 561.978121][T25199] bond_slave_1: left promiscuous mode [ 562.306134][T25221] vxcan1 speed is unknown, defaulting to 1000 [ 562.321978][T25220] tipc: Invalid UDP bearer configuration [ 562.322036][T25220] tipc: Enabling of bearer rejected, failed to enable media [ 562.796601][T25246] tipc: Started in network mode [ 562.826486][T25246] tipc: Node identity de0ad610ffd7, cluster identity 4711 [ 562.842574][T25246] tipc: Enabled bearer , priority 0 [ 562.969253][T25244] tipc: Disabling bearer [ 563.334981][T25270] netlink: 'syz.1.5189': attribute type 21 has an invalid length. [ 563.374975][T25270] __nla_validate_parse: 4 callbacks suppressed [ 563.374995][T25270] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5189'. [ 563.441992][T20569] IPVS: starting estimator thread 0... [ 563.520506][T25276] delete_channel: no stack [ 563.537946][T25274] IPVS: using max 31 ests per chain, 74400 per kthread [ 563.687217][T25289] netlink: 'syz.2.5193': attribute type 10 has an invalid length. [ 563.700711][ T5852] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 563.712374][ T5852] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 563.727517][ T5852] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 563.744961][ T5852] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 563.756688][ T5852] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 563.831872][T25289] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 564.022849][T25284] vxcan1 speed is unknown, defaulting to 1000 [ 564.292649][T25310] netlink: 'syz.1.5195': attribute type 10 has an invalid length. [ 564.411168][T25310] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 564.449084][T12083] net_ratelimit: 24 callbacks suppressed [ 564.449104][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 564.471209][T25309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.656719][T25318] pimreg3: entered allmulticast mode [ 564.677879][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 564.765851][T25319] netlink: 'syz.5.5196': attribute type 1 has an invalid length. [ 564.788121][T25319] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5196'. [ 564.818173][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 564.931263][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 564.941291][T12091] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 565.080250][T25334] netlink: 'syz.2.5199': attribute type 178 has an invalid length. [ 565.175750][T25332] bond1: option all_slaves_active: invalid value (222) [ 565.223263][T25332] bond1 (unregistering): Released all slaves [ 565.363277][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 565.521195][T25329] vxcan1 speed is unknown, defaulting to 1000 [ 565.524315][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 565.791112][ T5852] Bluetooth: hci7: command tx timeout [ 565.852396][T25348] netlink: 284 bytes leftover after parsing attributes in process `syz.1.5203'. [ 565.863037][T25351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5203'. [ 565.879481][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 565.964915][T25348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5203'. [ 566.228266][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 566.284833][T25284] chnl_net:caif_netlink_parms(): no params data found [ 566.405038][T25379] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5207'. [ 566.458193][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 566.705069][T25390] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 566.731888][T25389] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 566.765548][T25387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5209'. [ 566.811001][T25387] netlink: 'syz.5.5209': attribute type 11 has an invalid length. [ 566.842475][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 566.876811][T25284] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.907917][T25284] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.930787][T25284] bridge_slave_0: entered allmulticast mode [ 566.950123][T25284] bridge_slave_0: entered promiscuous mode [ 566.980722][T12083] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.981181][T25387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5209'. [ 567.009097][T25387] netlink: 'syz.5.5209': attribute type 11 has an invalid length. [ 567.040435][T12083] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.050548][T12083] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.060960][T25284] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.069311][T25284] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.076662][T25284] bridge_slave_1: entered allmulticast mode [ 567.084684][T25284] bridge_slave_1: entered promiscuous mode [ 567.103702][T25401] sctp: [Deprecated]: syz.1.5210 (pid 25401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.103702][T25401] Use struct sctp_sack_info instead [ 567.137950][T12083] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.232934][T25284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.294207][T25284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.479266][T25414] pim6reg: entered allmulticast mode [ 567.506442][T25284] team0: Port device team_slave_0 added [ 567.578565][T25284] team0: Port device team_slave_1 added [ 567.852857][T25420] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5214'. [ 567.874796][ T5852] Bluetooth: hci7: command tx timeout [ 567.962819][T25284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.981584][T25284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.013063][T25284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.185251][T25284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.201288][T25284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.246015][T25284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.390498][T25450] netlink: 21 bytes leftover after parsing attributes in process `syz.4.5220'. [ 568.455408][T25448] bond3: Removing last ns target with arp_interval on [ 568.475024][T25284] hsr_slave_0: entered promiscuous mode [ 568.491236][T25284] hsr_slave_1: entered promiscuous mode [ 568.498997][T25284] debugfs: 'hsr0' already exists in 'hsr' [ 568.504845][T25284] Cannot create hsr debugfs directory [ 568.649527][T25463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5223'. [ 568.660279][T25463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5223'. [ 568.669912][T25463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5223'. [ 568.883828][T25471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5225'. [ 568.896017][T25474] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5226'. [ 569.554197][T15243] net_ratelimit: 7 callbacks suppressed [ 569.554219][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 569.632420][T25489] syzkaller1: entered promiscuous mode [ 569.657865][T25489] syzkaller1: entered allmulticast mode [ 569.858569][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 569.954467][ T5852] Bluetooth: hci7: command tx timeout [ 570.045367][T25530] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5237'. [ 570.073996][T25530] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5237'. [ 570.288729][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 570.322029][T25530] gretap2: entered promiscuous mode [ 570.327461][T25530] gretap2: entered allmulticast mode [ 570.419358][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 570.548420][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 570.665208][T20569] IPVS: starting estimator thread 0... [ 570.768950][T25561] IPVS: using max 26 ests per chain, 62400 per kthread [ 570.819029][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 570.845172][T25284] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 570.899818][T25284] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 570.950375][T25570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5245'. [ 570.959520][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 570.969392][T25284] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 571.047273][T25576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5247'. [ 571.095131][T25284] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 571.128094][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 571.325800][T25595] netlink: 'syz.5.5249': attribute type 64 has an invalid length. [ 571.678950][T12081] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 571.736223][T25284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.829442][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 571.889372][T25284] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.012144][T15238] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.019393][T15238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.028111][ T5852] Bluetooth: hci7: command tx timeout [ 572.097088][T15238] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.104340][T15238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.253856][T25284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 572.792226][T25670] netlink: 'syz.1.5266': attribute type 1 has an invalid length. [ 572.892854][T25664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.977577][T25284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.134430][T25686] gretap1: entered promiscuous mode [ 573.260976][T25284] veth0_vlan: entered promiscuous mode [ 573.320018][T25284] veth1_vlan: entered promiscuous mode [ 573.455449][T25692] __nla_validate_parse: 49 callbacks suppressed [ 573.455469][T25692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5270'. [ 573.460182][T25284] veth0_macvtap: entered promiscuous mode [ 573.562576][T25284] veth1_macvtap: entered promiscuous mode [ 573.694323][T25284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.775765][T25284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.903511][T12091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.941293][T12091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.997645][T12091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.026970][T12091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.055115][T25719] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 574.417719][T12081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.470532][T12081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.589722][T12091] net_ratelimit: 15 callbacks suppressed [ 574.589740][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 574.623059][T25751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5285'. [ 574.652990][T12081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.687500][T12081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.828099][T25754] bridge0: port 3(ipvlan2) entered blocking state [ 574.853284][T25754] bridge0: port 3(ipvlan2) entered disabled state [ 574.880460][T25754] ipvlan2: entered allmulticast mode [ 574.887508][T25754] bridge0: entered allmulticast mode [ 574.901865][T25754] ipvlan2: left allmulticast mode [ 574.907113][T25754] bridge0: left allmulticast mode [ 574.934486][T25758] tipc: Failed to obtain node identity [ 574.950349][T25758] tipc: Enabling of bearer rejected, failed to enable media [ 574.986606][T25758] bridge2: entered promiscuous mode [ 574.993449][T25758] bridge2: entered allmulticast mode [ 575.016004][T25761] tipc: Started in network mode [ 575.021694][T25761] tipc: Node identity 2a58aae1a8ce, cluster identity 4711 [ 575.040959][T25761] tipc: Enabled bearer , priority 0 [ 575.132004][T25771] netlink: 'syz.1.5290': attribute type 1 has an invalid length. [ 575.139825][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 575.149242][T25761] syzkaller0: entered promiscuous mode [ 575.157975][T25761] syzkaller0: entered allmulticast mode [ 575.225712][T25761] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 575.332145][T25771] 8021q: adding VLAN 0 to HW filter on device bond2 [ 575.340677][T25782] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 575.370449][T25761] tipc: Resetting bearer [ 575.430988][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 575.467504][T25759] tipc: Resetting bearer [ 575.576852][T25759] tipc: Disabling bearer [ 575.597344][T25802] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5295'. [ 575.631124][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 575.773153][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 575.957233][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 576.079664][T12081] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 576.268855][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 576.431272][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 576.561582][T25859] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5309'. [ 576.580684][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 576.631572][T25859] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5309'. [ 576.744161][T25864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5309'. [ 577.196028][T25896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5320'. [ 577.407010][T25882] bond0: (slave bond_slave_0): Releasing backup interface [ 577.426473][T25882] bond0: (slave bond_slave_1): Releasing backup interface [ 577.459089][T25882] team0: Port device team_slave_0 removed [ 577.488916][T25882] team0: Port device team_slave_1 removed [ 577.501800][T25882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.515789][T25882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.532911][T25882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.544689][T25882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.586278][T25896] 8021q: VLANs not supported on nr0 [ 577.772690][T25914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5325'. [ 577.782859][T25914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5325'. [ 578.076210][T25929] netlink: 'syz.4.5328': attribute type 11 has an invalid length. [ 578.249951][T25936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5332'. [ 578.484873][T25947] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5335'. [ 578.573593][T25955] netlink: 'syz.0.5339': attribute type 21 has an invalid length. [ 578.927305][T25990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5345'. [ 578.985520][T25984] dvmrp0: entered allmulticast mode [ 579.114588][T25999] netlink: 'syz.2.5347': attribute type 13 has an invalid length. [ 579.146821][T26005] netlink: 'syz.4.5350': attribute type 10 has an invalid length. [ 579.170760][T25999] veth0_macvtap: left promiscuous mode [ 579.179223][T25999] macvtap0: entered allmulticast mode [ 579.191479][T25999] macvtap0: refused to change device tx_queue_len [ 579.211532][T26005] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 579.319575][T26013] syzkaller0: entered promiscuous mode [ 579.338775][T26013] syzkaller0: entered allmulticast mode [ 579.349235][T15237] syzkaller0: tun_net_xmit 70 [ 579.376921][T26018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5354'. [ 579.425424][T26028] lo: entered allmulticast mode [ 579.435401][T26028] tunl0: entered allmulticast mode [ 579.514634][T26028] gre0: entered allmulticast mode [ 579.638968][T26028] gretap0: entered allmulticast mode [ 579.731985][T26028] ip_vti0: entered allmulticast mode [ 579.752082][T26028] ip6_vti0: entered allmulticast mode [ 579.769567][T26028] sit0: entered allmulticast mode [ 579.803796][T26028] ip6tnl0: entered allmulticast mode [ 579.927330][T26028] ip6gre0: entered allmulticast mode [ 579.978785][T26028] syz_tun: entered allmulticast mode [ 580.015184][T26028] ip6gretap0: entered allmulticast mode [ 580.016637][T26049] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5364'. [ 580.044536][T26028] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.052847][T26028] bridge0: entered allmulticast mode [ 580.077172][T26028] vcan0: entered allmulticast mode [ 580.094777][T26028] bond0: entered allmulticast mode [ 580.100353][T26028] bond_slave_0: entered allmulticast mode [ 580.106180][T26028] bond_slave_1: entered allmulticast mode [ 580.114243][T26028] dummy0: entered allmulticast mode [ 580.122205][T26028] mac80211_hwsim hwsim54 wlan1: entered allmulticast mode [ 580.146831][T26028] team0: entered allmulticast mode [ 580.152600][T26028] team_slave_0: entered allmulticast mode [ 580.161554][T26028] team_slave_1: entered allmulticast mode [ 580.190612][T26028] nlmon0: entered allmulticast mode [ 580.200342][T26028] caif0: entered allmulticast mode [ 580.207270][T26028] batadv0: entered allmulticast mode [ 580.222610][T26028] vxcan0: entered allmulticast mode [ 580.231522][T26028] vxcan1: entered allmulticast mode [ 580.242338][T26028] veth0: entered allmulticast mode [ 580.259805][T26028] veth1: entered allmulticast mode [ 580.272913][T26028] wg0: entered allmulticast mode [ 580.284616][T26028] wg1: entered allmulticast mode [ 580.294550][T26028] wg2: entered allmulticast mode [ 580.311503][T26028] veth0_to_bridge: entered allmulticast mode [ 580.331584][T26028] veth1_to_bridge: entered allmulticast mode [ 580.351731][T26028] veth0_to_bond: entered allmulticast mode [ 580.366947][T26028] veth1_to_bond: entered allmulticast mode [ 580.384161][T26028] veth0_to_team: entered allmulticast mode [ 580.405131][T26028] veth1_to_team: entered allmulticast mode [ 580.423131][T26028] veth0_to_batadv: entered allmulticast mode [ 580.436759][T26028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.445527][T26028] batadv_slave_0: entered allmulticast mode [ 580.465279][T26028] veth1_to_batadv: entered allmulticast mode [ 580.477333][T26028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.489875][T26028] batadv_slave_1: entered allmulticast mode [ 580.513084][T26028] xfrm0: entered allmulticast mode [ 580.534061][T26028] veth1_to_hsr: entered allmulticast mode [ 580.546468][T26028] hsr_slave_1: entered allmulticast mode [ 580.559739][T26028] hsr0: entered allmulticast mode [ 580.571262][T26028] veth1_virt_wifi: entered allmulticast mode [ 580.584666][T26028] veth0_virt_wifi: entered allmulticast mode [ 580.609383][T26028] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 580.620553][T26028] veth1_vlan: entered allmulticast mode [ 580.632352][T26028] veth0_vlan: entered allmulticast mode [ 580.655613][T26028] vlan0: entered allmulticast mode [ 580.661693][T26028] vlan1: entered allmulticast mode [ 580.669354][T26028] macvlan0: entered allmulticast mode [ 580.683312][T26028] macvlan1: entered allmulticast mode [ 580.693677][T26028] ipvlan0: entered allmulticast mode [ 580.700564][T26028] ipvlan1: entered allmulticast mode [ 580.710122][T26028] veth1_macvtap: entered allmulticast mode [ 580.721844][T26028] veth0_macvtap: entered allmulticast mode [ 580.733430][T26028] macvtap0: entered allmulticast mode [ 580.751756][T26028] macsec0: entered allmulticast mode [ 580.796209][T26028] geneve0: entered allmulticast mode [ 580.812764][T26028] geneve1: entered allmulticast mode [ 580.821590][T26028] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 580.831151][T26028] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 580.842376][T26028] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 580.872243][T26028] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 580.891108][T26028] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 580.926588][T26028] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode [ 580.955533][T26028] mac80211_hwsim hwsim56 wlan2: entered allmulticast mode [ 580.964637][T26028] bond1: entered allmulticast mode [ 580.974211][T26028] bridge1: entered allmulticast mode [ 580.983001][T26028] vxlan0: left promiscuous mode [ 580.997655][T26028] gre1: entered allmulticast mode [ 581.007257][T26028] mac80211_hwsim hwsim1 wlan3: entered allmulticast mode [ 581.017316][T26028] vti0: entered allmulticast mode [ 581.025389][T26028] bond2: entered allmulticast mode [ 581.048554][T12091] net_ratelimit: 16 callbacks suppressed [ 581.048575][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 581.070802][T26026] syzkaller1: entered promiscuous mode [ 581.076702][T26026] syzkaller1: entered allmulticast mode [ 581.143173][T12083] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.180698][T12083] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.208084][T12083] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.243400][T12083] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.393051][T26068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5369'. [ 581.405797][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 581.429727][T12083] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.446865][T12083] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.582042][T26073] 8021q: adding VLAN 0 to HW filter on device bond4 [ 581.612528][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 581.623904][T12083] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.660476][T26091] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5375'. [ 581.670341][T12083] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.697109][T26083] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 581.713872][T26091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.739560][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 581.826492][T26097] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5377'. [ 581.860160][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 581.990773][T15238] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 582.032401][T26112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5381'. [ 582.049907][T26114] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5382'. [ 582.053630][T26112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5381'. [ 582.082211][T26114] ksmbd: Unknown IPC event: 0, ignore. [ 582.118015][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 582.238860][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 582.280443][T26127] tipc: Started in network mode [ 582.285391][T26127] tipc: Node identity ded13ab7cf9f, cluster identity 4711 [ 582.296918][T26127] tipc: Enabled bearer , priority 0 [ 582.309998][T26127] syzkaller0: entered promiscuous mode [ 582.317015][T26131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.326669][T26127] syzkaller0: entered allmulticast mode [ 582.388079][T26127] tipc: Resetting bearer [ 582.463607][T26139] tipc: Resetting bearer [ 582.494041][T26139] tipc: Disabling bearer [ 583.183777][T26166] wg2: left allmulticast mode [ 583.225021][T26170] netlink: 'syz.5.5397': attribute type 1 has an invalid length. [ 583.406837][T26183] netlink: 'syz.5.5400': attribute type 10 has an invalid length. [ 583.430998][T26183] team0: Device ipvlan1 failed to register rx_handler [ 583.536338][T26187] netlink: 'syz.4.5402': attribute type 1 has an invalid length. [ 583.565976][T26187] netlink: 'syz.4.5402': attribute type 11 has an invalid length. [ 583.575885][T26187] __nla_validate_parse: 4 callbacks suppressed [ 583.575904][T26187] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5402'. [ 583.601193][T26189] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5403'. [ 583.660680][T26198] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5406'. [ 584.113169][T26223] pim6reg1: entered promiscuous mode [ 584.122495][T26223] pim6reg1: entered allmulticast mode [ 584.357454][T26234] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5416'. [ 584.414319][T26237] netlink: 'syz.5.5417': attribute type 2 has an invalid length. [ 584.433269][T26237] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5417'. [ 584.457726][T26237] nbd: must specify at least one socket [ 584.600657][T26246] netlink: 'syz.2.5420': attribute type 1 has an invalid length. [ 584.611130][T26246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5420'. [ 584.625761][T26246] IPVS: set_ctl: invalid protocol: 0 172.20.20.35:20002 [ 585.037480][T26280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5430'. [ 585.048751][T26279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5431'. [ 585.049442][T26280] netlink: 'syz.5.5430': attribute type 5 has an invalid length. [ 585.066392][T26280] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5430'. [ 585.206945][T26280] geneve2: entered promiscuous mode [ 585.213909][T26280] geneve2: entered allmulticast mode [ 585.222093][T12091] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 585.232004][T12091] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 585.242403][T12091] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 585.269439][T12091] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 585.319296][T26286] netlink: 'syz.5.5433': attribute type 1 has an invalid length. [ 585.331569][T26286] netlink: 212 bytes leftover after parsing attributes in process `syz.5.5433'. [ 585.342947][T26286] netlink: 'syz.5.5433': attribute type 1 has an invalid length. [ 585.515783][T26300] netlink: 'syz.2.5438': attribute type 29 has an invalid length. [ 585.556840][T26300] tipc: Enabled bearer , priority 0 [ 585.565281][T26300] syzkaller0: entered promiscuous mode [ 585.573234][T26300] syzkaller0: entered allmulticast mode [ 585.602096][T26300] tipc: Resetting bearer [ 585.609583][T26300] netlink: 'syz.2.5438': attribute type 29 has an invalid length. [ 585.635022][T26300] unsupported nla_type 58 [ 585.700098][T26298] tipc: Resetting bearer [ 585.761139][T26298] tipc: Disabling bearer [ 585.797625][T26306] netlink: 'syz.4.5442': attribute type 12 has an invalid length. [ 586.013945][T26323] vlan2: entered allmulticast mode [ 586.049126][T26323] hsr0: entered allmulticast mode [ 586.063871][T26323] hsr_slave_0: entered allmulticast mode [ 586.077290][T26323] hsr_slave_1: entered allmulticast mode [ 586.240629][T26315] net_ratelimit: 30 callbacks suppressed [ 586.240651][T26315] Set syz1 is full, maxelem 6117 reached [ 586.270259][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 586.388871][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 586.471183][T26337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 586.757855][T15238] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 586.879682][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.002413][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.061446][T26373] tipc: Enabling of bearer rejected, failed to enable media [ 587.086513][T26375] syzkaller1: entered promiscuous mode [ 587.093197][T26375] syzkaller1: entered allmulticast mode [ 587.160326][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.297978][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.382648][T26389] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 587.399507][T26389] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 587.417223][T26389] gretap1: entered promiscuous mode [ 587.430399][T26389] gretap1: entered allmulticast mode [ 587.519769][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.552981][T12083] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 587.569041][T26392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 587.646092][T26404] syzkaller1: entered promiscuous mode [ 587.652437][T26404] syzkaller1: entered allmulticast mode [ 587.674817][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.903029][T26414] syzkaller1: entered promiscuous mode [ 587.910802][T26414] syzkaller1: entered allmulticast mode [ 587.933241][T26416] sctp: [Deprecated]: syz.4.5477 (pid 26416) Use of int in maxseg socket option. [ 587.933241][T26416] Use struct sctp_assoc_value instead [ 589.092745][T26457] bridge3: entered promiscuous mode [ 589.100493][T26457] bridge3: entered allmulticast mode [ 589.280235][T26470] __nla_validate_parse: 5 callbacks suppressed [ 589.280255][T26470] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5491'. [ 589.299067][T26471] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5491'. [ 589.312481][T26470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5491'. [ 589.323458][T26471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5491'. [ 589.414974][T26470] tipc: Enabled bearer , priority 0 [ 589.424260][T26470] syzkaller0: entered promiscuous mode [ 589.425902][T26477] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5493'. [ 589.432007][T26470] syzkaller0: entered allmulticast mode [ 589.483376][T26469] tipc: Resetting bearer [ 589.531127][T26469] tipc: Disabling bearer [ 589.566007][T26482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5495'. [ 589.576696][T26482] netlink: 'syz.4.5495': attribute type 1 has an invalid length. [ 589.612827][T26482] 8021q: adding VLAN 0 to HW filter on device bond5 [ 589.683604][T26491] netlink: 'syz.4.5497': attribute type 1 has an invalid length. [ 589.697221][T26491] netlink: 'syz.4.5497': attribute type 1 has an invalid length. [ 589.712158][T26491] netlink: 'syz.4.5497': attribute type 1 has an invalid length. [ 589.724007][T26491] netlink: 'syz.4.5497': attribute type 2 has an invalid length. [ 589.733134][T26491] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5497'. [ 589.860020][T26495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5499'. [ 590.054171][T26508] xt_HMARK: spi-set and port-set can't be combined [ 590.120618][T26512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5505'. [ 590.371222][T26526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5512'. [ 591.330840][T15243] net_ratelimit: 28 callbacks suppressed [ 591.330862][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 591.374680][T26579] 8021q: VLANs not supported on wg2 [ 591.459162][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 591.598823][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 591.642392][T26602] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 591.718506][T12095] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 591.736896][T26606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.825081][T26601] bond1: Unable to set down delay as MII monitoring is disabled [ 591.835946][T26601] bond1 (unregistering): Released all slaves [ 591.929349][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.044622][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.139635][T26628] syzkaller1: entered promiscuous mode [ 592.145222][T26628] syzkaller1: entered allmulticast mode [ 592.155972][T26628] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 592.238878][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.362581][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.412086][T26648] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 592.538232][T12095] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.619923][T26660] team0: Device wireguard0 is of different type [ 592.667260][T26666] netlink: 'syz.4.5555': attribute type 39 has an invalid length. [ 592.685076][T20568] hid (null): unknown global tag 0xe [ 592.737935][T20568] hid (null): nested delimiters [ 592.748361][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.968456][T26680] ip6gre0: Master is either lo or non-ether device [ 593.116661][T26688] netlink: 'syz.5.5564': attribute type 30 has an invalid length. [ 593.126096][T26688] netlink: 'syz.5.5564': attribute type 30 has an invalid length. [ 593.662520][T26718] netlink: 'syz.4.5572': attribute type 1 has an invalid length. [ 593.780978][T26723] bond6: (slave bridge2): making interface the new active one [ 593.790464][T26723] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 594.024771][T20568] hid-generic 0005:0D45:1012.0003: unknown global tag 0xe [ 594.032771][T20568] hid-generic 0005:0D45:1012.0003: item 0 2 1 14 parsing failed [ 594.040875][T20568] hid-generic 0005:0D45:1012.0003: probe with driver hid-generic failed with error -22 [ 594.291347][T26738] pimreg: entered allmulticast mode [ 595.056399][T26756] __nla_validate_parse: 38 callbacks suppressed [ 595.056412][T26756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5587'. [ 595.150637][T26763] netlink: 'syz.1.5589': attribute type 1 has an invalid length. [ 595.212104][T26763] bond3: (slave bridge2): making interface the new active one [ 595.220590][T26763] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 595.425516][T26777] veth1_macvtap: left promiscuous mode [ 595.436575][T26777] macsec0: entered promiscuous mode [ 595.493278][T26780] bridge0: port 3(ipvlan2) entered blocking state [ 595.500954][T26780] bridge0: port 3(ipvlan2) entered disabled state [ 595.507685][T26780] ipvlan2: entered allmulticast mode [ 595.518178][T26780] ipvlan2: left allmulticast mode [ 595.910335][T26801] bond4: entered promiscuous mode [ 595.947509][T26804] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5603'. [ 595.964268][T15238] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 596.178740][T26816] netlink: 'syz.1.5607': attribute type 10 has an invalid length. [ 596.186828][T26816] bridge_slave_1: left allmulticast mode [ 596.194507][T26813] netlink: 'syz.1.5607': attribute type 10 has an invalid length. [ 596.195040][T26816] bridge_slave_1: left promiscuous mode [ 596.209519][T26816] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.221198][T26816] bridge_slave_1: entered allmulticast mode [ 596.227563][T26816] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 596.283559][T26818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 596.291406][T26818] IPv6: NLM_F_CREATE should be set when creating new route [ 596.299807][T26818] IPv6: NLM_F_CREATE should be set when creating new route [ 596.307584][T26818] IPv6: NLM_F_CREATE should be set when creating new route [ 596.315280][T26819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 596.358589][T12083] net_ratelimit: 30 callbacks suppressed [ 596.358612][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 596.478713][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 596.525188][T26834] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5612'. [ 596.591437][T12095] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 596.709009][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 596.804781][T26846] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5617'. [ 596.817166][T26846] netlink: 'syz.5.5617': attribute type 7 has an invalid length. [ 596.831303][T26846] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5617'. [ 596.848277][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 596.957920][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.073445][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.094402][T26860] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5622'. [ 597.105326][T26860] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5622'. [ 597.116270][T26860] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5622'. [ 597.126129][T26860] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5622'. [ 597.135871][T26860] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5622'. [ 597.140302][ T5855] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 597.158443][ T5855] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 597.168223][ T5855] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 597.178397][ T5855] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 597.187541][ T5855] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 597.199105][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.238912][T26862] vxcan1 speed is unknown, defaulting to 1000 [ 597.331307][T12095] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.447932][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.455355][T26873] netlink: 'syz.1.5625': attribute type 2 has an invalid length. [ 597.751185][T26862] chnl_net:caif_netlink_parms(): no params data found [ 597.833369][T26862] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.840876][T26862] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.848690][T26862] bridge_slave_0: entered allmulticast mode [ 597.856683][T26862] bridge_slave_0: entered promiscuous mode [ 597.866131][T26862] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.874999][T26862] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.882395][T26862] bridge_slave_1: entered allmulticast mode [ 597.890923][T26862] bridge_slave_1: entered promiscuous mode [ 597.949424][T26862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.975173][T26862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.038813][T26862] team0: Port device team_slave_0 added [ 598.064644][T26862] team0: Port device team_slave_1 added [ 598.110188][T26862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.120096][T26862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.147193][T26862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.161942][T26862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.169212][T26862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.197714][T26862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.275977][T26862] hsr_slave_0: entered promiscuous mode [ 598.283276][T26862] hsr_slave_1: entered promiscuous mode [ 598.290180][T26862] debugfs: 'hsr0' already exists in 'hsr' [ 598.295934][T26862] Cannot create hsr debugfs directory [ 598.511180][ T5855] Bluetooth: hci7: command 0x0405 tx timeout [ 598.515821][T26862] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.594512][T26862] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.610800][T26903] veth0: entered promiscuous mode [ 598.617038][T26902] veth0: left promiscuous mode [ 598.680705][T26862] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.766583][T26862] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.958691][T26862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 598.974478][T26862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 598.994820][T26862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 599.008596][T26862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 599.108715][T26862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.133712][T26862] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.156206][T12083] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.163421][T12083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.189875][T12083] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.197080][T12083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.228004][ T5855] Bluetooth: hci9: command tx timeout [ 599.474801][T26862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.537552][T26862] veth0_vlan: entered promiscuous mode [ 599.557128][T26862] veth1_vlan: entered promiscuous mode [ 599.597790][T26862] veth0_macvtap: entered promiscuous mode [ 599.612188][T26862] veth1_macvtap: entered promiscuous mode [ 599.644297][T26862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.672581][T26862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.694048][T12087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.705021][T12087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.721462][T12087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.732576][T12087] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.833307][T12087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.858048][T12087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.896813][T12083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.906782][T12083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.342441][T26975] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 600.373061][T26975] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 600.426384][T26978] __nla_validate_parse: 55 callbacks suppressed [ 600.426396][T26978] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5651'. [ 600.499777][T26980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5652'. [ 600.554675][T26981] tipc: Started in network mode [ 600.559966][T26981] tipc: Node identity 4a67b3f31e56, cluster identity 4711 [ 600.567622][T26981] tipc: Enabled bearer , priority 0 [ 600.577385][T26982] syzkaller0: entered promiscuous mode [ 600.585624][T26982] syzkaller0: entered allmulticast mode [ 600.617456][T26982] tipc: Resetting bearer [ 600.647462][T26982] tipc: Disabling bearer [ 600.787390][T26997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5655'. [ 600.842224][T26994] netlink: 'syz.5.5655': attribute type 1 has an invalid length. [ 601.308271][ T5855] Bluetooth: hci9: command tx timeout [ 601.396671][T27029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5667'. [ 601.439031][T12087] net_ratelimit: 25 callbacks suppressed [ 601.439053][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 601.558128][T12095] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 601.668283][T12095] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 601.690228][T27050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5673'. [ 601.743595][T27052] netlink: 'syz.5.5674': attribute type 1 has an invalid length. [ 601.778278][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 601.899701][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.019691][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.069182][T27070] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5679'. [ 602.096672][T27072] tipc: Started in network mode [ 602.102042][T27072] tipc: Node identity a65cc9decd8, cluster identity 4711 [ 602.115911][T27072] tipc: Enabled bearer , priority 0 [ 602.127143][T27072] syzkaller0: entered promiscuous mode [ 602.134640][T27072] syzkaller0: entered allmulticast mode [ 602.151914][T27072] tipc: Resetting bearer [ 602.160353][T27072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5680'. [ 602.177270][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.183157][T27077] netlink: 'syz.5.5682': attribute type 1 has an invalid length. [ 602.193719][T27077] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5682'. [ 602.214239][T27071] tipc: Resetting bearer [ 602.235920][T27071] tipc: Disabling bearer [ 602.308631][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.439466][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.548747][T12095] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.949914][T27089] macvtap1: entered promiscuous mode [ 602.955357][T27089] vlan0: entered promiscuous mode [ 602.961711][T27089] macvtap1: entered allmulticast mode [ 602.967151][T27089] vlan0: entered allmulticast mode [ 602.972401][T27089] veth0_vlan: entered allmulticast mode [ 602.986309][T27089] macvtap2: entered promiscuous mode [ 602.993136][T27089] macvtap2: entered allmulticast mode [ 603.155101][T27095] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5688'. [ 603.196328][T27097] veth0_to_bridge: entered promiscuous mode [ 603.262997][T27096] veth0_to_bridge: left promiscuous mode [ 603.388293][ T5855] Bluetooth: hci9: command tx timeout [ 604.251394][T27112] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 604.294008][T27114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5694'. [ 604.304640][T27114] netlink: 'syz.3.5694': attribute type 23 has an invalid length. [ 604.522629][T27124] netlink: 'syz.3.5699': attribute type 1 has an invalid length. [ 604.602713][T27126] syzkaller0: entered promiscuous mode [ 604.608986][T27126] syzkaller0: entered allmulticast mode [ 605.482024][ T5855] Bluetooth: hci9: command tx timeout [ 606.528398][T12087] net_ratelimit: 18 callbacks suppressed [ 606.528419][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 606.659083][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 606.707137][T27135] IPv6: NLM_F_CREATE should be specified when creating new route [ 606.771602][T12081] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 606.889897][T12081] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 606.961022][T27146] __nla_validate_parse: 4 callbacks suppressed [ 606.961041][T27146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5706'. [ 607.009722][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.123115][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.248199][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.368522][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.457348][T27172] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 607.472949][T27172] bond1 (unregistering): Released all slaves [ 607.498142][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.597068][T27175] netlink: 'syz.3.5714': attribute type 27 has an invalid length. [ 607.610243][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.650666][T27177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5715'. [ 607.659859][T27177] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5715'. [ 607.680880][T27177] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5715'. [ 607.693663][T27177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5715'. [ 608.172496][ T5852] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 608.180831][T27194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5722'. [ 608.190162][T27194] Unsupported xt match [ 608.190179][T27194] unable to load match [ 608.199426][ T5852] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 608.211255][ T5852] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 608.222623][ T5852] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 608.231225][ T5852] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 608.264426][T27195] vxcan1 speed is unknown, defaulting to 1000 [ 608.332846][T27198] bond0: Error: Cannot enslave bond to itself. [ 608.497322][T27202] netlink: 'syz.3.5724': attribute type 12 has an invalid length. [ 608.793430][T27213] tipc: Enabling of bearer rejected, failed to enable media [ 608.974937][T27195] chnl_net:caif_netlink_parms(): no params data found [ 609.143074][T27195] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.151317][T27195] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.158738][T27195] bridge_slave_0: entered allmulticast mode [ 609.166889][T27195] bridge_slave_0: entered promiscuous mode [ 609.178864][T27195] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.186374][T27195] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.194026][T27195] bridge_slave_1: entered allmulticast mode [ 609.202845][T27195] bridge_slave_1: entered promiscuous mode [ 609.285477][T27195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.324205][T27195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.401629][T27231] netlink: 'syz.3.5730': attribute type 27 has an invalid length. [ 609.401963][T27195] team0: Port device team_slave_0 added [ 609.411643][T27231] netlink: 'syz.3.5730': attribute type 4 has an invalid length. [ 609.426537][T27231] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5730'. [ 609.449809][T27195] team0: Port device team_slave_1 added [ 609.474946][ T5855] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 609.488754][ T5855] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 609.497465][ T5855] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 609.509092][ T5855] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 609.510745][T27195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.517007][ T5855] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 609.523304][T27195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.523337][T27195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.525897][T27195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.592196][T27195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.619105][T27195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.693379][T27195] hsr_slave_0: entered promiscuous mode [ 609.700304][T27195] hsr_slave_1: entered promiscuous mode [ 609.706527][T27195] debugfs: 'hsr0' already exists in 'hsr' [ 609.714226][T27195] Cannot create hsr debugfs directory [ 609.739561][T27232] vxcan1 speed is unknown, defaulting to 1000 [ 609.915347][T27195] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.978303][T27195] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.041064][T27195] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.097360][T27195] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.268576][ T5852] Bluetooth: hci10: command tx timeout [ 610.301915][T27195] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 610.327883][T27195] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 610.344548][T27195] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 610.382477][T27195] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 610.423446][T27232] chnl_net:caif_netlink_parms(): no params data found [ 610.475694][T27244] netlink: 'syz.5.5731': attribute type 3 has an invalid length. [ 610.602329][T27232] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.612258][T27232] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.620468][T27232] bridge_slave_0: entered allmulticast mode [ 610.629676][T27232] bridge_slave_0: entered promiscuous mode [ 610.646074][T27232] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.654529][T27232] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.662532][T27232] bridge_slave_1: entered allmulticast mode [ 610.671319][T27232] bridge_slave_1: entered promiscuous mode [ 610.753116][T27232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.781540][T27195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.793024][T27232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.859907][T27232] team0: Port device team_slave_0 added [ 610.870278][T27232] team0: Port device team_slave_1 added [ 610.892826][T27195] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.952547][T27232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.961213][T27232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.992086][T27232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.021794][T27232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.034180][T27232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.061410][T27232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.084631][T12083] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.091930][T12083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.112152][T12083] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.119455][T12083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.189807][T27232] hsr_slave_0: entered promiscuous mode [ 611.196933][T27232] hsr_slave_1: entered promiscuous mode [ 611.203857][T27232] debugfs: 'hsr0' already exists in 'hsr' [ 611.210151][T27232] Cannot create hsr debugfs directory [ 611.291721][T27270] netlink: 'syz.5.5740': attribute type 10 has an invalid length. [ 611.503274][T27232] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.568158][T12087] net_ratelimit: 21 callbacks suppressed [ 611.568177][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 611.600615][T27232] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.630910][ T5852] Bluetooth: hci11: command tx timeout [ 611.669359][T27282] tipc: Enabled bearer , priority 0 [ 611.693979][T27282] syzkaller0: entered promiscuous mode [ 611.702151][T27282] syzkaller0: entered allmulticast mode [ 611.736448][T27232] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.757344][T27280] tipc: Resetting bearer [ 611.768733][T27278] tipc: Resetting bearer [ 611.787299][T27278] tipc: Disabling bearer [ 611.811991][T27232] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.845723][T27195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.854549][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 611.981216][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 612.107720][T27294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5744'. [ 612.134363][T27232] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 612.166003][T27232] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 612.182146][T27232] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 612.212382][T27232] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 612.349402][ T5852] Bluetooth: hci10: command tx timeout [ 612.369260][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 612.381797][T27195] veth0_vlan: entered promiscuous mode [ 612.419756][T27195] veth1_vlan: entered promiscuous mode [ 612.485496][T27232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.520362][T27195] veth0_macvtap: entered promiscuous mode [ 612.544128][T27195] veth1_macvtap: entered promiscuous mode [ 612.573278][T27232] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.623147][T15238] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.630390][T15238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.700069][T27195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.748267][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 612.764766][T15238] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.771992][T15238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.802697][T27195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.826857][T15238] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.876466][T15238] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.892136][T15238] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.915111][T15238] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.030185][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 613.172099][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 613.188605][T12081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.198000][T12081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.284587][ T5855] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 613.300011][ T5855] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 613.310041][ T5855] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 613.321991][T15238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.333078][ T5855] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 613.334672][T27336] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5753'. [ 613.352695][T15238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.353454][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 613.401755][ T5855] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 613.458334][T27332] vxcan1 speed is unknown, defaulting to 1000 [ 613.500255][T15238] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 613.630382][T15238] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 613.691885][T27342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5754'. [ 613.693343][T27232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.715313][T27343] syzkaller1: entered promiscuous mode [ 613.719281][ T5855] Bluetooth: hci11: command tx timeout [ 613.724421][T27343] syzkaller1: entered allmulticast mode [ 613.742849][T27342] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5754'. [ 613.753885][T27343] syzkaller1: left promiscuous mode [ 613.759339][T27343] syzkaller1: left allmulticast mode [ 614.275273][T27362] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5759'. [ 614.408584][T27369] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5761'. [ 614.431484][ T5855] Bluetooth: hci10: command tx timeout [ 614.473503][T27232] veth0_vlan: entered promiscuous mode [ 614.555869][T27232] veth1_vlan: entered promiscuous mode [ 614.721758][T27232] veth0_macvtap: entered promiscuous mode [ 614.733268][T27232] veth1_macvtap: entered promiscuous mode [ 614.756476][T27232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.791301][T27332] chnl_net:caif_netlink_parms(): no params data found [ 614.811146][T27232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.841513][T27381] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5763'. [ 614.859828][T12087] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.903526][T12087] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.920325][T12087] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.943579][T12087] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.032387][T27332] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.040071][T27332] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.047519][T27332] bridge_slave_0: entered allmulticast mode [ 615.056590][T27332] bridge_slave_0: entered promiscuous mode [ 615.076994][T27332] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.086623][T27332] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.094828][T27332] bridge_slave_1: entered allmulticast mode [ 615.105124][T27332] bridge_slave_1: entered promiscuous mode [ 615.147612][T27332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.166479][T27332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.251964][T27332] team0: Port device team_slave_0 added [ 615.282388][T27332] team0: Port device team_slave_1 added [ 615.366542][T27332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.381330][T27332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.412754][T27332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.451916][T27332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.463181][T27332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.499559][ T5855] Bluetooth: hci12: command tx timeout [ 615.503831][T27332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.563796][T15237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.588380][T15237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.673712][T27332] hsr_slave_0: entered promiscuous mode [ 615.681355][T27332] hsr_slave_1: entered promiscuous mode [ 615.688307][T27332] debugfs: 'hsr0' already exists in 'hsr' [ 615.695389][T27332] Cannot create hsr debugfs directory [ 615.775509][T15237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.789660][ T5855] Bluetooth: hci11: command tx timeout [ 615.802264][T15237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.982829][T27420] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5774'. [ 616.104235][T27428] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5774'. [ 616.204185][T27332] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.316113][T27332] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.508314][ T5855] Bluetooth: hci10: command tx timeout [ 616.529813][T27332] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.533569][T27438] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5779'. [ 616.599346][T12091] net_ratelimit: 12 callbacks suppressed [ 616.599366][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 616.687409][T27332] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.757370][T15238] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 616.871532][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 617.022849][T27457] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.037414][T27457] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.128044][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 617.149346][T27332] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 617.182686][T27332] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 617.214138][T27332] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 617.231890][T27474] netlink: 'syz.8.5790': attribute type 2 has an invalid length. [ 617.234216][T27332] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 617.247232][T27474] __nla_validate_parse: 1 callbacks suppressed [ 617.247249][T27474] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5790'. [ 617.429006][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 617.443509][T27332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.484112][T27332] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.519716][T12081] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.526924][T12081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.558132][ T5855] Bluetooth: hci12: command tx timeout [ 617.558146][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 617.561624][T12081] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.578493][T12081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.639943][T27501] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 617.688953][T12081] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 617.711766][T27503] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5798'. [ 617.808305][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 617.868371][ T5855] Bluetooth: hci11: command tx timeout [ 617.925725][T27332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.949070][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 618.068426][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 618.220220][T27517] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5801'. [ 618.387329][T27332] veth0_vlan: entered promiscuous mode [ 618.426904][T27332] veth1_vlan: entered promiscuous mode [ 618.500163][T27528] syzkaller1: entered promiscuous mode [ 618.514986][T27528] syzkaller1: entered allmulticast mode [ 618.597000][T27332] veth0_macvtap: entered promiscuous mode [ 618.635813][T27332] veth1_macvtap: entered promiscuous mode [ 618.755395][T27332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.781843][T27332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.813060][T12083] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.824594][T12083] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.844460][T12083] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.855722][T15243] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.117334][T15243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.151321][T15243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.221895][T12083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.238928][T12083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.303234][T27572] netlink: 'syz.5.5812': attribute type 1 has an invalid length. [ 619.341649][T27572] netlink: 'syz.5.5812': attribute type 1 has an invalid length. [ 619.555125][T27572] "syz.5.5812" (27572) uses obsolete ecb(arc4) skcipher [ 619.638027][ T5855] Bluetooth: hci12: command tx timeout [ 619.793554][T27581] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5812'. [ 619.977285][T27611] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5819'. [ 619.996696][T27615] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5820'. [ 620.024772][T27616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5821'. [ 620.313020][T27631] netlink: 'syz.7.5827': attribute type 7 has an invalid length. [ 620.328666][T27631] netlink: 'syz.7.5827': attribute type 8 has an invalid length. [ 620.415192][T27630] netlink: 'syz.9.5826': attribute type 10 has an invalid length. [ 620.454121][T27630] batman_adv: batadv0: Adding interface: team0 [ 620.483675][T27630] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.526655][T27630] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 620.672840][T27656] syzkaller0: entered promiscuous mode [ 620.687529][T27656] syzkaller0: entered allmulticast mode [ 620.779919][T27666] netlink: 'syz.9.5834': attribute type 1 has an invalid length. [ 620.788052][T27666] netlink: 'syz.9.5834': attribute type 1 has an invalid length. [ 621.068480][T27685] netlink: 'syz.9.5840': attribute type 1 has an invalid length. [ 621.163731][T27692] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5843'. [ 621.472251][T27708] netlink: 'syz.9.5847': attribute type 10 has an invalid length. [ 621.546937][T27710] netlink: 660 bytes leftover after parsing attributes in process `syz.7.5849'. [ 621.573132][T27710] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5849'. [ 621.608077][T12083] net_ratelimit: 26 callbacks suppressed [ 621.608098][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 621.709769][ T5855] Bluetooth: hci12: command tx timeout [ 621.748439][T12095] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 621.844717][T27726] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 621.853752][T27726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.878463][T12095] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 621.932940][T27736] batadv0: entered promiscuous mode [ 621.964859][T27736] bond0: entered promiscuous mode [ 621.991003][T27736] bond_slave_0: entered promiscuous mode [ 622.006266][T27736] bond_slave_1: entered promiscuous mode [ 622.050179][T27736] hsr1: entered allmulticast mode [ 622.055455][T27736] batadv0: entered allmulticast mode [ 622.061069][T27736] bond0: entered allmulticast mode [ 622.066448][T27736] bond_slave_0: entered allmulticast mode [ 622.087582][T27736] bond_slave_1: entered allmulticast mode [ 622.101448][T27736] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 622.128312][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 622.260003][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 622.378202][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 622.498621][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 622.570964][T27769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5867'. [ 622.660049][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 622.797236][T27780] tipc: Enabled bearer , priority 0 [ 622.814833][T27783] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5872'. [ 623.030297][T27793] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5873'. [ 623.137308][T27800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.145220][T27800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.179831][T27807] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5879'. [ 623.192917][T27800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.211147][T27800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.249572][T27814] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5880'. [ 623.260606][T27809] tipc: Enabling of bearer rejected, failed to enable media [ 623.282098][T27813] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5880'. [ 623.294296][T27813] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5880'. [ 623.518513][T27828] netlink: 'syz.8.5885': attribute type 4 has an invalid length. [ 623.579818][T27832] Bluetooth: MGMT ver 1.23 [ 623.789762][ T5855] Bluetooth: hci12: command tx timeout [ 623.863747][T27850] netlink: 284 bytes leftover after parsing attributes in process `syz.8.5891'. [ 623.907901][T20582] tipc: Node number set to 1412543475 [ 624.249834][T27878] netlink: 'syz.5.5900': attribute type 1 has an invalid length. [ 624.258554][T27878] netlink: 172 bytes leftover after parsing attributes in process `syz.5.5900'. [ 624.361444][T27887] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5903'. [ 625.001499][T27915] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 625.002483][ T5854] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 625.027647][ T5854] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 625.035322][ T5854] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 625.046612][ T5854] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 625.061993][ T5854] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 625.123309][T27917] vxcan1 speed is unknown, defaulting to 1000 [ 626.396838][T27979] netlink: 'syz.5.5934': attribute type 1 has an invalid length. [ 626.448930][T27917] chnl_net:caif_netlink_parms(): no params data found [ 626.511331][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 626.732161][T27917] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.748298][T27917] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.755828][T27917] bridge_slave_0: entered allmulticast mode [ 626.771017][T27917] bridge_slave_0: entered promiscuous mode [ 626.789355][T27917] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.796649][T27917] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.805626][T27917] bridge_slave_1: entered allmulticast mode [ 626.814159][T27917] bridge_slave_1: entered promiscuous mode [ 626.926351][T27917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.957977][T12095] net_ratelimit: 30 callbacks suppressed [ 626.958000][T12095] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 626.982460][T27917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.992418][T12095] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 627.124318][T27917] team0: Port device team_slave_0 added [ 627.148017][ T5855] Bluetooth: hci13: command tx timeout [ 627.149378][T28028] Bluetooth: MGMT ver 1.23 [ 627.163775][T27917] team0: Port device team_slave_1 added [ 627.218010][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 627.324136][T27917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.341561][T27917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.409265][T27917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.422855][T28046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.441773][T27917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.452779][T28046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.459523][T27917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.528005][T27917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.546067][T28051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.578542][T12095] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 627.591302][T28042] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 627.736176][T27917] hsr_slave_0: entered promiscuous mode [ 627.743465][T27917] hsr_slave_1: entered promiscuous mode [ 627.777588][T27917] debugfs: 'hsr0' already exists in 'hsr' [ 627.783876][T27917] Cannot create hsr debugfs directory [ 627.968348][T12095] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 628.018390][T28065] netlink: 'syz.5.5956': attribute type 10 has an invalid length. [ 628.055310][T28065] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 628.292815][T27917] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.309265][T27917] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.348670][T28071] __nla_validate_parse: 10 callbacks suppressed [ 628.348692][T28071] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5958'. [ 628.370752][T28071] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5958'. [ 628.541814][T28082] netlink: 'syz.8.5960': attribute type 1 has an invalid length. [ 628.563496][T27917] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.566745][T28082] netlink: 244 bytes leftover after parsing attributes in process `syz.8.5960'. [ 628.576071][T27917] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.609318][T12095] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 628.656940][T28086] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5960'. [ 628.696444][T28086] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5960'. [ 628.711216][T27917] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.722817][T27917] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.747624][T28091] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5963'. [ 628.757977][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 628.797174][T28090] vxcan1 speed is unknown, defaulting to 1000 [ 628.916504][T27917] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.929225][T27917] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.968761][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 629.078700][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 629.192023][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 629.228447][ T5855] Bluetooth: hci13: command tx timeout [ 629.273934][T27917] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 629.296381][T27917] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 629.315368][T27917] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 629.352423][T27917] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 629.530718][T28131] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5970'. [ 629.691930][T28136] bond1: option miimon: invalid value (18446744073709551585) [ 629.701084][T28136] bond1: option miimon: allowed values 0 - 2147483647 [ 629.712829][T28136] bond1 (unregistering): Released all slaves [ 629.741267][T28140] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5973'. [ 629.773384][T28140] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5973'. [ 629.862643][T27917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.931105][T27917] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.967695][T12095] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.974947][T12095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.984808][T28147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5975'. [ 630.077697][T15243] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.085161][T15243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.895053][T27917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.308054][ T5852] Bluetooth: hci13: command tx timeout [ 631.638501][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 631.760642][T27917] veth0_vlan: entered promiscuous mode [ 631.781795][T27917] veth1_vlan: entered promiscuous mode [ 631.826360][T27917] veth0_macvtap: entered promiscuous mode [ 631.882637][T27917] veth1_macvtap: entered promiscuous mode [ 631.900470][T28233] netlink: 'syz.5.5999': attribute type 29 has an invalid length. [ 631.945975][T27917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.974723][T28235] C: renamed from lo (while UP) [ 631.996303][T27917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.030933][T12087] net_ratelimit: 19 callbacks suppressed [ 632.030953][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 632.078480][T12087] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.094670][T12087] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.137331][T12087] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.152158][T12087] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.190104][T12083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 632.496117][T28259] netlink: 'syz.8.6008': attribute type 12 has an invalid length. [ 632.558168][T15243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.574626][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 632.602791][T15243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.711894][T12083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.721020][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 632.750427][T12083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.868553][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 632.989388][T15238] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 633.120362][T12095] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 633.194330][T28281] IPv6: sit1: Disabled Multicast RS [ 633.209055][T28281] sit1: entered allmulticast mode [ 633.311319][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 633.364513][T28275] __nla_validate_parse: 49 callbacks suppressed [ 633.364534][T28275] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5904'. [ 633.390914][ T5855] Bluetooth: hci13: command tx timeout [ 633.431772][T28275] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5904'. [ 633.445764][T28275] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5904'. [ 633.459187][T12091] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 633.504059][T28296] netlink: 'syz.7.6015': attribute type 3 has an invalid length. [ 633.632012][T28305] bridge0: port 1(batadv1) entered blocking state [ 633.640835][T28305] bridge0: port 1(batadv1) entered disabled state [ 633.650496][T28305] batadv1: entered allmulticast mode [ 633.656826][T28306] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6016'. [ 633.672091][T28305] batadv1: entered promiscuous mode [ 633.878678][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 633.901608][T28317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6019'. [ 633.931974][T28317] batadv2: entered allmulticast mode [ 633.947250][T28317] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 634.049344][T28326] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6021'. [ 634.122782][T28322] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6020'. [ 634.132116][T15243] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 634.132157][T15243] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 634.252170][T28330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.306779][T20582] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 634.330058][T20582] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 634.330700][T28340] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6024'. [ 634.352261][T28330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.369753][T28341] sctp: [Deprecated]: syz.8.6026 (pid 28341) Use of struct sctp_assoc_value in delayed_ack socket option. [ 634.369753][T28341] Use struct sctp_sack_info instead [ 634.391970][T15243] wlan1: authenticated [ 634.413088][T15243] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 634.449580][T12087] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 634.449935][T28330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.459742][T12087] wlan1: associated [ 634.500355][T12083] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.542530][T12083] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.564209][T12083] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.609098][T12083] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.810793][T28361] IPVS: length: 239 != 24 [ 634.881889][T28369] netlink: 576 bytes leftover after parsing attributes in process `syz.7.6033'. [ 634.957302][T28375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6036'. [ 635.296882][T28392] pim6reg1: entered promiscuous mode [ 635.337971][T28392] pim6reg1: entered allmulticast mode [ 635.378180][T28398] netlink: 'syz.8.6042': attribute type 10 has an invalid length. [ 635.835559][T28416] hsr_slave_0 (unregistering): left promiscuous mode [ 636.348443][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 636.749878][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 636.862869][T28487] netlink: 'syz.7.6072': attribute type 1 has an invalid length. [ 636.874362][T28487] netlink: 'syz.7.6072': attribute type 1 has an invalid length. [ 636.898409][T28487] netlink: 'syz.7.6072': attribute type 1 has an invalid length. [ 636.906263][T28487] netlink: 'syz.7.6072': attribute type 2 has an invalid length. [ 637.044080][T28491] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 637.087195][T28491] bond1: (slave vcan1): Error -95 calling set_mac_address [ 637.151897][T28496] vlan2: entered promiscuous mode [ 637.171437][T28496] vlan2: entered allmulticast mode [ 637.189501][T28496] hsr_slave_1: entered allmulticast mode [ 637.199878][T12087] net_ratelimit: 18 callbacks suppressed [ 637.199900][T12087] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 637.309775][T28509] bridge0: port 3(veth0_to_bridge) entered blocking state [ 637.326320][T28509] bridge0: port 3(veth0_to_bridge) entered disabled state [ 637.354491][T28509] veth0_to_bridge: entered allmulticast mode [ 637.365528][T28509] veth0_to_bridge: entered promiscuous mode [ 637.391332][T28509] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.410772][T28509] bridge0: port 3(veth0_to_bridge) entered blocking state [ 637.420066][T28509] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 637.461241][T15238] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 637.589854][T15238] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 637.752922][T28535] netlink: 'syz.5.6083': attribute type 11 has an invalid length. [ 637.761414][T15243] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 637.869570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 637.882345][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 637.895017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 637.907517][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 637.920013][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 637.932511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 638.799384][T28565] netlink: 'syz.9.6093': attribute type 33 has an invalid length. [ 639.106756][T28571] __nla_validate_parse: 19 callbacks suppressed [ 639.106778][T28571] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6096'. [ 639.190856][T28571] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6096'. [ 639.232902][T28577] netlink: 'syz.5.6098': attribute type 1 has an invalid length. [ 639.273138][T28577] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6098'. [ 639.361133][T28581] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6099'. [ 639.588328][T28588] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6102'. [ 639.895841][T28594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6104'. [ 640.237543][T28609] netlink: 'syz.8.6107': attribute type 1 has an invalid length. [ 640.394544][T28599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.424021][T28599] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.670824][T28604] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.719167][T28604] batman_adv: batadv0: Interface activated: team0 [ 640.956847][T28609] bond1: entered promiscuous mode [ 640.986409][T28609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 641.132798][T28615] bond1: (slave bridge1): making interface the new active one [ 641.160114][T28615] bridge1: entered promiscuous mode [ 641.174101][T28615] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 641.269250][T28619] team0: No ports can be present during mode change [ 641.620224][T28637] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6113'. [ 641.818207][T28643] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 642.207849][ C1] net_ratelimit: 10581 callbacks suppressed [ 642.207869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.226226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.238760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.252218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 642.264672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.277055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.289881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.295025][T28653] sock: sock_timestamping_bind_phc: sock not bind to device [ 642.303461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 642.312518][T15237] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 642.322705][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.430598][T28660] syzkaller1: entered promiscuous mode [ 642.477419][T28660] syzkaller1: entered allmulticast mode [ 642.703490][T28671] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 642.777199][T28671] bond1: entered promiscuous mode [ 642.796035][T28677] netlink: 232 bytes leftover after parsing attributes in process `syz.5.6122'. [ 642.823657][T28671] bond1: entered allmulticast mode [ 642.844387][T28671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 643.362245][T28680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6122'. [ 643.407481][T28688] netlink: 'syz.6.6126': attribute type 3 has an invalid length. [ 643.463260][T28688] netlink: 'syz.6.6126': attribute type 3 has an invalid length. [ 643.569541][T28688] netlink: 'syz.6.6126': attribute type 3 has an invalid length. [ 643.646244][T28688] netlink: 'syz.6.6126': attribute type 3 has an invalid length. [ 643.692346][T28688] netlink: 'syz.6.6126': attribute type 3 has an invalid length. [ 643.734321][T28688] netlink: 'syz.6.6126': attribute type 3 has an invalid length. [ 643.763327][T28698] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6128'. [ 643.782761][T28695] sctp: [Deprecated]: syz.8.6127 (pid 28695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 643.782761][T28695] Use struct sctp_sack_info instead [ 643.802614][T28688] netlink: 'syz.6.6126': attribute type 3 has an invalid length. [ 643.824041][T28688] netlink: 'syz.6.6126': attribute type 3 has an invalid length. [ 643.833232][T28688] netlink: 'syz.6.6126': attribute type 3 has an invalid length. [ 643.857859][T28688] netlink: 'syz.6.6126': attribute type 3 has an invalid length. [ 644.259272][T28705] netlink: 'syz.8.6131': attribute type 11 has an invalid length. [ 644.350590][T28705] netlink: 'syz.8.6131': attribute type 11 has an invalid length. [ 644.365369][T28713] __nla_validate_parse: 1 callbacks suppressed [ 644.365390][T28713] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6134'. [ 644.414298][T28705] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6131'. [ 644.921567][T28725] tipc: Started in network mode [ 644.979538][T28725] tipc: Node identity 7278ff0e5de9, cluster identity 4711 [ 645.003951][T28725] tipc: Enabled bearer , priority 0 [ 645.025608][T28734] delete_channel: no stack [ 645.068621][T28733] syzkaller0: entered promiscuous mode [ 645.087521][T28733] syzkaller0: entered allmulticast mode [ 645.147596][T28735] tipc: Resetting bearer [ 645.262327][T28723] tipc: Resetting bearer [ 645.397518][T28723] tipc: Disabling bearer [ 645.756811][T28745] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6144'. [ 645.846304][T28745] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6144'. [ 645.954913][T28759] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6148'. [ 646.589768][T28770] veth1_macvtap: left promiscuous mode [ 646.628204][T28770] macsec0: entered promiscuous mode [ 646.679975][T28770] macsec0: entered allmulticast mode [ 646.730073][T28773] veth1_macvtap: entered promiscuous mode [ 646.764951][T28773] veth1_macvtap: entered allmulticast mode [ 646.797201][T28773] macsec0: left promiscuous mode [ 646.833417][T28773] macsec0: left allmulticast mode [ 646.866452][T28773] veth1_macvtap: left allmulticast mode [ 647.001244][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 647.218692][ C1] net_ratelimit: 8252 callbacks suppressed [ 647.218713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 647.237095][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.249740][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.262341][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.275985][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 647.288665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.301165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.313776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.327586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 647.340104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.414568][T28783] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 647.511266][T28784] 8021q: adding VLAN 0 to HW filter on device bond1 [ 647.542958][T28786] team0: Device vti0 is of different type [ 648.139970][T28815] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6161'. [ 649.064165][T28833] syz_tun: entered allmulticast mode [ 649.102791][T28833] syz_tun: left allmulticast mode [ 649.567122][T28858] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6172'. [ 649.769160][T28870] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6172'. [ 649.996268][T28872] validate_nla: 47 callbacks suppressed [ 649.996290][T28872] netlink: 'syz.6.6175': attribute type 8 has an invalid length. [ 650.573833][T28892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6179'. [ 650.746740][T28899] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6180'. [ 650.963402][T28870] hsr_slave_0 (unregistering): left promiscuous mode [ 651.044281][T28892] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 651.071944][T28892] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6179'. [ 651.466735][T28899] hsr_slave_0 (unregistering): left promiscuous mode [ 651.861597][T28909] wg1: entered promiscuous mode [ 651.902417][T28909] wg1: entered allmulticast mode [ 652.175646][T28918] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6185'. [ 652.227902][ C1] net_ratelimit: 7750 callbacks suppressed [ 652.227922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.246197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.259674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 652.272101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.284488][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.296975][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.310346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 652.322788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.335272][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.347785][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.254307][T28947] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6197'. [ 653.292264][T28950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6196'. [ 653.316530][T28950] netlink: 'syz.5.6196': attribute type 3 has an invalid length. [ 653.728370][T28962] net veth1_virt_wifi .: renamed from virt_wifi0 [ 654.063257][T28969] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6203'. [ 654.274803][T28969] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6203'. [ 654.405485][T28973] bond2: Removing last ns target with arp_interval on [ 654.561939][T28984] hsr_slave_1: left promiscuous mode [ 654.783266][T28987] __nla_validate_parse: 2 callbacks suppressed [ 654.783285][T28987] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6207'. [ 655.912404][T29013] netlink: 260 bytes leftover after parsing attributes in process `syz.6.6213'. [ 656.211906][T29021] tipc: Enabling of bearer rejected, already enabled [ 656.264095][T29027] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 656.302627][T29027] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 656.439662][T29027] tipc: Resetting bearer [ 656.474904][T29021] netlink: 308 bytes leftover after parsing attributes in process `syz.5.6216'. [ 656.549380][T29031] netlink: 4916 bytes leftover after parsing attributes in process `syz.9.6219'. [ 656.597670][T29031] netlink: 1560 bytes leftover after parsing attributes in process `syz.9.6219'. [ 656.859310][T29048] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.079281][T29052] netlink: 'syz.7.6226': attribute type 1 has an invalid length. [ 657.098658][T29048] bridge_slave_1 (unregistering): left allmulticast mode [ 657.107117][T29054] netlink: 'syz.8.6225': attribute type 1 has an invalid length. [ 657.126056][T29052] netlink: 236 bytes leftover after parsing attributes in process `syz.7.6226'. [ 657.136255][T29048] bridge_slave_1 (unregistering): left promiscuous mode [ 657.157130][T29048] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.235498][ T5852] Bluetooth: hci5: command 0x040f tx timeout [ 657.238312][ C1] net_ratelimit: 8135 callbacks suppressed [ 657.238330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 657.242561][T29052] netlink: 'syz.7.6226': attribute type 10 has an invalid length. [ 657.247644][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.281350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.293866][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.295230][T29060] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6226'. [ 657.307235][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 657.307559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.307947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.308370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.310418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 657.356292][T29060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 657.366107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.377790][T29060] IPv6: NLM_F_CREATE should be set when creating new route [ 657.443173][T29057] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6225'. [ 657.563805][T29056] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 657.580740][T29056] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 657.591753][T29056] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 657.825894][T29052] veth0_vlan: entered allmulticast mode [ 657.917466][T15243] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 657.944432][T29052] veth0_vlan: left promiscuous mode [ 657.966863][T29052] veth0_vlan: entered promiscuous mode [ 657.980507][T29052] team0: Device veth0_vlan failed to register rx_handler [ 658.272774][T29068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6229'. [ 658.352628][T29068] batadv_slave_1: entered promiscuous mode [ 658.386322][T29068] batadv_slave_0: entered promiscuous mode [ 658.407643][T29068] debugfs: 'hsr1' already exists in 'hsr' [ 658.429138][T29068] Cannot create hsr debugfs directory [ 658.453009][T29074] tipc: Started in network mode [ 658.467979][T29074] tipc: Node identity 3237eebbceab, cluster identity 4711 [ 658.495968][T29074] tipc: Enabled bearer , priority 0 [ 658.532677][T29070] syzkaller0: entered promiscuous mode [ 658.569043][T29070] syzkaller0: entered allmulticast mode [ 658.634835][T29074] tipc: Resetting bearer [ 658.675376][T29070] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6230'. [ 658.796928][T29066] tipc: Resetting bearer [ 658.931467][T29066] tipc: Disabling bearer [ 659.749918][T29092] netlink: 'syz.8.6239': attribute type 1 has an invalid length. [ 659.812132][T29094] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6239'. [ 660.022712][T29103] netlink: 'syz.9.6240': attribute type 2 has an invalid length. [ 660.050419][T29103] netlink: 84 bytes leftover after parsing attributes in process `syz.9.6240'. [ 660.085305][T29100] veth5: entered promiscuous mode [ 660.106764][T29100] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 660.376264][T29109] netlink: 100 bytes leftover after parsing attributes in process `syz.8.6242'. [ 660.421180][T29109] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6242'. [ 660.520949][T29113] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6244'. [ 661.223359][T29133] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6247'. [ 661.252591][T29133] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6247'. [ 661.470001][T29133] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 661.581181][T29139] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.6249'. [ 661.618603][T29141] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6250'. [ 662.248470][ C1] net_ratelimit: 8140 callbacks suppressed [ 662.248490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 662.266928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.279365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.292015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.305336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 662.317839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.330230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.342845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.356255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 662.369114][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.407677][T29172] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6256'. [ 662.707229][T29178] netlink: 'syz.7.6259': attribute type 1 has an invalid length. [ 663.992435][T29219] netlink: 'syz.7.6271': attribute type 16 has an invalid length. [ 664.093544][T29219] netlink: 'syz.7.6271': attribute type 17 has an invalid length. [ 664.174880][T29216] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.256935][T29216] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.317218][T29251] __nla_validate_parse: 4 callbacks suppressed [ 665.317237][T29251] netlink: 84 bytes leftover after parsing attributes in process `syz.8.6281'. [ 665.759453][T29256] netlink: 108 bytes leftover after parsing attributes in process `syz.5.6283'. [ 665.868534][ T5852] Bluetooth: hci13: command 0x0405 tx timeout [ 666.573760][T29281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6291'. [ 666.691693][ T31] INFO: task syz.9.4702:23380 blocked for more than 143 seconds. [ 666.701447][T29281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6291'. [ 666.737537][ T31] Not tainted syzkaller #0 [ 666.750756][T29281] bridge_slave_1: default FDB implementation only supports local addresses [ 666.791177][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 666.826490][ T31] task:syz.9.4702 state:D stack:25600 pid:23380 tgid:23379 ppid:13267 task_flags:0x400140 flags:0x00080002 [ 666.856806][ T31] Call Trace: [ 666.866501][ T31] [ 666.874557][ T31] __schedule+0x1798/0x4cc0 [ 666.895568][ T31] ? __lock_acquire+0xab9/0xd20 [ 666.906596][ T31] ? __lock_acquire+0xab9/0xd20 [ 666.921268][ T31] ? __pfx___schedule+0x10/0x10 [ 666.931935][ T31] ? schedule+0x91/0x360 [ 666.936333][ T31] schedule+0x165/0x360 [ 666.941436][ T31] schedule_preempt_disabled+0x13/0x30 [ 666.947084][ T31] __mutex_lock+0x7e6/0x1350 [ 666.952665][ T31] ? __mutex_lock+0x5bb/0x1350 [ 666.959870][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 666.965734][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 666.971288][ T31] ? __nlmsg_put+0xef/0x1b0 [ 666.975925][ T31] ? genlmsg_put+0x137/0x2e0 [ 666.981985][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 666.987675][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 667.007611][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 667.013738][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 667.021973][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 667.027668][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 667.037356][ T31] genl_rcv_msg+0x60e/0x790 [ 667.044053][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 667.051250][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 667.057956][ T31] ? __asan_memcpy+0x40/0x70 [ 667.063922][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 667.077400][ T31] netlink_rcv_skb+0x205/0x470 [ 667.082953][ T31] ? __lock_acquire+0xab9/0xd20 [ 667.090485][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 667.095748][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 667.111400][ T31] ? down_read+0x1ad/0x2e0 [ 667.116116][ T31] genl_rcv+0x28/0x40 [ 667.120512][ T31] netlink_unicast+0x82c/0x9e0 [ 667.125444][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 667.136335][ T31] ? netlink_sendmsg+0x642/0xb30 [ 667.142010][ T31] ? skb_put+0x11b/0x210 [ 667.146446][ T31] netlink_sendmsg+0x805/0xb30 [ 667.155815][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.162181][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 667.169781][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 667.175278][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.181575][ T31] __sock_sendmsg+0x219/0x270 [ 667.186578][ T31] ____sys_sendmsg+0x505/0x830 [ 667.191805][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.197274][ T31] ? import_iovec+0x74/0xa0 [ 667.204330][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 667.216529][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.223980][ T31] ? __fget_files+0x2a/0x420 [ 667.243048][ T31] ? __fget_files+0x3a0/0x420 [ 667.250709][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 667.255853][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 667.259118][ C1] net_ratelimit: 8195 callbacks suppressed [ 667.259136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 667.262696][ T31] ? rcu_is_watching+0x15/0xb0 [ 667.267896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 667.279735][T12079] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 667.284485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.298427][ T31] ? do_syscall_64+0xbe/0x3b0 [ 667.303951][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.325463][ T31] do_syscall_64+0xfa/0x3b0 [ 667.332719][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.333948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 667.364664][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.364812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:13:51:ac:25:5c, vlan:0) [ 667.372060][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.382435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.391879][ T31] ? clear_bhb_loop+0x60/0xb0 [ 667.400682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.405439][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.424456][ T31] RIP: 0033:0x7f480bb8eec9 [ 667.430496][ T31] RSP: 002b:00007f480c945038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.444178][ T31] RAX: ffffffffffffffda RBX: 00007f480bde5fa0 RCX: 00007f480bb8eec9 [ 667.454587][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000010 [ 667.475603][ T31] RBP: 00007f480bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 667.483926][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.494195][ T31] R13: 00007f480bde6038 R14: 00007f480bde5fa0 R15: 00007ffd3f0b1fe8 [ 667.503058][ T31] [ 667.530052][ T31] INFO: task syz.9.4702:23381 blocked for more than 144 seconds. [ 667.566498][ T31] Not tainted syzkaller #0 [ 667.587156][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 667.605012][ T31] task:syz.9.4702 state:D stack:27016 pid:23381 tgid:23379 ppid:13267 task_flags:0x400040 flags:0x00080002 [ 667.618484][ T31] Call Trace: [ 667.621879][ T31] [ 667.624904][ T31] __schedule+0x1798/0x4cc0 [ 667.631862][ T31] ? __lock_acquire+0xab9/0xd20 [ 667.637140][ T31] ? __lock_acquire+0xab9/0xd20 [ 667.645607][ T31] ? __pfx___schedule+0x10/0x10 [ 667.653620][ T31] ? schedule+0x91/0x360 [ 667.659734][ T31] schedule+0x165/0x360 [ 667.664027][ T31] schedule_preempt_disabled+0x13/0x30 [ 667.673623][ T31] __mutex_lock+0x7e6/0x1350 [ 667.682692][ T31] ? __mutex_lock+0x5bb/0x1350 [ 667.687619][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 667.699505][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 667.704710][ T31] ? __nlmsg_put+0xef/0x1b0 [ 667.719669][ T31] ? genlmsg_put+0x137/0x2e0 [ 667.724425][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 667.731077][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 667.737271][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 667.744621][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 667.754322][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 667.760835][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 667.767078][ T31] genl_rcv_msg+0x60e/0x790 [ 667.771920][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 667.780341][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 667.786654][ T31] ? __asan_memcpy+0x40/0x70 [ 667.804333][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 667.811037][ T31] netlink_rcv_skb+0x205/0x470 [ 667.815926][ T31] ? __lock_acquire+0xab9/0xd20 [ 667.822030][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 667.827186][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 667.832736][ T31] ? down_read+0x1ad/0x2e0 [ 667.837276][ T31] genl_rcv+0x28/0x40 [ 667.845108][ T31] netlink_unicast+0x82c/0x9e0 [ 667.854160][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 667.859760][ T31] ? netlink_sendmsg+0x642/0xb30 [ 667.864838][ T31] ? skb_put+0x11b/0x210 [ 667.871970][ T31] netlink_sendmsg+0x805/0xb30 [ 667.876886][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.883911][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 667.892552][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 667.902200][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.913137][ T31] __sock_sendmsg+0x219/0x270 [ 667.918157][ T31] ____sys_sendmsg+0x505/0x830 [ 667.923043][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.929583][ T31] ? import_iovec+0x74/0xa0 [ 667.934225][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 667.939651][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.945010][ T31] ? __fget_files+0x2a/0x420 [ 667.967212][ T31] ? __fget_files+0x3a0/0x420 [ 667.973275][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 667.978847][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 667.985914][ T31] ? rcu_is_watching+0x15/0xb0 [ 667.991022][ T31] ? do_syscall_64+0xbe/0x3b0 [ 667.995818][ T31] do_syscall_64+0xfa/0x3b0 [ 668.002785][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.014125][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.025004][ T31] ? clear_bhb_loop+0x60/0xb0 [ 668.030477][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.036517][ T31] RIP: 0033:0x7f480bb8eec9 [ 668.041284][ T31] RSP: 002b:00007f4809df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.050032][ T31] RAX: ffffffffffffffda RBX: 00007f480bde6090 RCX: 00007f480bb8eec9 [ 668.062616][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000010 [ 668.072564][ T31] RBP: 00007f480bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 668.083976][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.094129][ T31] R13: 00007f480bde6128 R14: 00007f480bde6090 R15: 00007ffd3f0b1fe8 [ 668.102389][ T31] [ 668.105621][ T31] [ 668.105621][ T31] Showing all locks held in the system: [ 668.133571][ T31] 1 lock held by khungtaskd/31: [ 668.138769][ T31] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 668.153546][ T31] 2 locks held by getty/5599: [ 668.161563][ T31] #0: ffff88814e17d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 668.175573][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 668.187486][ T31] 2 locks held by kworker/1:6/20581: [ 668.195750][ T31] 6 locks held by kworker/1:8/20582: [ 668.202438][ T31] 2 locks held by syz.8.4455/22464: [ 668.209400][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.218633][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 668.233806][ T31] 2 locks held by syz.9.4702/23380: [ 668.245878][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.254427][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 668.276803][ T31] 2 locks held by syz.9.4702/23381: [ 668.282200][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.293624][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 668.304242][ T31] 2 locks held by syz.7.4824/23857: [ 668.312307][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.320709][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 668.331603][ T31] 2 locks held by syz.6.5048/24619: [ 668.337018][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.357552][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 668.372143][ T31] 2 locks held by syz.0.5374/26087: [ 668.377474][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.388794][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 668.400478][ T31] 2 locks held by syz.2.5557/26676: [ 668.405794][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.414581][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 668.427303][ T31] 2 locks held by syz.4.5575/26727: [ 668.440054][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.450113][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 668.473288][ T31] 2 locks held by syz.1.5626/26875: [ 668.479969][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.490728][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 668.501487][ T31] 2 locks held by syz.3.5730/27231: [ 668.506788][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.521455][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 668.538535][ T31] 2 locks held by syz.6.6213/29006: [ 668.543889][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.552641][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 668.572087][ T31] [ 668.574534][ T31] ============================================= [ 668.574534][ T31] [ 668.597960][ T31] NMI backtrace for cpu 0 [ 668.597987][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 668.598010][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 668.598023][ T31] Call Trace: [ 668.598031][ T31] [ 668.598041][ T31] dump_stack_lvl+0x189/0x250 [ 668.598074][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.598099][ T31] ? __pfx__printk+0x10/0x10 [ 668.598141][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 668.598172][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 668.598201][ T31] ? __pfx__printk+0x10/0x10 [ 668.598235][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 668.598258][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 668.598288][ T31] watchdog+0xf93/0xfe0 [ 668.598313][ T31] ? watchdog+0x1de/0xfe0 [ 668.598338][ T31] kthread+0x711/0x8a0 [ 668.598368][ T31] ? __pfx_watchdog+0x10/0x10 [ 668.598385][ T31] ? __pfx_kthread+0x10/0x10 [ 668.598414][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 668.598443][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.598470][ T31] ? __pfx_kthread+0x10/0x10 [ 668.598497][ T31] ret_from_fork+0x436/0x7d0 [ 668.598521][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 668.598556][ T31] ? __switch_to_asm+0x39/0x70 [ 668.598580][ T31] ? __switch_to_asm+0x33/0x70 [ 668.598604][ T31] ? __pfx_kthread+0x10/0x10 [ 668.598631][ T31] ret_from_fork_asm+0x1a/0x30 [ 668.598674][ T31] [ 668.598683][ T31] Sending NMI from CPU 0 to CPUs 1: [ 668.753013][ C1] NMI backtrace for cpu 1 [ 668.753032][ C1] CPU: 1 UID: 0 PID: 12079 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 668.753054][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 668.753066][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 668.753095][ C1] RIP: 0010:lock_acquire+0xb9/0x360 [ 668.753115][ C1] Code: 1c a8 bf 0d 00 0f 84 fa 00 00 00 65 8b 05 0f 81 ac 10 85 c0 0f 85 eb 00 00 00 65 48 8b 04 25 08 50 48 92 83 b8 2c 0b 00 00 00 <0f> 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 4c 89 [ 668.753130][ C1] RSP: 0018:ffffc90000a073d8 EFLAGS: 00000246 [ 668.753145][ C1] RAX: ffff88802952bc80 RBX: 0000000000000000 RCX: 14cedb2f2ade2a00 [ 668.753156][ C1] RDX: 0000000000000000 RSI: ffffffff81725d22 RDI: 1ffffffff1ba750c [ 668.753170][ C1] RBP: ffffffff81725d05 R08: 0000000000000000 R09: 0000000000000000 [ 668.753182][ C1] R10: ffffc90000a07598 R11: ffffffff81aaf070 R12: 0000000000000002 [ 668.753195][ C1] R13: ffffffff8dd3a860 R14: 0000000000000000 R15: 0000000000000000 [ 668.753208][ C1] FS: 0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000 [ 668.753223][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 668.753236][ C1] CR2: 0000555565a67808 CR3: 000000000db36000 CR4: 00000000003526f0 [ 668.753253][ C1] Call Trace: [ 668.753261][ C1] [ 668.753274][ C1] ? unwind_next_frame+0xa5/0x2390 [ 668.753302][ C1] ? process_scheduled_works+0xade/0x17b0 [ 668.753322][ C1] ? unwind_next_frame+0xa5/0x2390 [ 668.753343][ C1] unwind_next_frame+0xc2/0x2390 [ 668.753363][ C1] ? unwind_next_frame+0xa5/0x2390 [ 668.753387][ C1] ? unwind_next_frame+0xa5/0x2390 [ 668.753408][ C1] ? nsim_dev_trap_report_work+0x7c7/0xb80 [ 668.753435][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 668.753460][ C1] arch_stack_walk+0x11c/0x150 [ 668.753486][ C1] ? process_scheduled_works+0xade/0x17b0 [ 668.753507][ C1] stack_trace_save+0x9c/0xe0 [ 668.753530][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 668.753551][ C1] ? nf_hook_slow+0xc2/0x220 [ 668.753574][ C1] ? __lock_acquire+0xab9/0xd20 [ 668.753592][ C1] kasan_save_track+0x3e/0x80 [ 668.753611][ C1] ? kasan_save_track+0x3e/0x80 [ 668.753629][ C1] ? kasan_save_free_info+0x46/0x50 [ 668.753654][ C1] ? __kasan_slab_free+0x5b/0x80 [ 668.753673][ C1] ? kmem_cache_free+0x18f/0x400 [ 668.753694][ C1] ? br_nf_dev_queue_xmit+0x4ec/0x2580 [ 668.753717][ C1] ? NF_HOOK+0x618/0x6b0 [ 668.753738][ C1] ? br_nf_post_routing+0xb66/0xfe0 [ 668.753760][ C1] ? nf_hook_slow+0xc2/0x220 [ 668.753777][ C1] ? NF_HOOK+0x215/0x3c0 [ 668.753795][ C1] ? br_forward_finish+0xd3/0x130 [ 668.753814][ C1] ? br_nf_forward_finish+0xa40/0xe60 [ 668.753836][ C1] ? NF_HOOK+0x618/0x6b0 [ 668.753857][ C1] ? br_nf_forward_ip+0x647/0x7e0 [ 668.753879][ C1] ? nf_hook_slow+0xc2/0x220 [ 668.753896][ C1] ? NF_HOOK+0x215/0x3c0 [ 668.753914][ C1] ? __br_forward+0x41e/0x600 [ 668.753933][ C1] ? br_handle_frame_finish+0x15a3/0x1c50 [ 668.753955][ C1] ? br_nf_hook_thresh+0x3c3/0x4a0 [ 668.753976][ C1] ? br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 668.754001][ C1] ? br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 668.754025][ C1] ? br_handle_frame+0x982/0x14c0 [ 668.754046][ C1] ? __netif_receive_skb_core+0x10b9/0x4380 [ 668.754072][ C1] ? __netif_receive_skb+0x72/0x380 [ 668.754096][ C1] ? process_backlog+0x60e/0x14f0 [ 668.754113][ C1] ? __napi_poll+0xc4/0x360 [ 668.754136][ C1] ? net_rx_action+0x5f7/0xdf0 [ 668.754152][ C1] ? handle_softirqs+0x283/0x870 [ 668.754170][ C1] ? do_softirq+0xec/0x180 [ 668.754186][ C1] ? __local_bh_enable_ip+0x17d/0x1c0 [ 668.754203][ C1] ? nsim_dev_trap_report_work+0x7c7/0xb80 [ 668.754226][ C1] ? process_scheduled_works+0xade/0x17b0 [ 668.754262][ C1] ? br_nf_dev_queue_xmit+0x4ec/0x2580 [ 668.754290][ C1] kasan_save_free_info+0x46/0x50 [ 668.754316][ C1] __kasan_slab_free+0x5b/0x80 [ 668.754337][ C1] kmem_cache_free+0x18f/0x400 [ 668.754357][ C1] ? __skb_ext_put+0x218/0x2e0 [ 668.754379][ C1] br_nf_dev_queue_xmit+0x4ec/0x2580 [ 668.754408][ C1] ? NF_HOOK+0x9e/0x6b0 [ 668.754430][ C1] ? NF_HOOK+0x9e/0x6b0 [ 668.754451][ C1] NF_HOOK+0x618/0x6b0 [ 668.754476][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 668.754499][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 668.754524][ C1] ? net_generic+0x1e/0x240 [ 668.754544][ C1] ? net_generic+0x1e/0x240 [ 668.754564][ C1] ? net_generic+0x1e/0x240 [ 668.754584][ C1] ? skb_pull+0xc1/0x1d0 [ 668.754608][ C1] br_nf_post_routing+0xb66/0xfe0 [ 668.754631][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 668.754658][ C1] ? __pfx_br_nf_post_routing+0x10/0x10 [ 668.754682][ C1] nf_hook_slow+0xc2/0x220 [ 668.754703][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 668.754723][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 668.754744][ C1] NF_HOOK+0x215/0x3c0 [ 668.754765][ C1] ? NF_HOOK+0x9e/0x3c0 [ 668.754784][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 668.754802][ C1] ? net_generic+0x1e/0x240 [ 668.754824][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 668.754849][ C1] ? net_generic+0x1e/0x240 [ 668.754872][ C1] br_forward_finish+0xd3/0x130 [ 668.754891][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 668.754913][ C1] br_nf_forward_finish+0xa40/0xe60 [ 668.754943][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 668.754969][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 668.754992][ C1] ? NF_HOOK+0x9e/0x6b0 [ 668.755014][ C1] ? NF_HOOK+0x9e/0x6b0 [ 668.755035][ C1] NF_HOOK+0x618/0x6b0 [ 668.755060][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 668.755082][ C1] ? net_generic+0x1e/0x240 [ 668.755110][ C1] br_nf_forward_ip+0x647/0x7e0 [ 668.755134][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 668.755159][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 668.755183][ C1] nf_hook_slow+0xc2/0x220 [ 668.755203][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 668.755222][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 668.755242][ C1] NF_HOOK+0x215/0x3c0 [ 668.755263][ C1] ? NF_HOOK+0x9e/0x3c0 [ 668.755288][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 668.755309][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 668.755336][ C1] __br_forward+0x41e/0x600 [ 668.755355][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 668.755375][ C1] ? skb_clone+0x246/0x3a0 [ 668.755398][ C1] ? __pfx___br_forward+0x10/0x10 [ 668.755425][ C1] br_handle_frame_finish+0x15a3/0x1c50 [ 668.755448][ C1] ? stack_depot_save_flags+0x40/0x860 [ 668.755479][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 668.755500][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 668.755521][ C1] ? br_handle_frame+0x982/0x14c0 [ 668.755543][ C1] ? __netif_receive_skb+0x72/0x380 [ 668.755568][ C1] ? process_backlog+0x60e/0x14f0 [ 668.755583][ C1] ? __napi_poll+0xc4/0x360 [ 668.755607][ C1] ? handle_softirqs+0x283/0x870 [ 668.755625][ C1] ? do_softirq+0xec/0x180 [ 668.755641][ C1] ? __local_bh_enable_ip+0x17d/0x1c0 [ 668.755659][ C1] ? process_scheduled_works+0xade/0x17b0 [ 668.755676][ C1] ? worker_thread+0x8a0/0xda0 [ 668.755694][ C1] ? kthread+0x711/0x8a0 [ 668.755714][ C1] ? native_calibrate_cpu_early+0x130/0x5a0 [ 668.755741][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 668.755770][ C1] ? nf_hook_slow+0x176/0x220 [ 668.755791][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 668.755814][ C1] br_nf_hook_thresh+0x3c3/0x4a0 [ 668.755843][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 668.755867][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 668.755897][ C1] br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 668.755922][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 668.755951][ C1] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 668.755976][ C1] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 668.756003][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 668.756030][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 668.756054][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 668.756082][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 668.756105][ C1] br_handle_frame+0x982/0x14c0 [ 668.756134][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 668.756156][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 668.756182][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 668.756204][ C1] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 668.756230][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 668.756254][ C1] __netif_receive_skb_core+0x10b9/0x4380 [ 668.756292][ C1] ? ip6_mc_input+0x8de/0xb70 [ 668.756316][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 668.756337][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 668.756363][ C1] ? ip6_rcv_finish+0x29e/0x2e0 [ 668.756384][ C1] ? NF_HOOK+0x309/0x3a0 [ 668.756400][ C1] ? skb_orphan+0xaf/0xd0 [ 668.756428][ C1] ? process_backlog+0x2d5/0x14f0 [ 668.756445][ C1] ? process_backlog+0x2d5/0x14f0 [ 668.756465][ C1] __netif_receive_skb+0x72/0x380 [ 668.756492][ C1] ? process_backlog+0x2d5/0x14f0 [ 668.756511][ C1] process_backlog+0x60e/0x14f0 [ 668.756536][ C1] ? __pfx_process_backlog+0x10/0x10 [ 668.756560][ C1] __napi_poll+0xc4/0x360 [ 668.756584][ C1] ? skb_defer_free_flush+0x229/0x250 [ 668.756612][ C1] net_rx_action+0x5f7/0xdf0 [ 668.756628][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.756656][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 668.756688][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 668.756727][ C1] handle_softirqs+0x283/0x870 [ 668.756748][ C1] ? do_softirq+0xec/0x180 [ 668.756769][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 668.756791][ C1] ? nsim_dev_trap_report_work+0x7c7/0xb80 [ 668.756816][ C1] do_softirq+0xec/0x180 [ 668.756833][ C1] [ 668.756840][ C1] [ 668.756847][ C1] ? __pfx_do_softirq+0x10/0x10 [ 668.756864][ C1] ? devlink_trap_report+0x4e9/0x6a0 [ 668.756886][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 668.756915][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 668.756934][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 668.756953][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 668.756977][ C1] ? nsim_dev_trap_report_work+0x7c7/0xb80 [ 668.757002][ C1] nsim_dev_trap_report_work+0x7c7/0xb80 [ 668.757036][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 668.757056][ C1] process_scheduled_works+0xade/0x17b0 [ 668.757092][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 668.757122][ C1] worker_thread+0x8a0/0xda0 [ 668.757156][ C1] kthread+0x711/0x8a0 [ 668.757181][ C1] ? __pfx_worker_thread+0x10/0x10 [ 668.757199][ C1] ? __pfx_kthread+0x10/0x10 [ 668.757223][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 668.757247][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.757272][ C1] ? __pfx_kthread+0x10/0x10 [ 668.757300][ C1] ret_from_fork+0x436/0x7d0 [ 668.757320][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 668.757342][ C1] ? __switch_to_asm+0x39/0x70 [ 668.757365][ C1] ? __switch_to_asm+0x33/0x70 [ 668.757387][ C1] ? __pfx_kthread+0x10/0x10 [ 668.757410][ C1] ret_from_fork_asm+0x1a/0x30 [ 668.757443][ C1] [ 668.758584][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 668.758603][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 668.758627][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 668.758640][ T31] Call Trace: [ 668.758648][ T31] [ 668.758658][ T31] dump_stack_lvl+0x99/0x250 [ 668.758686][ T31] ? __asan_memcpy+0x40/0x70 [ 668.758707][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.758732][ T31] ? __pfx__printk+0x10/0x10 [ 668.758775][ T31] vpanic+0x281/0x750 [ 668.758802][ T31] ? __pfx_vpanic+0x10/0x10 [ 668.758827][ T31] ? preempt_schedule+0xae/0xc0 [ 668.758858][ T31] ? preempt_schedule_common+0x83/0xd0 [ 668.758895][ T31] panic+0xb9/0xc0 [ 668.758919][ T31] ? __pfx_panic+0x10/0x10 [ 668.758945][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 668.758970][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 668.759001][ T31] watchdog+0xfd2/0xfe0 [ 668.759026][ T31] ? watchdog+0x1de/0xfe0 [ 668.759052][ T31] kthread+0x711/0x8a0 [ 668.759080][ T31] ? __pfx_watchdog+0x10/0x10 [ 668.759098][ T31] ? __pfx_kthread+0x10/0x10 [ 668.759126][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 668.759155][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.759183][ T31] ? __pfx_kthread+0x10/0x10 [ 668.759210][ T31] ret_from_fork+0x436/0x7d0 [ 668.759235][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 668.759262][ T31] ? __switch_to_asm+0x39/0x70 [ 668.759284][ T31] ? __switch_to_asm+0x33/0x70 [ 668.759305][ T31] ? __pfx_kthread+0x10/0x10 [ 668.759331][ T31] ret_from_fork_asm+0x1a/0x30 [ 668.759374][ T31] [ 669.965814][ T31] Kernel Offset: disabled [ 669.970134][ T31] Rebooting in 86400 seconds..