last executing test programs: 4m10.623729685s ago: executing program 1 (id=658): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) (async, rerun: 32) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc00c815}, 0x20000000) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x108, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6e}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x9, 0x7, 0x1e0, 0xed00, 0xc, 0x417]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xda}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x20044080}, 0x48000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 4m10.33721384s ago: executing program 1 (id=661): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1401000023000100000000000000000001"], 0x114}], 0x1}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000003c0)='cpu.idle\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x8) 4m10.001856963s ago: executing program 1 (id=663): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40804}, 0x804) 4m9.601890296s ago: executing program 1 (id=668): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000a80)={{r1}, 0x1, 0x1, 0x9}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ffffffe}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}]}]}, 0x30}}, 0x4000890) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 4m9.299836598s ago: executing program 1 (id=671): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x40094, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, 0x1c) r1 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0xffffff44}], 0x10}}], 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) accept4(r2, &(0x7f0000000140)=@ethernet={0x0, @broadcast}, &(0x7f00000001c0)=0x80, 0x80800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r2, 0xd7735000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r4, 0x7, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r6, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffff8}]}, 0x20}}, 0xd5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 4m9.02987704s ago: executing program 1 (id=672): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="fffffaff4cfce911406bfbc851c5808d9db098a90a9d866e57778ff7a6aa6e13237a1812bef048445ff3287a060cd55c0b039565dc1d39a6bba485dde67f2cfce5347ac55bd471d94b3ed20e663c36ad", 0x50, 0x0, 0x0, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003d000103080002020000000001"], 0x14}, 0x1, 0x0, 0x0, 0x4030}, 0x1d3acbf5545d87ae) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000014c0)="dc", 0x1}], 0x2}, 0x4000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r5) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="6d932bbd70000000000001000000080003"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x64, r7, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc265}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x62}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008810}, 0x80880) 3m42.379565386s ago: executing program 32 (id=672): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="fffffaff4cfce911406bfbc851c5808d9db098a90a9d866e57778ff7a6aa6e13237a1812bef048445ff3287a060cd55c0b039565dc1d39a6bba485dde67f2cfce5347ac55bd471d94b3ed20e663c36ad", 0x50, 0x0, 0x0, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003d000103080002020000000001"], 0x14}, 0x1, 0x0, 0x0, 0x4030}, 0x1d3acbf5545d87ae) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000014c0)="dc", 0x1}], 0x2}, 0x4000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r5) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="6d932bbd70000000000001000000080003"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x64, r7, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc265}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x62}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008810}, 0x80880) 2m37.590826193s ago: executing program 3 (id=1343): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x82, &(0x7f0000000180)}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) close(r0) 2m37.36774289s ago: executing program 3 (id=1349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) 2m37.156168603s ago: executing program 3 (id=1352): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c"], 0x68}}, 0x24040800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r9, r8}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r6, r5}) close(r7) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x8, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) 2m36.190052274s ago: executing program 3 (id=1365): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={r1, @loopback, @rand_addr=0x64010100}, 0xc) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0x4) 2m36.026516119s ago: executing program 3 (id=1366): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_getrule={0x1c, 0x22, 0x1, 0x70fd26, 0x25dfdbfe, {0xa, 0x0, 0x0, 0xb, 0x5, 0x0, 0x0, 0x3}, [""]}, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{}, [@mcast1]}}}]}, 0x4c}}, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0xfff4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m35.96397506s ago: executing program 3 (id=1367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) 2m20.914508436s ago: executing program 33 (id=1367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) 1m59.437159207s ago: executing program 2 (id=1932): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x2b}}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000100)=""/142, &(0x7f00000001c0)=0x8e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90) 1m59.287773532s ago: executing program 2 (id=1934): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911007001a00000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000001c0), 0x4) r2 = socket(0x26, 0x0, 0x0) close(0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010cffffffff0a2000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0a00050000000000000000000800350000000000"], 0x30}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4004050) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r6, 0x215eb000) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r8, &(0x7f0000000180)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001000)=@getchain={0x2c, 0x66, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x8, 0x1fff6}, {0xfff2, 0x1}, {0xfff3, 0xffe4}}, [{0x8, 0xb, 0x9}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 1m58.498750661s ago: executing program 2 (id=1947): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x11000) vmsplice(r6, &(0x7f00000002c0)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0xb) write$nci(r6, &(0x7f0000000080)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0xb}, 0x4) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m57.593469389s ago: executing program 2 (id=1965): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0810}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0xd}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x200}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xfffffffffffe0206}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c044}, 0x4c001) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x114, r3, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x73}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xb, 0x8000}}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xf4ac}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xc4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa6, 0xbe, "77afafaeee739fcc0ae44ed4fc71300ed19e2d7b701873a58e69bd4a09fb6598582b333922b3a19f0e239179eb26caf719f0b7292fffcec84824151289c7945c7650f99418be22f15d9f1d41a6ac53ac6393e2aa05368fe984729f58315e7bfcb8b88c77e33f8f32d7922c9e74ca5572e4ea4fae79ec1f1ca8a8d94313fcd3994d35c3f32a12fb17382aad1d47827761f8d32063a3a79ab2e6d7da60030fc3b2743c"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x114}, 0x1, 0x0, 0x0, 0x880}, 0x24008801) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xf8, 0x2, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0xc0, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1c}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x40054) r6 = getpid() r7 = getgid() setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000800)={r6, 0xee01, r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r9, &(0x7f0000000840)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x1e}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000880)={0x0, 0x44be}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000900)={r10, 0x70db}, &(0x7f0000000940)=0x8) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, '$[$-.#:,&.%^-\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x25}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000084}, 0x4000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0), r11) r12 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000b00)) recvfrom$unix(r12, &(0x7f0000000b40)=""/170, 0xaa, 0x1, &(0x7f0000000c00)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x4, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000d80), 0x8) sendmsg$rds(r13, &(0x7f0000002300)={&(0x7f0000000dc0)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000002180)=[{&(0x7f0000000e00)=""/78, 0x4e}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/200, 0xc8}, {&(0x7f0000001f80)=""/179, 0xb3}, {&(0x7f0000002040)=""/68, 0x44}, {&(0x7f00000020c0)=""/21, 0x15}, {&(0x7f0000002100)=""/124, 0x7c}], 0x7, &(0x7f0000002280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x5d8, 0x3ff}, &(0x7f0000002200)=0x5, &(0x7f0000002240)=0xfff, 0x2, 0x5, 0x3, 0x1000, 0x12, 0x1ff}}], 0x58, 0x8080}, 0x40001) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r12, 0xc0805841, &(0x7f0000002340)={0x2, 0x3a6, 0x9b, 0x3ff, 0x7}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002400)=@o_path={&(0x7f00000023c0)='./file0\x00', 0x0, 0x10, r11}, 0x18) ioctl$XFS_IOC_FSGROWFSDATA(r8, 0x4010586e, &(0x7f0000002440)={0x9, 0x7}) 1m57.459775757s ago: executing program 2 (id=1968): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f00000001c0)="11eb03", 0x3, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4}, 0x14) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000019080)=@assoc_value={r6, 0x7f}, &(0x7f00000190c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00', 0x6}}, 0x9, 0x3, 0x200, 0x3, 0xe0, 0x0, 0x4}, 0x9c) 1m57.276361557s ago: executing program 2 (id=1971): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000a40)={'vlan0\x00', &(0x7f0000000a80)=@ethtool_cmd={0x17}}) r6 = socket(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = getpid() select(0xe, &(0x7f0000000000)={0x7}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB='\b'], 0x40}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) 1m42.771685299s ago: executing program 5 (id=2114): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000020900010073797a30000000000900020073797a3100000000140003800800014000000000080002400000000038000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000"], 0xc0}, 0x1, 0x0, 0x0, 0x20002010}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x20, 0x809, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 1m42.61222703s ago: executing program 5 (id=2117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080003000000f58fa2b0"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xc, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0xfffffffc, @empty, 0x3}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f0000000200)={0xa, 0x4e23, 0x3ff, @loopback, 0x10001}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x81, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae09b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0x7, 0x0, 0x1, 0x7fd, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0x3, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028005000100"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000000e000000000000"], &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2}, 0x1a) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 1m42.279871038s ago: executing program 5 (id=2123): r0 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) socket$inet6(0xa, 0x200000000003, 0x87) 1m42.15084442s ago: executing program 34 (id=1971): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000a40)={'vlan0\x00', &(0x7f0000000a80)=@ethtool_cmd={0x17}}) r6 = socket(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = getpid() select(0xe, &(0x7f0000000000)={0x7}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB='\b'], 0x40}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) 1m42.141067299s ago: executing program 5 (id=2127): syz_emit_ethernet(0x2056, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x2020, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x200, "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"}, {0x0, 0x200, "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"}, {0x1, 0x1, "a22d4ba30d6b"}]}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@remote, @in6=@private1, 0x1, 0x794, 0x4e26, 0x0, 0x0, 0x0, 0x20, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x5, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) preadv(r4, &(0x7f0000001200)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x50}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0xb, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x9}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1m41.901600545s ago: executing program 5 (id=2129): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x12}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x20000004) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8480}, 0x4004005) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x2000c010) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004000}, 0x40) r10 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000880), &(0x7f00000008c0)=0x10) ioctl$NILFS_IOCTL_GET_CPSTAT(r10, 0x80186e83, &(0x7f0000000900)) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r2, 0x7077a5d20211cf51, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r10) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b00)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000b40)={@local, 0x0}, &(0x7f0000000b80)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c40)={'syztnl1\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', 0x0, 0x2b, 0xff, 0x0, 0x2, 0x1c, @rand_addr=' \x01\x00', @mcast2, 0x8, 0x80, 0x9, 0x9}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r11, &(0x7f0000000ec0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c80)={0x1cc, r12, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0x78, 0x5, "99cfacbb980564214b89037a9c0a093021b998725cc69d1fac0e531c282f2eb9ad50c16e9841a890baaf226ef7289b04c5054627524770e1be76e69b85da4ec8168e15bdc8d6caddcb87cb6f335456f46aa0d5df4d6d4922edfa64815fef0ea056350b531f757f51bf06dd171a9681f6fcb36ba7"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x39}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'NLBL_CALIPSO\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nfc\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan3\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nfc\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x1}, 0x8101) (async) r16 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r16, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x30, 0x1406, 0x300, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x8000) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001040)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000001180)={&(0x7f0000001000), 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x3c, r3, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x4011) 1m41.557918568s ago: executing program 5 (id=2134): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000260001032567f702fadbdf2501"], 0x14}}, 0x4c004) 1m26.490594677s ago: executing program 35 (id=2134): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000260001032567f702fadbdf2501"], 0x14}}, 0x4c004) 44.084392471s ago: executing program 7 (id=2870): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in, @in=@multicast1}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x10, r0}, 0x18) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003280)={0x1a10, 0x2c, 0x1, 0xfffffffe, 0x25dfdbfc, "", [@nested={0x1a00, 0xf2, 0x0, 0x1, [@nested={0x443, 0x9, 0x0, 0x1, [@generic="102feac198785ba6069a2315b12bcdb555b23ad272136fb0f1b7bf24cbe2475d7e47b567c67e8206764a2b7fe8d24e4511a1217be4d745bf52250ee015697e166f9bfebf", @nested={0x69, 0xfe, 0x0, 0x1, [@nested={0x4, 0x7a}, @generic="0cba6006f4bd1742669cffea9c468a302339fdc6e5ebe982f01fca95e5130a030de38ba88c22cabbd5ab444781be3b9ef7354e6110f279d89ed928c3ec7262d99c6ec4b5fed9e3241d1af742772004a1890d48e1d8e17bafdc7dd83637453605ba"]}, @nested={0x4, 0x68}, @nested={0x197, 0x35, 0x0, 0x1, [@typed={0x8, 0xd9, 0x0, 0x0, @ipv4=@remote}, @generic="18d1cc04e027df777f58d2b9f290fc4953808ad1be9a3080380daea68df269cfe7a69abf3f6dbca0e1e6e0947652cb00ef9b36d61ff4dcc0a673b81067bf67a9dbeff194a587f348b7200a4f84de5d77161702671bcce59db97c0118cfedf73d3242c9e3e9d4875ff2cb61d745394c5848687da93ed4ca2f480ee3fa9bba6fb95453dcd7ed493536c78bf3aed5e605bcf9ced64c1b1130709d383b65f5383053b1243545f1b559e953f71148cc701d66b22a", @typed={0x8, 0x9d, 0x0, 0x0, @fd=r1}, @typed={0x8, 0xbe, 0x0, 0x0, @pid}, @generic="66e1b9a3bd46edf8cb89890c4b3fa9511d2d6ab6849479dce4de677b564c2463b139", @typed={0x5, 0x129, 0x0, 0x0, @str='\x00'}, @generic="1de6e91f777aad387b97857eb8257eeea20ff00436e4b4789ab18044dab020e5ae87dfa208b175c33cf2c71428dcad74c6f7b81f05ff19cb8f71b30d224560584b9c7b871a699b898f314f7b732df048e57f614d0762ae28ae27e93c0d460cd15a4caa020e0fcef4b5619a505140ba87dcb55fe4d3ad9a63418c6e5e5871cbeff9ee5e7b68dab17c239ea48cb2cd2aea9c98f0ea83193c58da20c555bc1c7c"]}, @nested={0xe1, 0x9f, 0x0, 0x1, [@generic="643f66a472ab6b53c398fb4523ddf91d84c300000000000000000000000000000000b195e656b4ea1779748f4d8e5deb82e614c311022800000000ad1699982a09a1fe94c5e121c0c556b0136dfb97d13a30270582582f69367749d09e10a1a21399d01c653bc4d02e68477d499bd7dc5b2c1a86afaaffe0133f64dbc9f35fb7bc0d7322724c09b51b26940e3a666be7cf15c3faf673c91246bec038e471c56f3134ef0eff5f19e857697c", @typed={0x8, 0x120, 0x0, 0x0, @pid}, @nested={0x4, 0x26}, @generic="73b712b7ea46d927874ae80e42270e23707ff496287e1b0013f6e43a720eddc9cdaa29cc7abc"]}, @typed={0xc, 0x13f, 0x0, 0x0, @u64=0x2000000000000}, @nested={0xd, 0xd8, 0x0, 0x1, [@generic="fc8cd828b7", @nested={0x4, 0x18}]}, @generic="872dbabf04e79912548c2fe9ac2b28ebb91a02adeb0e89fac194f81a94f00d8e4c5c27ae6d83671d383ee2612e5764749d234069aa3b81f4e5707b7bfa7c7e67c9dfbb2ee974b282aa79b6c69c56debaf4749d43354e5db6bff424d6d15abe353a582bd87dab76a6075566a419610127a2f2a4df7c3d8407b73c667770f5445674871db43e2b7304405587059b16717bcdcfad1267b1f34563f9369d0aa5da4007", @generic="1eac23dc36270799397706ece56525a0a0d94ebae05820910391865ebb0a8c5733fda959ee4acaf1e1b142f13b03819033a520dd240cff195d79232a4d2ef70dd459a63c4644c447f3699af5bb2768f0be43"]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640d", @nested={0x1298, 0x5a, 0x0, 0x1, [@typed={0xc, 0x29, 0x0, 0x0, @u64=0x8000}, @nested={0x120f, 0xfa, 0x0, 0x1, [@nested={0x4, 0x7f}, @generic="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", @typed={0x6b, 0x3, 0x0, 0x0, @binary="d96f5dff3549ac29552073db54dd58c3dbf6d967dc4709f85d92b239f2f460bc822c67d08583b141d923b547730ef8d5ab2fc869b7230194deab750be14b93c4b41896891883e36344805b7cede0c06586c5d894d731dc3487de69b92b5a6cfc4bbafb7b08c3de"}, @generic="8feed43a2f51c064984bd02ed4b0ebee3976c71c307e75bc11aec65dc5af0a8e33496fd3969a9da12632d61ec343759440dae7b2d0ca8c1805fca7a3d9973d03237070d963330cce8e9404a788ba057420dbf70ef9afcdc047cca39145e34ae9f01a119383f86ca76734867b3c7a2bd03531855ed5fb8ea2c1bf29b0d03ca35d4a56acd2b58c99c5e189b2e97dd7837cec5f68a5a28e345bfd813fd22bc681a2df", @generic="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"]}, @nested={0x6d, 0x24, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xa1}, @nested={0x4, 0xee}, @generic="b519b9664518cc6e6309c093cea7241097b60c52b3a26bf387f09c69cdfe958d14b1e28bfe3d92a52a20077f83559e3167faf8789acaf646732a82dd45456e840e9cab983a560f824234e61f76d0ede8b1e889c501015a820d"]}, @typed={0x8, 0x52, 0x0, 0x0, @pid=r2}]}, @generic="0a9e989568b49c238ba95217f31bc96afe81e099cd09a08e7647c6694fc48c6b6e5cb4c757fae3f6ac4a2d295e409581bbf6a75fcf87833e5ea6d2ae3b3533d29519e29fa9fe04f50c4954f5adc03718dbb2a00a4efbc989bfd08a1ea2a9c20ce8881a823fa09917321698558fd1fcceccb420e963e9e693ba9ad5428ffa907f0c72c2ace2e0b8896886a1d589c544ecfca9d095870a403c428c8d4f903fdea321fee997e87c61cb885d0a02583c238e3bafdf9a55d9d7cd77f1", @typed={0x8, 0xf, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xbb, 0x0, 0x0, @fd=r0}, @nested={0x154, 0xa7, 0x0, 0x1, [@nested={0x150, 0xe7, 0x0, 0x1, [@generic="25885213d1c25a6ebf529fa6b7046f3e17fce5eb7265d097251ab65002f014af0da9fdcb70517482de9997e62089f322fa44d5a8e116ddc8bd3888550cb2fa9556b4bbcaa8864b492c21bf8ab02b20ccb076fb511f5f0940b95bc766b932fb9708306c7cdfebdb699c9a50d268a7f706b17dee1c4f40ed42", @generic="6596aaf7a1021f4c33bd340ac0a69b5527cf2ce92beefa633fa0a0d7738112c2edfedc335c504ac59a1116f7999d28ad9e9c9e32827ead789045b80badf72655d3bcfadb7137a8638fcb674811e38ca9d79b3b5269f7f1b10b6f189185f64532abd476356d39c0d3af692bf21f2e28776b7e3c81ab1f4fd8c4f42b819fc7244cd6631589e68440fe3ba77a56e04817264d35023a9b98884580e8e8f7e69f5d5a737e1283808d6d200bfcbfe9cf18db99ca75bd2a44aa7fe86a1e9761d62b94137c2a6779e57955ff5712ef0526d64941", @nested={0x4, 0x1053}]}]}, @typed={0x4, 0xfd}, @typed={0x8, 0xce, 0x0, 0x0, @ipv4=@remote}, @generic="b9eaca09bd028465b891bc092064f63e2814"]}]}, 0x1a10}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'ip6_vti0\x00', 0x0, 0x4, 0xad, 0xd, 0xfffffffc, 0x28, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x8001, 0x8, 0x8712, 0x80}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'ip6erspan0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="635edc8fa669433be135bda1b006060f71280d6665001299a186acff4fa35487deb4bb04d42f43fc4a7abd80461b8c17ec6dea11c157576f450eb466b8469c063e5679dd1cc8324b11087712b2a44e3d3ebeaa11ec239118bcd0b7762dadd9162a5d897a76ebb3568aec94013b157dd1fca79238004f44eda61cb866bc8866af846f3a997ae3fe54e546d9abc8b76773077e9e77cfcf387d1d5181d62f07d1695c0dccc7d66a6981f037407e9becde86a7ea043f188b6ac6b443b63a19512e50d29f52d09fa2c2dc99687ceea4798daf32ac663e184d0395e2b90046e84069c58c766d4a8a5d8920f4f1b372", 0xec}], 0x1, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010101, @private=0xa010101}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x23, [@remote, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @generic={0x88, 0x10, "f0df3c257ffb21b558ff07861a36"}, @timestamp_addr={0x44, 0x14, 0x6f, 0x1, 0x7, [{@loopback, 0x7}, {@remote, 0x5}]}, @timestamp_prespec={0x44, 0x1c, 0x67, 0x3, 0x0, [{@private=0xa010100, 0x5}, {@rand_addr=0x64010102, 0x4}, {@empty, 0x674}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@generic={0x94, 0xd, "0ace7b2f44a6d2a08e43e3"}, @timestamp={0x44, 0x8, 0x81, 0x0, 0x7, [0x9]}, @timestamp_addr={0x44, 0x1c, 0xc5, 0x1, 0x9, [{@loopback, 0xc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8a}, {@rand_addr=0x64010101, 0xbb8}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @rand_addr=0x64010102}}}], 0xf8}, 0x24000000) 43.739675857s ago: executing program 7 (id=2874): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) syz_emit_ethernet(0xb0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaabaaaaababb0800462000a20067000003029078ac141438e0000002890fd60a010101ac14140bac1414bb861300000000020d0a0961e97df018905801861fffffffff000d269f0a64b0543761217d2806060f2fe55f01061ab2c74900001409907864010102b01a430cfe75f08844db8a38b40a39f81d712987ef4f7f6b29374e2139e653e6ec7f789fe4daac984d3070757ee7bbc5f429cf382b31f8d09dd806b3f0727afdd575"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x8}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) (async) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}, {0x1, @none}}}, 0xb) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r3}, 0x38) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 43.600588186s ago: executing program 7 (id=2875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r1, r2, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r3, r4, 0x4, r1}, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x10c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xd8, 0x2, [@TCA_MATCHALL_ACT={0xcc, 0x2, [@m_gact={0xc8, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x7f, 0x2002}}]}, {0x83, 0x6, "39d00f07fe47fd76558d2aa61f546e535d00172114f621ad74c352e444cfa7697a324ecc7667991a99cdf2341691ff832eda1c89606305c73ea187f84b56609534ea55be1c8b8eaf1b48c0266911086fc666c729457d95de7e9346e71f767b7dc1600000000000000000000000000000bb8e2ce19c7a7f9f00000000000000"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x30004094}, 0x4004810) 43.499107178s ago: executing program 7 (id=2876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0xa0}}, 0x0) 43.4420001s ago: executing program 7 (id=2877): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r0, r2, 0x25, 0x0, @val=@netfilter}, 0x40) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) syz_emit_ethernet(0x105a, &(0x7f0000002900)={@local, @remote, @val={@void, {0x8100, 0x2, 0x1}}, {@ipv6={0x86dd, @dccp_packet={0xa, 0x6, "a56893", 0x1020, 0x21, 0x0, @loopback, @remote, {[@fragment={0x2f, 0x0, 0x5, 0x1, 0x0, 0x8, 0x65}, @fragment={0x2b, 0x0, 0x5, 0x0, 0x0, 0x8, 0x64}], {{0x4e21, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x0, 0x3, "e4176f", 0x4, "a700c8"}, "cbdc42fdae205cdfd0fa8b934ecbcf86ae21ca68493fccc3e564f7d06656c828278f59c7a20fb5a5af5c7cbae23a95e261fa8b83cc51e5fd12fffbf3f348c42b5c47d64869d7f12f602770c49b77b5bd10dce189cafaca9c465b3b864cbe4596c9a6807d99950aaf5aca6f115ce81b616e449d5721ba3d92ca366439d003af543c92884fe3b98b428ffff4a5a4af3ff4963b68f0a0014bb8c14d78edca3a1a34eaf2e97f952ce06d3d223168593d2ee9bdd403c8e48e65fe3b55794fbc26d969c44c46d88670a4fe073c2b0df97ed13f8352c1ca4355f5fa43beafd7af82e4e01dc29623fd568b1afa1032da423e2c0f263ddefb636d4474eca57b612ddf9ce71e2663de8f6593fd8269fa04153b0a9cfaa8a77ec070da8c2ae5d51f291249e610df66f3a89c8a8c68d091e4f161a2e80b8a862fc2df8c4d9a81bdfcf66c371db8207473efcb5d4da41f882b86255ba24ffba3a4ae8093ba31e31e54974e58c9c284cc6fa060cb1f52290860cedde52b5d8b48ba632b11ca72b1bff5ca77bd098f40b91d2c9f62174893f2d56bd2b24c46c9aeeff5f3cf68c4c225ec639e30d28d6e8fe2e68c6e8143973049004f95b38012c25357677a94c70f524bb4fc24f2e044bc767c90ec44f22f6132d7fd2e345afa79e6da0d99df761f2f6a7d9ca288f0d6bfe3d19c9a0ff2f0b965cc1727b3531d9193d1748933b89f78c6c9d691c18c2afa7b824e3f2bdffcee7606ec3ba543451f82d6aeec874471d17fabd7d98da44ab681011ba08a6c7d71853d2d3c617995d38da299d9bffbf0e046dd1d2f1f254f1c638fe1d8c94f24a19bdc6b5b380bd28fd4d03c316e317ec689f40e0f267f92f952c40b6064b4bd776c1f66d506eb8ced15ae6d24b18349fa6eb796050dbab652eaca19d0c126ef6ca12f5f5a1e031ac3866e129d75164487e61e30fd0e931d1118c6e6222f8f3487c063195c40af6ff759ddb029b4dd7f1e7d0846e55f5901905ce86116d55e3620af34cf5d93377e9bde31ba23b77b5669323586526ac7e2495da0664f29df6ac5d31abc9139c458c660e51c545c5c6add83a0e74b12a53c9d26bfb2e1c655ea07d103f8c04f9590f2de09e84d7b81584bab9cdf56fff18a1da5f27bacf4c4707fcafe7c165cdf6614f9d7f716e3481b542107220e5a2310b9d0e32db3d3cf2dcb22840a2d565c034b7fd1d456c46fcb85cf7a78527a5e6eb01e3a6439b4d82b82dcc4feaa0acf2611b9c39f988b4a89dca17e694de5e5517f95b239f98c81152eecd0597e119741e514ca56666a42e4eb620d667d133e778db351cc6041949f700d0b79d24d0a37c1c0995aa05413ae881f0fbbe21ec57bde98b9a8d07bdee6dfec5bed7143eaa2bcf387fa2b89871e2beb27f1d8edd3f19bc87d93d16b4a6d2cd404e7d3983375d23f506fce13ec045628724b8f1fa7533badec539e98f48cb4ded3359bcc246890f48d3a46a8d6a835bbcd28eaa19352076f6ef62c40abe38b22a9ca14b0f96b71f8b38c5a2214f3dbfc66a00507339f49e695720608d4018121382ed56177b4a38a446c606c7348f495f916cbba81577fcdce11ff35c15d418cbbb51d96bf7df187cc26eb7e25a9ab2eb39d8b4f5485a812d563290408bb0f1acebbcbc67bb8de222f8cf8f47d625b0b0a0079a361b4a475f5a220b58fe47fc7cd699f88e6ce4b5def833a91c05b28641c1ba051e0038a86cbf9bf55118b1ba885e4c1ceabb3918d05de5a54c5d855968261fb2cfa3c8d860c58bb5279f3bf5b4b8110dc0797770ada1b08e7b0d2544a0402f667b6458e9925739f5e4873c4b941ce8c3e8e9fac185d16077b17120abc24b894f5cdb4c47955a40fa5dff6576a8b2bbb221f2f30382991ada7961415c1a9fb35db9343c8115e02b5398cd9c7f6b9f7dac960f9002e03eace6373b285210883407b9e14db633d2533b6567a19f78dba65604a733589b51c8c818e0c08de6b11b50f20dd23e402781aafefa473a9aacafa6bb5697e7f0aeb4772205cdd163cdd15efd73489c250e360c8224984e0153756d6a7ac3475494c678f8015b3f94020e3fdf797ec85c1293712bd4337ec62c6266f77f1bd4d26638509dfed2c9912d2caa71f2b4844c6ff6bdb69f3c525f00072936de05057dd73c3fd366455cdc2c8954f54944ac9d63a5d9d8620e05fc4d74f009e780527f3c6c8b30cd192d37524ed51ba6d3766c02e91e561f6fe65aa96fc7e978aa84c73812e97c30ae27e5c64198f13baf7aeccfbfdf815c3e919a97c946951668219812d16a13de30139414917811d9ba7ed81a282c2f028905857a44f65e42e08699d83ce095e8c36e720785bf8b252e3a47fe25c37651a2fb1a880c2af7a92d5d7705d9b2fa2caa1d94ab0d12d0bff5014f111f31c74a17d1545123e8da47abfcd2eb04fd31016de7ef6e0f2d72d277a0286498228ecc2a16eaf5db7a37be81eb9acaca75cbb6871ea8aee167af51f0492b14f688dc5ee08fb55de994560fe4d78d0bff3e83ec5ffd02569a4d347115546fafd2853e2b52b223761507b1e9ff23a4c11cc1df8af84fc7b64282f0329ffd120b31cd93f277a18b836f298044cfb3d451a8257beb68d80c6a6c2f6bb2411b5a52fd3a78a83662d006c4020278ac5d2c9d5e3adca690dee1c9fe34aafdfffa88c218b5f15029d4308cd87a520cab30503881e99d5fae5b411ec991d1aa9a85e0ead29ad00b6f6c113db9a7a27e38b0d362d8af24c7adbd8adde5b55f342a434d92597270869c15ad1247931270b2d53fec07467cef9c38699868edca180ddfcf36267a64d2a0e6b385c413d4b63b0301e13ca1035f5a00d80646dd8819ecc2132c75c96012f111cb48559cce4739f0e7df9c288eaa20444d86bcd707ae9c09d5b30881631c2a614087c3f4c807b879e92618da96895af6c431b5e48120a25b46383248a60309be7c3a1d49f21c0772534a6bcfbc76bc18deb82de12c34d90c13cb0f6ec4b84dc7e8138392fd60b7bef28682d090bdf5128f595bc94b571539b0c267269ceabc9d2c56ba082c3b406f36f54d59830a8d61267f51f421358317333956e8090d35f904a0e6a30a7c3f51cdf3c44ecb8e23552252c6bad351f9158083326a0b6359485554148acbb765b2561f0c7d50b0aa302a3e8a597cccef8aef68083658f5e521a2ae9eb720baae97b80c26cc63283112ee39355f48f2f0730127a4a302b64a7498d4214e76a56753d7fcdf6fe61a2085ccc86b265cb348890207115362a68b84a5717f871eb3ab7ef4eaa03992d0f409cf5fa546d73fa7e0de8148a796b0a045ec9fabed93031c4d2610ae0dff2d11b26d5da1cc9bf255228749d3381e9cf67176b85c73f1011c56081309834b14a5402e7250b80412c5276ec50bb0fbe370288894611da34a8ac9facd9446b1853a74436ed9ba4abc28527a68b2e14c0aac08e495a8e248f0e95768eb5ec2c371e5325360d042654b8789b4bb2e4ce701e1036bf664c9238faf15b2debe1f109c424b024398cf78bbb1fe847ed50dcd7a84dabcf2b8ec6617fd3fb37141a585f75136407c406061bb308f828a96f6d7c2945240a7d0e7cd71b3c3e5d9c6d97aa073d5427e998072a0e8a4f6217f5ff6822fdda8046b7d970f988865195d8e42fedef51d0e5f49af2c837ab52b55051c33b7b79f937379fd1232a9c20b225bf6e0b1784c337d23f78fd53f79abda1e20e04edcfab2fa6003d5e34d02236251e24ee14408238f54228d1ae21910a47caf7575f5d7e27718bfbc8cae4d77afa24a46da346a3e78e24e55a5c0f23d063a49bb43a6ae60b8dbc6422e7bacd6287f6808238ac10276c527120d0d22685a238b0139cd55e6f3cdb32d0a7a00378bbf0aec14605cc7cfa02048b96fe829f55b09cd396e91cc5bb4fab92ae8e3d1c868084adbab5a1ef6ea11e92f30691a594aa2bbf055e7272f4adc911cfe7356c96284fb27c6b50752b439c69734571843c24cc3f8c93957095547d8634ec4029ec00090c25a0c225dd84a869a77e07d4fa68428208193abc57ff44db43b76dbe7b83d5d5695e0c4e2bc7cfd8533d176be350241554a5c7d81e3c96ee3ad2c590bc03851760b9565e947235c5ef5441376d4f86dc396c577baae17ce0c0fdcc94a374da38f45557d295e5867ad5b2f962f3662fa9cc6d4062c1bf55aa2cbd1a04b05676b6db104402d44de2b74b5c5701e470c6e899a331d8667c6337815103bfba5482051583fb6aef7d07844694f1bf887928b149cf4bdd572faab02b43d7c60b6e034318cdd7b869671231b9541a6b31462b443c040f3013fdb0b40882bc7dd1cbc87fe53b6b7798496641ac1b99193b074660e83bd19d07633e8dc5a030537546e8f1f0b0cc2267210f9c6e7bda9006c4a956b8f5cb51ec3e047b64de92222d59dd56e60fde40c273b34cd46c61dd2bf8ac1af973dc1acb03e30b17b1da85028d58616a7c8e60df484b213d9de9ba90252682f2e1000d38056bbd4c40e91a1b9c3d752d09514b159caab48c12b21de667af55b1ee8c8f726608b017f6651f216272472e90a412a139bca9a1c67bbbe6bf5b64868740eb0212ab16886d937c1f085fdb281cdb271a8f4d1259125b4a8ab1abe26294ab6df6eb46d2691e0eebe32de7ccf7edb7da013c8906bf4f143a6ba7233eaefed86575cd8afaec87b7a162b2c863f14c2b7b82851d81872f085eb582de645543aaa852ca1a0de1af94540aeac88c65b4b8cc9f0befd48b47408603111a7eda0c75887213b3bd2bab9860118a72640b59e43af30ad0f782f58427cc5918e3b55881d2ee8c84833309d9f8057baa28864ae9075e676c5650883517a9cfcde4f400ec24b45dce7f0e7ec7d6bb99314b22b406dd91e06e133c5415e3835e1f458f68c5a94b5a78ed6cf9d12ea0bb3c19b4be3cb757423f5cee2f6248704578c7ecf668c34f3828f77b675737bf6bd7bc1edce6d55d38d89b6ac9a500cca5e598478098860897700e0f25a7ffbe64eaa037ba6740527c661c856380025213d6b43a374f799957e7b6c4d953c491e15dff4ff300adb25785d65743889b12289a6206222492f7e6bd9ed28aeec2b23887f4e850ad9a265a4e61a2d36f1cce329b125cb1910ffb49bc1b17630e4cf50654324cb2c5dff084446d114617caa63ccfae681b8af737a3bfd97a3e7355f295d8fd1e21cf1a1c54cd309fcd2314ff4cdb926457e7f06b9df531f781dcaa5e92c0bd95c1225445c4fa3dfbe80ecd9a65f0ea41ee06f21b955cd3f2cf76423d61b505556da9871dffa64c5aced7fc264dd5368d90d807ba3a4d560ec8b465d6c8a7e2437a56470b9a5966956521e75de6edc99d1eea1edac9f524db53e4c19d091a13a299cbad23b24cfc21c2428d676eba9b8ec34adaa75b2d7d12eb82a264c45a0444de4af1b35600897d3f953a84ec45e4868fde03c05e6d0e43eac0a7a47203c27ee2493f2245f816b12ed579745e1aea8994bda3866c2db880b0bf534ab6fe93ff148b934c85507b6a2c9e79f31845033124173aad7a7f31f4c8e77a7c6fa0c0fa93960c7d55244708829d29d8d1fa2d41c9c922e43762afe033222dffc8d941471d2487fc5b7181793807dfbc78119bca0b499467f98126e893481f580cc9fc442528f9fdec8ddec976f6439b55446a5ed7409713a183da5633c6dd78d1755c807698376e27909edf43df5e34a4ac9be3309f0ba5da1967e45d3cdd818e32107ea3fb7bfe48dc3179f137671fbc4faa7b674217079ba0b8f6f2f0e348a3876e59cb7ba11ce6"}}}}}}, 0x0) 43.302025325s ago: executing program 7 (id=2879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000280)=""/167, 0x7}) getsockopt(r2, 0x200000000114, 0x5, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) close(r7) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 28.278626028s ago: executing program 36 (id=2879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000280)=""/167, 0x7}) getsockopt(r2, 0x200000000114, 0x5, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) close(r7) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.328339178s ago: executing program 0 (id=3382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vxcan1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c001400", 0xf}], 0x1}, 0x4005) 2.018271199s ago: executing program 6 (id=3385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0x9) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) sendmmsg$inet6(r3, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x2}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x4, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@flushsa={0x14, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfc, {0x33}}, 0x14}, 0x1, 0x0, 0x0, 0x1081}, 0x4000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010800000000000000000000000011000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073"], 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 1.763706673s ago: executing program 0 (id=3389): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d3800091115c000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="12ad9000", @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf256600000008002700010000000400b8000800b70084000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0xc, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, r2, 0x8, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x39}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000004000000", @ANYRES32, @ANYBLOB="0000000000000000000000010400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1500020003000000000000000000ca4de9ef757701000000"], 0x19c}, 0x1, 0x0, 0x0, 0x20040800}, 0x4008094) 1.760299309s ago: executing program 4 (id=3390): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x40488c2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.55365127s ago: executing program 0 (id=3391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050003000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) (async) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100037040000800000007c698ea40000", @ANYRES32=r6, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) (async) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000380)) (async) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x20}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c084}, 0xd0) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r6, @ANYBLOB="0800020001000000080008"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 1.47703661s ago: executing program 4 (id=3392): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000070b7ca8ac53a000012742c0000000000000055bc2632521cce93f6f8070227c1a3ae01000000000000009749d065f02ff0127022f89c0b7c082ce60c403ce981bbe4660c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x7, 0x2, 0x9, {0x0, 0xea60}, {0x77359400}, {0x3, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x1b, 0x2, 0x0, 0x0, "37e94859f9404f02420e8071dbad3cbbe39e37262b6530feed9a33f1d301e41c61a796e0c67e6fdb53b2a09e97c3afbd5eb59ef0745ab5a33bb7300dc739fcb2"}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000200)={0xd82, 0x8, 0x3}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"/12, @ANYRES32, @ANYRESDEC=r2, @ANYBLOB="2ec8978d0d3c44081c3b61b32ee0d236fde65e80461dae85588b0dc3b4266b312e18d6880c928bd29b78e3e4c9f50ad4a5814ab1ea5e24922dc0"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.459321564s ago: executing program 8 (id=3393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf251200000008000300", @ANYBLOB="06001200970a00000a00060008021100000000000600b500f30100000600b500a20000094e00be"], 0xb8}, 0x1, 0x0, 0x0, 0x20000}, 0x400d4) 1.382091864s ago: executing program 0 (id=3394): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x20004080) 1.304482125s ago: executing program 8 (id=3396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1008, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PRATE64={0xc, 0x5, 0xd1901bfe29d4b54d}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x22, 0x10}, 0xfffff, 0x3, 0x229d}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000002000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.199173446s ago: executing program 6 (id=3397): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x50, 0x0, 0x0, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x50}}, 0x80) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0xf0}}, 0x20000010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x41}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000", @ANYRESDEC=r6], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.069450908s ago: executing program 9 (id=3399): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x14, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b37, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) 917.605753ms ago: executing program 9 (id=3400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x20050800) 854.396543ms ago: executing program 8 (id=3401): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r0, r2, 0x25, 0x0, @val=@netfilter}, 0x40) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xc4a, &(0x7f0000002900)={@local, @remote, @val={@void, {0x8100, 0x2, 0x1}}, {@ipv6={0x86dd, @dccp_packet={0xa, 0x6, "a56893", 0xc10, 0x21, 0x0, @loopback, @remote, {[], {{0x4e21, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x0, 0x3, "e4176f", 0x4, "a700c8"}, "cbdc42fdae205cdfd0fa8b934ecbcf86ae21ca68493fccc3e564f7d06656c828278f59c7a20fb5a5af5c7cbae23a95e261fa8b83cc51e5fd12fffbf3f348c42b5c47d64869d7f12f602770c49b77b5bd10dce189cafaca9c465b3b864cbe4596c9a6807d99950aaf5aca6f115ce81b616e449d5721ba3d92ca366439d003af543c92884fe3b98b428ffff4a5a4af3ff4963b68f0a0014bb8c14d78edca3a1a34eaf2e97f952ce06d3d223168593d2ee9bdd403c8e48e65fe3b55794fbc26d969c44c46d88670a4fe073c2b0df97ed13f8352c1ca4355f5fa43beafd7af82e4e01dc29623fd568b1afa1032da423e2c0f263ddefb636d4474eca57b612ddf9ce71e2663de8f6593fd8269fa04153b0a9cfaa8a77ec070da8c2ae5d51f291249e610df66f3a89c8a8c68d091e4f161a2e80b8a862fc2df8c4d9a81bdfcf66c371db8207473efcb5d4da41f882b86255ba24ffba3a4ae8093ba31e31e54974e58c9c284cc6fa060cb1f52290860cedde52b5d8b48ba632b11ca72b1bff5ca77bd098f40b91d2c9f62174893f2d56bd2b24c46c9aeeff5f3cf68c4c225ec639e30d28d6e8fe2e68c6e8143973049004f95b38012c25357677a94c70f524bb4fc24f2e044bc767c90ec44f22f6132d7fd2e345afa79e6da0d99df761f2f6a7d9ca288f0d6bfe3d19c9a0ff2f0b965cc1727b3531d9193d1748933b89f78c6c9d691c18c2afa7b824e3f2bdffcee7606ec3ba543451f82d6aeec874471d17fabd7d98da44ab681011ba08a6c7d71853d2d3c617995d38da299d9bffbf0e046dd1d2f1f254f1c638fe1d8c94f24a19bdc6b5b380bd28fd4d03c316e317ec689f40e0f267f92f952c40b6064b4bd776c1f66d506eb8ced15ae6d24b18349fa6eb796050dbab652eaca19d0c126ef6ca12f5f5a1e031ac3866e129d75164487e61e30fd0e931d1118c6e6222f8f3487c063195c40af6ff759ddb029b4dd7f1e7d0846e55f5901905ce86116d55e3620af34cf5d93377e9bde31ba23b77b5669323586526ac7e2495da0664f29df6ac5d31abc9139c458c660e51c545c5c6add83a0e74b12a53c9d26bfb2e1c655ea07d103f8c04f9590f2de09e84d7b81584bab9cdf56fff18a1da5f27bacf4c4707fcafe7c165cdf6614f9d7f716e3481b542107220e5a2310b9d0e32db3d3cf2dcb22840a2d565c034b7fd1d456c46fcb85cf7a78527a5e6eb01e3a6439b4d82b82dcc4feaa0acf2611b9c39f988b4a89dca17e694de5e5517f95b239f98c81152eecd0597e119741e514ca56666a42e4eb620d667d133e778db351cc6041949f700d0b79d24d0a37c1c0995aa05413ae881f0fbbe21ec57bde98b9a8d07bdee6dfec5bed7143eaa2bcf387fa2b89871e2beb27f1d8edd3f19bc87d93d16b4a6d2cd404e7d3983375d23f506fce13ec045628724b8f1fa7533badec539e98f48cb4ded3359bcc246890f48d3a46a8d6a835bbcd28eaa19352076f6ef62c40abe38b22a9ca14b0f96b71f8b38c5a2214f3dbfc66a00507339f49e695720608d4018121382ed56177b4a38a446c606c7348f495f916cbba81577fcdce11ff35c15d418cbbb51d96bf7df187cc26eb7e25a9ab2eb39d8b4f5485a812d563290408bb0f1acebbcbc67bb8de222f8cf8f47d625b0b0a0079a361b4a475f5a220b58fe47fc7cd699f88e6ce4b5def833a91c05b28641c1ba051e0038a86cbf9bf55118b1ba885e4c1ceabb3918d05de5a54c5d855968261fb2cfa3c8d860c58bb5279f3bf5b4b8110dc0797770ada1b08e7b0d2544a0402f667b6458e9925739f5e4873c4b941ce8c3e8e9fac185d16077b17120abc24b894f5cdb4c47955a40fa5dff6576a8b2bbb221f2f30382991ada7961415c1a9fb35db9343c8115e02b5398cd9c7f6b9f7dac960f9002e03eace6373b285210883407b9e14db633d2533b6567a19f78dba65604a733589b51c8c818e0c08de6b11b50f20dd23e402781aafefa473a9aacafa6bb5697e7f0aeb4772205cdd163cdd15efd73489c250e360c8224984e0153756d6a7ac3475494c678f8015b3f94020e3fdf797ec85c1293712bd4337ec62c6266f77f1bd4d26638509dfed2c9912d2caa71f2b4844c6ff6bdb69f3c525f00072936de05057dd73c3fd366455cdc2c8954f54944ac9d63a5d9d8620e05fc4d74f009e780527f3c6c8b30cd192d37524ed51ba6d3766c02e91e561f6fe65aa96fc7e978aa84c73812e97c30ae27e5c64198f13baf7aeccfbfdf815c3e919a97c946951668219812d16a13de30139414917811d9ba7ed81a282c2f028905857a44f65e42e08699d83ce095e8c36e720785bf8b252e3a47fe25c37651a2fb1a880c2af7a92d5d7705d9b2fa2caa1d94ab0d12d0bff5014f111f31c74a17d1545123e8da47abfcd2eb04fd31016de7ef6e0f2d72d277a0286498228ecc2a16eaf5db7a37be81eb9acaca75cbb6871ea8aee167af51f0492b14f688dc5ee08fb55de994560fe4d78d0bff3e83ec5ffd02569a4d347115546fafd2853e2b52b223761507b1e9ff23a4c11cc1df8af84fc7b64282f0329ffd120b31cd93f277a18b836f298044cfb3d451a8257beb68d80c6a6c2f6bb2411b5a52fd3a78a83662d006c4020278ac5d2c9d5e3adca690dee1c9fe34aafdfffa88c218b5f15029d4308cd87a520cab30503881e99d5fae5b411ec991d1aa9a85e0ead29ad00b6f6c113db9a7a27e38b0d362d8af24c7adbd8adde5b55f342a434d92597270869c15ad1247931270b2d53fec07467cef9c38699868edca180ddfcf36267a64d2a0e6b385c413d4b63b0301e13ca1035f5a00d80646dd8819ecc2132c75c96012f111cb48559cce4739f0e7df9c288eaa20444d86bcd707ae9c09d5b30881631c2a614087c3f4c807b879e92618da96895af6c431b5e48120a25b46383248a60309be7c3a1d49f21c0772534a6bcfbc76bc18deb82de12c34d90c13cb0f6ec4b84dc7e8138392fd60b7bef28682d090bdf5128f595bc94b571539b0c267269ceabc9d2c56ba082c3b406f36f54d59830a8d61267f51f421358317333956e8090d35f904a0e6a30a7c3f51cdf3c44ecb8e23552252c6bad351f9158083326a0b6359485554148acbb765b2561f0c7d50b0aa302a3e8a597cccef8aef68083658f5e521a2ae9eb720baae97b80c26cc63283112ee39355f48f2f0730127a4a302b64a7498d4214e76a56753d7fcdf6fe61a2085ccc86b265cb348890207115362a68b84a5717f871eb3ab7ef4eaa03992d0f409cf5fa546d73fa7e0de8148a796b0a045ec9fabed93031c4d2610ae0dff2d11b26d5da1cc9bf255228749d3381e9cf67176b85c73f1011c56081309834b14a5402e7250b80412c5276ec50bb0fbe370288894611da34a8ac9facd9446b1853a74436ed9ba4abc28527a68b2e14c0aac08e495a8e248f0e95768eb5ec2c371e5325360d042654b8789b4bb2e4ce701e1036bf664c9238faf15b2debe1f109c424b024398cf78bbb1fe847ed50dcd7a84dabcf2b8ec6617fd3fb37141a585f75136407c406061bb308f828a96f6d7c2945240a7d0e7cd71b3c3e5d9c6d97aa073d5427e998072a0e8a4f6217f5ff6822fdda8046b7d970f988865195d8e42fedef51d0e5f49af2c837ab52b55051c33b7b79f937379fd1232a9c20b225bf6e0b1784c337d23f78fd53f79abda1e20e04edcfab2fa6003d5e34d02236251e24ee14408238f54228d1ae21910a47caf7575f5d7e27718bfbc8cae4d77afa24a46da346a3e78e24e55a5c0f23d063a49bb43a6ae60b8dbc6422e7bacd6287f6808238ac10276c527120d0d22685a238b0139cd55e6f3cdb32d0a7a00378bbf0aec14605cc7cfa02048b96fe829f55b09cd396e91cc5bb4fab92ae8e3d1c868084adbab5a1ef6ea11e92f30691a594aa2bbf055e7272f4adc911cfe7356c96284fb27c6b50752b439c69734571843c24cc3f8c93957095547d8634ec4029ec00090c25a0c225dd84a869a77e07d4fa68428208193abc57ff44db43b76dbe7b83d5d5695e0c4e2bc7cfd8533d176be350241554a5c7d81e3c96ee3ad2c590bc03851760b9565e947235c5ef5441376d4f86dc396c577baae17ce0c0fdcc94a374da38f45557d295e5867ad5b2f962f3662fa9cc6d4062c1bf55aa2cbd1a04b05676b6db104402d44de2b74b5c5701e470c6e899a331d8667c6337815103bfba5482051583fb6aef7d07844694f1bf887928b149cf4bdd572faab02b43d7c60b6e034318cdd7b869671231b9541a6b31462b443c040f3013fdb0b40882bc7dd1cbc87fe53b6b779849"}}}}}}, 0x0) 808.049072ms ago: executing program 6 (id=3402): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x40488c2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 727.133495ms ago: executing program 8 (id=3403): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x200, 0x80000, @mcast2, 0x4000}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc01008c000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000480)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001, 0x0, 0x3, 0x4, 0x9, 0xc}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xe, 0xfa, 0x7, 0x2, 0x101, 0x6, 0xffff}, &(0x7f0000000100)={0x8000000000, 0xffffffff, 0x5, 0x0, 0x6, 0x3, 0x6b67db5e, 0x3}, &(0x7f0000000240)={0x6a, 0x8, 0xd24, 0xfe, 0xea3f, 0x7, 0xfcd, 0x36}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x4]}, 0x8}) 726.162836ms ago: executing program 9 (id=3404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="06001200970a00000a00060008021100000000000600b500f30100000600b500a20000094e00be005eb76da72b51083c14d5e1afbc103fc35886aa4c5f5abcba6a10a3cb2ddf7be8d24bf97418a580c50884b93180d82044da3d"], 0xb8}, 0x1, 0x0, 0x0, 0x20000}, 0x400d4) 678.177483ms ago: executing program 6 (id=3405): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, r0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000400)={{0xffffffffffffffff, &(0x7f0000000200)='[+!+!\x00', 0x2000, &(0x7f0000000240)={@align=0x78, {0x10, 0xf49, 0x8, 0x7fffffff}}, 0x1ff, &(0x7f0000000280), &(0x7f00000002c0)=0x9}, {[0x0, 0x0, 0x0, 0x8]}, 0x9, 0xee, &(0x7f0000000300)=""/238}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008881}, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x50000}, 0x40004) close(r1) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f0000000780)={0x23}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000008c0)={'broute\x00', 0x0, 0x4, 0x13, [0x6, 0x4, 0xc, 0xcdf9, 0x7, 0x9], 0x9, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000880)=""/19}, &(0x7f0000000940)=0x78) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000a80)={'broute\x00', 0x0, 0x3, 0x4d, [0x200, 0xf, 0x9, 0x2, 0x639, 0x1ff], 0x5, &(0x7f0000000980)=[{}, {}, {}, {}, {}], &(0x7f0000000a00)=""/77}, &(0x7f0000000b00)=0x78) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000b40)={0x40, 0x2, 0x1}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000f40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x108, 0x14, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0xc1, 0x8, "c950464b626a5bcf45eb22f2ad95f67a8480044d88e947972c1f1128d21bb947da76729fd9285e0f54887d5e166acfbe7fd3cecc7a21f83a08a78b66de806e1799cda74fe189878071dcffd6ffab594df8f679776ac477ccc6cf81d0c1b91e2a58de2bef1d514264cd0c90aba83e1a1ba317d18f0221d0f6c9963405cec147d172eb4a76adb742022c6ad8a9842dfd9b12ccb38490717c546423e2f07cb572f820f8fc0274a7192d769c2ca421682616ab435cc91aef0c3627afba9c08"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x128, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xcc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x25}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x31c}, 0x1, 0x0, 0x0, 0x4840}, 0x8000) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000f80)={{r3}, {@void, @actul_num={@val=0x2d, 0x8001, 0x74}}}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000fc0)) syz_genetlink_get_family_id$smc(&(0x7f0000001040), r1) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000001080)=0x7, 0x4) bind$bt_rfcomm(r1, &(0x7f00000010c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x81}, 0xa) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000001100)={0x4, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e20, 0x3, 'sh\x00', 0x0, 0x7f, 0x67}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={r3, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000001180)=[0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f0000001200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0xba, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10) r6 = accept(r5, &(0x7f0000001440)=@l2, &(0x7f00000014c0)=0x80) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000001500)={@empty, @local}, &(0x7f0000001540)=0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r1) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000001680)={&(0x7f0000001580), 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x34, r7, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x11, 0x115, "1abd99fe1779233757e096df3f"}]]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000016c0), r4) close(r3) recvmsg$unix(r3, &(0x7f0000001b80)={&(0x7f0000001700), 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001780)=""/20, 0x14}, {&(0x7f00000017c0)=""/153, 0x99}, {&(0x7f0000001880)=""/37, 0x25}, {&(0x7f00000018c0)=""/12, 0xc}, {&(0x7f0000001900)=""/62, 0x3e}, {&(0x7f0000001940)=""/207, 0xcf}], 0x6, &(0x7f0000001ac0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x120) 570.190939ms ago: executing program 0 (id=3406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="06001200970a00000a00060008021100000000000600b500f30100000600b500a20000094e00be"], 0xb8}, 0x1, 0x0, 0x0, 0x20000}, 0x400d4) 531.497088ms ago: executing program 6 (id=3407): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x0, 'vlan0\x00'}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000180)='\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x628400, &(0x7f00000001c0)={@align=0x80000000, {0x0, 0x3, 0x1, 0x8}}, 0x7c7c, &(0x7f0000000200), &(0x7f0000000240)=0x7a}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000002c0)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @multicast2}}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x40800) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000440)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x2c) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000004c0)=""/114, &(0x7f0000000540)=0x72) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0xc83f4fe51ca37755}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x47}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x2000a000) bind$netlink(r1, &(0x7f00000006c0)={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000700)={0x0, 0x0, 0x20, 0x8000, 0x5}, &(0x7f0000000740)=0x18) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000780)=@assoc_value={r4, 0x9}, 0x8) socketpair(0x5, 0x4, 0xe486, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1c4, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xf31c}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6aa4}, {0x6, 0x11, 0x10}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0xff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x9}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x800}, 0x10008800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40)={r1, r8, 0x25, 0x18, @void}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000b80)={r4, 0x2, 0xe0b8, 0x7}, 0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000bc0)=@int=0x8001, 0x4) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000c00)={r4, @in6={{0xa, 0x4e22, 0x10001, @private1, 0x2ebde1ee}}}, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000cc0), &(0x7f0000000d40)=0x68) write$cgroup_subtree(r1, &(0x7f0000000d80)={[{0x2d, 'rlimit'}, {0x2b, 'net_cls'}, {0x2b, 'cpuset'}, {0x2d, 'blkio'}, {0x2d, 'cpuset'}, {0x2d, 'rlimit'}, {0x0, 'cpu'}, {0x2d, 'cpuacct'}]}, 0x3e) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000dc0)) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000e00)={0x0, 0x80000001, 0x3, 0x200, 0x500, 0x9}) getsockname$packet(r5, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000e80)=0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000ec0)={r4, @in={{0x2, 0x4e20, @empty}}, 0x24e4, 0x4}, 0x90) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r6, 0xc038943b, &(0x7f0000000fc0)={0xff, 0x20, '\x00', 0x1, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000001080)={0x9, 0x48, '\x00', 0x1, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 496.415695ms ago: executing program 9 (id=3408): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 433.990778ms ago: executing program 4 (id=3409): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf253400000008000300", @ANYRES32=r3, @ANYBLOB="0a0034000101010101010000140055006f3b3252e4c16c64a9dd987fdb721cc0f2490508a4d4210be65ca9514854c059c608bfe6a9033e2afbf86da0530f768f3c38e4576ce12cf3880bfae490af224342433516c5f55d4ff060ad090b0b7782a2f9026dabe5b2ee000a1354145bcf7c006fde14aa9be65acdcfe5e3a3aba015239f990b49be672113e2e9ccf2c26e130dce0d27ebbb"], 0x3c}, 0x1, 0x0, 0x0, 0x20040002}, 0x40000) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x75000000, 0xe}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c4013adade67"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4822934ae5b1"}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r7, r6, 0x25, 0x2, @val=@perf_event={0x5}}, 0x18) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x4001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 433.728787ms ago: executing program 8 (id=3410): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0xd00, &(0x7f00000001c0)={&(0x7f0000000300)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x76}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40095}, 0x8040) 428.737788ms ago: executing program 0 (id=3411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1008, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PRATE64={0xc, 0x5, 0xd1901bfe29d4b54d}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x22, 0x10}, 0xfffff, 0x3, 0x229d}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000002100006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 333.508412ms ago: executing program 9 (id=3412): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x8, 0xa, "29ea30ab"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32=r2], 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x40, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xe4, 0x32}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4088000}, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@updsa={0x10c, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {{@in=@remote, @in6=@mcast2, 0x4e22, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x734c4b15b9d5c4b4}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x2b}, @in6=@remote, {0x7, 0x4, 0x7, 0x5, 0x0, 0x3ba, 0x8000, 0x1}, {0x7, 0x8, 0x30, 0xa}, {0x7a0c39ff, 0x0, 0x2}, 0x70bd28, 0x3506, 0xa, 0x2, 0x67, 0x5c}, [@encap={0x1c, 0x4, {0x0, 0x4e21, 0x4e23, @in=@empty}}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3103000000000000000004"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000440)={0x7, &(0x7f00000001c0)=[{0x8, 0x3, 0x8, 0x7}, {0x12, 0x8, 0x9}, {0xfffb, 0x4, 0x0, 0x7f}, {0x1, 0x8, 0xf, 0x5}, {0xff, 0x10, 0x5, 0x9}, {0x2c, 0x8, 0x0, 0x9f5}, {0x1, 0xf4, 0x8, 0x1}]}, 0x10) 222.044628ms ago: executing program 4 (id=3413): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r0, r2, 0x25, 0x0, @val=@netfilter}, 0x40) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xc4a, &(0x7f0000002900)={@local, @remote, @val={@void, {0x8100, 0x2, 0x1}}, {@ipv6={0x86dd, @dccp_packet={0xa, 0x6, "a56893", 0xc10, 0x21, 0x0, @loopback, @remote, {[], {{0x4e21, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x0, 0x3, "e4176f", 0x4, "a700c8"}, "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"}}}}}}, 0x0) 201.185853ms ago: executing program 8 (id=3414): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x48814) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22004868}, 0x20044804) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d018f0008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r4], 0x24}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x80800) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) close(0xffffffffffffffff) socket(0x14, 0x2, 0x4) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) recvmsg$unix(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2000) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) 124.97367ms ago: executing program 4 (id=3415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x20050800) 56.807186ms ago: executing program 9 (id=3416): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x20004080) 1.145424ms ago: executing program 6 (id=3417): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x1, 0x7fffc, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000), 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r6}, 0x20) connect$unix(r4, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@ipv4_newnexthop={0x94, 0x68, 0x200, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x6, 0x0, 0x10}, [@NHA_ENCAP={0x28, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x24, 0x8, @LWTUNNEL_IP_OPTS_GENEVE={0x20, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x1b, 0x3, "933c3612e62fcf7bd7f1f51685f87b420858dc489fb2ee"}}}}, @NHA_GROUP={0x54, 0x2, [{0x1, 0x5}, {0x1, 0x2a}, {0x1, 0x8}, {0x1, 0x8f}, {0x1, 0x3}, {0x1, 0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x10001, 0x8}, {0x0, 0x2a}]}]}, 0x94}}, 0x24000000) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) close(0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000002060500000000000000000000000000050004000000000009000200e4a37a31000000000c00078008000800000000000500050002000000050001000600000011000300686173683a69702c706f7274"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, r0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x76}]}, 0x24}, 0x1, 0x0, 0x0, 0x40095}, 0x8040) 0s ago: executing program 4 (id=3418): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x1, @loopback}, 0x10) accept(0xffffffffffffffff, &(0x7f00000000c0)=@ethernet, &(0x7f0000000140)=0x80) kernel console output (not intermixed with test programs): 0 [ 237.922536][T12003] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1672'. [ 238.024577][T12003] netlink: 'syz.0.1672': attribute type 1 has an invalid length. [ 238.043058][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1672'. [ 238.058011][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.088342][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.301418][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.331394][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.365183][ T5651] Bluetooth: hci6: command tx timeout [ 238.645077][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1683'. [ 238.749064][T12053] netlink: 'syz.2.1684': attribute type 1 has an invalid length. [ 238.787600][T12053] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.1684'. [ 239.012931][T12064] netlink: 'syz.0.1686': attribute type 11 has an invalid length. [ 239.043318][T12064] netlink: 'syz.0.1686': attribute type 5 has an invalid length. [ 239.057359][T12070] set match dimension is over the limit! [ 239.069007][T12064] netlink: 6548 bytes leftover after parsing attributes in process `syz.0.1686'. [ 239.093485][T12071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.105258][T12076] sctp: [Deprecated]: syz.5.1691 (pid 12076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.105258][T12076] Use struct sctp_sack_info instead [ 239.124946][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1690'. [ 239.136137][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1689'. [ 239.146538][T12076] sctp: [Deprecated]: syz.5.1691 (pid 12076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.146538][T12076] Use struct sctp_sack_info instead [ 239.199900][T12076] x_tables: duplicate underflow at hook 1 [ 239.358144][T12082] vlan2: entered promiscuous mode [ 239.378300][T12082] geneve1: entered promiscuous mode [ 239.397966][T12082] vlan2: entered allmulticast mode [ 239.412097][T12082] geneve1: entered allmulticast mode [ 239.607801][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1699'. [ 239.624924][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1699'. [ 239.864359][T12103] syzkaller1: entered promiscuous mode [ 239.881305][T12103] syzkaller1: entered allmulticast mode [ 239.902234][T12103] Cannot find del_set index 2 as target [ 239.913247][T12119] netlink: 'syz.0.1705': attribute type 2 has an invalid length. [ 240.175493][T12131] openvswitch: netlink: IP tunnel dst address not specified [ 240.189265][T12125] bond1: invalid ARP target 0.0.0.0 specified for addition [ 240.203563][T12125] bond1: option arp_ip_target: invalid value (0) [ 240.233330][T12125] bond1 (unregistering): Released all slaves [ 240.363221][T12140] netlink: 'syz.6.1711': attribute type 2 has an invalid length. [ 240.431958][ T5651] Bluetooth: hci6: command tx timeout [ 240.597646][T12147] 8021q: VLANs not supported on sit0 [ 240.809161][T12163] hsr_slave_1 (unregistering): left promiscuous mode [ 241.444783][T12191] veth3: entered promiscuous mode [ 241.685951][T12207] pimreg: entered allmulticast mode [ 242.277839][ T5651] Bluetooth: hci3: command 0x0406 tx timeout [ 242.463328][T12253] __nla_validate_parse: 8 callbacks suppressed [ 242.463345][T12253] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1744'. [ 242.487882][T12255] netlink: 'syz.2.1743': attribute type 1 has an invalid length. [ 242.579220][T12255] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.588052][T12262] ip_vti0: entered promiscuous mode [ 242.605427][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1745'. [ 242.920407][T12274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.940298][T12281] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.969572][T12281] pim6reg: entered allmulticast mode [ 243.053813][T12285] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1754'. [ 243.069404][T12285] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.077178][T12285] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.116412][T12291] tipc: Enabled bearer , priority 0 [ 243.125029][T12291] syzkaller0: entered promiscuous mode [ 243.130607][T12291] syzkaller0: entered allmulticast mode [ 243.141872][T12291] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 243.182756][T12291] tipc: Resetting bearer [ 243.195706][T12297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 243.220215][T12289] tipc: Resetting bearer [ 243.254304][T12289] tipc: Disabling bearer [ 243.418013][T12314] xt_ecn: cannot match TCP bits for non-tcp packets [ 243.445559][T12314] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 243.595867][T12322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1763'. [ 244.008975][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'. [ 244.144343][T12353] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1773'. [ 244.256218][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1774'. [ 244.281072][T12360] netem: invalid attributes len -5 [ 244.295984][T12360] netem: change failed [ 244.339004][T12360] sctp: [Deprecated]: syz.6.1774 (pid 12360) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.339004][T12360] Use struct sctp_sack_info instead [ 244.367434][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1777'. [ 244.382681][T12371] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.467849][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1779'. [ 244.524667][ T1127] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.556360][ T1127] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.598949][ T1127] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.624870][ T1127] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.838879][T12381] macvtap1: entered promiscuous mode [ 244.849855][T12381] vlan0: entered promiscuous mode [ 244.858810][T12381] macvtap1: entered allmulticast mode [ 244.871167][T12381] vlan0: entered allmulticast mode [ 244.882939][T12381] veth0_vlan: entered allmulticast mode [ 244.915009][T12391] tipc: Enabling of bearer rejected, already enabled [ 245.306163][T12408] geneve3: entered promiscuous mode [ 245.311965][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 245.361708][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 245.382941][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 245.414848][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 245.452384][ T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 245.837163][T12421] syzkaller0: entered promiscuous mode [ 245.849177][T12421] syzkaller0: entered allmulticast mode [ 245.893981][T12421] tipc: Enabled bearer , priority 0 [ 245.905042][T12419] tipc: Resetting bearer [ 245.977325][T12419] tipc: Disabling bearer [ 246.038587][T12433] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 246.144118][T12435] netlink: 'syz.0.1802': attribute type 1 has an invalid length. [ 246.170435][T12435] netlink: 'syz.0.1802': attribute type 2 has an invalid length. [ 246.218172][T12447] Bluetooth: MGMT ver 1.23 [ 246.224652][T12435] netlink: 'syz.0.1802': attribute type 1 has an invalid length. [ 246.249597][T12435] netlink: 'syz.0.1802': attribute type 3 has an invalid length. [ 246.499090][T12464] netlink: 'syz.0.1810': attribute type 1 has an invalid length. [ 246.507946][T12464] netlink: 'syz.0.1810': attribute type 3 has an invalid length. [ 246.803226][T12482] syzkaller0: entered promiscuous mode [ 246.808923][T12482] syzkaller0: entered allmulticast mode [ 246.822565][T12482] tipc: Enabled bearer , priority 0 [ 246.839422][T12481] tipc: Resetting bearer [ 246.866499][T12484] openvswitch: netlink: IP tunnel dst address not specified [ 246.875875][T12481] tipc: Disabling bearer [ 246.951923][T12487] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 247.218646][T12502] netlink: 'syz.5.1822': attribute type 1 has an invalid length. [ 247.253672][T12504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.353637][T12509] x_tables: duplicate underflow at hook 1 [ 247.514526][T12515] netlink: 'syz.4.1827': attribute type 1 has an invalid length. [ 247.524440][T12511] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 247.536693][T12515] __nla_validate_parse: 18 callbacks suppressed [ 247.536709][T12515] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1827'. [ 247.566694][T12522] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1826'. [ 247.590256][T12511] bond1 (unregistering): Released all slaves [ 247.803905][T12530] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1830'. [ 247.880671][T12534] syzkaller1: entered promiscuous mode [ 247.891835][T12534] syzkaller1: entered allmulticast mode [ 247.902931][T12536] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1833'. [ 247.939928][T12536] openvswitch: netlink: Flow key attr not present in new flow. [ 247.964315][T12538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.990898][T12543] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1835'. [ 248.030484][T12545] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1836'. [ 248.307332][T12560] netlink: 'syz.2.1840': attribute type 32 has an invalid length. [ 248.326208][T12562] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1841'. [ 248.341415][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'. [ 248.345056][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1842'. [ 248.351639][T12562] netlink: 'syz.6.1841': attribute type 1 has an invalid length. [ 248.405410][T12560] bond4: option coupled_control: invalid value (192) [ 248.468874][T12560] bond4 (unregistering): Released all slaves [ 248.519100][T12562] netlink: 'syz.6.1841': attribute type 10 has an invalid length. [ 248.545541][T12562] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1841'. [ 248.568151][T12562] dummy0: entered promiscuous mode [ 248.922471][T12582] bond1: option xmit_hash_policy: invalid value (64) [ 248.979685][T12582] bond1 (unregistering): Released all slaves [ 249.793301][ T4965] block nbd1: Possible stuck request ffff888027335080: control (read@0,1024B). Runtime 60 seconds [ 249.806694][ T4965] block nbd1: Possible stuck request ffff888027335240: control (read@1024,1024B). Runtime 60 seconds [ 249.820659][ T4965] block nbd1: Possible stuck request ffff888027335400: control (read@2048,1024B). Runtime 60 seconds [ 249.833551][ T4965] block nbd1: Possible stuck request ffff8880273355c0: control (read@3072,1024B). Runtime 60 seconds [ 250.039230][T12653] veth1: entered allmulticast mode [ 250.056892][T12660] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 250.371223][T12680] syz_tun: refused to change device tx_queue_len [ 250.513963][T12684] tipc: Started in network mode [ 250.519069][T12684] tipc: Node identity ac14140f, cluster identity 4711 [ 250.534954][T12684] tipc: New replicast peer: 255.255.255.255 [ 250.552007][T12684] tipc: Enabled bearer , priority 10 [ 250.827568][ T8036] IPVS: starting estimator thread 0... [ 250.933531][T12705] IPVS: using max 57 ests per chain, 136800 per kthread [ 251.376410][T12734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.526346][T12739] sctp: [Deprecated]: syz.0.1897 (pid 12739) Use of int in max_burst socket option. [ 251.526346][T12739] Use struct sctp_assoc_value instead [ 251.667058][T12747] bond1: option fail_over_mac: invalid value (16) [ 251.704580][T12747] bond1 (unregistering): Released all slaves [ 251.760252][ T8036] tipc: Node number set to 2886997007 [ 252.127920][T12766] netlink: 'syz.6.1906': attribute type 1 has an invalid length. [ 252.436825][T12786] netlink: 'syz.0.1913': attribute type 1 has an invalid length. [ 252.459192][T12790] netlink: 'syz.6.1911': attribute type 10 has an invalid length. [ 252.459682][T12787] netlink: 'syz.0.1913': attribute type 1 has an invalid length. [ 252.477653][T12789] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 252.489934][T12790] team0: Port device geneve1 added [ 252.528394][T12786] 8021q: adding VLAN 0 to HW filter on device bond8 [ 252.652847][T12803] netlink: 'syz.2.1918': attribute type 3 has an invalid length. [ 252.934585][T12816] SET target dimension over the limit! [ 253.152243][T12829] __nla_validate_parse: 17 callbacks suppressed [ 253.152261][T12829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1927'. [ 253.209054][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1927'. [ 253.505992][T12842] netlink: 'syz.2.1934': attribute type 5 has an invalid length. [ 253.856411][T12865] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1941'. [ 253.884456][T12865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.968024][T12873] netlink: 'syz.0.1944': attribute type 1 has an invalid length. [ 254.105513][T12873] bond9: entered promiscuous mode [ 254.127733][T12873] 8021q: adding VLAN 0 to HW filter on device bond9 [ 254.233951][T12883] bond9: (slave bridge3): making interface the new active one [ 254.243105][T12883] bridge3: entered promiscuous mode [ 254.260320][T12883] bridge3: left promiscuous mode [ 254.609413][T12906] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 254.621982][T12906] syzkaller0: entered promiscuous mode [ 254.628369][T12906] syzkaller0: entered allmulticast mode [ 254.635084][T12908] netlink: 'syz.0.1954': attribute type 1 has an invalid length. [ 254.861930][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1957'. [ 254.965339][T12927] netlink: 'syz.0.1961': attribute type 1 has an invalid length. [ 255.067135][T12927] 8021q: adding VLAN 0 to HW filter on device bond10 [ 255.102262][T12929] bond2: (slave veth0_to_bond): Releasing active interface [ 255.140115][T12929] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 255.288620][T12952] sctp: [Deprecated]: syz.2.1968 (pid 12952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.288620][T12952] Use struct sctp_sack_info instead [ 255.368148][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 255.469227][T12965] netlink: 'syz.0.1972': attribute type 1 has an invalid length. [ 255.519500][T12965] 8021q: adding VLAN 0 to HW filter on device bond11 [ 255.528064][T12959] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 255.548411][T12971] netlink: 'syz.4.1974': attribute type 64 has an invalid length. [ 255.560004][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.560226][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.562597][ T1319] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 255.571163][T12965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.574174][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1971'. [ 255.614244][T12965] bond10: (slave veth0_to_bond): Releasing backup interface [ 255.639466][T12965] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 256.690334][T12992] netlink: 'syz.6.1979': attribute type 7 has an invalid length. [ 257.060312][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.069613][T12992] netlink: 'syz.6.1979': attribute type 7 has an invalid length. [ 257.091399][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.111647][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.155346][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.218308][T12997] veth1_to_team: entered allmulticast mode [ 257.284151][T13001] sctp: [Deprecated]: syz.4.1984 (pid 13001) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.284151][T13001] Use struct sctp_sack_info instead [ 257.335715][T13009] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1986'. [ 257.360052][T13011] netlink: 'syz.0.1985': attribute type 1 has an invalid length. [ 257.464131][T13015] netlink: 212324 bytes leftover after parsing attributes in process `syz.5.1989'. [ 257.491945][ T30] audit: type=1800 audit(1780470634.171:4): pid=13015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1989" name="memory.events" dev="tmpfs" ino=1246 res=0 errno=0 [ 257.624185][T13025] xt_CT: No such helper "snmp_trap" [ 257.719146][T13034] netlink: 'syz.4.1992': attribute type 1 has an invalid length. [ 257.744904][T13036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1993'. [ 257.777187][T13034] 8021q: adding VLAN 0 to HW filter on device bond5 [ 257.806907][T13034] bond3: (slave veth0_to_bond): Releasing active interface [ 257.827337][T13034] veth0_to_bond: left promiscuous mode [ 257.861205][T13034] veth0_to_bond: left allmulticast mode [ 257.878896][T13034] bond5: (slave veth0_to_bond): making interface the new active one [ 257.890081][T13034] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 257.917638][T13041] macvlan2: entered promiscuous mode [ 257.923619][T13041] macvlan2: entered allmulticast mode [ 258.169238][T13056] netlink: 'syz.6.1998': attribute type 10 has an invalid length. [ 258.177635][T13056] dummy0: left promiscuous mode [ 258.218815][T13058] netlink: 'syz.5.1999': attribute type 11 has an invalid length. [ 258.224866][T13056] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 258.227426][T13058] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.1999'. [ 258.270479][T13060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2000'. [ 258.413395][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.597517][T13067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 258.618090][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2007'. [ 258.631379][T13068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 258.813131][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2009'. [ 259.473471][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.390441][T13101] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 260.394934][T13103] netlink: 'syz.4.2010': attribute type 4 has an invalid length. [ 260.544153][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2013'. [ 260.556139][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2013'. [ 260.573416][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2011'. [ 260.597524][T13117] xfrm1: entered promiscuous mode [ 260.604741][T13117] xfrm1: entered allmulticast mode [ 260.628866][T13119] Cannot find add_set index 2 as target [ 260.745171][T13126] netlink: 212324 bytes leftover after parsing attributes in process `syz.6.2016'. [ 260.776064][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2016'. [ 260.847199][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2016'. [ 261.114098][T13145] netlink: 'syz.6.2021': attribute type 1 has an invalid length. [ 261.191937][T13145] bond1: (slave bridge1): making interface the new active one [ 261.202470][T13145] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 261.263094][T13154] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 261.430300][T13164] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 261.462468][T13164] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 261.493013][T13164] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 261.508866][T13164] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 261.533125][T13164] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 261.604171][T13170] netlink: 'syz.0.2030': attribute type 21 has an invalid length. [ 261.614835][T13170] netlink: 'syz.0.2030': attribute type 5 has an invalid length. [ 261.624335][T13170] netlink: 'syz.0.2030': attribute type 6 has an invalid length. [ 261.640561][T13170] netlink: 'syz.0.2030': attribute type 21 has an invalid length. [ 261.650579][T13170] netlink: 'syz.0.2030': attribute type 5 has an invalid length. [ 261.659345][T13170] netlink: 'syz.0.2030': attribute type 6 has an invalid length. [ 261.748738][T13178] xt_ipcomp: unknown flags 1D [ 262.064387][T13201] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 262.827883][T13249] validate_nla: 2 callbacks suppressed [ 262.827899][T13249] netlink: 'syz.5.2056': attribute type 1 has an invalid length. [ 262.893742][T13249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.922821][T13255] bond1: (slave geneve2): making interface the new active one [ 262.935529][T13255] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 263.324025][T13274] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.588868][T13303] syzkaller0: entered promiscuous mode [ 263.603165][T13303] syzkaller0: entered allmulticast mode [ 265.280146][T13310] syzkaller0: entered promiscuous mode [ 265.289503][T13310] syzkaller0: entered allmulticast mode [ 265.296769][T13318] __nla_validate_parse: 13 callbacks suppressed [ 265.296848][T13318] netlink: 312 bytes leftover after parsing attributes in process `syz.5.2075'. [ 265.403723][T13320] netlink: 'syz.5.2076': attribute type 4 has an invalid length. [ 265.412327][T13320] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2076'. [ 265.469586][T13321] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.2076'. [ 268.073426][T13350] syzkaller1: entered promiscuous mode [ 268.079797][T13350] syzkaller1: entered allmulticast mode [ 268.206982][T13358] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2085'. [ 268.375008][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'. [ 268.405294][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'. [ 268.410487][T13378] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2090'. [ 268.426094][ T8450] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 268.437495][T13378] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2090'. [ 268.447285][ T8450] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.457631][ T8450] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.496562][T13375] netlink: 'syz.5.2089': attribute type 1 has an invalid length. [ 268.506210][ T8450] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.520035][T13375] netlink: 'syz.5.2089': attribute type 2 has an invalid length. [ 268.605300][T13383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.645904][T13384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.959619][T13402] netlink: 'syz.0.2096': attribute type 1 has an invalid length. [ 268.998298][T13402] netlink: 'syz.0.2096': attribute type 1 has an invalid length. [ 269.022191][T13404] netlink: 'syz.5.2098': attribute type 8 has an invalid length. [ 269.033678][T13402] netlink: zone id is out of range [ 269.046964][T13402] netlink: zone id is out of range [ 269.053584][T13402] netlink: zone id is out of range [ 269.058823][T13402] netlink: zone id is out of range [ 269.089587][T13402] netlink: zone id is out of range [ 269.124348][T13402] netlink: zone id is out of range [ 269.143503][T13402] netlink: zone id is out of range [ 269.186497][T13402] netlink: zone id is out of range [ 269.380104][T13431] netlink: 'syz.6.2102': attribute type 7 has an invalid length. [ 269.419496][T13431] geneve1: entered promiscuous mode [ 269.549725][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2106'. [ 269.646521][T13444] veth0: entered promiscuous mode [ 269.655426][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2108'. [ 269.694228][T13444] veth0 (unregistering): left promiscuous mode [ 269.842918][T13451] netlink: 'syz.6.2111': attribute type 11 has an invalid length. [ 270.117940][T13464] bond0: option miimon: invalid value (18446744071829782528) [ 270.144878][T13464] bond0: option miimon: allowed values 0 - 2147483647 [ 270.283290][T13476] netlink: 'syz.6.2121': attribute type 3 has an invalid length. [ 270.315451][T13476] __nla_validate_parse: 5 callbacks suppressed [ 270.315468][T13476] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2121'. [ 270.392090][T13481] ip6t_rpfilter: unknown options [ 270.776301][T13494] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2128'. [ 270.876243][ T5651] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 270.902144][ T5651] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 270.917182][ T5651] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 270.926926][ T5651] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 270.938101][ T5651] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 271.222789][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2133'. [ 271.230445][T13524] netlink: 'syz.6.2135': attribute type 1 has an invalid length. [ 271.258915][T13524] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2135'. [ 271.566250][T13538] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 272.009786][T13501] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.017487][T13501] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.025329][T13501] bridge_slave_0: entered allmulticast mode [ 272.033918][T13501] bridge_slave_0: entered promiscuous mode [ 272.059952][T13501] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.067335][T13501] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.076026][T13501] bridge_slave_1: entered allmulticast mode [ 272.083355][T13501] bridge_slave_1: entered promiscuous mode [ 272.116682][T13501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.129464][T13501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.183351][T13501] team0: Port device team_slave_0 added [ 272.200604][T13501] team0: Port device team_slave_1 added [ 272.284487][T13501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.294889][T13501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.341612][T13501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.373741][T13501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.389225][T13501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.418853][T13501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.429967][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2150'. [ 272.528877][T13501] hsr_slave_0: entered promiscuous mode [ 272.536011][T13501] hsr_slave_1: entered promiscuous mode [ 272.546172][T13501] debugfs: 'hsr0' already exists in 'hsr' [ 272.553370][T13501] Cannot create hsr debugfs directory [ 272.616414][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2152'. [ 272.991449][ T5633] Bluetooth: hci7: command tx timeout [ 274.201320][T13522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.235493][T13501] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 274.313562][T13501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 274.339620][T13501] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 274.380145][T13501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 274.388558][T13501] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 274.414136][T13501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 274.436081][T13501] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 274.489367][T13501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 274.495993][T13601] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2163'. [ 274.542732][T13601] netlink: 'syz.6.2163': attribute type 2 has an invalid length. [ 274.593664][T13601] netlink: 'syz.6.2163': attribute type 1 has an invalid length. [ 274.637652][T13501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.700177][T13501] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.738738][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.745947][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.810218][T13615] bond12: option arp_interval: invalid value (18446744073709547520) [ 274.818892][T13615] bond12: option arp_interval: allowed values 0 - 2147483647 [ 274.829764][T13615] bond12 (unregistering): Released all slaves [ 274.840202][T13623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2171'. [ 274.862005][T13623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2171'. [ 274.877781][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.884990][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.073781][ T5633] Bluetooth: hci7: command tx timeout [ 275.118958][T13632] sock: sock_timestamping_bind_phc: sock not bind to device [ 275.210613][T13635] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2176'. [ 275.549319][T13651] __nla_validate_parse: 1 callbacks suppressed [ 275.549336][T13651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2184'. [ 275.590448][T13651] ipvlan1: entered allmulticast mode [ 275.717265][T13659] syzkaller0: entered promiscuous mode [ 275.731684][T13659] syzkaller0: entered allmulticast mode [ 275.975789][T13670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2189'. [ 276.023576][T13501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.049833][T13672] syzkaller1: entered promiscuous mode [ 276.086636][T13672] syzkaller1: entered allmulticast mode [ 276.350192][T13688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2194'. [ 276.486115][T13501] veth0_vlan: entered promiscuous mode [ 276.510259][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2198'. [ 276.520129][T13695] netlink: 'syz.0.2198': attribute type 26 has an invalid length. [ 276.529316][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'. [ 276.529851][T13501] veth1_vlan: entered promiscuous mode [ 276.568637][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2198'. [ 276.581869][T13695] netlink: 'syz.0.2198': attribute type 26 has an invalid length. [ 276.605734][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'. [ 276.642373][T13501] veth0_macvtap: entered promiscuous mode [ 276.673830][T13501] veth1_macvtap: entered promiscuous mode [ 276.756824][T13501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.813234][T13501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.864342][ T48] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.890562][ T48] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.907972][T13704] scsi_nl_rcv_msg: discarding partial skb [ 276.952850][ T48] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.984953][ T48] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.143747][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.161563][ T5633] Bluetooth: hci7: command tx timeout [ 277.161857][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.283835][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.297822][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.333317][T13719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'. [ 277.583373][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2213'. [ 277.936429][T13744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2219'. [ 279.035026][T13792] gre0: entered promiscuous mode [ 279.040067][T13792] gre0: entered allmulticast mode [ 279.241655][ T5633] Bluetooth: hci7: command tx timeout [ 279.872692][ T4965] block nbd1: Possible stuck request ffff888027335080: control (read@0,1024B). Runtime 90 seconds [ 279.884218][ T4965] block nbd1: Possible stuck request ffff888027335240: control (read@1024,1024B). Runtime 90 seconds [ 279.895578][ T4965] block nbd1: Possible stuck request ffff888027335400: control (read@2048,1024B). Runtime 90 seconds [ 279.907049][ T4965] block nbd1: Possible stuck request ffff8880273355c0: control (read@3072,1024B). Runtime 90 seconds [ 280.935799][T13744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.503381][T13842] tipc: Enabling of bearer rejected, already enabled [ 281.542610][T13845] geneve0: entered promiscuous mode [ 282.774894][T13872] __nla_validate_parse: 5 callbacks suppressed [ 282.774912][T13872] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2276'. [ 282.832586][T13872] syzkaller1: entered promiscuous mode [ 282.856083][T13872] syzkaller1: entered allmulticast mode [ 283.073971][T13887] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2282'. [ 283.102761][T13887] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2282'. [ 283.366049][T13903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2291'. [ 283.524187][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2293'. [ 284.828162][T13976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2323'. [ 286.294754][T14029] netlink: 'syz.0.2346': attribute type 5 has an invalid length. [ 286.317724][T14029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2346'. [ 286.376136][ T5651] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 286.390584][ T5651] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 286.400043][ T5651] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 286.408561][ T5651] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 286.417511][ T5651] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 287.366566][T14034] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.374699][T14034] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.382564][T14034] bridge_slave_0: entered allmulticast mode [ 287.414861][T14034] bridge_slave_0: entered promiscuous mode [ 287.424984][T14034] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.432957][T14034] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.440201][T14034] bridge_slave_1: entered allmulticast mode [ 287.448832][T14034] bridge_slave_1: entered promiscuous mode [ 287.564825][T14034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.592928][T14083] syzkaller0: entered promiscuous mode [ 287.606117][T14083] syzkaller0: entered allmulticast mode [ 287.680344][T14034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.786709][T14097] vlan0: entered promiscuous mode [ 287.850005][T14034] team0: Port device team_slave_0 added [ 287.884033][T14034] team0: Port device team_slave_1 added [ 288.025863][T14034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.041124][T14034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.070623][T14034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.088059][T14034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.095662][T14034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.125486][T14034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.326494][T14112] vlan0: entered promiscuous mode [ 288.376532][T14034] hsr_slave_0: entered promiscuous mode [ 288.402066][T14034] hsr_slave_1: entered promiscuous mode [ 288.423514][T14034] debugfs: 'hsr0' already exists in 'hsr' [ 288.429757][T14034] Cannot create hsr debugfs directory [ 288.521456][ T5633] Bluetooth: hci8: command tx timeout [ 289.131119][T14143] syzkaller1: entered promiscuous mode [ 289.143009][T14143] syzkaller1: entered allmulticast mode [ 289.222832][T14148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2391'. [ 289.263110][T14034] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 289.270353][T14152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2393'. [ 289.336147][T14034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 289.363462][T14034] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 289.386626][T14034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 289.417860][T14034] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 289.447599][T14034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 289.480337][T14034] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 289.582692][T14034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 289.888985][T14034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.914954][T14180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2404'. [ 289.947859][T14034] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.017733][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.024938][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.076350][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.083547][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.172018][T14193] tipc: Enabled bearer , priority 4 [ 290.246671][T14188] syzkaller0: entered promiscuous mode [ 290.255778][T14188] syzkaller0: entered allmulticast mode [ 290.303909][T14188] tipc: Enabled bearer , priority 10 [ 290.362565][T14186] tipc: Resetting bearer [ 290.446623][T14186] tipc: Disabling bearer [ 290.602140][ T5633] Bluetooth: hci8: command tx timeout [ 290.604081][T14207] netlink: 'syz.4.2412': attribute type 12 has an invalid length. [ 290.614208][T14034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.432068][T14244] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2425'. [ 291.476303][T14245] syzkaller0: entered promiscuous mode [ 291.494094][T14245] syzkaller0: entered allmulticast mode [ 291.505706][T14247] tipc: Enabling of bearer rejected, failed to enable media [ 291.529370][T14247] netlink: 'syz.4.2426': attribute type 11 has an invalid length. [ 291.545745][T14245] tipc: Enabled bearer , priority 10 [ 291.594858][T14242] tipc: Resetting bearer [ 291.674786][T14242] tipc: Disabling bearer [ 291.883936][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2428'. [ 291.899276][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2427'. [ 291.906562][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2428'. [ 291.948069][T14034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.957964][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2428'. [ 291.993710][ T1028] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.016350][ T1028] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.053377][ T1028] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.082827][ T1028] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.148545][T14265] ip6erspan1: entered allmulticast mode [ 292.170413][T14268] xt_hashlimit: size too large, truncated to 1048576 [ 292.402120][T14282] netlink: 'syz.0.2433': attribute type 39 has an invalid length. [ 292.424155][T14282] hsr_slave_0: left promiscuous mode [ 292.672463][ T5633] Bluetooth: hci8: command tx timeout [ 292.715492][T14034] veth0_vlan: entered promiscuous mode [ 292.726492][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2436'. [ 292.800177][T14298] net_ratelimit: 52 callbacks suppressed [ 292.800194][T14298] netlink: zone id is out of range [ 292.835012][T14295] netlink: 'syz.4.2437': attribute type 1 has an invalid length. [ 292.853986][T14292] 8021q: adding VLAN 0 to HW filter on device bond12 [ 292.874295][T14301] netlink: zone id is out of range [ 292.902936][T14297] netlink: set zone limit has 4 unknown bytes [ 292.914003][T14034] veth1_vlan: entered promiscuous mode [ 292.938038][T14298] netlink: zone id is out of range [ 292.962788][T14301] netlink: zone id is out of range [ 292.976765][T14292] x_tables: duplicate underflow at hook 1 [ 292.984807][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2436'. [ 292.987235][T14298] netlink: zone id is out of range [ 293.037376][T14034] veth0_macvtap: entered promiscuous mode [ 293.046087][T14298] netlink: zone id is out of range [ 293.060368][T14299] netlink: 'syz.0.2436': attribute type 11 has an invalid length. [ 293.063065][T14034] veth1_macvtap: entered promiscuous mode [ 293.081817][T14298] netlink: zone id is out of range [ 293.090328][T14298] netlink: zone id is out of range [ 293.112428][T14298] netlink: zone id is out of range [ 293.136946][T14034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.180560][T14034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.209565][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.242557][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.273125][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.336966][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.538510][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.558060][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.637953][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.669899][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.739360][T14323] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 294.306083][T14356] veth0_to_hsr: entered promiscuous mode [ 294.313480][T14356] veth0_to_hsr: entered allmulticast mode [ 294.322125][T14356] xt_cgroup: path and classid specified [ 294.425310][T14364] IPv6: sit1: Disabled Multicast RS [ 294.751557][ T5633] Bluetooth: hci8: command tx timeout [ 294.916099][T14370] xfrm1: entered allmulticast mode [ 295.092184][T14379] netlink: 'syz.8.2463': attribute type 1 has an invalid length. [ 295.113834][T14379] __nla_validate_parse: 9 callbacks suppressed [ 295.113849][T14379] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2463'. [ 295.141885][T14379] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2463'. [ 295.163575][T14379] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2463'. [ 295.355101][T14383] H: renamed from dummy0 (while UP) [ 297.105984][T14347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.132722][T14377] netlink: 'syz.4.2462': attribute type 1 has an invalid length. [ 297.386732][T14393] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2466'. [ 297.418787][T14393] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2466'. [ 297.602294][T14405] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2471'. [ 298.138867][T14406] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2471'. [ 298.310021][T14411] netlink: 'syz.7.2473': attribute type 10 has an invalid length. [ 298.388874][T14411] team0 (unregistering): Port device team_slave_0 removed [ 298.435910][T14411] team0 (unregistering): Port device team_slave_1 removed [ 298.512297][ T5651] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 298.525056][ T5651] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 298.553550][ T5651] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 298.569023][ T5651] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 298.581816][ T5651] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 298.877127][T14439] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2480'. [ 298.923327][T14439] nbd: must specify an index to disconnect [ 298.988032][T14443] net_ratelimit: 8 callbacks suppressed [ 298.988049][T14443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.083184][T14439] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 299.185604][T14452] netlink: 288 bytes leftover after parsing attributes in process `syz.8.2483'. [ 299.248501][T14453] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 299.433648][T14461] netlink: 'syz.6.2484': attribute type 1 has an invalid length. [ 299.474305][T14461] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2484'. [ 299.519741][T14461] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR [ 299.935052][T14475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.002714][T14487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.015178][T14487] bond2: (slave bond3): Enslaving as an active interface with an up link [ 300.243363][T14495] bridge1: entered promiscuous mode [ 300.260030][T14495] bridge1: entered allmulticast mode [ 300.533902][ T809] IPVS: starting estimator thread 0... [ 300.663887][T14515] IPVS: using max 29 ests per chain, 69600 per kthread [ 300.672689][ T5633] Bluetooth: hci9: command tx timeout [ 300.790445][T14524] team0: Port device team_slave_0 removed [ 301.031607][T14534] No such timeout policy "syz1" [ 301.059398][T14538] : entered promiscuous mode [ 301.126099][T14423] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.159921][T14423] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.197879][T14423] bridge_slave_0: entered allmulticast mode [ 301.233447][T14423] bridge_slave_0: entered promiscuous mode [ 301.288529][T14423] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.298394][T14423] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.318890][T14423] bridge_slave_1: entered allmulticast mode [ 301.333427][T14423] bridge_slave_1: entered promiscuous mode [ 301.356625][T14513] IPVS: sh: FWM 3 0x00000003 - no destination available [ 301.511705][T14423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.560461][T14423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.610021][T14550] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 301.675800][T14423] team0: Port device team_slave_0 added [ 301.703137][T14423] team0: Port device team_slave_1 added [ 301.888626][T14423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.896398][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.953221][T14423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.992400][T14423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.017236][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.072293][T14573] xt_hl: Unknown TTL match mode: 255 [ 302.082429][T14423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.187596][T14423] hsr_slave_0: entered promiscuous mode [ 302.206228][T14423] hsr_slave_1: entered promiscuous mode [ 302.239461][T14423] debugfs: 'hsr0' already exists in 'hsr' [ 302.263592][T14423] Cannot create hsr debugfs directory [ 302.479381][T14586] syzkaller0: entered promiscuous mode [ 302.515436][T14586] syzkaller0: entered allmulticast mode [ 302.547849][T14588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.558403][T14593] netlink: 'syz.8.2524': attribute type 1 has an invalid length. [ 302.573736][T14593] __nla_validate_parse: 3 callbacks suppressed [ 302.573752][T14593] netlink: 228 bytes leftover after parsing attributes in process `syz.8.2524'. [ 302.761629][ T5633] Bluetooth: hci9: command tx timeout [ 302.968973][T14423] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.986879][T14423] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.999229][T14423] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 303.274462][T14626] tipc: Enabled bearer , priority 10 [ 303.291865][T14621] syzkaller0: entered promiscuous mode [ 303.297476][T14621] syzkaller0: entered allmulticast mode [ 303.428694][T14605] tipc: Resetting bearer [ 303.524453][T14605] tipc: Disabling bearer [ 303.596254][T14639] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2534'. [ 303.678357][T14648] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2534'. [ 303.685318][T14423] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.732942][T14423] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.774402][T14423] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 303.816244][T14652] netlink: 'syz.7.2537': attribute type 11 has an invalid length. [ 303.914094][T14659] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2540'. [ 303.972973][T14658] tipc: Started in network mode [ 303.978023][T14658] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 303.989959][T14661] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2540'. [ 304.008348][T14658] tipc: Enabled bearer , priority 10 [ 304.028361][T14423] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.040498][T14423] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.067371][T14423] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 304.096602][T14658] H: renamed from dummy0 (while UP) [ 304.105359][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2540'. [ 304.217411][T14423] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.240431][T14423] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.251486][T14423] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 304.535999][T14674] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2546'. [ 304.550680][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2545'. [ 304.580069][T14675] syzkaller0: entered promiscuous mode [ 304.587333][T14675] syzkaller0: entered allmulticast mode [ 304.602245][T14674] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2546'. [ 304.740402][T14684] tipc: Started in network mode [ 304.764331][T14684] tipc: Node identity 4a8aafa85e93, cluster identity 4711 [ 304.788301][T14684] tipc: Enabled bearer , priority 10 [ 304.846158][ T5633] Bluetooth: hci9: command tx timeout [ 304.886847][T14673] tipc: Resetting bearer [ 304.923355][T14695] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2550'. [ 304.948999][T14673] tipc: Disabling bearer [ 305.077489][ T5647] tipc: Node number set to 4269801492 [ 305.162545][T14423] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 305.201657][T14423] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 305.220041][T14423] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 305.245684][T14423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.269204][T14423] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 305.321331][T14423] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.355736][T14423] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 305.395265][T14423] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.716549][T14735] syzkaller0: entered promiscuous mode [ 305.728891][T14735] syzkaller0: entered allmulticast mode [ 305.778184][T14735] tipc: Enabled bearer , priority 10 [ 305.797782][T14423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.814102][T14734] tipc: Resetting bearer [ 305.869000][T14745] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.883245][T14734] tipc: Disabling bearer [ 305.914855][T14741] 8021q: VLANs not supported on gre0 [ 305.984161][T14423] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.023710][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.030901][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.164620][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.171826][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.212721][T14753] pim6reg: entered allmulticast mode [ 306.335841][T14763] netlink: 'syz.6.2565': attribute type 4 has an invalid length. [ 306.488307][T14763] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 306.613336][T14772] bridge0: port 3(ipvlan2) entered blocking state [ 306.620620][T14772] bridge0: port 3(ipvlan2) entered disabled state [ 306.648912][T14772] ipvlan2: entered allmulticast mode [ 306.657662][T14772] bridge0: entered allmulticast mode [ 306.670076][T14772] ipvlan2: left allmulticast mode [ 306.677151][T14772] bridge0: left allmulticast mode [ 306.729638][T14780] syzkaller0: entered promiscuous mode [ 306.768543][T14788] xt_hashlimit: size too large, truncated to 1048576 [ 306.782666][T14780] syzkaller0: entered allmulticast mode [ 306.817288][T14780] tipc: Enabled bearer , priority 10 [ 306.893270][T14779] tipc: Resetting bearer [ 306.913049][ T5633] Bluetooth: hci9: command tx timeout [ 306.965645][T14779] tipc: Disabling bearer [ 307.450332][T14821] netlink: 'syz.6.2583': attribute type 11 has an invalid length. [ 307.607344][T14423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.770139][T14837] syzkaller0: entered promiscuous mode [ 307.778217][T14837] syzkaller0: entered allmulticast mode [ 307.795849][T14423] veth0_vlan: entered promiscuous mode [ 307.838985][T14837] tipc: Enabled bearer , priority 10 [ 307.860211][T14423] veth1_vlan: entered promiscuous mode [ 307.884526][T14834] tipc: Resetting bearer [ 307.946724][T14834] tipc: Disabling bearer [ 308.124912][T14423] veth0_macvtap: entered promiscuous mode [ 308.142745][T14423] veth1_macvtap: entered promiscuous mode [ 308.215679][T14423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.256914][T14853] __nla_validate_parse: 8 callbacks suppressed [ 308.256930][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2591'. [ 308.279780][T14423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.354073][ T1117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.399062][ T1117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.421656][T14867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2596'. [ 308.439716][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2591'. [ 308.448420][ T1117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.484937][T14867] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2596'. [ 308.530442][ T1117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.906289][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.929413][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.956827][T14885] syzkaller0: entered promiscuous mode [ 308.967863][T14885] syzkaller0: entered allmulticast mode [ 309.039282][T14885] tipc: Enabled bearer , priority 10 [ 309.060037][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.074069][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.109358][T14884] tipc: Resetting bearer [ 309.186272][T14884] tipc: Disabling bearer [ 309.219195][T14894] geneve1: left promiscuous mode [ 309.246412][T14894] geneve1: entered allmulticast mode [ 309.387274][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2605'. [ 309.557275][T14916] netem: unknown loss type 8 [ 309.588793][T14916] netem: change failed [ 309.704718][T14924] netlink: 'syz.4.2613': attribute type 3 has an invalid length. [ 309.735074][T14924] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2613'. [ 309.963084][ T4965] block nbd1: Possible stuck request ffff888027335080: control (read@0,1024B). Runtime 120 seconds [ 309.974348][ T4965] block nbd1: Possible stuck request ffff888027335240: control (read@1024,1024B). Runtime 120 seconds [ 309.986261][ T4965] block nbd1: Possible stuck request ffff888027335400: control (read@2048,1024B). Runtime 120 seconds [ 309.998634][ T4965] block nbd1: Possible stuck request ffff8880273355c0: control (read@3072,1024B). Runtime 120 seconds [ 310.054144][T14939] syzkaller0: entered promiscuous mode [ 310.072702][T14939] syzkaller0: entered allmulticast mode [ 310.116097][T14939] tipc: Enabled bearer , priority 10 [ 310.129618][T14938] tipc: Resetting bearer [ 310.202756][T14938] tipc: Disabling bearer [ 310.269619][T14955] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2624'. [ 310.442112][T14960] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2627'. [ 310.538207][T14968] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2629'. [ 310.567876][T14968] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 310.607905][T14976] netlink: 'syz.7.2631': attribute type 18 has an invalid length. [ 310.620677][T14973] xt_TPROXY: Can be used only with -p tcp or -p udp [ 310.770066][ T30] audit: type=1107 audit(1780470687.451:5): pid=14977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 310.953219][T14990] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2637'. [ 311.262561][T14992] lo speed is unknown, defaulting to 1000 [ 311.269348][T14992] lo speed is unknown, defaulting to 1000 [ 311.277395][T14992] lo speed is unknown, defaulting to 1000 [ 311.336179][T14992] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 311.371211][T14992] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 311.447929][T14992] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 311.497818][T14992] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 311.564311][T15016] bond1: down delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 311.575118][T14992] lo speed is unknown, defaulting to 1000 [ 311.592497][T14992] lo speed is unknown, defaulting to 1000 [ 311.602194][T14992] lo speed is unknown, defaulting to 1000 [ 311.614877][T14992] lo speed is unknown, defaulting to 1000 [ 311.626774][T14992] lo speed is unknown, defaulting to 1000 [ 311.657646][T14992] lo speed is unknown, defaulting to 1000 [ 311.708417][T14992] lo speed is unknown, defaulting to 1000 [ 311.753975][T14992] lo speed is unknown, defaulting to 1000 [ 311.770102][T14992] lo speed is unknown, defaulting to 1000 [ 311.789522][T14992] lo speed is unknown, defaulting to 1000 [ 312.228243][T15028] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.235912][T15028] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.503256][T15028] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 312.986195][T15072] syzkaller0: entered promiscuous mode [ 312.999606][T15072] syzkaller0: entered allmulticast mode [ 315.614085][T15047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.643186][T15088] netlink: 'syz.6.2665': attribute type 1 has an invalid length. [ 315.670479][T15088] __nla_validate_parse: 4 callbacks suppressed [ 315.670497][T15088] netlink: 212 bytes leftover after parsing attributes in process `syz.6.2665'. [ 315.777475][T15091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2666'. [ 315.878720][T15099] sctp: [Deprecated]: syz.7.2668 (pid 15099) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.878720][T15099] Use struct sctp_sack_info instead [ 315.925333][T15099] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2668'. [ 315.943834][T15099] syzkaller1: entered promiscuous mode [ 315.949471][T15099] syzkaller1: entered allmulticast mode [ 316.053886][T15109] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2668'. [ 316.070316][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2672'. [ 316.116640][T15107] netlink: 16215 bytes leftover after parsing attributes in process `syz.8.2672'. [ 316.456904][T15134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2678'. [ 316.554736][T15136] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2679'. [ 316.555404][T15137] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2679'. [ 316.707006][T15141] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2680'. [ 316.736116][T15144] netlink: 'syz.7.2681': attribute type 1 has an invalid length. [ 316.781969][T15144] bond1: entered promiscuous mode [ 316.788576][T15144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.002056][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.010452][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.019032][ T1319] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 317.277590][T15170] openvswitch: netlink: IPv4 tun info is not correct [ 317.836457][T15195] netlink: 'syz.7.2695': attribute type 21 has an invalid length. [ 317.861818][T15195] netlink: 'syz.7.2695': attribute type 5 has an invalid length. [ 317.875657][T15194] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 318.156886][T15208] netlink: 'syz.8.2701': attribute type 11 has an invalid length. [ 318.209047][T15210] netlink: 'syz.7.2704': attribute type 4 has an invalid length. [ 318.367125][T15224] xt_hashlimit: overflow, try lower: 3/0 [ 318.385762][T15224] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 318.662672][T15238] FAULT_INJECTION: forcing a failure. [ 318.662672][T15238] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 318.691333][T15238] CPU: 1 UID: 0 PID: 15238 Comm: syz.6.2712 Not tainted syzkaller #0 PREEMPT(full) [ 318.691356][T15238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 318.691373][T15238] Call Trace: [ 318.691380][T15238] [ 318.691390][T15238] dump_stack_lvl+0xe8/0x150 [ 318.691415][T15238] should_fail_ex+0x412/0x560 [ 318.691437][T15238] _copy_from_user+0x2d/0xb0 [ 318.691456][T15238] ___sys_sendmsg+0x1c6/0x360 [ 318.691473][T15238] ? __lock_acquire+0x6b5/0x2cf0 [ 318.691494][T15238] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.691543][T15238] ? __fget_files+0x2a/0x420 [ 318.691560][T15238] ? __fget_files+0x3a0/0x420 [ 318.691586][T15238] __x64_sys_sendmsg+0x1bd/0x2a0 [ 318.691603][T15238] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.691627][T15238] ? __pfx_ksys_write+0x10/0x10 [ 318.691655][T15238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.691673][T15238] do_syscall_64+0x174/0x580 [ 318.691688][T15238] ? trace_irq_disable+0x3b/0x140 [ 318.691709][T15238] ? clear_bhb_loop+0x40/0x90 [ 318.691728][T15238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.691744][T15238] RIP: 0033:0x7f8d2b19ce59 [ 318.691768][T15238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.691781][T15238] RSP: 002b:00007f8d2c105028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.691802][T15238] RAX: ffffffffffffffda RBX: 00007f8d2b415fa0 RCX: 00007f8d2b19ce59 [ 318.691813][T15238] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 318.691823][T15238] RBP: 00007f8d2c105090 R08: 0000000000000000 R09: 0000000000000000 [ 318.691832][T15238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.691841][T15238] R13: 00007f8d2b416038 R14: 00007f8d2b415fa0 R15: 00007ffd296b5758 [ 318.691869][T15238] [ 318.938253][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 318.960484][T15244] x_tables: duplicate underflow at hook 1 [ 319.015259][T15247] netlink: 'syz.6.2716': attribute type 4 has an invalid length. [ 319.371978][T15270] FAULT_INJECTION: forcing a failure. [ 319.371978][T15270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.376765][T15271] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 319.389271][T15270] CPU: 1 UID: 0 PID: 15270 Comm: syz.4.2727 Not tainted syzkaller #0 PREEMPT(full) [ 319.389294][T15270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.389304][T15270] Call Trace: [ 319.389310][T15270] [ 319.389317][T15270] dump_stack_lvl+0xe8/0x150 [ 319.389341][T15270] should_fail_ex+0x412/0x560 [ 319.389365][T15270] _copy_from_user+0x2d/0xb0 [ 319.389386][T15270] __copy_msghdr+0x3c5/0x5b0 [ 319.389414][T15270] ___sys_sendmsg+0x213/0x360 [ 319.389432][T15270] ? __lock_acquire+0x6b5/0x2cf0 [ 319.389453][T15270] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.389501][T15270] ? __fget_files+0x2a/0x420 [ 319.389519][T15270] ? __fget_files+0x3a0/0x420 [ 319.389545][T15270] __x64_sys_sendmsg+0x1bd/0x2a0 [ 319.389563][T15270] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.389588][T15270] ? __pfx_ksys_write+0x10/0x10 [ 319.389617][T15270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.389634][T15270] do_syscall_64+0x174/0x580 [ 319.389648][T15270] ? trace_irq_disable+0x3b/0x140 [ 319.389670][T15270] ? clear_bhb_loop+0x40/0x90 [ 319.389689][T15270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.389704][T15270] RIP: 0033:0x7fd6fe59ce59 [ 319.389719][T15270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.389732][T15270] RSP: 002b:00007fd6ff3ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.389749][T15270] RAX: ffffffffffffffda RBX: 00007fd6fe815fa0 RCX: 00007fd6fe59ce59 [ 319.389760][T15270] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 319.389770][T15270] RBP: 00007fd6ff3ad090 R08: 0000000000000000 R09: 0000000000000000 [ 319.389779][T15270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.389789][T15270] R13: 00007fd6fe816038 R14: 00007fd6fe815fa0 R15: 00007ffc59da6c28 [ 319.389815][T15270] [ 319.436294][T15274] netlink: 'syz.8.2728': attribute type 1 has an invalid length. [ 319.595245][T15284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.235226][T15319] FAULT_INJECTION: forcing a failure. [ 320.235226][T15319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.249008][T15319] CPU: 0 UID: 0 PID: 15319 Comm: syz.0.2739 Not tainted syzkaller #0 PREEMPT(full) [ 320.249030][T15319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 320.249039][T15319] Call Trace: [ 320.249045][T15319] [ 320.249052][T15319] dump_stack_lvl+0xe8/0x150 [ 320.249074][T15319] should_fail_ex+0x412/0x560 [ 320.249095][T15319] _copy_from_user+0x2d/0xb0 [ 320.249115][T15319] ____sys_sendmsg+0x308/0x9f0 [ 320.249140][T15319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.249163][T15319] ? import_iovec+0x73/0xa0 [ 320.249184][T15319] ___sys_sendmsg+0x2a5/0x360 [ 320.249199][T15319] ? __lock_acquire+0x6b5/0x2cf0 [ 320.249220][T15319] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.249268][T15319] ? __fget_files+0x2a/0x420 [ 320.249286][T15319] ? __fget_files+0x3a0/0x420 [ 320.249313][T15319] __x64_sys_sendmsg+0x1bd/0x2a0 [ 320.249332][T15319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.249355][T15319] ? __pfx_ksys_write+0x10/0x10 [ 320.249385][T15319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.249403][T15319] do_syscall_64+0x174/0x580 [ 320.249418][T15319] ? trace_irq_disable+0x3b/0x140 [ 320.249446][T15319] ? clear_bhb_loop+0x40/0x90 [ 320.249466][T15319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.249479][T15319] RIP: 0033:0x7fe26a99ce59 [ 320.249494][T15319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.249506][T15319] RSP: 002b:00007fe26b836028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.249521][T15319] RAX: ffffffffffffffda RBX: 00007fe26ac15fa0 RCX: 00007fe26a99ce59 [ 320.249530][T15319] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 320.249538][T15319] RBP: 00007fe26b836090 R08: 0000000000000000 R09: 0000000000000000 [ 320.249547][T15319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.249556][T15319] R13: 00007fe26ac16038 R14: 00007fe26ac15fa0 R15: 00007fff4fa5c358 [ 320.249583][T15319] [ 320.555040][T15324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.579272][ T8067] lo speed is unknown, defaulting to 1000 [ 320.588257][ T8067] syú2: Port: 1 Link DOWN [ 320.638485][T15329] bridge1: port 1(veth3) entered blocking state [ 320.645840][T15329] bridge1: port 1(veth3) entered disabled state [ 320.652602][T15329] veth3: entered allmulticast mode [ 320.662659][T15329] veth3: entered promiscuous mode [ 320.673042][T15329] bridge1: port 2(veth0_to_bond) entered blocking state [ 320.682213][T15329] bridge1: port 2(veth0_to_bond) entered disabled state [ 320.689410][T15329] veth0_to_bond: entered allmulticast mode [ 320.710557][T15329] veth0_to_bond: entered promiscuous mode [ 320.718116][T15329] bridge1: port 2(veth0_to_bond) entered blocking state [ 320.725306][T15329] bridge1: port 2(veth0_to_bond) entered forwarding state [ 320.940061][T15351] __nla_validate_parse: 17 callbacks suppressed [ 320.940078][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2751'. [ 320.972312][T15351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2751'. [ 321.027733][T15355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2751'. [ 321.180257][T15363] syz_tun: entered allmulticast mode [ 321.208011][T15365] FAULT_INJECTION: forcing a failure. [ 321.208011][T15365] name failslab, interval 1, probability 0, space 0, times 1 [ 321.244391][T15365] CPU: 1 UID: 0 PID: 15365 Comm: syz.4.2755 Not tainted syzkaller #0 PREEMPT(full) [ 321.244417][T15365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 321.244426][T15365] Call Trace: [ 321.244433][T15365] [ 321.244440][T15365] dump_stack_lvl+0xe8/0x150 [ 321.244463][T15365] should_fail_ex+0x412/0x560 [ 321.244485][T15365] should_failslab+0xa8/0x100 [ 321.244501][T15365] ? dst_alloc+0x105/0x170 [ 321.244518][T15365] kmem_cache_alloc_noprof+0x87/0x650 [ 321.244547][T15365] dst_alloc+0x105/0x170 [ 321.244560][T15365] ? ip_check_mc_rcu+0x400/0x680 [ 321.244584][T15365] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 321.244611][T15365] ? ip_route_output_key_hash+0xd8/0x2a0 [ 321.244629][T15365] ip_route_output_key_hash+0x18d/0x2a0 [ 321.244648][T15365] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 321.244677][T15365] ip_route_output_flow+0x2a/0x150 [ 321.244691][T15365] ? security_sk_classify_flow+0x6d/0x150 [ 321.244712][T15365] raw_sendmsg+0x1199/0x1a50 [ 321.244744][T15365] ? __pfx_raw_sendmsg+0x10/0x10 [ 321.244776][T15365] ? aa_sk_perm+0x6d5/0x900 [ 321.244815][T15365] ? __pfx_aa_sk_perm+0x10/0x10 [ 321.244833][T15365] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 321.244859][T15365] ? sock_rps_record_flow+0x19/0x350 [ 321.244877][T15365] ? inet_sendmsg+0x2f4/0x370 [ 321.244893][T15365] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.244916][T15365] ____sys_sendmsg+0x80a/0x9f0 [ 321.244938][T15365] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.244962][T15365] ? import_iovec+0x73/0xa0 [ 321.244984][T15365] ___sys_sendmsg+0x2a5/0x360 [ 321.244999][T15365] ? __lock_acquire+0x6b5/0x2cf0 [ 321.245020][T15365] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.245072][T15365] ? __fget_files+0x2a/0x420 [ 321.245090][T15365] ? __fget_files+0x3a0/0x420 [ 321.245116][T15365] __x64_sys_sendmsg+0x1bd/0x2a0 [ 321.245134][T15365] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.245160][T15365] ? __pfx_ksys_write+0x10/0x10 [ 321.245190][T15365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.245208][T15365] do_syscall_64+0x174/0x580 [ 321.245223][T15365] ? trace_irq_disable+0x3b/0x140 [ 321.245244][T15365] ? clear_bhb_loop+0x40/0x90 [ 321.245262][T15365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.245276][T15365] RIP: 0033:0x7fd6fe59ce59 [ 321.245291][T15365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.245304][T15365] RSP: 002b:00007fd6ff3ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.245321][T15365] RAX: ffffffffffffffda RBX: 00007fd6fe815fa0 RCX: 00007fd6fe59ce59 [ 321.245331][T15365] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 321.245341][T15365] RBP: 00007fd6ff3ad090 R08: 0000000000000000 R09: 0000000000000000 [ 321.245350][T15365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.245359][T15365] R13: 00007fd6fe816038 R14: 00007fd6fe815fa0 R15: 00007ffc59da6c28 [ 321.245386][T15365] [ 321.629604][T15375] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2757'. [ 321.904400][T15356] syz_tun: left allmulticast mode [ 321.935661][T15395] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2764'. [ 322.286125][T15409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2768'. [ 322.295747][T15412] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 322.345135][T15417] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2771'. [ 322.497356][T15422] x_tables: duplicate underflow at hook 2 [ 322.689916][T15440] netlink: 'syz.6.2777': attribute type 10 has an invalid length. [ 322.708124][T15440] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2777'. [ 322.974039][T15449] bridge0: port 3(syz_tun) entered blocking state [ 323.001697][T15449] bridge0: port 3(syz_tun) entered disabled state [ 323.050229][T15449] syz_tun: entered allmulticast mode [ 323.077438][T15449] syz_tun: entered promiscuous mode [ 323.104751][T15449] bridge0: port 3(syz_tun) entered blocking state [ 323.111335][T15449] bridge0: port 3(syz_tun) entered forwarding state [ 323.179140][T15463] tunl0: entered promiscuous mode [ 323.195501][T15463] netlink: 'syz.6.2781': attribute type 3 has an invalid length. [ 323.206555][T15463] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2781'. [ 323.286141][T15467] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2783'. [ 323.528204][T15477] netlink: 'syz.8.2789': attribute type 10 has an invalid length. [ 323.754263][T15490] veth0: entered promiscuous mode [ 323.835433][T15497] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 323.924522][T15499] syzkaller0: entered promiscuous mode [ 323.934019][T15499] syzkaller0: entered allmulticast mode [ 323.947794][T15491] veth0: left promiscuous mode [ 323.978091][T15499] tipc: Enabled bearer , priority 0 [ 324.093386][T15498] tipc: Resetting bearer [ 324.150656][T15498] tipc: Disabling bearer [ 324.179941][T15515] openvswitch: netlink: IP tunnel dst address not specified [ 324.386877][T15528] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.849937][T15556] xt_SECMARK: invalid mode: 9 [ 324.979826][T15563] syzkaller0: entered promiscuous mode [ 324.987909][T15563] syzkaller0: entered allmulticast mode [ 325.012003][T15563] tipc: Started in network mode [ 325.019386][T15563] tipc: Node identity 8233a98cb54, cluster identity 4711 [ 325.027520][T15563] tipc: Enabled bearer , priority 0 [ 325.037167][T15561] tipc: Resetting bearer [ 325.074021][T15561] tipc: Disabling bearer [ 325.182951][T15578] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 325.195761][T15577] 8021q: VLANs not supported on lo [ 325.559748][T15600] syzkaller0: entered promiscuous mode [ 325.571991][T15600] syzkaller0: entered allmulticast mode [ 326.188259][T15628] __nla_validate_parse: 9 callbacks suppressed [ 326.188274][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2836'. [ 326.196971][T15626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.361409][T15635] set match dimension is over the limit! [ 326.386913][T15635] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.394152][T15635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.421344][T15635] bridge0: entered promiscuous mode [ 326.437107][T15635] bridge0: entered allmulticast mode [ 326.454747][T15638] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2840'. [ 326.488227][T15638] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2840'. [ 326.545563][T15636] netlink: 'syz.4.2840': attribute type 5 has an invalid length. [ 326.556629][T15643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2841'. [ 326.692872][ T134] bond5: (slave veth0_to_bond): link status definitely down, disabling slave [ 326.724492][ T134] bond5: now running without any active interface! [ 326.744336][T15652] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2845'. [ 326.760141][T15652] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2845'. [ 327.070312][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2849'. [ 327.086773][T15673] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2851'. [ 327.108559][T15669] openvswitch: netlink: Missing key (keys=40, expected=80) [ 327.491442][T15696] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2857'. [ 327.726593][T15704] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2861'. [ 327.999107][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 328.027125][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 328.038192][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 328.048409][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 328.056851][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 328.179523][T15717] xt_policy: neither incoming nor outgoing policy selected [ 328.448617][T15724] netlink: 'syz.6.2867': attribute type 1 has an invalid length. [ 328.480758][T15724] netlink: 'syz.6.2867': attribute type 3 has an invalid length. [ 328.519918][ T5647] IPVS: starting estimator thread 0... [ 328.526559][T15730] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 328.641747][T15734] IPVS: using max 32 ests per chain, 76800 per kthread [ 328.849955][T15752] syzkaller0: entered promiscuous mode [ 328.870659][T15752] syzkaller0: entered allmulticast mode [ 328.958193][T15710] lo speed is unknown, defaulting to 1000 [ 329.430624][T15710] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.438001][T15710] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.445697][T15710] bridge_slave_0: entered allmulticast mode [ 329.454529][T15710] bridge_slave_0: entered promiscuous mode [ 329.466192][T15710] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.491206][T15710] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.505631][T15710] bridge_slave_1: entered allmulticast mode [ 329.513921][T15710] bridge_slave_1: entered promiscuous mode [ 329.566193][T15710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.579863][T15710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.638351][T15710] team0: Port device team_slave_0 added [ 329.702697][T15710] team0: Port device team_slave_1 added [ 329.728163][T15710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.735437][T15710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.762824][T15710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.775225][T15710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.783319][T15710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.814091][T15710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.877082][T15710] hsr_slave_0: entered promiscuous mode [ 329.884020][T15710] hsr_slave_1: entered promiscuous mode [ 329.893039][T15710] debugfs: 'hsr0' already exists in 'hsr' [ 329.899086][T15710] Cannot create hsr debugfs directory [ 330.037949][T15710] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.048822][T15710] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.112045][ T5651] Bluetooth: hci2: command tx timeout [ 330.173928][T15710] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.184263][T15710] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.275839][T15710] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.286289][T15710] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.359218][T15710] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.369081][T15710] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.697287][T15751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.739958][T15710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 331.777340][T15710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.786920][T15710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 331.843258][T15710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.869632][T15710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 331.906200][T15710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.930441][T15790] __nla_validate_parse: 3 callbacks suppressed [ 331.930458][T15790] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2885'. [ 331.954742][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2886'. [ 331.965105][T15710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 331.983544][T15710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 331.996007][T15800] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 331.997733][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'. [ 332.159623][T15813] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 332.193528][ T5651] Bluetooth: hci2: command tx timeout [ 332.338731][T15710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.383393][T15710] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.404684][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.411884][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.470533][ T8455] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.477751][ T8455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.506240][T15832] syzkaller0: entered promiscuous mode [ 332.512698][T15832] syzkaller0: entered allmulticast mode [ 332.538278][T15832] tipc: Enabled bearer , priority 0 [ 332.556631][T15831] tipc: Resetting bearer [ 332.609101][T15831] tipc: Disabling bearer [ 332.633875][T15839] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 332.779531][T15847] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 332.779531][T15847] Please contact the netfilter-devel mailing list or update your nftables rules. [ 333.095414][T15859] xt_hashlimit: size too large, truncated to 1048576 [ 333.229860][T15865] SET target dimension over the limit! [ 333.619772][T15710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.637745][T15878] netlink: 'syz.0.2905': attribute type 1 has an invalid length. [ 333.669744][T15878] bond2: entered promiscuous mode [ 333.680025][T15878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 333.935832][ T30] audit: type=1804 audit(1780470710.621:6): pid=15891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2908" name="/newroot/63/cgroup.controllers" dev="tmpfs" ino=340 res=1 errno=0 [ 333.981585][ T30] audit: type=1800 audit(1780470710.621:7): pid=15891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2908" name="cgroup.controllers" dev="tmpfs" ino=340 res=0 errno=0 [ 334.080477][T15894] syzkaller0: entered promiscuous mode [ 334.101927][T15894] syzkaller0: entered allmulticast mode [ 334.157182][T15894] tipc: Enabled bearer , priority 10 [ 334.204906][T15893] tipc: Resetting bearer [ 334.256667][T15893] tipc: Disabling bearer [ 334.277228][ T5651] Bluetooth: hci2: command tx timeout [ 334.347823][T15710] veth0_vlan: entered promiscuous mode [ 334.368749][T15710] veth1_vlan: entered promiscuous mode [ 334.399456][T15710] veth0_macvtap: entered promiscuous mode [ 334.419148][T15910] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2914'. [ 334.435008][T15710] veth1_macvtap: entered promiscuous mode [ 334.476618][T15710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.517843][T15710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.558971][ T8455] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.579911][ T8455] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.590443][T15920] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2918'. [ 334.609712][ T8455] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.632596][ T8455] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.638725][T15921] xt_bpf: check failed: parse error [ 334.655720][T15921] xt_bpf: check failed: parse error [ 334.668305][T15921] xt_bpf: check failed: parse error [ 334.701501][T15921] xt_bpf: check failed: parse error [ 334.715421][T15921] xt_bpf: check failed: parse error [ 334.732969][T15921] xt_bpf: check failed: parse error [ 334.738715][T15921] xt_bpf: check failed: parse error [ 334.745140][T15921] xt_bpf: check failed: parse error [ 334.769531][T15921] xt_bpf: check failed: parse error [ 334.778996][T15921] xt_bpf: check failed: parse error [ 334.806754][T15931] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2920'. [ 334.898547][T15931] syz_tun: Device is already in use. [ 335.051642][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.085119][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.101832][T15939] netlink: 'syz.6.2923': attribute type 2 has an invalid length. [ 335.192667][ T8453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.225097][ T8453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.234366][T15941] syzkaller0: entered promiscuous mode [ 335.255130][T15941] syzkaller0: entered allmulticast mode [ 335.288541][T15941] tipc: Enabled bearer , priority 10 [ 335.320549][T15940] tipc: Resetting bearer [ 335.345417][T15945] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2926'. [ 335.388864][T15940] tipc: Disabling bearer [ 335.498528][T15952] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2928'. [ 335.753400][T15962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2932'. [ 335.818927][T15962] ipvlan2: entered allmulticast mode [ 335.840065][T15962] syz_tun: entered allmulticast mode [ 335.973460][T15976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2936'. [ 336.353957][ T5651] Bluetooth: hci2: command tx timeout [ 336.492264][T16007] bridge_slave_0: left allmulticast mode [ 336.505207][T16007] bridge_slave_0: left promiscuous mode [ 336.512172][T16007] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.534626][T16007] bridge_slave_1: left allmulticast mode [ 336.540324][T16007] bridge_slave_1: left promiscuous mode [ 336.548718][T16007] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.580200][T16007] bond0: (slave bond_slave_0): Releasing backup interface [ 336.625302][T16007] bond0: (slave bond_slave_1): Releasing backup interface [ 336.657680][T16007] team0: Port device team_slave_0 removed [ 336.669781][T16007] team0: Port device team_slave_1 removed [ 336.682701][T16007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.693587][T16007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.715402][T16007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.735390][T16007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.780340][T16007] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 336.899825][T16025] netlink: 'syz.6.2953': attribute type 11 has an invalid length. [ 337.661153][T16062] __nla_validate_parse: 5 callbacks suppressed [ 337.661169][T16062] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2966'. [ 338.074214][T16083] netlink: 'syz.6.2976': attribute type 28 has an invalid length. [ 338.105130][T16088] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2978'. [ 338.105657][T16083] netlink: 'syz.6.2976': attribute type 3 has an invalid length. [ 338.137555][T16088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2978'. [ 338.142298][T16083] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2976'. [ 338.156834][T16088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2978'. [ 338.204704][T16088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2978'. [ 338.224478][T16088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2978'. [ 338.348084][T16095] netlink: 'syz.4.2980': attribute type 61 has an invalid length. [ 338.376818][T16095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2980'. [ 338.896030][T16112] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2986'. [ 339.013500][T16117] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2988'. [ 339.898221][T16167] netlink: 'syz.0.3012': attribute type 21 has an invalid length. [ 339.955656][T16167] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 339.973559][T16167] bond3 (unregistering): Released all slaves [ 340.038334][ T4965] block nbd1: Possible stuck request ffff888027335080: control (read@0,1024B). Runtime 150 seconds [ 340.050177][ T4965] block nbd1: Possible stuck request ffff888027335240: control (read@1024,1024B). Runtime 150 seconds [ 340.062234][ T4965] block nbd1: Possible stuck request ffff888027335400: control (read@2048,1024B). Runtime 150 seconds [ 340.074070][ T4965] block nbd1: Possible stuck request ffff8880273355c0: control (read@3072,1024B). Runtime 150 seconds [ 340.238729][T16182] syzkaller0: entered promiscuous mode [ 340.245224][T16182] syzkaller0: entered allmulticast mode [ 340.277077][T16182] tipc: Enabled bearer , priority 10 [ 340.292154][T16187] IPv6: NLM_F_CREATE should be specified when creating new route [ 340.307471][T16181] tipc: Resetting bearer [ 340.369305][T16181] tipc: Disabling bearer [ 340.382911][ T8038] IPVS: starting estimator thread 0... [ 340.417043][T16187] netlink: 'syz.4.3019': attribute type 83 has an invalid length. [ 340.487122][T16193] IPVS: using max 31 ests per chain, 74400 per kthread [ 341.023592][T16228] syzkaller0: entered promiscuous mode [ 341.029281][T16228] syzkaller0: entered allmulticast mode [ 341.077186][T16228] tipc: Enabled bearer , priority 10 [ 341.139220][T16227] tipc: Resetting bearer [ 341.180030][T16227] tipc: Disabling bearer [ 341.578170][T16242] Cannot find del_set index 4 as target [ 341.790592][T16224] infiniband syz0: set active [ 341.807949][T16224] infiniband syz0: added veth0_vlan [ 341.838087][T16224] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 341.855519][T16224] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 341.877503][T16224] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 341.913741][T16224] RDS/IB: syz0: added [ 341.923732][T16224] smc: adding ib device syz0 with port count 1 [ 341.970113][T16224] smc: ib device syz0 port 1 has no pnetid [ 341.984766][T16255] vcan0: entered allmulticast mode [ 342.032405][T16261] syzkaller0: entered promiscuous mode [ 342.037969][T16261] syzkaller0: entered allmulticast mode [ 342.062753][T16261] tipc: Started in network mode [ 342.069733][T16261] tipc: Node identity ae4e748f32bd, cluster identity 4711 [ 342.083823][T16261] tipc: Enabled bearer , priority 10 [ 342.098388][T16260] tipc: Resetting bearer [ 342.149128][T16260] tipc: Disabling bearer [ 342.880223][T16296] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 2, id = 0 [ 343.004547][T16298] netlink: 'syz.4.3063': attribute type 1 has an invalid length. [ 343.031032][T16299] netlink: 'syz.4.3063': attribute type 1 has an invalid length. [ 343.082828][T16301] syzkaller0: entered promiscuous mode [ 343.097222][T16301] syzkaller0: entered allmulticast mode [ 343.129281][T16301] tipc: Enabled bearer , priority 10 [ 343.157200][T16300] tipc: Resetting bearer [ 343.247907][T16300] tipc: Disabling bearer [ 343.308390][T16308] __nla_validate_parse: 10 callbacks suppressed [ 343.308408][T16308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3066'. [ 343.601463][T16318] netlink: 'syz.8.3071': attribute type 21 has an invalid length. [ 343.627846][T16318] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3071'. [ 344.382306][T16350] syzkaller0: entered promiscuous mode [ 344.410634][T16350] syzkaller0: entered allmulticast mode [ 344.483193][T16350] tipc: Enabled bearer , priority 3 [ 344.535483][T16349] tipc: Resetting bearer [ 344.588554][T16349] tipc: Disabling bearer [ 344.674360][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.684497][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.684966][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3082'. [ 344.702152][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.715126][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.723713][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.753938][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3082'. [ 344.765779][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3082'. [ 344.814913][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3082'. [ 344.844309][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3082'. [ 344.889066][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3082'. [ 344.916945][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3082'. [ 344.946245][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3082'. [ 345.317750][T16383] netlink: 'syz.4.3087': attribute type 10 has an invalid length. [ 345.351600][T16381] netlink: 'syz.4.3087': attribute type 10 has an invalid length. [ 345.392368][T16383] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.434325][T16383] bond0: (slave team0): Enslaving as an active interface with an up link [ 345.779460][T16357] lo speed is unknown, defaulting to 1000 [ 345.914826][T16385] Cannot find del_set index 3 as target [ 346.541507][T16417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.781054][T16417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.830970][ T5651] Bluetooth: hci0: command tx timeout [ 346.866468][T16417] bond1: (slave bond2): Enslaving as an active interface with an up link [ 346.883210][T16421] bond1 (unregistering): (slave bond2): Releasing backup interface [ 346.896683][T16421] bond1 (unregistering): Released all slaves [ 346.920205][T16422] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.927853][T16422] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.016300][T16428] tipc: Enabled bearer , priority 7 [ 347.047085][T16432] syzkaller0: entered promiscuous mode [ 347.054436][T16432] syzkaller0: entered allmulticast mode [ 347.113500][T16427] tipc: Resetting bearer [ 347.203376][T16427] tipc: Disabling bearer [ 348.115135][T16357] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.135655][T16357] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.151309][T16357] bridge_slave_0: entered allmulticast mode [ 348.183657][T16357] bridge_slave_0: entered promiscuous mode [ 348.203001][T16488] syzkaller0: entered promiscuous mode [ 348.211330][T16488] syzkaller0: entered allmulticast mode [ 348.233959][T16357] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.252613][T16357] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.260125][T16357] bridge_slave_1: entered allmulticast mode [ 348.267614][T16357] bridge_slave_1: entered promiscuous mode [ 348.316208][T16493] syzkaller1: entered promiscuous mode [ 348.326551][T16493] syzkaller1: entered allmulticast mode [ 348.337939][T16488] tipc: Enabled bearer , priority 15 [ 348.354812][T16494] __nla_validate_parse: 63 callbacks suppressed [ 348.354830][T16494] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3114'. [ 348.375789][T16357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.388800][T16357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.406318][T16487] tipc: Resetting bearer [ 348.444903][T16487] tipc: Disabling bearer [ 348.579643][T16493] syzkaller0: entered promiscuous mode [ 348.599395][T16493] syzkaller0: entered allmulticast mode [ 348.620224][T16357] team0: Port device team_slave_0 added [ 348.659860][T16357] team0: Port device team_slave_1 added [ 348.922081][ T5651] Bluetooth: hci0: command tx timeout [ 350.958806][T16525] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 350.991205][ T5633] Bluetooth: hci0: command tx timeout [ 351.100596][T16357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.116496][T16357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.144063][T16357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.208496][T16357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.239641][T16357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.330239][T16357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.455382][T16357] hsr_slave_0: entered promiscuous mode [ 351.464500][T16357] hsr_slave_1: entered promiscuous mode [ 351.473308][T16357] debugfs: 'hsr0' already exists in 'hsr' [ 351.479273][T16357] Cannot create hsr debugfs directory [ 351.528664][T16546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3134'. [ 351.680663][T16551] netlink: 'syz.0.3136': attribute type 9 has an invalid length. [ 351.952167][T16557] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 351.964282][T16557] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 351.994084][T16557] tipc: Enabled bearer , priority 10 [ 352.058468][T16357] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 352.090570][T16357] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.102207][T16357] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 352.123275][T16357] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 352.132273][T16357] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 352.158520][T16357] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.176513][T16357] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 352.189258][T16357] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 352.372429][T16357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.416549][T16357] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.449263][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.456456][ T8450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.488538][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.495779][ T8450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.691284][T16589] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.710376][T16589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3148'. [ 353.073938][ T5633] Bluetooth: hci0: command 0x0419 tx timeout [ 353.110847][ T8067] tipc: Node number set to 2633200783 [ 353.359462][T16620] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3156'. [ 353.827769][T16357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.907151][T16654] syzkaller0: entered promiscuous mode [ 353.918802][T16658] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3169'. [ 353.928215][T16654] syzkaller0: entered allmulticast mode [ 353.948679][T16654] tipc: Enabled bearer , priority 10 [ 353.985502][T16652] tipc: Resetting bearer [ 354.036055][T16652] tipc: Disabling bearer [ 354.474860][T16684] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3180'. [ 354.566904][T16357] veth0_vlan: entered promiscuous mode [ 354.608089][T16357] veth1_vlan: entered promiscuous mode [ 354.750094][T16357] veth0_macvtap: entered promiscuous mode [ 354.793094][T16357] veth1_macvtap: entered promiscuous mode [ 354.844019][T16702] syzkaller0: entered promiscuous mode [ 354.850149][T16702] syzkaller0: entered allmulticast mode [ 354.874759][T16357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.885953][T16707] netlink: 'syz.6.3189': attribute type 2 has an invalid length. [ 354.907074][T16702] tipc: Enabled bearer , priority 10 [ 354.923342][ T5651] Bluetooth: hci6: command 0x0406 tx timeout [ 354.945352][T16701] tipc: Resetting bearer [ 355.021502][T16718] netlink: 'syz.6.3190': attribute type 11 has an invalid length. [ 355.029790][T16701] tipc: Disabling bearer [ 355.053564][T16718] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3190'. [ 355.065301][T16718] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3190'. [ 355.151379][ T50] Bluetooth: hci0: command 0x0419 tx timeout [ 355.161189][T16357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.223577][ T8453] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.268735][ T8453] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.295537][T16728] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3193'. [ 355.331530][T16727] vcan0: entered allmulticast mode [ 355.340989][ T8453] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.350131][ T8453] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.408342][T16736] Bluetooth: MGMT ver 1.23 [ 355.423708][T16737] bond2: entered allmulticast mode [ 355.441041][T16728] siw: device registration error -23 [ 355.558746][T16740] netlink: 'syz.6.3196': attribute type 1 has an invalid length. [ 355.633401][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.633986][T16741] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3196'. [ 355.659425][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.706575][ T8453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.716419][ T8453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.178015][T16730] bond2: left allmulticast mode [ 356.360659][T16784] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3210'. [ 356.452228][T16787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.461296][T16787] IPv6: NLM_F_CREATE should be set when creating new route [ 356.468566][T16787] IPv6: NLM_F_CREATE should be set when creating new route [ 356.475844][T16787] IPv6: NLM_F_CREATE should be set when creating new route [ 356.550659][T16793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.587817][T16795] syzkaller0: entered promiscuous mode [ 356.606755][T16795] syzkaller0: entered allmulticast mode [ 356.655882][T16795] tipc: Enabled bearer , priority 10 [ 356.716011][T16788] tipc: Resetting bearer [ 356.832822][T16788] tipc: Disabling bearer [ 357.245363][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3222'. [ 357.304262][T16834] netlink: 'syz.0.3222': attribute type 1 has an invalid length. [ 357.365514][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3222'. [ 357.401924][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3222'. [ 357.471130][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 357.472268][ T5651] Bluetooth: hci2: command 0x0401 tx timeout [ 357.506601][T16834] netlink: 'syz.0.3222': attribute type 1 has an invalid length. [ 357.937060][T16869] ipvlan2: entered allmulticast mode [ 358.205320][T16885] syzkaller0: entered promiscuous mode [ 358.224240][T16885] syzkaller0: entered allmulticast mode [ 360.375726][T16845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 360.786565][T16921] netlink: 'syz.4.3243': attribute type 49 has an invalid length. [ 361.059864][T16921] ip6gretap0: entered promiscuous mode [ 361.087682][T16921] ip6gretap0: entered allmulticast mode [ 361.165636][T16942] syzkaller0: entered promiscuous mode [ 361.188378][T16942] syzkaller0: entered allmulticast mode [ 361.248239][T16942] tipc: Enabled bearer , priority 0 [ 361.294743][T16941] tipc: Resetting bearer [ 361.370655][T16947] __nla_validate_parse: 4 callbacks suppressed [ 361.385308][T16947] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3249'. [ 361.409697][T16941] tipc: Disabling bearer [ 361.626871][T16953] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3252'. [ 361.826799][T16968] FAULT_INJECTION: forcing a failure. [ 361.826799][T16968] name failslab, interval 1, probability 0, space 0, times 0 [ 361.845817][T16968] CPU: 1 UID: 0 PID: 16968 Comm: syz.8.3257 Not tainted syzkaller #0 PREEMPT(full) [ 361.845840][T16968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 361.845855][T16968] Call Trace: [ 361.845934][T16968] [ 361.846006][T16968] dump_stack_lvl+0xe8/0x150 [ 361.846241][T16968] should_fail_ex+0x412/0x560 [ 361.846293][T16968] should_failslab+0xa8/0x100 [ 361.846336][T16968] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 361.846366][T16968] ? __alloc_skb+0x186/0x7d0 [ 361.846500][T16968] ? __alloc_skb+0x1d0/0x7d0 [ 361.846518][T16968] ? __local_bh_enable_ip+0xd0/0x130 [ 361.846561][T16968] __alloc_skb+0x1d0/0x7d0 [ 361.846586][T16968] netlink_sendmsg+0x5d4/0xb40 [ 361.846670][T16968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.846695][T16968] ? aa_sock_msg_perm+0xf1/0x1b0 [ 361.846735][T16968] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.846774][T16968] ____sys_sendmsg+0x972/0x9f0 [ 361.846814][T16968] ? __might_fault+0xaf/0x130 [ 361.846842][T16968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.846864][T16968] ? import_iovec+0x73/0xa0 [ 361.846889][T16968] ___sys_sendmsg+0x2a5/0x360 [ 361.846903][T16968] ? __lock_acquire+0x6b5/0x2cf0 [ 361.846935][T16968] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.846985][T16968] ? __fget_files+0x2a/0x420 [ 361.847012][T16968] ? __fget_files+0x3a0/0x420 [ 361.847040][T16968] __x64_sys_sendmsg+0x1bd/0x2a0 [ 361.847058][T16968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.847083][T16968] ? __pfx_ksys_write+0x10/0x10 [ 361.847117][T16968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.847148][T16968] do_syscall_64+0x174/0x580 [ 361.847221][T16968] ? trace_irq_disable+0x3b/0x140 [ 361.847251][T16968] ? clear_bhb_loop+0x40/0x90 [ 361.847271][T16968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.847286][T16968] RIP: 0033:0x7f0a4e79ce59 [ 361.847328][T16968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.847371][T16968] RSP: 002b:00007f0a4f575028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.847395][T16968] RAX: ffffffffffffffda RBX: 00007f0a4ea15fa0 RCX: 00007f0a4e79ce59 [ 361.847406][T16968] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 361.847416][T16968] RBP: 00007f0a4f575090 R08: 0000000000000000 R09: 0000000000000000 [ 361.847431][T16968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.847441][T16968] R13: 00007f0a4ea16038 R14: 00007f0a4ea15fa0 R15: 00007ffc73e39508 [ 361.847469][T16968] [ 362.483283][T16996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3268'. [ 362.710327][T17010] FAULT_INJECTION: forcing a failure. [ 362.710327][T17010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.743434][T17010] CPU: 0 UID: 0 PID: 17010 Comm: syz.6.3271 Not tainted syzkaller #0 PREEMPT(full) [ 362.743457][T17010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 362.743466][T17010] Call Trace: [ 362.743473][T17010] [ 362.743480][T17010] dump_stack_lvl+0xe8/0x150 [ 362.743504][T17010] should_fail_ex+0x412/0x560 [ 362.743528][T17010] _copy_from_iter+0x1d3/0x1670 [ 362.743549][T17010] ? rcu_is_watching+0x15/0xb0 [ 362.743600][T17010] ? __pfx__copy_from_iter+0x10/0x10 [ 362.743624][T17010] ? netlink_sendmsg+0x650/0xb40 [ 362.743645][T17010] ? skb_put+0x11b/0x210 [ 362.743670][T17010] netlink_sendmsg+0x6c0/0xb40 [ 362.743700][T17010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.743725][T17010] ? aa_sock_msg_perm+0xf1/0x1b0 [ 362.743748][T17010] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 362.743771][T17010] ____sys_sendmsg+0x972/0x9f0 [ 362.743786][T17010] ? __might_fault+0xaf/0x130 [ 362.743812][T17010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.743837][T17010] ? import_iovec+0x73/0xa0 [ 362.743858][T17010] ___sys_sendmsg+0x2a5/0x360 [ 362.743872][T17010] ? __lock_acquire+0x6b5/0x2cf0 [ 362.743893][T17010] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.743942][T17010] ? __fget_files+0x2a/0x420 [ 362.743960][T17010] ? __fget_files+0x3a0/0x420 [ 362.743987][T17010] __x64_sys_sendmsg+0x1bd/0x2a0 [ 362.744006][T17010] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 362.744030][T17010] ? __pfx_ksys_write+0x10/0x10 [ 362.744060][T17010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.744078][T17010] do_syscall_64+0x174/0x580 [ 362.744093][T17010] ? trace_irq_disable+0x3b/0x140 [ 362.744114][T17010] ? clear_bhb_loop+0x40/0x90 [ 362.744134][T17010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.744149][T17010] RIP: 0033:0x7f8d2b19ce59 [ 362.744165][T17010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.744178][T17010] RSP: 002b:00007f8d2c105028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.744195][T17010] RAX: ffffffffffffffda RBX: 00007f8d2b415fa0 RCX: 00007f8d2b19ce59 [ 362.744205][T17010] RDX: 0000000000008040 RSI: 0000200000000200 RDI: 0000000000000003 [ 362.744215][T17010] RBP: 00007f8d2c105090 R08: 0000000000000000 R09: 0000000000000000 [ 362.744224][T17010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.744233][T17010] R13: 00007f8d2b416038 R14: 00007f8d2b415fa0 R15: 00007ffd296b5758 [ 362.744261][T17010] [ 363.082882][T17018] FAULT_INJECTION: forcing a failure. [ 363.082882][T17018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.124131][T17018] CPU: 0 UID: 0 PID: 17018 Comm: syz.6.3274 Not tainted syzkaller #0 PREEMPT(full) [ 363.124154][T17018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.124164][T17018] Call Trace: [ 363.124171][T17018] [ 363.124178][T17018] dump_stack_lvl+0xe8/0x150 [ 363.124203][T17018] should_fail_ex+0x412/0x560 [ 363.124226][T17018] _copy_from_iter+0x1d3/0x1670 [ 363.124247][T17018] ? rcu_is_watching+0x15/0xb0 [ 363.124279][T17018] ? __pfx__copy_from_iter+0x10/0x10 [ 363.124303][T17018] ? netlink_sendmsg+0x650/0xb40 [ 363.124324][T17018] ? skb_put+0x11b/0x210 [ 363.124349][T17018] netlink_sendmsg+0x6c0/0xb40 [ 363.124378][T17018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.124403][T17018] ? aa_sock_msg_perm+0xf1/0x1b0 [ 363.124426][T17018] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 363.124448][T17018] ____sys_sendmsg+0x972/0x9f0 [ 363.124464][T17018] ? __might_fault+0xaf/0x130 [ 363.124490][T17018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.124514][T17018] ? import_iovec+0x73/0xa0 [ 363.124536][T17018] ___sys_sendmsg+0x2a5/0x360 [ 363.124551][T17018] ? __lock_acquire+0x6b5/0x2cf0 [ 363.124572][T17018] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.124621][T17018] ? __fget_files+0x2a/0x420 [ 363.124639][T17018] ? __fget_files+0x3a0/0x420 [ 363.124666][T17018] __x64_sys_sendmsg+0x1bd/0x2a0 [ 363.124685][T17018] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 363.124709][T17018] ? __pfx_ksys_write+0x10/0x10 [ 363.124739][T17018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.124755][T17018] do_syscall_64+0x174/0x580 [ 363.124771][T17018] ? trace_irq_disable+0x3b/0x140 [ 363.124792][T17018] ? clear_bhb_loop+0x40/0x90 [ 363.124812][T17018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.124827][T17018] RIP: 0033:0x7f8d2b19ce59 [ 363.124843][T17018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.124856][T17018] RSP: 002b:00007f8d2c105028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.124873][T17018] RAX: ffffffffffffffda RBX: 00007f8d2b415fa0 RCX: 00007f8d2b19ce59 [ 363.124884][T17018] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 363.124893][T17018] RBP: 00007f8d2c105090 R08: 0000000000000000 R09: 0000000000000000 [ 363.124903][T17018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.124912][T17018] R13: 00007f8d2b416038 R14: 00007f8d2b415fa0 R15: 00007ffd296b5758 [ 363.124940][T17018] [ 363.658600][T17029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3276'. [ 363.722182][T17027] netlink: 348 bytes leftover after parsing attributes in process `syz.6.3278'. [ 364.035269][T17050] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3283'. [ 364.079572][T17052] --map-set only usable from mangle table [ 364.126040][T17058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3286'. [ 364.270371][T17061] bond3: entered promiscuous mode [ 364.292521][T17061] bond3: entered allmulticast mode [ 364.305020][T17066] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3287'. [ 364.506503][T17076] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3291'. [ 364.726604][T17087] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3295'. [ 365.268397][T17104] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 365.292231][T17107] netlink: 'syz.4.3302': attribute type 2 has an invalid length. [ 365.321777][T17107] netlink: 'syz.4.3302': attribute type 2 has an invalid length. [ 365.874318][T17136] Bluetooth: MGMT ver 1.23 [ 366.187577][ T1117] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.224592][ T1117] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.249774][ T1117] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.280373][ T8450] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.554757][T17164] __nla_validate_parse: 3 callbacks suppressed [ 366.554776][T17164] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3323'. [ 366.827841][T17175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3325'. [ 367.327676][T17198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3334'. [ 367.353910][T17200] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3335'. [ 367.483073][T17207] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3337'. [ 367.616958][T17211] netlink: 'syz.0.3340': attribute type 2 has an invalid length. [ 367.621428][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3339'. [ 367.649993][T17215] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3341'. [ 367.731666][T17213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.311487][T17249] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3354'. [ 368.340551][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3355'. [ 368.362246][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3355'. [ 368.381261][T17251] netlink: 'syz.8.3355': attribute type 15 has an invalid length. [ 368.424371][ T48] netdevsim netdevsim8 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 368.424703][T17251] netlink: 'syz.8.3355': attribute type 15 has an invalid length. [ 368.447355][ T48] netdevsim netdevsim8 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 368.483074][ T48] netdevsim netdevsim8 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 368.503826][ T48] netdevsim netdevsim8 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 370.114946][ T4965] block nbd1: Possible stuck request ffff888027335080: control (read@0,1024B). Runtime 180 seconds [ 370.125873][ T4965] block nbd1: Possible stuck request ffff888027335240: control (read@1024,1024B). Runtime 180 seconds [ 370.134499][T17321] openvswitch: netlink: IP tunnel TTL not specified. [ 370.137997][ T4965] block nbd1: Possible stuck request ffff888027335400: control (read@2048,1024B). Runtime 180 seconds [ 370.156027][ T4965] block nbd1: Possible stuck request ffff8880273355c0: control (read@3072,1024B). Runtime 180 seconds [ 370.306180][T17330] syzkaller0: entered promiscuous mode [ 370.332947][T17330] syzkaller0: entered allmulticast mode [ 370.396046][T17330] tipc: Enabled bearer , priority 0 [ 370.423551][T17329] tipc: Resetting bearer [ 370.465967][T17329] tipc: Disabling bearer [ 370.552129][T17337] syzkaller0: entered promiscuous mode [ 370.581330][T17337] syzkaller0: entered allmulticast mode [ 370.946058][T17350] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 371.075487][T17350] bond1 (unregistering): Released all slaves [ 371.471764][T17376] syzkaller0: entered promiscuous mode [ 371.499013][T17376] syzkaller0: entered allmulticast mode [ 371.508158][T17378] netlink: 'syz.9.3398': attribute type 2 has an invalid length. [ 371.524652][T17378] netlink: 'syz.9.3398': attribute type 2 has an invalid length. [ 371.539385][T17376] tipc: Enabled bearer , priority 0 [ 371.588759][T17375] tipc: Resetting bearer [ 371.598810][T17381] __nla_validate_parse: 8 callbacks suppressed [ 371.598825][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3397'. [ 371.644817][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3397'. [ 371.655487][T17375] tipc: Disabling bearer [ 371.681998][T17380] vlan2: entered promiscuous mode [ 371.687184][T17380] bridge0: entered promiscuous mode [ 371.700047][T17383] smc: net device team0 applied user defined pnetid SYZ2 [ 372.012666][T17395] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3403'. [ 372.019004][T17396] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3404'. [ 372.075965][T17398] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 372.361726][T17412] syzkaller0: entered promiscuous mode [ 372.384585][T17412] syzkaller0: entered allmulticast mode [ 372.468465][T17412] tipc: Enabled bearer , priority 0 [ 372.531055][T17410] tipc: Resetting bearer [ 372.637556][T17410] tipc: Disabling bearer [ 372.679387][ T31] INFO: task syz.3.1367:10894 blocked for more than 143 seconds. [ 372.703298][T17431] openvswitch: netlink: IPv4 tunnel dst address is zero [ 372.719259][ T31] Not tainted syzkaller #0 [ 372.750292][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.798903][ T31] task:syz.3.1367 state:D stack:26120 pid:10894 tgid:10893 ppid:5645 task_flags:0x400040 flags:0x00080002 [ 372.855827][ T31] Call Trace: [ 372.860437][ T31] [ 372.863932][ T31] __schedule+0x1821/0x5740 [ 372.868687][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 372.881586][ T31] ? __pfx___schedule+0x10/0x10 [ 372.886655][ T31] ? schedule+0x90/0x360 [ 372.893621][ T31] schedule+0x164/0x360 [ 372.900601][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.907198][ T31] __mutex_lock+0x7f7/0x1550 [ 372.915180][ T31] ? __mutex_lock+0x608/0x1550 [ 372.920107][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 372.928537][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.934521][ T31] ? stack_trace_save+0xa9/0x100 [ 372.939619][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 372.945638][ T31] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 372.965151][ T31] ? kasan_save_track+0x4f/0x80 [ 372.974067][ T31] ? kasan_save_track+0x3e/0x80 [ 372.979045][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 372.984387][ T31] ? __alloc_skb+0x2c1/0x7d0 [ 372.989106][ T31] ? netlink_dump+0x1d8/0xe10 [ 372.995961][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 373.007761][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 373.015634][ T31] ? genl_rcv_msg+0x5e8/0x7a0 [ 373.020432][ T31] ? netlink_rcv_skb+0x232/0x4b0 [ 373.027124][ T31] ? genl_rcv+0x28/0x40 [ 373.031647][ T31] ? netlink_unicast+0x75c/0x8e0 [ 373.036825][ T31] ? netlink_sendmsg+0x813/0xb40 [ 373.042352][ T31] ? ____sys_sendmsg+0x972/0x9f0 [ 373.047493][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 373.053297][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 373.058608][ T31] ? do_syscall_64+0x174/0x580 [ 373.063904][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.070175][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 373.104857][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.121942][ T31] ? trace_kmalloc+0x2a/0xf0 [ 373.130204][ T31] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 373.137413][ T31] genl_dumpit+0x10b/0x1b0 [ 373.142757][ T31] netlink_dump+0x702/0xe10 [ 373.147491][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 373.153044][ T31] ? genl_start+0x499/0x6c0 [ 373.158155][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 373.163964][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 373.169900][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 373.177124][ T31] ? genl_get_cmd+0x522/0x960 [ 373.182517][ T31] ? __pfx_genl_start+0x10/0x10 [ 373.187480][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 373.193981][ T31] ? __pfx_genl_done+0x10/0x10 [ 373.198821][ T31] genl_rcv_msg+0x5e8/0x7a0 [ 373.203971][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 373.210187][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 373.216764][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 373.223487][ T31] netlink_rcv_skb+0x232/0x4b0 [ 373.228291][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 373.233918][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 373.239248][ T31] ? down_read+0x270/0x2e0 [ 373.243801][ T31] ? genl_rcv+0xd/0x40 [ 373.247895][ T31] genl_rcv+0x28/0x40 [ 373.251943][ T31] netlink_unicast+0x75c/0x8e0 [ 373.256721][ T31] netlink_sendmsg+0x813/0xb40 [ 373.262120][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.267432][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 373.272439][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.277731][ T31] ____sys_sendmsg+0x972/0x9f0 [ 373.282725][ T31] ? __might_fault+0xaf/0x130 [ 373.287432][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.293714][ T31] ? import_iovec+0x73/0xa0 [ 373.298236][ T31] ___sys_sendmsg+0x2a5/0x360 [ 373.303673][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 373.309720][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.317521][ T31] ? futex_wait+0x2a2/0x390 [ 373.322759][ T31] ? __fget_files+0x2a/0x420 [ 373.327400][ T31] ? __fget_files+0x3a0/0x420 [ 373.332514][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 373.337478][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.343102][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.347909][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.354512][ T31] do_syscall_64+0x174/0x580 [ 373.359117][ T31] ? trace_irq_disable+0x3b/0x140 [ 373.364291][ T31] ? clear_bhb_loop+0x40/0x90 [ 373.368994][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.374983][ T31] RIP: 0033:0x7f4f6879ce59 [ 373.379406][ T31] RSP: 002b:00007f4f696c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.388309][ T31] RAX: ffffffffffffffda RBX: 00007f4f68a15fa0 RCX: 00007f4f6879ce59 [ 373.397239][ T31] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000003 [ 373.405416][ T31] RBP: 00007f4f68832d6f R08: 0000000000000000 R09: 0000000000000000 [ 373.415566][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.423677][ T31] R13: 00007f4f68a16038 R14: 00007f4f68a15fa0 R15: 00007ffd2b4db238 [ 373.431730][ T31] [ 373.434863][ T31] [ 373.434863][ T31] Showing all locks held in the system: [ 373.443385][ T31] 1 lock held by khungtaskd/31: [ 373.460856][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 373.480884][ T31] 2 locks held by getty/5389: [ 373.485668][ T31] #0: ffff888036d6e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 373.510784][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 373.523668][ T31] 2 locks held by syz.1.672/8210: [ 373.540780][ T31] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 373.549127][ T31] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 373.582430][ T31] 4 locks held by kworker/u8:14/8453: [ 373.587840][ T31] 3 locks held by kworker/u8:15/8455: [ 373.593820][ T31] #0: ffff888031f2c140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 373.605603][ T31] #1: ffffc9000334fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 373.621735][ T31] #2: ffffffff8fdc7e80 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 373.631433][ T31] 1 lock held by udevd/9341: [ 373.636014][ T31] #0: ffff8880272c3350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 373.645447][ T31] 3 locks held by syz.3.1367/10894: [ 373.650696][ T31] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 373.659530][ T31] #1: ffff8880424ce6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 373.670319][ T31] #2: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 373.681205][ T31] 3 locks held by syz.2.1971/12963: [ 373.686412][ T31] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 373.694674][ T31] #1: ffff888075cb66e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 373.705305][ T31] #2: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 373.718132][ T31] 3 locks held by syz.5.2134/13521: [ 373.723479][ T31] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 373.731802][ T31] #1: ffff88807b2886e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 373.742869][ T31] #2: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 373.753429][ T31] 2 locks held by syz.7.2879/15772: [ 373.758633][ T31] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 373.766979][ T31] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 373.777691][ T31] 2 locks held by syz.8.3414/17421: [ 373.783078][ T31] #0: ffffffff8fdc7e80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 373.792853][ T31] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 373.805453][ T31] [ 373.807820][ T31] ============================================= [ 373.807820][ T31] [ 373.822394][ T31] NMI backtrace for cpu 0 [ 373.822409][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 373.822430][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 373.822439][ T31] Call Trace: [ 373.822446][ T31] [ 373.822454][ T31] dump_stack_lvl+0xe8/0x150 [ 373.822477][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 373.822591][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 373.822619][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 373.822639][ T31] sys_info+0x135/0x170 [ 373.822655][ T31] watchdog+0xfd3/0x1030 [ 373.822686][ T31] ? watchdog+0x1c9/0x1030 [ 373.822731][ T31] kthread+0x389/0x470 [ 373.822749][ T31] ? __pfx_watchdog+0x10/0x10 [ 373.822766][ T31] ? __pfx_kthread+0x10/0x10 [ 373.822785][ T31] ret_from_fork+0x514/0xb70 [ 373.822813][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 373.822829][ T31] ? __switch_to+0xc79/0x1410 [ 373.822853][ T31] ? __pfx_kthread+0x10/0x10 [ 373.822871][ T31] ret_from_fork_asm+0x1a/0x30 [ 373.822902][ T31] [ 373.822919][ T31] Sending NMI from CPU 0 to CPUs 1: [ 373.941363][ C1] NMI backtrace for cpu 1 [ 373.941380][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 373.941397][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 373.941407][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 373.941429][ C1] Code: eb 7e 02 e9 d3 f8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 31 22 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 373.941443][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 373.941457][ C1] RAX: 00000000000edfd3 RBX: ffffffff819a845a RCX: 0000000080000001 [ 373.941469][ C1] RDX: 0000000000000001 RSI: ffffffff8dfa3620 RDI: ffffffff8c28b6e0 [ 373.941480][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 373.941492][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 373.941502][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000 [ 373.941513][ C1] FS: 0000000000000000(0000) GS:ffff88812539e000(0000) knlGS:0000000000000000 [ 373.941526][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.941537][ C1] CR2: 000000110c2c1792 CR3: 0000000074d64000 CR4: 00000000003526f0 [ 373.941551][ C1] Call Trace: [ 373.941556][ C1] [ 373.941562][ C1] default_idle+0x9/0x20 [ 373.941580][ C1] default_idle_call+0x72/0xb0 [ 373.941599][ C1] do_idle+0x36a/0x5f0 [ 373.941620][ C1] ? __pfx_do_idle+0x10/0x10 [ 373.941641][ C1] cpu_startup_entry+0x43/0x60 [ 373.941659][ C1] start_secondary+0x101/0x110 [ 373.941673][ C1] common_startup_64+0x13e/0x147 [ 373.941702][ C1] [ 374.128569][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 374.135441][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 374.144538][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 374.154575][ T31] Call Trace: [ 374.157839][ T31] [ 374.160751][ T31] vpanic+0x56c/0xa60 [ 374.164728][ T31] ? __pfx___schedule+0x10/0x10 [ 374.169563][ T31] ? __pfx_vpanic+0x10/0x10 [ 374.174047][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 374.180188][ T31] panic+0xc5/0xd0 [ 374.183894][ T31] ? __pfx_panic+0x10/0x10 [ 374.188295][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 374.193658][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 374.199802][ T31] watchdog+0x102c/0x1030 [ 374.204121][ T31] ? watchdog+0x1c9/0x1030 [ 374.208524][ T31] kthread+0x389/0x470 [ 374.212577][ T31] ? __pfx_watchdog+0x10/0x10 [ 374.217233][ T31] ? __pfx_kthread+0x10/0x10 [ 374.221805][ T31] ret_from_fork+0x514/0xb70 [ 374.226381][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 374.231476][ T31] ? __switch_to+0xc79/0x1410 [ 374.236143][ T31] ? __pfx_kthread+0x10/0x10 [ 374.240724][ T31] ret_from_fork_asm+0x1a/0x30 [ 374.245491][ T31] [ 374.248797][ T31] Kernel Offset: disabled [ 374.253105][ T31] Rebooting in 86400 seconds..