last executing test programs: 3m27.672102055s ago: executing program 3 (id=257): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000008000000000000000001000000000000000000000000300000000000000000000000000000004000000000000e3ff000000000000000000000000000000040000000000000000000040000000000000000000000000000000ba9b55090000000000fcffffff0000000002000001000000000000000008001f0004000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000008001f0003000000150008"], 0x160}}, 0x4810) 3m27.574739013s ago: executing program 1 (id=259): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001c00), &(0x7f0000001e80)=0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r3, 0x5421, &(0x7f0000001100)=0x9) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r0, 0xe0fd) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7d}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000ac0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff00007edcff48d744", 0x58}], 0x1) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000400)="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") r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2d) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000000340)=""/106, &(0x7f00000003c0)=0x6a) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000300)) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000500), &(0x7f0000000540)=0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0104000000016ea389220765bdb80650c5130000020000000000000900010073797a200000000020000000030a0101471c10ac590bd8c8adf42d5669e87600003624ae987a0000000000000100000009000100"], 0x68}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x5c}}, 0x20000050) socket(0x10, 0x3, 0x0) 3m27.41208827s ago: executing program 3 (id=262): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10, @private2, 0xffffffff, 0x3}, 0x20) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) (rerun: 64) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x4c, 0x3, "b783c26b4304de643c9e2a9cf1d8a8f382d32c31eeae229b357bcac3394a6251e17ea31e127d2799ea98ee23e8c75391c202d525d2d1d7878ab2cd107757d33cdd8104a9c3bf84c8"}]}, 0x60}, 0x1, 0x0, 0x0, 0x40094}, 0x4040800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x1410, 0x400, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000480) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip_vti0\x00', r2, 0x80, 0x700, 0xc9, 0x2, {{0x16, 0x4, 0x1, 0x32, 0x58, 0x67, 0x0, 0x8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010100, {[@timestamp={0x44, 0x10, 0xd0, 0x0, 0x0, [0x6, 0x5, 0x6]}, @timestamp_addr={0x44, 0x34, 0x67, 0x1, 0xc, [{@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x1}, {@multicast1, 0xe4}, {@local}, {@multicast1, 0xf0}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x98, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x8000) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000005c0)={@local, 0x0}, &(0x7f0000000600)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@getqdisc={0x28, 0x26, 0x10, 0x6, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0x6}, {0xfff3, 0x1}, {0x2, 0xfff2}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x240028c5}, 0x8000) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) (rerun: 64) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x62}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000880)) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000c00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000900)={0x2c0, 0x17, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbe6a}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x13c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}]}]}, 0x2c0}}, 0x40090) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000c80), r0) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x3c, r7, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000811) (async, rerun: 64) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000d80), 0x8) (rerun: 64) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan0\x00'}) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000e40)={0x0, 0x0}, &(0x7f0000000e80)=0xc) sendmsg$nl_generic(r6, &(0x7f0000001240)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001200)={&(0x7f0000000ec0)={0x33c, 0x3f, 0x20, 0x70bd2a, 0x25dfdbff, {0x17}, [@typed={0x5c, 0x61, 0x0, 0x0, @binary="be5184ec69801e0fd2ad1d278385d1518ce2d0a87fcf7415fdda42c3814410a90abe35ec53d7b026516cf2aa054cdd3c2640cfc20862ebdcc5cdf1527c8a7a5d751800542035e8117b4e62f623b238198a2559b5b6731f0a"}, @generic="621a12ad86330b0464d5f6fb2c2b5e4563d4c8017fd5b7469745e47021cc44b3b3586a4c06e5b79dcafb5413039a75df0279cea1af1b4b83a5d7b7c8c65f10c0da1a74ff4c2e975877db052391d15c00edeb99ddcf3db5c686a1d0a9ffbf282c16b1667f399d12b670fa2975ee7c8b93e33e5716", @generic="588a8539be3f6f5cba682be24876272d72485ca7fbebbc1938cb9b22341acb90bea2caf1ab753ae8c226e7bfff190da5bd8fdfe91a6db7e6e36bbe4cb8bcfcbb3a0eadbd11a748f5cdefbaf224cd30ed351c4a5dae0c2fcef709cfef94f6cfcd35fa0040a44e676f8841f7e2d277f22f11477c427758b5930caf3ae2", @typed={0x4, 0x38}, @typed={0xf1, 0xa7, 0x0, 0x0, @binary="0c5358e69f0124cb281e2265507362a60f549a4f89451b141b1d5f003d405a51991f8de001ff66416a82c662c8cb97e74fff3d105538ded65a9cd964614d927af45fcf7d8f81f26e4e6730967bb9c26ef4c45437f3cf61d7392125e888bff37ee26499512fb24e12c899447c0be67cabbc5b2c12c3104595913f84dd7b77d4e593e61036cafbd371ddb0144d01cd767274689387de70242321490fbf568e133b7edfafd5d5fc54010c4c44c31b1dc5fa46fa1e5526be379f2af358c38bc5e3a1a271882504ca217deccd488088afb65831d62c1d7fd5f99360674f0bbb66040560379fa21c7d527614b5bc0735"}, @generic="ac656e8c67844c59b282fe07a30cd6c5a10f8cd97185ebb5c1a62035deb08d97688faabf59b87cf5d38ca1df545015a0778baf86ea", @generic="4add030e4ca315aa073e771767958ab8ae734419f9dd73b27629df5e378b100ff96ebf60e75fcad33198a22e78a25a6b946b71b5ee99530ab70bbcd0e1adf067bc2d6c30154b27184ca999ff54f77f370e7860fa8046313b2f8c92b1f5b0dcc22ab5333f9a44a4a7ea513efb1f9f74098b2807f00744d0698173784df461d70f", @generic="3813fba70cc6863c7c8d9e1e02b4bd4493b477d28d02947dd50082a74be349c5842211ff2cf0", @typed={0x8, 0xee, 0x0, 0x0, @uid=r9}]}, 0x33c}}, 0x240000a4) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0), r6) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000001680)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001640)={&(0x7f0000001300)={0x330, r10, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x367}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84c7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc8c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8469}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6621}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x4040100}, 0x40000) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001700), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x80, r11, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async) r12 = syz_genetlink_get_family_id$team(&(0x7f0000001880), r0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001900)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002740)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002700)={&(0x7f0000001b00)={0xbe0, r12, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r13}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r14}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb65}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}]}}, {{0x8, 0x1, r2}, {0x2b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1022}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xaf4c, 0x6, 0xd, 0x1000}, {0x40, 0x8, 0x7f, 0x4}, {0x800, 0x69, 0xf, 0x2}, {0x0, 0x6, 0x9, 0x10}, {0x4, 0x2, 0x7e, 0x23}, {0x9, 0x7, 0x6, 0x8}, {0x4, 0x4, 0x9, 0x8b}, {0x1, 0x2, 0xd2, 0x4}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xe, 0x1, 0x1a, 0x3ca8}, {0x0, 0x34, 0x45, 0x4}, {0x1, 0x0, 0x40, 0x7}, {0x8, 0x5, 0x7, 0x1}, {0x80, 0xdc, 0xe0, 0x9}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x81, 0x38, 0xf, 0x8}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb5}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x40, 0x1, 0xc, 0x1}, {0x10, 0x7, 0x0, 0x10000}, {0x2, 0x6, 0x4, 0x2}, {0xc, 0x4, 0xa, 0x9}, {0x8001, 0x2, 0xa, 0xa03c}, {0x8000, 0x81, 0x10, 0x3}, {0x6, 0x4, 0x40, 0x2}]}}}]}}, {{0x8, 0x1, r3}, {0x1b4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2c}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff37}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0xbe0}, 0x1, 0x0, 0x0, 0x4011}, 0x8090) 3m27.222789352s ago: executing program 1 (id=265): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2a, 0x0, &(0x7f0000000140)="06ff03076844babeb89e14f04305", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m27.046505266s ago: executing program 3 (id=268): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x20, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x30048814}, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x8, @mcast1, 0x1}}, 0x26, 0xe, 0x7ff, 0x1ff, 0x45, 0x7, 0xc0}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x28c5, 0xa711, 0x10005, 0x1, 0x9, 0x7, 0x8, 0xfffffffb, r2}, 0x20) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000240)) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000640)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000680)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000006c0)='io.stat\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xd7ff410130696cb5}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r7, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x44}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4850}, 0x4000000) ioctl$FITHAW(r3, 0xc0045878) setsockopt$MRT6_PIM(r5, 0x29, 0xcf, &(0x7f0000000840)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000880)={0x0, 0x8}, &(0x7f00000008c0)=0x8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r9, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r10, 0x2, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x60000040) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a80), r6) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000b80)={&(0x7f0000000a40), 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x6c, r11, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffb}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @SEG6_ATTR_SECRET={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004044}, 0x40) r12 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r12, &(0x7f0000000bc0)={0xa, 0x0, 0xfffffe5b, @mcast1, 0x2, 0x2}, 0x20) r13 = accept4$unix(r5, &(0x7f0000000c00)=@abs, &(0x7f0000000c80)=0x6e, 0xfdbee50567a7e550) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000cc0)={r2, 0x5, 0x1e15, 0xe, 0x8, 0x40, 0x6, 0x2, {r8, @in={{0x2, 0x4e22, @empty}}, 0xfffffff9, 0x0, 0x9, 0x9, 0x1}}, &(0x7f0000000d80)=0xb0) connect$l2tp6(r4, &(0x7f0000000dc0)={0xa, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x4}, 0x20) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000e00)={0x0, 0xffffffffffffffff, 0x6, 0x101, 0x3, 0x4}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r13, 0x4040942c, &(0x7f0000000e40)={0x0, 0x1000, [0x7, 0x8, 0xf5, 0x6, 0x7, 0xfffffffffffffffd]}) getsockopt$inet6_int(r12, 0x29, 0x4a, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4) r14 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000f40), r6) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, r14, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x1, 0xd78, 0x9, 0x7]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000034}, 0x6000800) 3m27.045549138s ago: executing program 1 (id=269): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000080)=0x7, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000017c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800, 0xfff8, 0x9, 0x8001, 0x64, "4c4b8d42a9e82880059b7f8cea38b4237123e466b8bdeed0cdbb5b24f0186f920501a573cfe7e2900d543373cd7e37774bbaf18d2b2960996ea4a6b43d65fe1848618999abe06938727c14eb2b4fe75671e8d7694c4dfa0129b2ba7ca7b58ef0d9b185ba4f98cf1474cb3dff7181f8a75818e241b153010284929cf627a724c8"}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)={0x54, r2, 0x1, 0x0, 0x3, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d45db24352fd6875313d9a7de85759f58b6d3335d4ff7169"}]]}, 0x54}}, 0x0) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) write$cgroup_devices(r6, &(0x7f0000000040)={'b', ' *:* ', 'wm\x00'}, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) 3m26.896100833s ago: executing program 3 (id=270): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000008}) socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) gettid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002880)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00cb2945635f29889b581dcf14ecf2a283dfc3c10b64f6d3133a93608434ec"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x14, 0x0, 0x1, 0x70bd25, 0x6, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x2004000) socket$netlink(0x10, 0x3, 0x0) 3m26.790773417s ago: executing program 1 (id=272): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000008000000000000000001100000000000000000000000300000000000000000000000000000004000000000000e3ff000000000000000000000000000000040000000000000000000040000000000000000000000000000000ba9b55090000000000fcffffff0000000002000001000000000000000008001f0004000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000008001f0003000000150008"], 0x160}}, 0x4810) 3m26.666181564s ago: executing program 1 (id=274): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x6, 0x4, 0x2, 0x20000, 0xffffffffffffffff, 0x3}, 0x50) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x80000000}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x40000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x9, 0x18, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) sendto$inet(r0, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) 3m26.630127934s ago: executing program 3 (id=275): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x20, 0x14, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x13, 0x0, 0x0, @fd=r1}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x20}], 0x1}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x2, 0x0, 0x4) r3 = accept(r0, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000100)=0x80) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000200)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r4}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004f00004400000000001190780000000000000000014424183164010100000000030a01010100007640000000000000ffffac1414aa0000000100000000004e2000089078feac72520bc9f5cad340ca68d9fd8f5344554444c8c7176fc0a4abd0c1cd"], 0x0) 3m25.998339524s ago: executing program 3 (id=280): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x84000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x4, 0x85fd, {{0xe, 0x4, 0x0, 0x2, 0x38, 0x67, 0x0, 0xe, 0x4, 0x0, @multicast2, @local, {[@timestamp_prespec={0x44, 0x24, 0x6c, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@rand_addr=0x64010101}, {@private=0xa010101, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x2}]}]}}}}}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000600)={0x0, @loopback, @private}, &(0x7f0000000640)=0xc) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="6650d189a7ab19d7ef8aedd093cf2caa927577c026a4adaa0fbb0d43ea1b924ad108fe8aaa8731557bfbabcddb7a729edba080b6c99fbe8d54b5fd7cbaacc49a52cb7c9e54e2d0c06c0ac2d14591e34b3b20af7b2948d11f582d7c7efe2f8923c85a50ca49f67712e2a738286270b310c80a3cdc9abc2ddcdf5be43053bcf19aa05b813865523a097f0abf9e185741e69571a4c44435dd764c3cda009d01a9c91c295b54b862492f6f3d2431b3fe7fd2de1c6a754df90c5b7bd28050ee606272fe59dfecf9206e8b11395e0fab3d23e78f6b1f3e38b887eb84286e7bf0a0e4135f938c", 0xe3}, {&(0x7f0000000300)}, {&(0x7f0000000340)="41fb24083c7c5d4563207d4e5999b5f8a3171f59a09b9b414b4b5674d48287af269639b83ef8ead4e106e8359d420e4507fe287b5af566792da67dfaf49f4f9a1fbf4ed422e5d534e8777f4c68d542aef540f985541b945bc146250975fa9e122f568195a7cd719c2577ac81fceb66f97caa30a932638dff5d7a43ef24cafd3898571bb6cc016a096dd6b2cefb0201d737ddc6e637fe3459a3f8fa3305e3791edebfe8c9dc67e870b01532c09d699351ca14f5eb523d5a7eac9ab75c6239e9428ba21cf624d88db51165f59b1d5d1cc26e0a229d6b89fda69d46", 0xda}, {&(0x7f0000000440)="e9ca837e26ecf6f295a0351b0f19b6a1bd4bc824a26ecfb21f1bb65f222b853353bd83152c4a872c80a52c4ce4c9905dc331482e6e8d504fc20e55e862335bc499b0494b4cf35ddbc21dded7ee919f68efbf6242f4788e71d82e95c20d7d22609fe8470d864dc053504d3e121c9472573c90441b2ee756f60b5d538b236eb974377b8c95b78ce24b927a3307211521eb6293cbcf8b2f79718a34c16eaf1f579a", 0xa0}], 0x4, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0x83, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@empty, 0x5}, {@rand_addr=0x64010102, 0x7}, {@empty, 0x7e8}, {@loopback}, {@private=0xa010102}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x2}, {@local}]}, @timestamp_prespec={0x44, 0x1c, 0x25, 0x3, 0x1, [{@multicast1, 0x5}, {@empty}, {@multicast2, 0x80000000}]}, @cipso={0x86, 0x23, 0xffffffffffffffff, [{0x5, 0x2}, {0x5, 0xe, "67859df02162ff14df2b99d0"}, {0x6, 0xd, "5c9dd6f57117e8ca2bbb2a"}]}, @cipso={0x86, 0x37, 0x1, [{0x0, 0x12, "140777a1c17ea49185d5f400ddade692"}, {0x6, 0x10, "10d1fde712e91312d684fc08697d"}, {0x7, 0x7, "1180c99a4c"}, {0x6, 0x6, "337d3cbb"}, {0x2, 0x2}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x5, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x148}, 0xb0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000840)={0x0, 'netdevsim0\x00', {0x3}}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000880)={0x0, 0x2}, &(0x7f00000008c0)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x160, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x100, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x4c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xfffd}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x36}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x53b4}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x3}]}}}, {0x2c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x16}]}}}, {0x4c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x21, 0x7, 0x1, 0x0, "97531bc4c1ace2be7e372389bd0bac89da72098a1555c0d54e661d3a57"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x170, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0xb5, 0x6, "68358c5763f2415c0bb68bb2d4df5ad6876439f5e269873d5aba7a6e4db8076d22420f1af030b517c29865f99e02ec827c6cecdb350f54fea75bf46f0043ba4c9ada1d4b9ccc36e33ba2f06d2e70c47d1c8524e9fff90a2ff1acd4d430bc8b995ae9263364b1fff7c4c8a166151f76f784a8e2048b5dbbd1a6c08297c01696e8db70c3412aa92d2a3e55e5699fa3f95e8c4388839654cd150a5c27e677811e51af9553f5279601919915ed6a2aad2ccfce"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x99, 0x6, "7efff9d3a6c3bc815c85a89aa3baa32002488cba8e0a1a62dc0937e4e3c3a9d10094348c9423a06b552bdec76636fd74731fdc81089def9a05b9cf395f46720f558b7fbe095c8297002b35d6ddd7a25adf87c3757bbdb70e8d061d308fa999fe03b2bf48208a9b40c14937d3a23dea20e680c712415adbc61611758447766e8e1b380899ba8a3b6ee72933a6f3452e042908155616"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x334}}, 0x48084) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000d00)) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xb69d}, {}, {}, [@generic={0x6, 0x0, 0x4, 0x2, 0x8}, @ringbuf_query, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x1, 0x7, 0xb, 0xa, 0x10}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e40)='syzkaller\x00', 0x4, 0x40, &(0x7f0000000e80)=""/64, 0x0, 0x1a, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0), 0x8, 0x10, 0x0, 0x0, 0x1a80, 0xffffffffffffffff, 0x0, &(0x7f0000000f00)=[0x1], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r6, 0x0, 0x60, 0x57, &(0x7f0000001000)="fd17426af4405f6b3f80e4835fae050a5c7aba5c8cfa56b22124560ec6d92fdba2e00974135c50945e07cebe7648fcfa18fca5b9458c962ab880b3b3998fddf207ce07a0c71582ec3265cd62035e5e25cd0e67e9b30c0d7792747e05e5ffb529", &(0x7f0000001080)=""/87, 0xfffff801, 0x0, 0x5e, 0x30, &(0x7f0000001100)="1d21225f7615a506f8ce7af16f8190731b8f5cd6f71a4d01a3a37354ee8cd254193588f43bd966c991150e83c008a8dffb3f420dc694484939674b36346df7b51b9a2632106ababd5941a7e327482e1fc0635a1e94606c0c8ff2c6687585", &(0x7f0000001180)="a01689d8d29feaca52dfd6216f1d6fc39ccbc3dd2413e88510addfe3a029a53594e751115c283fbf6614d4e1d345678e", 0x0, 0x0, 0xfffffffd}, 0x50) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001280)=0x14, 0x80000) accept$packet(r7, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001300)=0x14) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000001340)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001580)=[{&(0x7f0000001380)="7e97c5281ed6", 0x6}, {&(0x7f00000013c0)="e93fa960cf0c27a04df696a952a353d13870ff09227c42ee6678d9ea1a31f9a7464a1367db529ed1bc20bfea13dbb8fdcb708619eeb6c9ab6a0e81e3a5f1779b89207bef2ead4b47f0a7752d4c6ad39252193e5de7e79c1b7796988b07cf756dd6724366ca4d072c62cf8d3f202715a4b1b1894085e9870d8544478413b292670aa654ae3c1fcfa30988b1f2496c2caf77b987ce0e", 0x95}, {&(0x7f0000001480)="61c66352441fd7879009ad1eb2e8f3f1223aa67ab80f", 0x16}, {&(0x7f00000014c0)="1f69560a786f98d6e67cf2ded4c0879a41639959a7677805a75f576c236272fe647a05cde9ce869da909c95649fe771225c3c2c6f6d88b9e020d4f9ea83308ac188d2490f2584a288f45d6ce117fb359636d46d4643532348720f07ed36ca400de8008cc0e8c0b24aca59cb4ae1e0d2dc46a56bc44a199fc2c5109c6bc12031b5aa664fc39596c903268bbe42cd85db610fd1d43a6377c5e049e5fd6adc07e3c5035fddb601218", 0xa7}], 0x4, &(0x7f00000015c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x48}, 0x4c894) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000001680)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000001700)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001740)={r7, 0x7, 0xb, 0x5}) setsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000001780)={r3, 0x8}, 0x8) ioctl$sock_qrtr_SIOCGIFADDR(r9, 0x8915, &(0x7f00000017c0)={'syz_tun\x00'}) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_SNAP_CREATE(r10, 0x50009401, &(0x7f0000001800)={{r0}, "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"}) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000002800)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000002900)=0xe8) ioctl$SIOCAX25GETUID(r9, 0x89e0, &(0x7f0000002940)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r11}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r12, 0x6, 0xe, &(0x7f0000002980)=""/123, &(0x7f0000002a00)=0x7b) 3m25.650690827s ago: executing program 32 (id=280): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x84000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x4, 0x85fd, {{0xe, 0x4, 0x0, 0x2, 0x38, 0x67, 0x0, 0xe, 0x4, 0x0, @multicast2, @local, {[@timestamp_prespec={0x44, 0x24, 0x6c, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@rand_addr=0x64010101}, {@private=0xa010101, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x2}]}]}}}}}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000600)={0x0, @loopback, @private}, &(0x7f0000000640)=0xc) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="6650d189a7ab19d7ef8aedd093cf2caa927577c026a4adaa0fbb0d43ea1b924ad108fe8aaa8731557bfbabcddb7a729edba080b6c99fbe8d54b5fd7cbaacc49a52cb7c9e54e2d0c06c0ac2d14591e34b3b20af7b2948d11f582d7c7efe2f8923c85a50ca49f67712e2a738286270b310c80a3cdc9abc2ddcdf5be43053bcf19aa05b813865523a097f0abf9e185741e69571a4c44435dd764c3cda009d01a9c91c295b54b862492f6f3d2431b3fe7fd2de1c6a754df90c5b7bd28050ee606272fe59dfecf9206e8b11395e0fab3d23e78f6b1f3e38b887eb84286e7bf0a0e4135f938c", 0xe3}, {&(0x7f0000000300)}, {&(0x7f0000000340)="41fb24083c7c5d4563207d4e5999b5f8a3171f59a09b9b414b4b5674d48287af269639b83ef8ead4e106e8359d420e4507fe287b5af566792da67dfaf49f4f9a1fbf4ed422e5d534e8777f4c68d542aef540f985541b945bc146250975fa9e122f568195a7cd719c2577ac81fceb66f97caa30a932638dff5d7a43ef24cafd3898571bb6cc016a096dd6b2cefb0201d737ddc6e637fe3459a3f8fa3305e3791edebfe8c9dc67e870b01532c09d699351ca14f5eb523d5a7eac9ab75c6239e9428ba21cf624d88db51165f59b1d5d1cc26e0a229d6b89fda69d46", 0xda}, {&(0x7f0000000440)="e9ca837e26ecf6f295a0351b0f19b6a1bd4bc824a26ecfb21f1bb65f222b853353bd83152c4a872c80a52c4ce4c9905dc331482e6e8d504fc20e55e862335bc499b0494b4cf35ddbc21dded7ee919f68efbf6242f4788e71d82e95c20d7d22609fe8470d864dc053504d3e121c9472573c90441b2ee756f60b5d538b236eb974377b8c95b78ce24b927a3307211521eb6293cbcf8b2f79718a34c16eaf1f579a", 0xa0}], 0x4, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0x83, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@empty, 0x5}, {@rand_addr=0x64010102, 0x7}, {@empty, 0x7e8}, {@loopback}, {@private=0xa010102}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x2}, {@local}]}, @timestamp_prespec={0x44, 0x1c, 0x25, 0x3, 0x1, [{@multicast1, 0x5}, {@empty}, {@multicast2, 0x80000000}]}, @cipso={0x86, 0x23, 0xffffffffffffffff, [{0x5, 0x2}, {0x5, 0xe, "67859df02162ff14df2b99d0"}, {0x6, 0xd, "5c9dd6f57117e8ca2bbb2a"}]}, @cipso={0x86, 0x37, 0x1, [{0x0, 0x12, "140777a1c17ea49185d5f400ddade692"}, {0x6, 0x10, "10d1fde712e91312d684fc08697d"}, {0x7, 0x7, "1180c99a4c"}, {0x6, 0x6, "337d3cbb"}, {0x2, 0x2}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x5, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x148}, 0xb0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000840)={0x0, 'netdevsim0\x00', {0x3}}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000880)={0x0, 0x2}, &(0x7f00000008c0)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x160, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x100, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x4c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xfffd}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x36}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x53b4}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x3}]}}}, {0x2c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x16}]}}}, {0x4c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x21, 0x7, 0x1, 0x0, "97531bc4c1ace2be7e372389bd0bac89da72098a1555c0d54e661d3a57"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x170, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0xb5, 0x6, "68358c5763f2415c0bb68bb2d4df5ad6876439f5e269873d5aba7a6e4db8076d22420f1af030b517c29865f99e02ec827c6cecdb350f54fea75bf46f0043ba4c9ada1d4b9ccc36e33ba2f06d2e70c47d1c8524e9fff90a2ff1acd4d430bc8b995ae9263364b1fff7c4c8a166151f76f784a8e2048b5dbbd1a6c08297c01696e8db70c3412aa92d2a3e55e5699fa3f95e8c4388839654cd150a5c27e677811e51af9553f5279601919915ed6a2aad2ccfce"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x99, 0x6, "7efff9d3a6c3bc815c85a89aa3baa32002488cba8e0a1a62dc0937e4e3c3a9d10094348c9423a06b552bdec76636fd74731fdc81089def9a05b9cf395f46720f558b7fbe095c8297002b35d6ddd7a25adf87c3757bbdb70e8d061d308fa999fe03b2bf48208a9b40c14937d3a23dea20e680c712415adbc61611758447766e8e1b380899ba8a3b6ee72933a6f3452e042908155616"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x334}}, 0x48084) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000d00)) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xb69d}, {}, {}, [@generic={0x6, 0x0, 0x4, 0x2, 0x8}, @ringbuf_query, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x1, 0x7, 0xb, 0xa, 0x10}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e40)='syzkaller\x00', 0x4, 0x40, &(0x7f0000000e80)=""/64, 0x0, 0x1a, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0), 0x8, 0x10, 0x0, 0x0, 0x1a80, 0xffffffffffffffff, 0x0, &(0x7f0000000f00)=[0x1], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r6, 0x0, 0x60, 0x57, &(0x7f0000001000)="fd17426af4405f6b3f80e4835fae050a5c7aba5c8cfa56b22124560ec6d92fdba2e00974135c50945e07cebe7648fcfa18fca5b9458c962ab880b3b3998fddf207ce07a0c71582ec3265cd62035e5e25cd0e67e9b30c0d7792747e05e5ffb529", &(0x7f0000001080)=""/87, 0xfffff801, 0x0, 0x5e, 0x30, &(0x7f0000001100)="1d21225f7615a506f8ce7af16f8190731b8f5cd6f71a4d01a3a37354ee8cd254193588f43bd966c991150e83c008a8dffb3f420dc694484939674b36346df7b51b9a2632106ababd5941a7e327482e1fc0635a1e94606c0c8ff2c6687585", &(0x7f0000001180)="a01689d8d29feaca52dfd6216f1d6fc39ccbc3dd2413e88510addfe3a029a53594e751115c283fbf6614d4e1d345678e", 0x0, 0x0, 0xfffffffd}, 0x50) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001280)=0x14, 0x80000) accept$packet(r7, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001300)=0x14) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000001340)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001580)=[{&(0x7f0000001380)="7e97c5281ed6", 0x6}, {&(0x7f00000013c0)="e93fa960cf0c27a04df696a952a353d13870ff09227c42ee6678d9ea1a31f9a7464a1367db529ed1bc20bfea13dbb8fdcb708619eeb6c9ab6a0e81e3a5f1779b89207bef2ead4b47f0a7752d4c6ad39252193e5de7e79c1b7796988b07cf756dd6724366ca4d072c62cf8d3f202715a4b1b1894085e9870d8544478413b292670aa654ae3c1fcfa30988b1f2496c2caf77b987ce0e", 0x95}, {&(0x7f0000001480)="61c66352441fd7879009ad1eb2e8f3f1223aa67ab80f", 0x16}, {&(0x7f00000014c0)="1f69560a786f98d6e67cf2ded4c0879a41639959a7677805a75f576c236272fe647a05cde9ce869da909c95649fe771225c3c2c6f6d88b9e020d4f9ea83308ac188d2490f2584a288f45d6ce117fb359636d46d4643532348720f07ed36ca400de8008cc0e8c0b24aca59cb4ae1e0d2dc46a56bc44a199fc2c5109c6bc12031b5aa664fc39596c903268bbe42cd85db610fd1d43a6377c5e049e5fd6adc07e3c5035fddb601218", 0xa7}], 0x4, &(0x7f00000015c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x48}, 0x4c894) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000001680)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000001700)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001740)={r7, 0x7, 0xb, 0x5}) setsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000001780)={r3, 0x8}, 0x8) ioctl$sock_qrtr_SIOCGIFADDR(r9, 0x8915, &(0x7f00000017c0)={'syz_tun\x00'}) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_SNAP_CREATE(r10, 0x50009401, &(0x7f0000001800)={{r0}, "31ecd8f33964d32c8f8f1ed9ed50ac38a25765bea940957f18b9b1dbfe51e0d972ea91c9c3bae50d1bdde231796165794e4dc6e06a277452f62823bae13b5ef6bf4fb6233e2cd82284867c53f5c965bb833667cb0e4925ce41872274b43743a9bee5b1040902015f0f409d5777a6eab1aa7a0f48c81868c293fb47b07eafd72c17cb4e259a501d9db9b6ab018a1a7d699bd0d0980d8422c4181fdc06c8588532cc30fc78a46dd8fe02eb8bed504dd0fa1f549d328479aef5a156cdc9720bc0bbde13400c6271167f3076177669b58fd11a59a5fe9485fc26fd0e79ba91de6473c648550d752f6425743c49206b9aa573ed99b73d8be6ba6c04075fb2c56da1b72c38195ebb6397fcb35bbdf0b2350660af9a42e26ca9fdaa130c82fcadaed8467906f1be6611b89b2677111dff60c4df3decf05fb3924182b725a7387b78d8789e12108dd642b213550477c16215440b0f4d744615977600b2c95d4b64757dbf1ff17d3b30447c5a556277a04720db43883eed7d12960e250cb4dc510696b3187515d0cc8d69b165eee5040d6c90b2f286be2f4a5ff4bcaecf2171902d6378347999ee143e450180c8b67fb3b388d6c183012dd7d9b78681f108bfde06c9884b0045a073abe194cf5237a382f957d878a2285bf258430a0d401e2579f507e0d988c4b06075ee8f9a1f5de55aa33a8b19801140779e828bda831622c35f139fbbb3383695cf09f178aec6a9f404aad871926e4d8347d8c480d4089c5edbd19ed6c6284540d10c61c49fbaebcef916cfcced4a5c518082fe43f2fe767f14fb94d6c86bbad403becfe58e24cb3c52a19b63734ae58033b1bb67568da6aeb11ba575f7e741aeabe9c40690d0a34b9b11ad1f1684af267bc6c39413073e75f228f94d2e1908b137f8a42a03efe556b36b0f02653cf53af402bca78d129fe549cb8771423de16e76381641344c75675a921efb6be164fd5e64144207ea2a33ebf63294a6340537dada1795c28f603684f17b33c60f8d688b14a327ca99e72232d084ef44f04ef64276e0c3c3ec1faf9473717baa595cbee497b2a8bafc63aeb2286d574a7c89e5e576808ec50f0373112f0dbf10516abb0e7eff92cf7b8f1bffc466b784d37baff55d58f4f6ec7f06136aa3b92f6b26dac6cd335fd319747cad5d8996154358d181e5a8737f3b1ee219ba6e827080a845bbbe2bd4ecedd691a9f359c79b8da8a0e3cbad6ec2147e59e3b77c551039caad57a893d71212cc50f973572726074315383461ea0b25253dd6b707363a1e79bb43787a5b4faa2860ce8be3ae1476c9cc7ca61512ac04d302fb8dd696beb784f606ed38c80b9197daddd7513dece81d9541dabe69a57f8b7253c639bad394b118cee800244a9ee166cd3809f04896dc1bd23d79920dcfa653b3e4c20bad743badebff24b0e5357d4c120ca7ea14986d9b04e5187a5e39af173689eaf0597753629d6bf8729684ed0a3d9a7b0d04b0c4169ca24d51c972fe8873d83d09e0e0c5d4f3006b98121b65740ef3432b7ee0cc9bc8556752bcb87418b738770aa755baf7540cbf2b89a1ff7ef5b97522baa715784fac36d99a95e2db3b8264ec36e811f079a74b82775f72592a828d427d55799bbab96c3292fde1c667c84045728258c398367754e882a439396b8dd0a1f5f27c79135d097f1ae67a0269ef57f8f9f6fc7d380d6c9f52b3851da103cd7d00652fdfcaf3c999aedc33eb8af768c29c0f995b056ed270e4f47d9b4d1467d4dc45e810721203132ff494d2dd3a6f2d3ed1d01e8ee406a4adb5f01e3a5605488fe3b2e5014159fc5b9dd7df310813cc7995cbff18282064896d9a0d691e90255eaf2e3db401ba02f7bb72fcb8cd411d9219502a40ca18ebb0953058f7c782fa2ed6084bd4c32e8531cbf9e87f6fee85da9fb1327afd224e20672741258fc186313a9f6dd49b853b8d1511ae03788573246324f64e3f06552ab1e2a0a23ae9bfb198074ed19b426ef66586c3ce3bbdaea32f4068ed183f4c077a8e23f15f5588ca54daa840a9f68f0764bdf3a7edfe504a3aae3aa4e74af756ab906d5c318be5a19ad9c72ba6d0801eac963c9af6130747adbdd872a206dc65ffd6a643b21d6f05b247cdbdef79f79621ca34a2834f854d9789618acd61ad3b90c320b68c4fe5f60a4e7633a0910b78afb07df5d015bdcd85e99f1eca4cea94357aaf306ff4fbe90ed7a6bd82ce9ff0fbc1614724f224d6777e163dd84b59e35d89aa06a916d8f9adeb8da3d2d7e7920448151b0275f635dcc2086f84a963027ede06906a8386f276a3974bf55c5cfe379eb02b16e839da93d70b66463209299853ab29117c36383affc644a0087853b224baddac1ac985868c07b96aae5dd36b747907f9ba9e7a3ff895d040d5f8c01f31c79bfb06aa42c1a8e6686c33988e855a7669c9a8a566c38a5b717e81dfd931e713d1486774f691138013ad1d2ff377d719cadd746881e3687645a53404bd2c669fe788249fc8c94a7e4511d8fc9bcf5b36c273254578ca119cbf944d7c94b5932c0f0d8448dbf3888684a040e4befdcc5180c24e1522fd65b493e763fac7c72105a69931910b836adc148ff2b2936d970e76aef8ce6abf87f02940ec7b4e782f66e575d654aacacb7a72aa77849c8223826c214a04d9e7c1c349c9810401da5d100ea336fd1cbe75bbc06b59e5c9994407cfbc3b47e808d18c0c214929c59b940b796b2e0e4f886540915c8cb80e840b1b825fa649a08dd160cae7efe029cd53f3e9f57e943d2c727293f38ff55fe76157575c8237e5e22f7c82eda7c0ad9f335eefef3dcd088ab9d99a77d3ac91bcd28a4dba07190cfedfe41c551c1395793aa555888b1898c14c568f84f13b7e4c4f57fe3c10eff3a3728b283ba0df6059c30224c0c4707f2705b684098ba4282422ef5d9bf326e3b5bbb32c54205e90553a674894c996c3dfd5d75699c4c9fa9d6e64b7c3093743525027cc8e8788d45ea23992c5344665f32112be8bee270c1199e5f2345bcc5ef840ff1b03b5ef344cff185381de188ac386e08e95b416397b898e7f039f200bf464333d8e0a49e18bfb8b2bc1e112bf671f0e65587a2c874e459ab58f4428bc3b16081269441ebc5699271df856db25629541e5744bf25e08d3e35d6c7c710be1c3bd67f04f8d2cfe988d6d40955ccbbced96c3b4f7d058004b5d6f6b2575080851fe7aa2f0275eb576b03767848c9f9905994ecbb3f07e09f2429e0f27065790571c96647db25bb014ea5305e753b19b8adbf85bd42f64bbd02ccccc662a330a83773506e964d51038f437c50feab7f636ce61498413d6676e0544bcfd4a7a2c561a7d8b9d82f5603d55ecdc62d2018ed19639a48a22582f9465adb80aad117790e0a60c0882dc9f3ea8f3777d36c0e67ec59f5ce774ed019e80daa2970115ef771ac8f2907bde5a812f27b194aaa375d078c330419eb7789a713a248f4cd14758494f51d4c9a5b6b42b108be3eef287b688b289eee0a0dfd9064968fd30c3e726df0a67784dccbc18e187936a982f819d8328c1d519277105674aa8887e659c49fab70cddbc6ced0cc4c99e7a75fe6d48e25a065bfeab6ad0f90fddb1241a70f9d0813eabdcbdd1fddb371da46532c903ea0f2559dd99bd076b47d53ccc35e1180cc8a01b81cf9819bf1b099a6fb5ede31def08b27a21a89b85af3fde1ce897da53237d5d1a8c110cc38ecfd4960bc682e59f6fc61ccf45b83b92fccb5675741af9d1da83eb7c1b32b82671288ad5162d15e932b030a7ff8e9c43e69d60ec7b9aab1ac0bb77ca2868e715a4395be1eac7ceb38cbc8a194dbe38f330e9d8fdf49d9d074ab915fc5ab22d376f6bf540f25a16d43d78e0da3e9ca75f6b5842e73387d28c6879222da0f72d87278087f349c7b474be7db2c8564a97e426b3758d94b4da12320bb7a422fd31282bba47e584abae523139640ab287c1530dc736b115755b4b9e2418554592eef166b8d686b0b2de44cd300ae490b55a48b38eaf46f5866bdb5fb386db324a74abdc3108892377dcc0bf7074821bf6892b417fa27806eb5dc0df30112f9758d2ed33cb7eb5ed31291ed66ddb247f53abd2b6d52c2663e318491d2122cce3300c4079507df2ff4f1254a50ae8a64d48fe858c9c5c95588d621bd2968641dff3c66153d055572249fbf59fd491de382eaca312efb38737054459510eb2eb56a3ab155502ea66ce8ad741916c124591bf5fe5421d7c6cd0d20123dcc0557f19e7901edda2182966f9262f73dc6723cc21d2cf1f2895776b648fa705395b0d4986714878d056eb5e0c770b53d0c3303f943856b7788c8e3dcefaff26fbdf1bbfdd974d37fcbabd689d28e5397fc5f72e4bdb57ee967bbead8fbc46bc1afdc7fc723deeb24cbe30e479af2db078daf8e199951d335b97a4d21d2ee99e7bdd618fdfbf28a5b77e0fc1e946631bdedc7b009168af9e58e6efaebdb267cab32bad215b8bc8761b07f52a4ef33ea3fabbdfd44e78e17d46865e0b0b17b27027d981c00d64081ffc514978757d6bce4cb82edc64a3053f6fb9ed31766d7852b961a3ebfcbd7c78a8fa79091da5b4206eddf8a49235a8e1ac775e80c85cb1c57de92d774ae6d00ecdf2939ae6bc33d30d68540eb52b77bc3e8e93c31113e7eaeba68f8bb33676097a0a803e39181c649053a8cb8279a23251ce4b89fb14c1c569cd1ee26ccba8c2acb87ee854a2387707d51db8663d02a679e3ed453b29905e5bad66ef5bd302d8768ac58562047ac36ee25411945763a128da52e5bf8be238681dfdf613c2c1d77b411c508170602202868fe85133cdefdb6993851c35e4883433220eef82ce6874de97a18d027f98d598bb637ca43f572662fd7c962952f12ad6ed2a48fa551385d0a9d5e7cbd723e4aaf5774a38a588c1745834d6365c9bdf7c5086ae52d6d1be24a61e5b9444e62edee0f696cf7351a4cf5e5c2167c2d5423bc129b0d2aff85e9f76ae931c02bbae24367676cf726d6a624a21fc028eca5a4e4748d4167e481295b1ddbf07b2bb7ccadfbe38574965bc02418683936a2b167ba94b7797cfa41cb79cd5603da62ed7ae5ede42520dc53f198951e9777ff8cd86ee0549851ba4bea349e76b6a9d6dc57f7987c12bf32b6eedf52a15090ab41f7b2cda83ddd034f814385f5ccadfb3fc985d912e6a7a3963097eea4a80975b011e456d809e6ac9a999d231ae016e644d2b626ee9467165e4328b275dd3bf99969c952ea06a568b155646772cc3dacbcc22b787bf652eb0aa2aa3c704d06a5300453ad43772de5d07d135427a3a523b785b7ce1ee5ef02eb7add364d0c35ff711db003c815e468f599afaac4f5f0abc91210f0fa19250f67fbcaa82c6458c2a952fe444da7fee6ebeb4dbc09e68d0db82882aacebd956ed01ffc7274a37596c1c1fb5dc7bb4d0f260360b5f2b37b3d8080f203c811f797b1c7b386431120223180525a9c41361dbb8d3b36f0d1c4b8c602194a430c041593352665bfa53558814550a2dbe38346e35ee2b2e42316e9a08c847af53260f2102449d33731e8f48801a7bca5dd62c27f1e2f2d38c83f89e311fd6acaa8344e4ad97de0d5b3e60ca12b31bbd42ec1ee7efaab8ee2bd8972d7ceaae2985030c7f66683c05020efc42e8c918cb49803da9f1c77a243864f36cda902e8b070462b9c79b5652775fc3866e9a696c64bdc6640d4f4e6066505b3490cd3f7ce0c0b66cf2571790d5a25134937f4b580af6a5d6c62892924e9d6870d5"}) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000002800)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000002900)=0xe8) ioctl$SIOCAX25GETUID(r9, 0x89e0, &(0x7f0000002940)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r11}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r12, 0x6, 0xe, &(0x7f0000002980)=""/123, &(0x7f0000002a00)=0x7b) 3m25.640434293s ago: executing program 1 (id=283): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf25170000000c00068008000600"], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x2b8, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x882}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "09cb8bcc253dba0c241f6d187d41a47646d763aac6c5de608c84"}}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc183}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf350}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4044001}, 0x10000) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x2b8, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x882}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "09cb8bcc253dba0c241f6d187d41a47646d763aac6c5de608c84"}}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc183}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf350}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4044001}, 0x10000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000030303"], 0x20}}, 0x0) 3m25.489152373s ago: executing program 33 (id=283): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf25170000000c00068008000600"], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x2b8, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x882}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "09cb8bcc253dba0c241f6d187d41a47646d763aac6c5de608c84"}}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc183}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf350}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4044001}, 0x10000) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x2b8, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x882}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "09cb8bcc253dba0c241f6d187d41a47646d763aac6c5de608c84"}}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc183}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf350}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4044001}, 0x10000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000030303"], 0x20}}, 0x0) 8.016180984s ago: executing program 0 (id=2985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r2, 0xc3583661201c9f3d, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) r5 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x4c}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x7c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x7c}}, 0x0) 4.780084845s ago: executing program 2 (id=3017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r1, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}]}, 0x3c}}, 0x0) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611084000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000003e00)=""/4082, 0xff2}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x6}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x10000409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002e00)=""/4095, 0xfff}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000000040)=""/111, 0x6f}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) 4.533344307s ago: executing program 2 (id=3020): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) write$tun(r0, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x8, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x8}}}}, 0x30) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960207142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe8023c889fd4cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337bc5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35db96c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae374bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0c4367ef4124bfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de589020000dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161520b7e7d37b581a0f51fe26167e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800af3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09229dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a411347051460326f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9c5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba33770ce3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f24600000000a80455f324746048ea24c0df0375e2cf333fa90a51cb4cc307e208a93d56368c920c239d0b3a21136d20d4c3ac328254adc96753ab34c4e31b500f71a49a75d9d598035765a72278bc823f63f770ee055e35c367be5301fcaf733e0caad10e0e1eb103b4783243c299729b4c9e26a4a6e0f2e1170e07c63fb58bcc8e145d9d9e54291361cd906ad379fa99b345a3002a2769af372eeadb9c8ebfd4402866f278781cc0d71ecbfcb16b0dfab8043f39b44cf8cc98266e6ffd9122fe16acf0b9071e359ff2fe351601c4ef491fc21cec175d0ed34885b80e8ab975f0552756be2ead3f963487d04a0fdf28aa7f59330c2f0c78ed3800d5eeaa9627472480af1e688e79bb873503c1aecdb0b5d3dda8cb3f0c189fad95955438c0fad34d4f60755d80e3977767be97443e95f7b7982c19a731a07cda09df5b746d5ad96c3e0b84493d94bd211ff1f0e30fc959322317aff59e86e512140a9cae22becca0f195b508905fce03ab6dd01dfb1c91600ef6119aeff341d04ee74c02a717b2f6107479989cd5075e806ea2c5aad0e02db9dc43b10d2792db042e7a2cc55779403b65e442a26d1ec0227fe5d05d0d63f4b0c1ae44f391b6"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES8=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x13}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000001500000000000100000d000000000f00000000000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x20) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @broadcast}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000c00)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @rand_addr=0x64010102}}, {{0x2, 0x0, @dev}}]}, 0x190) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000280)) syz_emit_ethernet(0xb2, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd603000bb007c2b00fc020000000000000000000000000000fe8000000000000000000000000000aa3b02070100000000fe800000000000000000000000000000000000000064907802000200000000000000000082f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108402fa83b1d661c18462075368a1860929ddeb8f71aa23d391b8fa99e9816af2d040876a663a86d97f46b9665cc18492b"], 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000200503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0802907800000000600008100000110000000000000000000000ffff00000000fc02150000000000000000000000000000000000000000000588000100000000fb36eeca6fad50b375a22a584d16ca55"], 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000ddffffffffff2b00000018000180140002007665746830"], 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.349260536s ago: executing program 2 (id=3024): r0 = socket(0x2, 0x2, 0x1) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) getsockname$packet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x14) 4.248216502s ago: executing program 2 (id=3025): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x2}, 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) 4.098858595s ago: executing program 2 (id=3027): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) listen(r0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x1d) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2, 0xfffffffc}, &(0x7f0000000180)=0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000280), 0x4) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000000c0)={0x87, 0xe, 0x0, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @local, @remote, @empty, @local]}, 0x78) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x1, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r9, 0x6, 0x4, &(0x7f00000000c0)=0xff, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) connect$inet(r9, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(r9, 0x0, 0xa8fe, 0x40000002, 0x0, 0x0) sendto$inet(r9, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r9, 0x0, r8, 0x0, 0xfea8, 0xa) r11 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r11, 0x8983, &(0x7f0000000040)={0x1, 'veth1\x00', {}, 0x5d}) 2.197302057s ago: executing program 4 (id=3053): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x1}, &(0x7f0000000140)=0x8) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@empty}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) 2.086996448s ago: executing program 4 (id=3055): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xdffffffffffffffb, 0x2000000, 0xfffffffffffffffe}, {0x7, 0x0, 0x4}, 0x2, 0x0, 0x1}, {{@in=@local, 0x0, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) (async) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@ipv4={""/10, ""/2, @empty}}, &(0x7f0000000140)=0x14) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x22cb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008091}, 0x0) (async) listen(r0, 0x0) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 1.943381261s ago: executing program 6 (id=3058): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 1.8865423s ago: executing program 4 (id=3059): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xffffd256) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x28, 0x0, &(0x7f0000000580)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310428bd7000ffffffff160000007464657673696d3000000000000005000300000000000500046ddb5800010000000500030001000000"], 0x44}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001210000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/4101, 0x1005}], 0x1}, 0x4}], 0x1, 0x2, 0x0) shutdown(r4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x7800, 0x1, 0xeb3b, 0x7, {{0x37, 0x4, 0x3, 0x18, 0xdc, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast1, @broadcast, {[@generic={0x80, 0xf, "8906972bc148a73e570ebbfc18"}, @lsrr={0x83, 0x13, 0x90, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010100, @rand_addr=0x64010102]}, @lsrr={0x83, 0xf, 0xc6, [@broadcast, @broadcast, @multicast1]}, @ssrr={0x89, 0x1b, 0xf8, [@local, @empty, @local, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x3a}]}, @ssrr={0x89, 0x1f, 0x8e, [@local, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x1e}, @empty, @multicast2, @broadcast]}, @lsrr={0x83, 0x17, 0x56, [@dev={0xac, 0x14, 0x14, 0x22}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote]}, @cipso={0x86, 0x37, 0x3, [{0x0, 0x2}, {0x7, 0x8, "bb3bdb073197"}, {0x0, 0xa, "adc0bbc9b4c1f5c6"}, {0x2, 0xd, "fdea3dbe47e05bd4fcfdbb"}, {0x0, 0xb, "2f9cd476bdd73daeaf"}, {0x6, 0x5, "f23c86"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x72, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@loopback, 0x0}, &(0x7f0000000200)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @remote, @multicast1}, &(0x7f0000000280)=0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340000000010800024000000000080001400000000f08000440000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000003c40)={'syztnl2\x00', 0x0, 0x40, 0x7, 0x9, 0x10000, {{0x40, 0x4, 0x0, 0xc, 0x100, 0x68, 0x0, 0x3, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x42}, {[@cipso={0x86, 0x13, 0x0, [{0x5, 0xd, "501759b1bd9c3cb02121bf"}]}, @cipso={0x86, 0x31, 0x0, [{0x6, 0x12, "d519906ae2f9ccd7d86d527ae8e31a2b"}, {0x6, 0x8, "44da1387035d"}, {0x0, 0x7, "7de28390f0"}, {0x4, 0xa, "255caa76f1e30629"}]}, @cipso={0x86, 0x54, 0x2, [{0x7, 0x8, "31882bae5347"}, {0x2, 0x11, "132f0317e465ee628313a5bf16d887"}, {0x0, 0x12, "5b0e50ab38069fc44b2447f5197fe66c"}, {0x7, 0x6, "18764327"}, {0x5, 0xb, "3bfdfd60138e9f59ea"}, {0x0, 0x4, "60cc"}, {0x0, 0xe, "0ac63268d3e1371e937fcfcf"}]}, @timestamp_prespec={0x44, 0x44, 0x59, 0x3, 0x5, [{@multicast1, 0x6}, {@remote, 0xfffffff9}, {@rand_addr=0x64010102, 0x8}, {@initdev={0xac, 0x1e, 0x21, 0x0}, 0x4}, {@empty, 0x209}, {@remote, 0x4}, {@broadcast, 0x6}, {@broadcast, 0x5b}]}, @end, @end, @generic={0x88, 0xc, "873fdc3f5869e85f7c8e"}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002a80)={&(0x7f0000000440)=ANY=[@ANYBLOB="10260000", @ANYRES16=r3, @ANYBLOB="02002cbd7000fddbdf250c0000005800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="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"], 0x2610}, 0x1, 0x0, 0x0, 0x10000}, 0x4000004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000040)={'wlan0\x00'}) r12 = socket(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r13) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) 1.8244976s ago: executing program 6 (id=3060): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) close(0x3) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) listen(r4, 0x80) accept$netrom(r4, 0x0, 0x0) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d479", 0xcb}, {&(0x7f0000000d80)="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", 0x1fa}], 0x2, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES8], 0x5c}}, 0x0) 1.779644393s ago: executing program 4 (id=3061): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) read(r0, &(0x7f0000000000)=""/21, 0x15) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f00000000c0)="8419004144f16528ef6ea1", 0xb, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0x739, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x80000000}], &(0x7f0000000180)='syzkaller\x00', 0x400, 0xe5, &(0x7f00000001c0)=""/229, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xa, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x61, 0x7a, &(0x7f0000000440)="2032191adf102523d73fd41068e5fe2d3568694ec25f9c706b1c6007ad993eb81c3ca840d6c9375ece0f97a2ec68855061227dbcd5e2adf8d67541d048f76424f273918f5a5128ac3978237a5a0c8a811a85407bb61fdc9c0dd81fe1086129013b", &(0x7f00000004c0)=""/122, 0x0, 0x0, 0x4b, 0x37, &(0x7f0000000540)="e0a25beeff6d34a56801e3e8cd21c1656c3084cf99cb708514e591381dec768ab09b44f51fb77c26a951b729638e16f1d438701a3a30d47ce0a4865223b360cbb3fb51b5484f7c441a2ba8", &(0x7f00000005c0)="439317766fb5c6906693ddf14ff3372aea6c99737e2817527818b3df849a4f3ce4e1d204e6c1817902c2ba59e40d40ca9955da1d487962", 0x1, 0x0, 0x5}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x11, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x4, 0x1, 0x5, 0xb, 0x1, 0xfffffffffffffee9, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f00000007c0)='GPL\x00', 0x6, 0x1, &(0x7f0000000800)=""/1, 0x41100, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x7, 0x118bff68, 0x400}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000980)={0x0, r4, 0x6, 0x5, 0x0, 0x2}) bind$rxrpc(0xffffffffffffffff, &(0x7f00000009c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x749}}, 0x24) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000a00)={'erspan0\x00', @remote}) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000a40), &(0x7f0000000ac0)=0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000b00)=0xa, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000d40)={r6, &(0x7f0000000b80)="d4d0e7f72f343dd9b367ba4c60bc6281aca452801f772a116fa2a3c54ca191a342393bfeea922f1d6a3d9fe9c02ef226088f1ea1c8ed35f4ae0269e6ec2412de2620def5dbb503c1e568bfbfdc70d327defcdcabb140211aa9a44475bd017de8b5f61364cc7b1cb93321e365a690089e0042b061de9eee4e0dfb3cec7bd7752ac7a715d6e97ebb21e1aca2bcd2079cd9daeec3c80b962ed8c67baeb95aaad4ee31a4826c20fadcfe1975b665", &(0x7f0000000c40)=""/227}, 0x20) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000d80)={'security\x00', 0x0, [0xa26, 0x3, 0x7fff, 0x8, 0xa47a]}, &(0x7f0000000e00)=0x54) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f40)={'veth1\x00', &(0x7f0000000e40)=@ethtool_drvinfo={0x3, "9b15e3d29c46bca306d1175d7dbf64915bc6ecfa0d3725eeca3d90b0e6377f42", "1beab599b94e84154c60f4eaaba0a40552de02d124ae507e0a039d6b2a52310c", "787d4b8e1d302e01990de9f115ae33ce97dd134cfdb5051b3c0ee36f563cbd73", "cda589aecc8e1d2836701a5c9f3569b1e56ecb8020c70004d74498bbc90451f7", "61831d3a70026c1dbf866b4e5c05e9f3cab4959425d4b5aa1745f8f35cd0ef48", "b4244d8216739b8f37d94519", 0xd4a4, 0x0, 0xa, 0x0, 0x7}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f80)={r6}, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000fc0)='wlan0\x00', 0x10) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000001100)={'veth0_macvtap\x00', &(0x7f0000001000)=@ethtool_drvinfo={0x3, "3ae54b23e16ffa79e428aa6c684d730c66dccdc9d5ee70f33be8a28ee306dc1e", "5753b8f35ee8bd49c18d339b39baa562b6a920a953ded73024fea6a132d4d0c2", "ba3b862f3088a6aa58858560bd4ffee727667912f1b4ddafea45fe7512f90cd5", "9b6f486245c811dfca668570fb4d4d8a3f1a0645114e3bc17ab68f9287b1a40b", "6c11c4093a40d52e2aebe76f8f96dda10654aa26c98fa3340af47a1a50c5ebd5", "bbb403ca91601a07dd5c1c90", 0x1, 0x1, 0x0, 0x9, 0x4}}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001180), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl0\x00', &(0x7f00000011c0)={'ip_vti0\x00', 0x0, 0x40, 0x80, 0x4, 0x3, {{0x1a, 0x4, 0x2, 0x4, 0x68, 0x68, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}, {[@rr={0x7, 0xf, 0x6a, [@remote, @multicast1, @broadcast]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x73, [@remote, @remote, @local, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x4, "ab01"}, @timestamp_prespec={0x44, 0xc, 0x48, 0x3, 0x2, [{@private=0xa010100, 0x1}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x8c, [@multicast2, @local, @remote]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001300)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000001400)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x4c, r9, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040080}, 0x800) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001440)={r11, 0x1, 0x6, @remote}, 0x10) 1.460724334s ago: executing program 6 (id=3064): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) socket$packet(0x11, 0x3, 0x300) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)=""/119, 0x77, 0x10000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="05020000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="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"], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 1.282790106s ago: executing program 5 (id=3065): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000008000000000000000000000001100000000000000000300000000000000000000000000000004000000000000e3ff000000000000000000000000000000040000000000000000000040000000000000000000000000000000ba9b55090000000000fcffffff0000000002000001000000000000000008001f0004000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000008001f0003000000150008"], 0x160}}, 0x4810) 1.232865361s ago: executing program 5 (id=3066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001c0016801800018014000a00ff03acb172310000000008e7ffffffff08001b"], 0x44}}, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="16693c8eb6bea29afa883070b7b4c7af2b90a44c7e6f1d7175ab856431406ff6ebe1c706aced849cc8a314a9e6ed01a150d926de79b531cdef61dfa3", 0x3c}], 0x1, 0x1) 1.175820264s ago: executing program 6 (id=3067): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0xc850}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{}, 0x0, 0x0}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x13, 0x602c}, 0x54) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20000000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001080000f7b717409c24a58b0000", @ANYRES32=0x0, @ANYBLOB="332000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) 995.204838ms ago: executing program 2 (id=3068): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a000000000000006254f382b92fa84fe9561514465c61355b2f91f79cb912a8b3b3ce2d30b07953b6548eb506446827a11b236d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) 926.796117ms ago: executing program 6 (id=3069): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x4c, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3ff}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x104}, 0x20000050) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xd1, 0x35}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) 926.510027ms ago: executing program 0 (id=2989): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000e0000000000180100002020f02500000000002020207b1af8ff00000000bfa1000000000000170100000bd42523073ae1bd08000000b703000000000020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf07f}, 0x94) 837.521497ms ago: executing program 0 (id=3071): socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000640)={r1, @in6={{0xa, 0x4e20, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}, &(0x7f0000000080)=0x84) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000380)={0x4, 0x7e}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x3, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x5, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {}, {0x7, 0xa}}}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x48}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) unshare(0x8040480) r10 = socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="bbfbbbbbbbbbaaaaaaaaaabb080045000078000000000001907800000000ac1414aa040090780300d61868f0c902ee2200004700000000000000002f0000ac141400ac1414bb0144440001ac1414bb00000000ac1414bb00000000ac141420000000000000000000000000e000000200000000ac1414aa00000000ac1414aa00000000f00000"], 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x6, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000002c0)=0x40) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'lo\x00'}) 837.217173ms ago: executing program 6 (id=3072): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r1, 0x1}, 0x1c}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[@ANYBLOB='+cpu'], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0xffffffffffffff7c}]}]}, 0x50}}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000280)=""/224, 0xe0}, {&(0x7f0000000380)=""/170, 0xaa}, {&(0x7f0000000440)=""/18, 0x12}, {&(0x7f0000000480)=""/44, 0x2c}], 0x5) r9 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r9, 0x0, 0xce, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f0000002240)=@ccm_128={{0x304}, "2570a15ee10ebf90", "96891788641473b2ce424d38bb1725a4", "11a59a53", "b2241d9f187d9ab9"}, 0x28) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r10, 0x112, 0xd, 0x0, &(0x7f0000000040)) openat$cgroup_int(r7, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_subtree(r11, &(0x7f0000000200), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r13, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 834.186779ms ago: executing program 4 (id=3073): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x118}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff000000000000000000000001000000950000000000b3e5a8077102ef48d651d59200"/52], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) recvfrom(r1, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000300)={{0x2, 0x4e22, @private=0xa010100}, {0xcf000614d808da17, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x6e, {0x2, 0x7, @remote}, 'veth0_to_hsr\x00'}) recvmmsg(r1, &(0x7f0000008d40)=[{{0x0, 0x0, 0x0}, 0x5}, {{&(0x7f00000029c0)=@alg, 0x80, 0x0, 0x0, &(0x7f0000003f40)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x10001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010800000000000000000b003dd108000300", @ANYRES32=r8, @ANYBLOB="0a0006000802110000000000300050800800030002ac0f0011000100cabee339084eeef16f162471f40000000500090002000000050002"], 0x58}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x228, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x200, 0x5a}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff06}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff5f}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_TX_RATES={0x1d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa115, 0x9, 0x5, 0x1, 0xa811, 0x8, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x2, 0x1, 0x8, 0x9, 0x2, 0x9]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x7, 0x8}, {0x4, 0x5}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0xa}, {0x7, 0x4}, {0x6, 0x4}, {0x5, 0x8}, {0x6, 0x9}, {0x5, 0x5}, {0x5, 0x8}, {0x5, 0x4}, {0x3, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x2, 0x8}, {0x1}, {0x7, 0x3}, {0x1, 0x4}, {0x5, 0x7}, {0x6, 0x8}, {0x5, 0x9}, {0x6, 0x8}, {0x4, 0xa}, {0x0, 0x2}]}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0xa, 0x81, 0x3c8f, 0xc41, 0x7, 0x9]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1}, {0x1, 0x5}, {0x4, 0x6}, {0x6, 0x1}, {0x1, 0x9}, {0x3, 0x7}, {0x5, 0x8}, {0x6, 0x9}, {0x7, 0x2}, {0x1, 0x2}, {0x5, 0x5}, {0x4, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x5, 0x1}, {0x5, 0x5}, {0x7, 0x5}, {0x5, 0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x2, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x2, 0x2}, {0x0, 0xa}, {0x6, 0x6}, {0x0, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x0, 0x7}, {0x2, 0x2}, {0x6, 0x1}, {0x4, 0x8}, {0x4, 0x4}, {0x2}, {0x3, 0x5}, {0x1, 0x3}, {0x0, 0x1}, {}, {0x6, 0xa}, {0x3, 0x3}, {0x5, 0x7}, {0x6, 0x8}, {0x7, 0x7}, {0x4, 0x5}, {0x7, 0xa}, {0x6, 0x2}, {0x0, 0x2}, {0x6, 0x4}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0xa}, {0x2, 0xa}, {0x0, 0x9}, {0x4, 0xa}, {0x2, 0x9}, {0x5, 0x3}, {0x6, 0x4}, {0x1, 0x8}, {0x2, 0x1}, {0x4, 0x3}, {0x6, 0x3}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x7, 0xe, 0x8, 0x45, 0xb, 0x0, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x6}, {0x6, 0x6}, {0x0, 0x9}, {0x1, 0xa}, {0x7, 0x7}, {0x3, 0x8}, {}, {0x7, 0x5}, {0x1, 0x5}, {}, {0x4, 0x6}, {0x2, 0x8}, {0x2, 0x5}, {0x6, 0x4}, {0x6, 0x9}, {0x1, 0x2}, {0x6, 0xa}, {0x4, 0xa}, {0x1}, {0x0, 0x1}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0x1}, {0x1, 0x9}, {0x4, 0x6}, {0x6, 0x9}, {0x1, 0x1}, {0x0, 0x6}, {0x6, 0x2}, {0x0, 0x4}, {}, {0x1, 0x6}, {0x1, 0x2}, {0x3, 0x6}, {0x2, 0x2}, {0x6, 0x8}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x9, 0x1000, 0x1, 0x2, 0xb, 0xa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x15, 0x100, 0x7, 0xb7, 0x5, 0x87e8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x1b, 0x30, 0x60, 0x24, 0x1b, 0x5, 0x60, 0x60, 0x2, 0x36, 0x6, 0x18, 0xb, 0x1b, 0x18, 0x30, 0x24, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x5, 0xfff5, 0x2, 0xfffe, 0x41e9, 0x8, 0x400]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x2, 0x4}, {0x2}, {0x7, 0x4}, {0x7, 0x8}, {}, {0x1, 0xa}, {0x2, 0x8}, {0x2, 0x9}, {0x3, 0x3}, {0x1, 0x7}, {0x2, 0x6}, {0x0, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x2}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x4}]}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x228}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) 521.711146ms ago: executing program 5 (id=3074): r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2714, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1708000a000000000084ffffc500000014010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 454.666171ms ago: executing program 4 (id=3075): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c000280060001"], 0x9c}, 0x1, 0xba01}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00"], 0x528}}, 0xc000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="00022bbd7000fedbdf252000000044002d80050001000900000005000400010000000800030006000000080003000100000008000300060000000800030007000000080003000400000008000200000000000c00060003000000030000000c000600030000000300000008000300", @ANYRES32=r3, @ANYBLOB="0c00060000000000000000fde2aab83cc0b03445f322d04fffa344cdc4bb08ef500bae3a064ff35a993f59188ba7640535776765ebb4d3ff6d66abcca0ddbf46595bea77b0c68487cc3a5229cf1d16a2c26cb86424efdb944cf30c4632253844f10d44e4a7be71ba7da297d9ba2f80e899ff4f28433fe28229614ac75193c5d3d478af311e63ca9ba7b2c176fa34dfcba911287821b31c64b6d7446b16b7f57f2e250f4fc8d36ee8"], 0x84}, 0x1, 0x0, 0x0, 0x4000011}, 0x40008840) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5452, &(0x7f0000000c80)=0xf4e) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) writev(r4, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}, {&(0x7f00000197c0)="1902e902d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5c2df6b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/14, 0xe}, {&(0x7f0000000480)=""/25, 0x19}, {&(0x7f00000004c0)=""/41, 0x29}], 0x3, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x62) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 453.397507ms ago: executing program 0 (id=3076): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4000000000000, 0x200000000000000}, 0x0, 0xfffffffd}, [@mark={0xc, 0x15, {0x350759, 0x81}}]}, 0xc4}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000150001000000000000030000e000000200000000000000000000000000000000000000000000f6ffffff00000000000000000000f5ffffff00000000", @ANYRES32=r0, @ANYRES8, @ANYBLOB="0000000000000000000000000000000000000000000000000000d10000000000000000000000000000000000000000000000000000000000e0622753961582e7c284c409841b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042d21896a1cc8c5a3b055eb1c6c06ba1e39dda521948de4d812cc925d98cb4cbf7aaddc512787181b12b89db1689cca1bd671a7bf49c08c92fbb2aa3c4ec72ad852ef38202e987da1f729cf0254c02fc25f1a03dccb869f74c6fd0cbfaf1210e"], 0xb8}}, 0x2000c0d0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x62001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x9) ioctl$TUNSETLINK(r5, 0x400454cd, 0xfffe) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000480)=@ethtool_gstrings={0x1b, 0x8}}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000075a7e0c6ef7efc4d097e8d337f1300", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x8054) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x60, 0x0, &(0x7f0000000f00)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x7c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ife={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x2}]}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5f}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400d2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000d00000000004400000008000300", @ANYRES32=r6, @ANYBLOB="0c00238005001f00000000001400238008001400caffffff06001200ff"], 0x3c}}, 0x80) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES8=r9], &(0x7f0000003ff6)='GPL\x00', 0x204, 0xc7, &(0x7f0000000700)=""/199, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffd, 0x5}, 0x10}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xffba}, 0x50) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x4, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="5643f2af5919d9ae598a9ac33df00934122de3085f9d1cf4700bca0cf07833ab904a77cc039f5f5b1cfc0ea872a1b842a3279e8d3de1d25a85f6546bfe411cfd7f", @ANYRES64=0x0], 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'}) 354.717659ms ago: executing program 5 (id=3077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x116}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x40895}, 0x40000) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev, @in=@broadcast}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) gettid() (async) gettid() sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) 148.997487ms ago: executing program 5 (id=3078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x234, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x41, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x7, 0x28}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x1c5, 0x80, [@dsss={0x3, 0x1, 0x68}, @perr={0x84, 0xa8, {0x76, 0xa, [{{}, @broadcast, 0x7, @void, 0x39}, {{0x0, 0x1}, @device_b, 0x7, @value, 0x32}, {{0x0, 0x1}, @device_a, 0x9, @value, 0x15}, {{0x0, 0x1}, @device_b, 0x4, @value, 0x20}, {{}, @device_a, 0xa52, @void, 0x30}, {{0x0, 0x1}, @broadcast, 0xc, @value=@broadcast, 0x34}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x1d}, {{0x0, 0x1}, @device_b, 0x579c, @value, 0x26}, {{}, @device_b, 0x7, @void, 0x2e}, {{}, @device_b, 0x1, @void, 0x3e}]}}, @rann={0x7e, 0x15, {{0x0, 0x41}, 0xd, 0x80, @broadcast, 0x2, 0x6, 0xfffffff9}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0x78, 0x1}}, @tim={0x5, 0xce, {0xb, 0xe6, 0x3, "1944fb6a60902e93aa42cc5a2cd301ce68ec27ee60a6e75a54e0db457762d021c76f36974670bb9156e8ced959cc561398d8bf6113c5d7752e8a0316c23f2288f73ea6be5b764b524ecddc193dfae924e66ea19e48edc69262751b0fffeb39b2b4d811161837c3b5c7628b9d6fafac1198ca53f8eb1f2828eca29eb7389127f352effe44d9979534c79738c4e624d41b1db3bbe0fab465572dfdd6608373eab298ed619f2362e65eea16e52ed2d77ec043c70876a09e6a23d5b65c1d8832fce8e6c4296fb3d19204510132"}}, @rann={0x7e, 0x15, {{0x0, 0x11}, 0xa6, 0x8, @device_b, 0x8, 0x5, 0x1}}, @mesh_chsw={0x76, 0x6, {0x77, 0x8a, 0x41, 0xe}}, @gcr_ga={0xbd, 0x6}]}]]}, 0x234}}, 0x0) 85.884982ms ago: executing program 0 (id=3079): ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000780)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8011) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e9de000000000000000000000000950000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x13, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x57, &(0x7f0000000300)=""/87, 0x40f00, 0x5f, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x49e66174, 0x7, 0xb, 0x7fff}, 0x10, 0xcca0, r1, 0x9, &(0x7f00000005c0)=[r5], &(0x7f0000000600)=[{0x4, 0x2, 0xe, 0x5}, {0x0, 0x1, 0x9, 0x9}, {0x2, 0x5, 0x10, 0x1}, {0x2, 0x2, 0xa, 0xb}, {0x4, 0x1, 0x7, 0x8}, {0x5, 0x3, 0x2, 0x1}, {0x1, 0x4, 0xd, 0x9}, {0x1, 0x5, 0x1, 0x5}, {0x5, 0x5, 0xa, 0x5}], 0x10, 0x80000000}, 0x94) 15.837857ms ago: executing program 5 (id=3080): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000180000000000180100002020f02500000000002020207b1af8ff00000000bfa1000000000000170100000bd42523073ae1bd08000000b703000000000020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf07f}, 0x94) 0s ago: executing program 0 (id=3081): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000000000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000ecbb6acae19b2bf37920ddcd3709d52fdae907d55e547f7816e1681e4f3683d8a0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x68, &(0x7f00000004c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x8, @local, 0x48}, @in6={0xa, 0x4e26, 0xae4, @local, 0xeb91}, @in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r5, 0xd1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000808, 0xffffffffffffff7c, 0x0}}, 0x10) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newlink={0x24, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x74, r7, 0x0, 0x11203}, [@IFLA_VF_PORTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r2, 0x1, 0x9}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) connect$l2tp(0xffffffffffffffff, &(0x7f0000005280)={0x2, 0x0, @local, 0x1}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d08023f000000040000a118000200ff020000091d00000000000000000001a80016ea1f00084003eb4bd04554bf2a31cf1f2e5f54c92011148ed0", 0x4c}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c000000100003042dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="58881792", @ANYRES32=r0, @ANYBLOB="08000500", @ANYRES32=r11, @ANYBLOB="2c00128009000100766c616e000000001c0002800600010000000000100004800c0001000300000008000000"], 0x5c}, 0x1, 0xba01}, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@newtaction={0x23c, 0x30, 0x871a15abc695fb3d, 0x100, 0x0, {}, [{0x228, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x1f0, 0x8, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0xfffffffffffffff4, 0x1, 0x5}, 0x6b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf86, 0x3, 0x4, 0x5, 0xfffffffd}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x8a, 0xfffffffffffffffb, 0x10001, 0x99c5}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff3, 0x2, 0x10000000, 0x8, 0x800}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x2, 0xb963, 0x5d6}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xd, 0x20000000, 0x8000}, 0x44}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x0, 0x8, 0x400, 0x6}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x9, 0x4, 0xe, 0x1}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x0, 0x7, 0x7}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x4, 0x100, 0x3}, 0x1d}}]}, {0xaa, 0x6, "a952f26da05d4c7b5e32a58277e8be2bb855baf98a20770af7493a8066e74d9117645e39ba1d6d0625ba2bb007525a18c934001a54f6fa9eeb4be6b6ce1c72328caa7ebf0748fdcc6e3b925ab0818652389d942d1d233663535476bc57da373e3469dd4c47233254ae5f213ebfce52e9e3860cf4a243579e129b56489991b334589f77180238ce5379d19df5300c2e8fd7914ecb04ab3a10ce7d48dcf797e892297430fe3e00"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x23c}}, 0x8000) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1803000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000e4dfffffffffb40a000000000000850000000c000000b7000000f19f8a920012070000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x90) getsockopt(r0, 0x7960, 0x0, &(0x7f0000000440)=""/70, &(0x7f0000000180)=0x46) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="b543000003000000df254a0000008ef316ea85a5763536039203c95adf73c60542e3659004c9a14d"], 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r13, 0x84, 0x24, 0x0, 0x0) kernel console output (not intermixed with test programs): e type 12 has an invalid length. [ 122.485254][ T7851] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 123.073620][ T7871] __nla_validate_parse: 7 callbacks suppressed [ 123.073640][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.455'. [ 123.197514][ T7878] validate_nla: 1 callbacks suppressed [ 123.197533][ T7878] netlink: 'syz.6.456': attribute type 1 has an invalid length. [ 123.247958][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.456'. [ 123.337469][ T7884] netlink: 20 bytes leftover after parsing attributes in process `syz.6.456'. [ 123.351898][ T7883] netlink: 44 bytes leftover after parsing attributes in process `syz.5.458'. [ 123.698331][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.461'. [ 123.761512][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.461'. [ 123.805514][ T7898] netlink: 52 bytes leftover after parsing attributes in process `syz.6.461'. [ 123.810767][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.461'. [ 124.083870][ T7913] netlink: 36 bytes leftover after parsing attributes in process `syz.2.466'. [ 124.132408][ T7917] netlink: 36 bytes leftover after parsing attributes in process `syz.2.466'. [ 125.007608][ T7964] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 125.337788][ T7979] netlink: 'syz.2.485': attribute type 5 has an invalid length. [ 125.481208][ T7990] Driver unsupported XDP return value 0 on prog (id 100) dev N/A, expect packet loss! [ 125.509953][ T7993] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 125.523952][ T7993] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 126.015885][ T8017] macvlan0: entered allmulticast mode [ 126.059010][ T8017] veth1_vlan: entered allmulticast mode [ 126.096742][ T8022] veth1_vlan: left allmulticast mode [ 126.161287][ T8022] macvlan0 (unregistering): left allmulticast mode [ 126.282485][ T8032] tipc: Started in network mode [ 126.296184][ T8032] tipc: Node identity 4, cluster identity 4711 [ 126.329512][ T8032] tipc: Node number set to 4 [ 127.126235][ T8070] team0: Device gtp0 is of different type [ 127.533780][ T8091] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 127.584652][ T8093] netlink: 'syz.5.515': attribute type 33 has an invalid length. [ 127.624977][ T8093] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 127.746227][ T8105] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 127.766435][ T8105] openvswitch: netlink: Duplicate key (type 0). [ 127.810396][ T8105] netlink: 'syz.0.518': attribute type 12 has an invalid length. [ 127.852508][ T8105] netlink: 'syz.0.518': attribute type 29 has an invalid length. [ 128.129093][ T8124] veth0: entered promiscuous mode [ 128.207180][ T8122] team0: Device vti0 is up. Set it down before adding it as a team port [ 128.300738][ T8122] team0: Device vti0 is up. Set it down before adding it as a team port [ 128.306981][ T8142] __nla_validate_parse: 12 callbacks suppressed [ 128.307000][ T8142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 128.354137][ T8126] veth0: left promiscuous mode [ 128.421351][ T8122] team0: Device vti0 is up. Set it down before adding it as a team port [ 128.635893][ T8122] team0: Device vti0 is up. Set it down before adding it as a team port [ 128.781338][ T8122] team0: Device vti0 is up. Set it down before adding it as a team port [ 128.934811][ T8122] team0: Device vti0 is up. Set it down before adding it as a team port [ 129.099052][ T983] IPVS: starting estimator thread 0... [ 129.106440][ T8175] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 129.124726][ T8175] netlink: 64 bytes leftover after parsing attributes in process `syz.4.538'. [ 129.206234][ T8176] IPVS: using max 29 ests per chain, 69600 per kthread [ 129.217946][ T8184] netem: change failed [ 129.313675][ T8190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.542'. [ 129.489713][ T8199] netlink: 'syz.2.545': attribute type 10 has an invalid length. [ 129.594327][ T8199] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 130.019474][ T8237] pim6reg1: entered promiscuous mode [ 130.024893][ T8237] pim6reg1: entered allmulticast mode [ 130.034159][ T8239] netlink: 'syz.4.558': attribute type 10 has an invalid length. [ 130.069206][ T8239] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 130.541716][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.563'. [ 130.558805][ T8253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.585543][ T8253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.742158][ T8256] netlink: 44 bytes leftover after parsing attributes in process `syz.5.564'. [ 130.768845][ T8256] netlink: 43 bytes leftover after parsing attributes in process `syz.5.564'. [ 130.800686][ T8256] netlink: 'syz.5.564': attribute type 5 has an invalid length. [ 130.811256][ T8256] netlink: 43 bytes leftover after parsing attributes in process `syz.5.564'. [ 130.918186][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.567'. [ 130.934904][ T8265] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 130.980904][ T8265] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 130.998287][ T8265] gretap1: entered promiscuous mode [ 131.016035][ T8265] gretap1: entered allmulticast mode [ 131.156502][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.568'. [ 131.307905][ T8277] netlink: 'syz.2.571': attribute type 6 has an invalid length. [ 131.437993][ T8276] pim6reg1: entered promiscuous mode [ 131.450473][ T8276] pim6reg1: entered allmulticast mode [ 131.451009][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.573'. [ 131.950081][ T8310] netlink: 'syz.0.583': attribute type 1 has an invalid length. [ 132.143694][ T8317] netlink: 'syz.0.585': attribute type 1 has an invalid length. [ 132.338005][ T8321] syzkaller0: entered promiscuous mode [ 132.343784][ T8321] syzkaller0: entered allmulticast mode [ 132.385330][ T8329] vlan4: entered allmulticast mode [ 132.390700][ T8329] bond0: entered allmulticast mode [ 132.397206][ T8329] bond_slave_0: entered allmulticast mode [ 132.402957][ T8329] bond_slave_1: entered allmulticast mode [ 132.424899][ T8329] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 132.862752][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.971451][ T8355] __nla_validate_parse: 3 callbacks suppressed [ 133.971468][ T8355] netlink: 284 bytes leftover after parsing attributes in process `syz.0.598'. [ 134.037362][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'. [ 134.932360][ T8420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.620'. [ 135.010135][ T8420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.620'. [ 135.038593][ T8420] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 135.059573][ T8420] netlink: 40 bytes leftover after parsing attributes in process `syz.0.620'. [ 135.097525][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 135.171419][ T8420] team0: Port device geneve0 added [ 135.555618][ T8446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.628'. [ 135.782876][ T8452] netlink: 88 bytes leftover after parsing attributes in process `syz.5.631'. [ 135.795524][ T8452] netlink: 24 bytes leftover after parsing attributes in process `syz.5.631'. [ 135.815218][ T8452] netlink: 24 bytes leftover after parsing attributes in process `syz.5.631'. [ 136.032813][ T8468] openvswitch: netlink: Missing key (keys=40, expected=100) [ 136.083756][ T8476] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 136.091564][ T8476] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 136.516700][ T8502] pim6reg: entered allmulticast mode [ 136.681888][ T8512] vlan2: entered allmulticast mode [ 137.051636][ T8531] IPVS: set_ctl: invalid protocol: 22 172.20.20.43:20003 [ 137.414148][ T8554] sctp: [Deprecated]: syz.4.664 (pid 8554) Use of int in max_burst socket option. [ 137.414148][ T8554] Use struct sctp_assoc_value instead [ 137.479734][ T8560] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 138.054316][ T8591] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 138.196252][ T8595] sctp: [Deprecated]: syz.4.677 (pid 8595) Use of int in max_burst socket option. [ 138.196252][ T8595] Use struct sctp_assoc_value instead [ 138.820725][ T8635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.896370][ T8635] netlink: 'syz.0.692': attribute type 11 has an invalid length. [ 138.951907][ T8642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.021458][ T8640] syzkaller0: entered promiscuous mode [ 139.028767][ T8635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.047345][ T8640] syzkaller0: entered allmulticast mode [ 139.746156][ T8657] netlink: 'syz.0.698': attribute type 8 has an invalid length. [ 140.061948][ T8660] __nla_validate_parse: 9 callbacks suppressed [ 140.061965][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.699'. [ 140.714429][ T8678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.771320][ T8684] netlink: 136 bytes leftover after parsing attributes in process `syz.0.702'. [ 140.780697][ T8684] netlink: 304 bytes leftover after parsing attributes in process `syz.0.702'. [ 141.145264][ T8683] netlink: 'syz.2.700': attribute type 1 has an invalid length. [ 141.418394][ T8707] netlink: 'syz.0.714': attribute type 3 has an invalid length. [ 141.445807][ T8707] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.714'. [ 141.496996][ T8711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.716'. [ 141.667281][ T8715] nbd0: detected capacity change from 0 to 549764202496 [ 141.681695][ T8717] tipc: Started in network mode [ 141.699167][ T8717] tipc: Node identity 080211000001, cluster identity 4711 [ 141.714068][ T8717] tipc: Enabled bearer , priority 0 [ 141.722614][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.721'. [ 141.732734][ T8717] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 141.759527][ T8717] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 141.770133][ T8729] raw_sendmsg: syz.0.720 forgot to set AF_INET. Fix it! [ 141.783454][ T8722] netlink: 224 bytes leftover after parsing attributes in process `syz.6.721'. [ 141.801845][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 141.820018][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.721'. [ 141.838226][ T5863] block nbd0: Receive control failed (result -104) [ 141.942514][ T8735] netlink: 'syz.4.725': attribute type 23 has an invalid length. [ 142.239291][ T8746] netlink: 16 bytes leftover after parsing attributes in process `syz.6.730'. [ 142.269320][ T8746] team0: No ports can be present during mode change [ 142.396978][ T8766] netlink: 'syz.4.737': attribute type 4 has an invalid length. [ 142.405573][ T8766] netlink: 'syz.4.737': attribute type 4 has an invalid length. [ 142.449013][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 142.523166][ T8773] sctp: [Deprecated]: syz.2.738 (pid 8773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.523166][ T8773] Use struct sctp_sack_info instead [ 142.655182][ T8780] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 142.841873][ T983] tipc: Node number set to 134418688 [ 143.061531][ T8814] nbd: socks must be embedded in a SOCK_ITEM attr [ 143.548259][ T8834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.885080][ T8846] bridge_slave_1: left allmulticast mode [ 143.902247][ T8846] bridge_slave_1: left promiscuous mode [ 143.909671][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.952264][ T8846] bridge_slave_0: left allmulticast mode [ 143.962716][ T8846] bridge_slave_0: left promiscuous mode [ 143.979275][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.315339][ T8867] netlink: 'syz.5.767': attribute type 5 has an invalid length. [ 144.323705][ T8872] netlink: 'syz.6.769': attribute type 5 has an invalid length. [ 144.426805][ T8867] netlink: 'syz.5.767': attribute type 1 has an invalid length. [ 144.756930][ T8909] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 144.776295][ T5866] Bluetooth: hci3: command 0x0405 tx timeout [ 144.868807][ T8890] vlan3: entered promiscuous mode [ 144.955600][ T8918] geneve2: entered promiscuous mode [ 145.099855][ T8921] tipc: Enabling of bearer rejected, already enabled [ 145.156700][ T8928] __nla_validate_parse: 14 callbacks suppressed [ 145.156720][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.785'. [ 145.232362][ T8938] netlink: 'syz.6.788': attribute type 5 has an invalid length. [ 145.273103][ T8938] openvswitch: netlink: Missing valid actions attribute. [ 145.280378][ T8938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.463596][ T8953] Bluetooth: MGMT ver 1.23 [ 145.472725][ T8957] netlink: 212164 bytes leftover after parsing attributes in process `syz.4.794'. [ 145.555758][ T8953] bridge2: entered promiscuous mode [ 145.584179][ T8959] delete_channel: no stack [ 145.584846][ T8953] bridge2: entered allmulticast mode [ 145.666203][ T8963] netlink: 124 bytes leftover after parsing attributes in process `syz.4.798'. [ 145.750326][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 145.761740][ T5904] IPVS: starting estimator thread 0... [ 145.866073][ T8970] IPVS: using max 28 ests per chain, 67200 per kthread [ 146.085854][ T8982] netlink: 'syz.6.804': attribute type 21 has an invalid length. [ 146.116142][ T8982] netlink: 20 bytes leftover after parsing attributes in process `syz.6.804'. [ 146.241142][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.806'. [ 146.280673][ T8990] IPVS: set_ctl: invalid protocol: 98 172.30.0.7:20002 [ 146.545422][ T9002] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.812'. [ 146.673048][ T9017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.810904][ T9021] tipc: Started in network mode [ 146.828919][ T9021] tipc: Node identity 4e6e2dd91df4, cluster identity 4711 [ 146.845247][ T9021] tipc: Enabled bearer , priority 0 [ 146.865444][ T9021] syzkaller0: entered promiscuous mode [ 146.871321][ T9021] syzkaller0: entered allmulticast mode [ 146.923422][ T9021] tipc: Resetting bearer [ 146.949120][ T9020] tipc: Resetting bearer [ 146.987894][ T9020] tipc: Disabling bearer [ 147.214264][ T9046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.338045][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'. [ 147.347694][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'. [ 147.390437][ T9055] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 147.649416][ T9074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.837'. [ 147.913866][ T9090] nbd: must specify a device to reconfigure [ 148.050505][ T9098] netlink: 'syz.2.845': attribute type 2 has an invalid length. [ 148.085406][ T9093] netlink: 'syz.5.843': attribute type 6 has an invalid length. [ 148.110388][ T9093] netlink: 'syz.5.843': attribute type 5 has an invalid length. [ 148.443759][ T9118] netlink: 'syz.0.852': attribute type 1 has an invalid length. [ 148.465577][ T9118] netlink: 'syz.0.852': attribute type 4 has an invalid length. [ 148.569882][ T9122] team_slave_0: entered promiscuous mode [ 148.575644][ T9122] team_slave_1: entered promiscuous mode [ 148.581431][ T9122] geneve0: entered promiscuous mode [ 148.965139][ T9153] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 148.981220][ T9153] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 148.994360][ T9153] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 149.656436][ T9149] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 149.977490][ T9202] tc_dump_action: action bad kind [ 150.147064][ T9217] netlink: 'syz.5.876': attribute type 29 has an invalid length. [ 150.155535][ T9217] netlink: 'syz.5.876': attribute type 29 has an invalid length. [ 150.770375][ T9247] netlink: 'syz.5.885': attribute type 1 has an invalid length. [ 150.786877][ T9247] netlink: 'syz.5.885': attribute type 1 has an invalid length. [ 150.923274][ T9253] __nla_validate_parse: 8 callbacks suppressed [ 150.923292][ T9253] netlink: 32 bytes leftover after parsing attributes in process `syz.5.888'. [ 150.943668][ T9253] netlink: 32 bytes leftover after parsing attributes in process `syz.5.888'. [ 151.502068][ T9269] syz.2.892 (9269) used greatest stack depth: 19912 bytes left [ 152.287708][ T9308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.901'. [ 152.407957][ T9320] netlink: 'syz.2.904': attribute type 1 has an invalid length. [ 152.588456][ T9329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.623718][ T9329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.630817][ T9329] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 152.643221][ T9329] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 152.671591][ T9330] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 152.683481][ T9330] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 152.813020][ T9337] netlink: 104 bytes leftover after parsing attributes in process `syz.6.909'. [ 152.998079][ T9342] sctp: [Deprecated]: syz.4.911 (pid 9342) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.998079][ T9342] Use struct sctp_sack_info instead [ 153.017265][ T9342] sctp: [Deprecated]: syz.4.911 (pid 9342) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.017265][ T9342] Use struct sctp_sack_info instead [ 153.058328][ T9344] openvswitch: netlink: Missing key (keys=40, expected=100) [ 153.067757][ T9305] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.252051][ T9356] netlink: 300 bytes leftover after parsing attributes in process `syz.0.916'. [ 153.264476][ T9358] netlink: 300 bytes leftover after parsing attributes in process `syz.0.916'. [ 153.277033][ T9357] netlink: 'syz.5.914': attribute type 11 has an invalid length. [ 153.348061][ T9361] netlink: 148 bytes leftover after parsing attributes in process `syz.5.914'. [ 153.602985][ T9380] validate_nla: 2 callbacks suppressed [ 153.603004][ T9380] netlink: 'syz.4.924': attribute type 83 has an invalid length. [ 153.653216][ T9381] netlink: 28 bytes leftover after parsing attributes in process `syz.6.921'. [ 153.768536][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.925'. [ 153.922458][ T9385] netlink: 'syz.4.925': attribute type 1 has an invalid length. [ 153.950838][ T9389] netlink: 191164 bytes leftover after parsing attributes in process `syz.0.928'. [ 154.104398][ T9392] netlink: 'syz.2.927': attribute type 1 has an invalid length. [ 154.250265][ T9399] netlink: 'syz.2.930': attribute type 1 has an invalid length. [ 154.259800][ T9398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.506901][ T9404] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 154.536772][ T9404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.567154][ T9412] netlink: 'syz.4.935': attribute type 9 has an invalid length. [ 155.367370][ T9438] netlink: 'syz.0.943': attribute type 12 has an invalid length. [ 155.400710][ T9438] netlink: 'syz.0.943': attribute type 29 has an invalid length. [ 155.473659][ T9443] tipc: Enabling not permitted [ 155.502810][ T9443] tipc: Enabling of bearer rejected, failed to enable media [ 156.161207][ T9470] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 156.383203][ T9473] syzkaller0: entered promiscuous mode [ 156.401922][ T9473] syzkaller0: entered allmulticast mode [ 156.588973][ T9479] __nla_validate_parse: 9 callbacks suppressed [ 156.588990][ T9479] netlink: 104 bytes leftover after parsing attributes in process `syz.0.957'. [ 156.618434][ T9484] veth0: entered promiscuous mode [ 156.625303][ T9480] veth0: left promiscuous mode [ 156.640775][ T9478] netlink: 104 bytes leftover after parsing attributes in process `syz.0.957'. [ 156.850994][ T9494] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 156.857912][ T9494] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 157.172957][ T9500] netlink: 'syz.4.962': attribute type 12 has an invalid length. [ 157.501299][ T9514] netlink: 'syz.4.966': attribute type 10 has an invalid length. [ 157.667749][ T9514] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 157.880898][ T9516] syzkaller1: entered promiscuous mode [ 157.888674][ T9516] syzkaller1: entered allmulticast mode [ 158.089902][ T9523] tipc: Enabling of bearer rejected, already enabled [ 158.148994][ T9523] openvswitch: netlink: Duplicate or invalid key (type 0). [ 158.158813][ T9523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.394279][ T9543] openvswitch: netlink: Missing key (keys=40, expected=100) [ 158.401028][ T9541] netlink: 'syz.0.975': attribute type 10 has an invalid length. [ 158.413227][ T9541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.975'. [ 159.200899][ T9575] ieee802154 phy1 wpan1: encryption failed: -22 [ 159.385405][ T9585] netlink: 'syz.4.989': attribute type 1 has an invalid length. [ 159.401263][ T9585] netlink: 224 bytes leftover after parsing attributes in process `syz.4.989'. [ 159.652781][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 159.706286][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'. [ 159.902923][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.994'. [ 159.933270][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.994'. [ 160.009724][ T9607] tipc: Enabling of bearer rejected, media not registered [ 160.031791][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.996'. [ 160.147158][ T9613] netlink: 'syz.0.997': attribute type 15 has an invalid length. [ 160.183306][ T9616] netlink: 'syz.0.997': attribute type 15 has an invalid length. [ 160.269236][ T9618] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 160.300461][ T9618] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 160.430979][ T9625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1001'. [ 160.687147][ T9639] sctp: [Deprecated]: syz.6.1007 (pid 9639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.687147][ T9639] Use struct sctp_sack_info instead [ 160.924582][ T9649] netlink: zone id is out of range [ 160.958997][ T9649] netlink: zone id is out of range [ 160.979784][ T9649] netlink: zone id is out of range [ 160.985223][ T9649] netlink: zone id is out of range [ 161.021098][ T9649] netlink: zone id is out of range [ 161.052260][ T9649] netlink: zone id is out of range [ 161.058016][ T9649] netlink: zone id is out of range [ 161.156529][ T9665] sctp: [Deprecated]: syz.0.1012 (pid 9665) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.156529][ T9665] Use struct sctp_sack_info instead [ 161.177152][ T9655] sctp: [Deprecated]: syz.0.1012 (pid 9655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.177152][ T9655] Use struct sctp_sack_info instead [ 171.890657][ T11] block nbd0: Possible stuck request ffff888025310000: control (read@0,4096B). Runtime 30 seconds [ 175.727233][ C0] net_ratelimit: 11 callbacks suppressed [ 175.727253][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.769721][ T9677] __nla_validate_parse: 5 callbacks suppressed [ 187.769742][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1020'. [ 188.078726][ T9677] hsr_slave_0 (unregistering): left promiscuous mode [ 188.400163][ T9708] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1028'. [ 188.472304][ T9712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1030'. [ 188.488615][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'. [ 188.724798][ T9726] netlink: 'syz.0.1035': attribute type 1 has an invalid length. [ 188.843887][ T9727] bond1: (slave bridge3): making interface the new active one [ 188.865134][ T9727] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 188.944540][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1038'. [ 189.071340][ T9748] IPVS: sync thread started: state = MASTER, mcast_ifn = gre0, syncid = 1, id = 0 [ 189.084900][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'. [ 189.099304][ T9750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1041'. [ 189.169163][ T9758] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1041'. [ 189.381070][ T9767] netlink: 'syz.0.1046': attribute type 2 has an invalid length. [ 189.392564][ T9767] netlink: 1160 bytes leftover after parsing attributes in process `syz.0.1046'. [ 189.432930][ T9769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1047'. [ 189.476338][ T9772] netlink: 'syz.0.1046': attribute type 2 has an invalid length. [ 189.487222][ T9772] netlink: 'syz.0.1046': attribute type 8 has an invalid length. [ 190.048743][ T9803] netlink: 'syz.5.1059': attribute type 4 has an invalid length. [ 190.058426][ T9805] netlink: 'syz.5.1059': attribute type 4 has an invalid length. [ 190.469036][ T9828] netlink: 'syz.0.1068': attribute type 1 has an invalid length. [ 191.245412][ T9870] sch_fq: defrate 0 ignored. [ 191.516490][ T9880] tipc: Started in network mode [ 191.524235][ T9880] tipc: Node identity c2b0f7021a77, cluster identity 4711 [ 191.549622][ T9880] tipc: Enabled bearer , priority 0 [ 191.576960][ T9886] syzkaller0: entered promiscuous mode [ 191.583667][ T9886] syzkaller0: entered allmulticast mode [ 191.641041][ T9880] tipc: Resetting bearer [ 191.703844][ T9879] tipc: Resetting bearer [ 191.803831][ T9879] tipc: Disabling bearer [ 192.397381][ T9936] IPv6: addrconf: prefix option has invalid lifetime [ 192.443962][ T9936] tipc: Resetting bearer [ 192.979785][ T9974] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.057122][ T9978] __nla_validate_parse: 6 callbacks suppressed [ 193.057140][ T9978] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1116'. [ 193.261765][ T9994] netlink: 'syz.6.1122': attribute type 3 has an invalid length. [ 193.375740][ T9998] syzkaller1: entered promiscuous mode [ 193.381493][ T9998] syzkaller1: entered allmulticast mode [ 193.613400][T10013] netlink: 'syz.6.1130': attribute type 1 has an invalid length. [ 193.621713][T10013] netlink: 'syz.6.1130': attribute type 4 has an invalid length. [ 193.631817][T10013] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1130'. [ 193.733145][T10020] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1133'. [ 193.743307][T10021] bond2: entered promiscuous mode [ 193.748841][T10021] bond2: entered allmulticast mode [ 193.754579][T10021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.825657][T10026] validate_nla: 1 callbacks suppressed [ 193.825673][T10026] netlink: 'syz.4.1135': attribute type 9 has an invalid length. [ 194.046450][ T5866] Bluetooth: hci3: command 0x0405 tx timeout [ 194.294691][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.366679][T10043] netlink: 'syz.4.1140': attribute type 1 has an invalid length. [ 194.378560][T10043] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1140'. [ 194.606706][T10065] netlink: 'syz.4.1147': attribute type 1 has an invalid length. [ 194.644294][T10070] FAULT_INJECTION: forcing a failure. [ 194.644294][T10070] name failslab, interval 1, probability 0, space 0, times 0 [ 194.661880][T10070] CPU: 0 UID: 0 PID: 10070 Comm: syz.6.1148 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 194.661905][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.661922][T10070] Call Trace: [ 194.661930][T10070] [ 194.661938][T10070] dump_stack_lvl+0x189/0x250 [ 194.661966][T10070] ? __pfx____ratelimit+0x10/0x10 [ 194.661990][T10070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.662010][T10070] ? __pfx__printk+0x10/0x10 [ 194.662041][T10070] ? __pfx___might_resched+0x10/0x10 [ 194.662058][T10070] ? fs_reclaim_acquire+0x7d/0x100 [ 194.662089][T10070] should_fail_ex+0x414/0x560 [ 194.662115][T10070] should_failslab+0xa8/0x100 [ 194.662142][T10070] __kmalloc_cache_noprof+0x70/0x3d0 [ 194.662173][T10070] ? cls_bpf_change+0x22a/0xde0 [ 194.662201][T10070] cls_bpf_change+0x22a/0xde0 [ 194.662233][T10070] ? __pfx_cls_bpf_change+0x10/0x10 [ 194.662281][T10070] tc_new_tfilter+0xdca/0x15b0 [ 194.662336][T10070] ? __pfx_tc_new_tfilter+0x10/0x10 [ 194.662357][T10070] ? __dev_queue_xmit+0x1d79/0x3b50 [ 194.662412][T10070] ? __pfx_tc_new_tfilter+0x10/0x10 [ 194.662435][T10070] rtnetlink_rcv_msg+0x7cc/0xb70 [ 194.662468][T10070] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 194.662490][T10070] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 194.662509][T10070] ? ref_tracker_free+0x63a/0x7d0 [ 194.662531][T10070] ? __asan_memcpy+0x40/0x70 [ 194.662551][T10070] ? __pfx_ref_tracker_free+0x10/0x10 [ 194.662583][T10070] netlink_rcv_skb+0x208/0x470 [ 194.662607][T10070] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 194.662631][T10070] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.662666][T10070] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.662696][T10070] netlink_unicast+0x82c/0x9e0 [ 194.662726][T10070] ? __pfx_netlink_unicast+0x10/0x10 [ 194.662749][T10070] ? netlink_sendmsg+0x642/0xb30 [ 194.662769][T10070] ? skb_put+0x11b/0x210 [ 194.662796][T10070] netlink_sendmsg+0x805/0xb30 [ 194.662829][T10070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.662855][T10070] ? aa_sock_msg_perm+0xf1/0x1d0 [ 194.662880][T10070] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.662899][T10070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.662922][T10070] __sock_sendmsg+0x21c/0x270 [ 194.662946][T10070] ____sys_sendmsg+0x505/0x830 [ 194.662976][T10070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.663010][T10070] ? import_iovec+0x74/0xa0 [ 194.663031][T10070] ___sys_sendmsg+0x21f/0x2a0 [ 194.663058][T10070] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.663122][T10070] ? __fget_files+0x2a/0x420 [ 194.663146][T10070] ? __fget_files+0x3a0/0x420 [ 194.663182][T10070] __x64_sys_sendmsg+0x19b/0x260 [ 194.663209][T10070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.663244][T10070] ? __pfx_ksys_write+0x10/0x10 [ 194.663263][T10070] ? rcu_is_watching+0x15/0xb0 [ 194.663288][T10070] ? do_syscall_64+0xbe/0x3b0 [ 194.663315][T10070] do_syscall_64+0xfa/0x3b0 [ 194.663335][T10070] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.663356][T10070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.663374][T10070] ? clear_bhb_loop+0x60/0xb0 [ 194.663396][T10070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.663415][T10070] RIP: 0033:0x7f66ea78ebe9 [ 194.663438][T10070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.663458][T10070] RSP: 002b:00007f66eb6c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.663480][T10070] RAX: ffffffffffffffda RBX: 00007f66ea9b5fa0 RCX: 00007f66ea78ebe9 [ 194.663492][T10070] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000006 [ 194.663501][T10070] RBP: 00007f66eb6c4090 R08: 0000000000000000 R09: 0000000000000000 [ 194.663510][T10070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.663519][T10070] R13: 00007f66ea9b6038 R14: 00007f66ea9b5fa0 R15: 00007ffcfc313168 [ 194.663544][T10070] [ 194.739321][T10079] delete_channel: no stack [ 194.879049][T10075] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1151'. [ 195.074047][T10089] veth0: entered promiscuous mode [ 195.105112][T10087] veth0: left promiscuous mode [ 195.359233][T10103] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1160'. [ 195.444324][T10108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1163'. [ 195.539288][T10112] netlink: 'syz.2.1164': attribute type 11 has an invalid length. [ 195.581387][T10112] netlink: 'syz.2.1164': attribute type 11 has an invalid length. [ 195.597712][T10112] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1164'. [ 195.643201][T10123] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1167'. [ 195.653937][T10120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1166'. [ 195.903253][T10136] FAULT_INJECTION: forcing a failure. [ 195.903253][T10136] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 195.940726][T10136] CPU: 1 UID: 0 PID: 10136 Comm: syz.4.1170 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 195.940751][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.940761][T10136] Call Trace: [ 195.940768][T10136] [ 195.940776][T10136] dump_stack_lvl+0x189/0x250 [ 195.940803][T10136] ? __pfx____ratelimit+0x10/0x10 [ 195.940825][T10136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.940845][T10136] ? __pfx__printk+0x10/0x10 [ 195.940869][T10136] ? __might_fault+0xb0/0x130 [ 195.940903][T10136] should_fail_ex+0x414/0x560 [ 195.940930][T10136] _copy_from_user+0x2d/0xb0 [ 195.940949][T10136] kstrtouint_from_user+0xc4/0x170 [ 195.940981][T10136] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 195.941022][T10136] proc_fail_nth_write+0x88/0x200 [ 195.941044][T10136] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 195.941070][T10136] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 195.941092][T10136] vfs_write+0x27e/0xa90 [ 195.941132][T10136] ? __pfx_vfs_write+0x10/0x10 [ 195.941156][T10136] ? __fget_files+0x2a/0x420 [ 195.941185][T10136] ? __fget_files+0x3a0/0x420 [ 195.941207][T10136] ? __fget_files+0x2a/0x420 [ 195.941240][T10136] ksys_write+0x145/0x250 [ 195.941263][T10136] ? __pfx_ksys_write+0x10/0x10 [ 195.941283][T10136] ? rcu_is_watching+0x15/0xb0 [ 195.941307][T10136] ? do_syscall_64+0xbe/0x3b0 [ 195.941333][T10136] do_syscall_64+0xfa/0x3b0 [ 195.941354][T10136] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.941374][T10136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.941392][T10136] ? clear_bhb_loop+0x60/0xb0 [ 195.941414][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.941432][T10136] RIP: 0033:0x7f138198d69f [ 195.941448][T10136] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 195.941463][T10136] RSP: 002b:00007f1382724030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 195.941481][T10136] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f138198d69f [ 195.941493][T10136] RDX: 0000000000000001 RSI: 00007f13827240a0 RDI: 0000000000000008 [ 195.941503][T10136] RBP: 00007f1382724090 R08: 0000000000000000 R09: 0000000000000000 [ 195.941514][T10136] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 195.941524][T10136] R13: 00007f1381bb6038 R14: 00007f1381bb5fa0 R15: 00007ffe591b2a08 [ 195.941554][T10136] [ 196.366181][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 196.941181][T10197] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 197.635750][T10255] tipc: Enabling of bearer rejected, failed to enable media [ 197.944346][T10276] team0: Device vti0 is up. Set it down before adding it as a team port [ 198.274483][T10298] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 198.320102][T10298] __nla_validate_parse: 6 callbacks suppressed [ 198.320120][T10298] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1208'. [ 198.358990][T10298] pim6reg1: entered promiscuous mode [ 198.364485][T10298] pim6reg1: entered allmulticast mode [ 198.623391][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1215'. [ 199.069260][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 199.549366][T10385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1235'. [ 199.585552][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1235'. [ 199.619181][T10387] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1236'. [ 199.639150][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'. [ 199.777265][T10394] delete_channel: no stack [ 200.065740][T10410] netlink: 'syz.5.1246': attribute type 11 has an invalid length. [ 200.104421][T10410] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1246'. [ 200.187082][T10421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1251'. [ 200.197132][T10421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1251'. [ 200.430514][T10435] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20002 [ 200.458135][T10435] IPVS: set_ctl: invalid protocol: 135 172.20.20.48:20003 [ 200.644540][T10446] netlink: 'syz.5.1264': attribute type 2 has an invalid length. [ 201.534794][T10444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.618228][T10444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.839534][T10444] tipc: Resetting bearer [ 201.921644][T10478] bridge0: port 2(vlan4) entered blocking state [ 201.946283][T10478] bridge0: port 2(vlan4) entered disabled state [ 201.962805][T10478] vlan4: entered allmulticast mode [ 201.976504][ T11] block nbd0: Possible stuck request ffff888025310000: control (read@0,4096B). Runtime 60 seconds [ 201.992279][T10478] vlan4: left allmulticast mode [ 202.017890][T10228] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.043964][T10228] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.054594][T10225] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.078464][T10225] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.091950][T10225] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.109749][T10225] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.125969][T10225] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.150726][T10225] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.218353][T10500] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 202.495775][T10513] vxcan1: tx address claim with different name [ 202.703796][T10523] netlink: 'syz.0.1285': attribute type 1 has an invalid length. [ 202.903208][T10528] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.919429][T10528] bond2: (slave bond3): making interface the new active one [ 202.933476][T10528] bond2: (slave bond3): Enslaving as an active interface with an up link [ 202.967134][T10523] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 202.983723][T10532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.370496][T10557] __nla_validate_parse: 15 callbacks suppressed [ 203.370515][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1296'. [ 203.479271][T10562] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 203.662364][T10571] netlink: 152064 bytes leftover after parsing attributes in process `syz.4.1301'. [ 203.695464][T10571] netlink: zone id is out of range [ 203.704847][T10575] pim6reg: entered allmulticast mode [ 203.713684][T10571] netlink: get zone limit has 8 unknown bytes [ 203.717738][T10576] tipc: Enabling of bearer rejected, failed to enable media [ 203.751445][T10571] netlink: 'syz.4.1301': attribute type 4 has an invalid length. [ 203.847604][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1304'. [ 203.884605][T10585] netlink: 192 bytes leftover after parsing attributes in process `syz.6.1306'. [ 203.965003][T10588] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 204.053644][T10595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1308'. [ 204.065683][T10595] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1308'. [ 204.510618][T10628] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1321'. [ 204.618330][T10629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1319'. [ 204.676199][T10631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1322'. [ 204.725570][T10634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1324'. [ 204.897955][T10641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.252773][ T6105] IPVS: starting estimator thread 0... [ 205.262606][T10664] IPVS: set_ctl: invalid protocol: 255 172.30.1.3:20000 [ 205.290671][T10666] netlink: 'syz.5.1332': attribute type 1 has an invalid length. [ 205.325250][T10669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.396478][T10670] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 205.416014][T10665] IPVS: using max 28 ests per chain, 67200 per kthread [ 205.610452][T10666] veth3: entered promiscuous mode [ 205.621666][T10666] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 205.929086][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.977191][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.022297][T10703] netlink: 'syz.4.1344': attribute type 1 has an invalid length. [ 206.077025][T10703] netlink: 'syz.4.1344': attribute type 1 has an invalid length. [ 206.098850][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.125377][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.177463][T10710] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 206.193535][T10710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.575379][T10733] tipc: Enabling of bearer rejected, media not registered [ 206.798582][T10748] vlan2: entered allmulticast mode [ 206.817013][T10748] veth1: entered allmulticast mode [ 207.112256][T10764] netlink: 'syz.6.1367': attribute type 21 has an invalid length. [ 207.122835][T10764] netlink: 'syz.6.1367': attribute type 22 has an invalid length. [ 207.132837][T10764] netlink: 'syz.6.1367': attribute type 23 has an invalid length. [ 207.143983][T10764] netlink: 'syz.6.1367': attribute type 25 has an invalid length. [ 207.161153][T10764] netlink: 'syz.6.1367': attribute type 26 has an invalid length. [ 207.323594][T10776] netlink: 'syz.0.1370': attribute type 23 has an invalid length. [ 207.709335][T10795] bond0: (slave bond_slave_0): Releasing backup interface [ 207.720665][T10795] bond_slave_0: left allmulticast mode [ 207.740118][T10795] bond0: (slave bond_slave_1): Releasing backup interface [ 207.755731][T10795] bond_slave_1: left allmulticast mode [ 207.770801][T10795] team0: Port device C removed [ 207.786587][T10795] team0: Port device team_slave_1 removed [ 207.799952][T10795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.812756][T10795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.925421][T10809] netlink: 'syz.2.1381': attribute type 1 has an invalid length. [ 207.936559][T10795] bond0: (slave wlan1): Releasing backup interface [ 207.944659][T10795] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 208.053380][T10809] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.202195][T10822] netlink: 'syz.0.1384': attribute type 12 has an invalid length. [ 208.430273][T10837] __nla_validate_parse: 48 callbacks suppressed [ 208.430290][T10837] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1389'. [ 208.488398][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1392'. [ 208.593490][T10852] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1395'. [ 208.703608][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1393'. [ 208.728954][T10850] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1393'. [ 208.743506][T10850] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20001 [ 208.819827][T10866] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1400'. [ 208.996906][T10882] openvswitch: netlink: Missing key (keys=40, expected=100) [ 209.044985][T10882] openvswitch: netlink: Missing key (keys=40, expected=100) [ 209.075878][T10882] openvswitch: netlink: Missing key (keys=40, expected=100) [ 209.096361][T10882] openvswitch: netlink: Missing key (keys=40, expected=100) [ 209.105196][T10882] openvswitch: netlink: Missing key (keys=40, expected=100) [ 209.115768][T10882] openvswitch: netlink: Missing key (keys=40, expected=100) [ 209.125174][T10882] openvswitch: netlink: Missing key (keys=40, expected=100) [ 209.133029][T10882] openvswitch: netlink: Missing key (keys=40, expected=100) [ 209.142479][T10882] openvswitch: netlink: Missing key (keys=40, expected=100) [ 209.151965][T10882] openvswitch: netlink: Missing key (keys=40, expected=100) [ 209.226657][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1408'. [ 209.236364][T10892] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1408'. [ 209.254300][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1408'. [ 209.297639][T10892] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1408'. [ 209.368841][T10902] tipc: Enabling of bearer rejected, failed to enable media [ 209.471258][T10905] netlink: 'syz.4.1413': attribute type 11 has an invalid length. [ 209.912780][T10940] sctp: [Deprecated]: syz.4.1426 (pid 10940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.912780][T10940] Use struct sctp_sack_info instead [ 210.243753][T10968] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 211.069604][T11019] validate_nla: 8 callbacks suppressed [ 211.069623][T11019] netlink: 'syz.6.1451': attribute type 1 has an invalid length. [ 211.085218][T11019] netlink: 'syz.6.1451': attribute type 11 has an invalid length. [ 211.094488][T11019] netlink: 'syz.6.1451': attribute type 11 has an invalid length. [ 211.231268][T11027] netlink: 'syz.4.1454': attribute type 7 has an invalid length. [ 211.731993][ T5866] Bluetooth: hci4: command 0x0405 tx timeout [ 212.807039][T11091] netlink: 'syz.2.1471': attribute type 4 has an invalid length. [ 213.468371][T11141] __nla_validate_parse: 21 callbacks suppressed [ 213.468392][T11141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1488'. [ 213.521426][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1489'. [ 214.017534][T11179] net_ratelimit: 27 callbacks suppressed [ 214.017550][T11179] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 214.034420][T11171] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1500'. [ 214.082167][T11171] vlan4: entered allmulticast mode [ 214.148891][T11182] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1504'. [ 214.491261][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1511'. [ 214.511174][T11208] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1511'. [ 215.245342][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1520'. [ 215.479042][T11257] netlink: 'syz.2.1525': attribute type 1 has an invalid length. [ 215.521340][T11257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1525'. [ 215.553171][T11257] veth5: entered promiscuous mode [ 215.565687][T11257] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 215.678680][T11261] sctp: [Deprecated]: syz.6.1526 (pid 11261) Use of int in maxseg socket option. [ 215.678680][T11261] Use struct sctp_assoc_value instead [ 215.701399][T11267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1527'. [ 215.739872][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1526'. [ 215.844803][T11271] netlink: 'syz.4.1529': attribute type 29 has an invalid length. [ 215.862014][T11280] netlink: 'syz.4.1529': attribute type 29 has an invalid length. [ 216.131606][T11298] netlink: 'syz.4.1537': attribute type 2 has an invalid length. [ 216.170452][T11298] netlink: 'syz.4.1537': attribute type 1 has an invalid length. [ 216.294871][T11300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.303954][T11306] syzkaller1: entered promiscuous mode [ 216.303978][T11306] syzkaller1: entered allmulticast mode [ 216.349243][T11310] tipc: Enabling of bearer rejected, already enabled [ 216.362167][T11311] IPVS: Error connecting to the multicast addr [ 216.654118][T11325] netlink: 'syz.0.1549': attribute type 83 has an invalid length. [ 217.113347][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.149589][T11351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.164822][T11351] bond0: (slave rose0): Enslaving as an active interface with an up link [ 217.194490][T11358] netlink: 'syz.2.1559': attribute type 1 has an invalid length. [ 217.202779][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.261040][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.291160][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.338357][T11366] netlink: 'syz.5.1562': attribute type 39 has an invalid length. [ 217.424803][T11367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.587287][T11374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 217.632056][T11377] bond3: (slave bridge9): Enslaving as an active interface with an up link [ 217.832930][T11391] netlink: 'syz.5.1570': attribute type 1 has an invalid length. [ 218.210135][T11416] syzkaller0: entered promiscuous mode [ 218.217321][T11416] syzkaller0: entered allmulticast mode [ 218.225830][T11415] tipc: Enabled bearer , priority 0 [ 218.239270][T11415] tipc: Enabling of bearer rejected, already enabled [ 218.263128][T11415] tipc: Enabling of bearer rejected, already enabled [ 218.316978][T11415] tipc: Resetting bearer [ 218.349994][T11415] tipc: Disabling bearer [ 218.397699][T11423] sctp: [Deprecated]: syz.4.1579 (pid 11423) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.397699][T11423] Use struct sctp_sack_info instead [ 218.464668][T11427] ieee802154 phy1 wpan1: encryption failed: -22 [ 218.472532][T11427] netlink: 'syz.2.1581': attribute type 1 has an invalid length. [ 218.490690][T11429] __nla_validate_parse: 13 callbacks suppressed [ 218.490708][T11429] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1582'. [ 218.513071][T11427] netlink: 'syz.2.1581': attribute type 4 has an invalid length. [ 218.521215][T11427] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1581'. [ 218.613064][T11434] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1585'. [ 218.640495][T11436] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1585'. [ 218.677501][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1586'. [ 219.037818][T11465] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1595'. [ 219.057317][T11466] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1595'. [ 219.178229][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1599'. [ 219.304860][T11486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1602'. [ 219.419407][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'. [ 219.420219][T11489] netlink: 'syz.5.1604': attribute type 18 has an invalid length. [ 219.437591][T11489] netlink: 'syz.5.1604': attribute type 18 has an invalid length. [ 219.716633][T11503] bond0: entered promiscuous mode [ 219.745460][T11503] bond_slave_0: entered promiscuous mode [ 219.773311][T11503] bond_slave_1: entered promiscuous mode [ 219.816125][T11503] bond0: left promiscuous mode [ 219.835072][T11503] bond_slave_0: left promiscuous mode [ 219.876185][T11503] bond_slave_1: left promiscuous mode [ 220.688020][T11533] team0: No ports can be present during mode change [ 221.432014][T11557] tipc: Enabling of bearer rejected, failed to enable media [ 221.570153][T11568] validate_nla: 1 callbacks suppressed [ 221.570172][T11568] netlink: 'syz.6.1631': attribute type 21 has an invalid length. [ 221.591630][T11568] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 221.914168][T11598] netlink: 'syz.0.1641': attribute type 10 has an invalid length. [ 221.945418][T11598] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 222.173123][T11609] veth5: entered allmulticast mode [ 222.222450][T11619] netlink: 'syz.0.1647': attribute type 21 has an invalid length. [ 222.234253][T11619] netlink: 'syz.0.1647': attribute type 6 has an invalid length. [ 222.253262][T11619] netlink: 'syz.0.1647': attribute type 21 has an invalid length. [ 222.281997][T11619] netlink: 'syz.0.1647': attribute type 6 has an invalid length. [ 222.529332][T11635] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 222.618832][T11641] netlink: 'syz.4.1654': attribute type 21 has an invalid length. [ 222.803126][T11652] lo: entered promiscuous mode [ 222.815462][T11652] tunl0: entered promiscuous mode [ 222.833900][T11652] gre0: entered promiscuous mode [ 222.850837][T11652] gretap0: entered promiscuous mode [ 222.876466][T11652] erspan0: entered promiscuous mode [ 222.894024][T11652] ip_vti0: entered promiscuous mode [ 223.218974][T11677] syz.2.1662 (11677) used obsolete PPPIOCDETACH ioctl [ 223.502182][T11691] netlink: 'syz.4.1669': attribute type 11 has an invalid length. [ 223.541212][T11704] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 223.546795][ T43] IPVS: starting estimator thread 0... [ 223.558974][T11704] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 223.570930][T11704] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 223.592699][T11708] __nla_validate_parse: 29 callbacks suppressed [ 223.592716][T11708] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1669'. [ 223.616279][T11704] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 223.627110][T11704] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 223.634307][T11704] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 223.650746][T11704] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 223.651884][T11707] IPVS: using max 32 ests per chain, 76800 per kthread [ 223.658506][T11704] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 223.697847][T11705] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1673'. [ 223.702940][T11704] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 223.719639][T11711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1674'. [ 223.720845][T11704] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 223.745474][T11714] syzkaller1: entered promiscuous mode [ 223.746112][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1673'. [ 223.757747][T11714] syzkaller1: entered allmulticast mode [ 223.903223][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1676'. [ 224.503908][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 224.529342][T11764] netlink: 'syz.4.1691': attribute type 2 has an invalid length. [ 224.597534][T11773] netlink: 'syz.5.1693': attribute type 10 has an invalid length. [ 224.651337][T11773] veth0_macvtap: left promiscuous mode [ 224.951499][T11795] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1699'. [ 224.969380][T11800] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1699'. [ 224.994999][T11799] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 225.045713][T11802] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1701'. [ 225.541933][T11838] veth7: entered allmulticast mode [ 225.550329][T11838] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 225.608871][T11838] veth9: entered allmulticast mode [ 225.983482][T11867] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20000 [ 226.055360][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1722'. [ 226.690242][T11922] validate_nla: 68 callbacks suppressed [ 226.690260][T11922] netlink: 'syz.0.1743': attribute type 1 has an invalid length. [ 226.719919][T11924] ieee802154 phy1 wpan1: encryption failed: -22 [ 226.737927][T11924] bridge_slave_1: left allmulticast mode [ 226.743720][T11924] bridge_slave_1: left promiscuous mode [ 226.753847][T11924] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.767359][T11924] bridge_slave_0: left allmulticast mode [ 226.773322][T11924] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.893626][T11931] tipc: Enabled bearer , priority 0 [ 226.905863][T11931] syzkaller0: entered promiscuous mode [ 226.913580][T11931] syzkaller0: entered allmulticast mode [ 226.950274][T11929] tipc: Resetting bearer [ 226.990307][T11929] tipc: Disabling bearer [ 227.086319][ T5866] Bluetooth: hci1: command 0x0406 tx timeout [ 227.593664][T11971] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 228.295844][T12025] netlink: 'syz.6.1778': attribute type 1 has an invalid length. [ 228.313704][T12026] netlink: 'syz.5.1777': attribute type 1 has an invalid length. [ 228.335157][T12026] netlink: 'syz.5.1777': attribute type 3 has an invalid length. [ 228.354556][T12026] netlink: 'syz.5.1777': attribute type 235 has an invalid length. [ 228.373304][T12002] syz.4.1771 (12002) used greatest stack depth: 15384 bytes left [ 228.685960][T12043] __nla_validate_parse: 11 callbacks suppressed [ 228.685976][T12043] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1780'. [ 228.757680][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1780'. [ 228.783440][T12051] syz.4.1785 uses old SIOCAX25GETINFO [ 228.797012][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1780'. [ 228.817883][T12051] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1785'. [ 229.180687][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1788'. [ 229.267348][T12074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.285855][T12072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.286983][T12071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.302530][T12080] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1792'. [ 229.310527][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1790'. [ 229.586445][T12095] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1796'. [ 229.658048][ T5863] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 229.971521][T12121] tipc: Enabled bearer , priority 0 [ 229.983355][T12121] syzkaller0: entered promiscuous mode [ 229.989012][T12121] syzkaller0: entered allmulticast mode [ 230.014198][T12121] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 230.049748][T12121] tipc: Resetting bearer [ 230.078175][T12120] tipc: Resetting bearer [ 230.180006][T12120] tipc: Disabling bearer [ 230.259003][T12146] net_ratelimit: 59 callbacks suppressed [ 230.259020][T12146] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 230.316443][T12145] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 230.397484][T12143] syzkaller1: entered promiscuous mode [ 230.406149][T12143] syzkaller1: entered allmulticast mode [ 230.455638][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'. [ 230.497695][T12155] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1811'. [ 230.579177][T12162] lo speed is unknown, defaulting to 1000 [ 230.615789][T12162] lo speed is unknown, defaulting to 1000 [ 230.642648][T12168] lo: left promiscuous mode [ 230.665005][T12167] netlink: 'syz.2.1814': attribute type 1 has an invalid length. [ 230.683597][T12168] tunl0: left promiscuous mode [ 230.700065][T12168] gre0: left promiscuous mode [ 230.735201][T12176] netlink: 'syz.6.1816': attribute type 2 has an invalid length. [ 230.742726][T12168] gretap0: left promiscuous mode [ 230.752411][T12168] erspan0: left promiscuous mode [ 230.761462][T12168] ip_vti0: left promiscuous mode [ 230.783156][T12168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.813531][T12162] lo speed is unknown, defaulting to 1000 [ 230.841540][T12167] 8021q: adding VLAN 0 to HW filter on device bond5 [ 230.878097][T12175] bond5: (slave gretap2): making interface the new active one [ 230.888966][T12175] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 230.898591][T12180] syzkaller0 speed is unknown, defaulting to 1000 [ 230.917607][T12180] syzkaller0 speed is unknown, defaulting to 1000 [ 230.940388][T12180] syzkaller0 speed is unknown, defaulting to 1000 [ 230.995282][T12180] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 231.094468][T12180] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 231.161966][T12180] syzkaller0 speed is unknown, defaulting to 1000 [ 231.185849][T12180] syzkaller0 speed is unknown, defaulting to 1000 [ 231.202793][T12180] syzkaller0 speed is unknown, defaulting to 1000 [ 231.213212][T12180] syzkaller0 speed is unknown, defaulting to 1000 [ 231.221935][T12180] syzkaller0 speed is unknown, defaulting to 1000 [ 231.233039][T12180] syzkaller0 speed is unknown, defaulting to 1000 [ 231.243016][T12162] infiniband syz0: set active [ 231.251203][ T6105] lo speed is unknown, defaulting to 1000 [ 231.261144][ T6105] syz0: Port: 1 Link ACTIVE [ 231.266782][T12162] infiniband syz0: added lo [ 231.315799][T12162] RDS/IB: syz0: added [ 231.321300][T12162] smc: adding ib device syz0 with port count 1 [ 231.328018][T12162] smc: ib device syz0 port 1 has pnetid [ 231.340253][ T5932] lo speed is unknown, defaulting to 1000 [ 231.372225][T12190] sock: sock_timestamping_bind_phc: sock not bind to device [ 231.388778][T12192] netlink: 'syz.2.1821': attribute type 3 has an invalid length. [ 231.420492][T12162] lo speed is unknown, defaulting to 1000 [ 231.574980][T12197] !: renamed from bond_slave_0 (while UP) [ 231.831979][T12217] netlink: 'syz.2.1828': attribute type 30 has an invalid length. [ 231.999915][T12162] lo speed is unknown, defaulting to 1000 [ 232.047756][ T11] block nbd0: Possible stuck request ffff888025310000: control (read@0,4096B). Runtime 90 seconds [ 232.073622][T12227] netlink: 'syz.6.1831': attribute type 24 has an invalid length. [ 232.083345][T12227] netlink: 'syz.6.1831': attribute type 1 has an invalid length. [ 232.168997][T12231] tipc: Enabled bearer , priority 0 [ 232.184570][T12231] syzkaller0: entered promiscuous mode [ 232.223582][T12231] syzkaller0: entered allmulticast mode [ 232.302513][T12231] tipc: Resetting bearer [ 232.400218][T12231] tipc: Resetting bearer [ 232.485687][T12231] tipc: Disabling bearer [ 232.518192][T12162] lo speed is unknown, defaulting to 1000 [ 232.518495][T12257] openvswitch: netlink: Duplicate or invalid key (type 0). [ 232.584171][T12257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.596936][T12266] openvswitch: netlink: Duplicate or invalid key (type 0). [ 232.604196][T12266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.741994][T12260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.184098][T12162] lo speed is unknown, defaulting to 1000 [ 233.427974][T12315] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 233.751120][T12162] lo speed is unknown, defaulting to 1000 [ 233.841495][T12335] __nla_validate_parse: 12 callbacks suppressed [ 233.841514][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1860'. [ 233.872377][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 233.916373][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 234.055272][T12351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1863'. [ 234.085071][T12351] openvswitch: netlink: nsh attr 64 is out of range max 3 [ 234.159126][T12351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.201757][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1867'. [ 234.323489][T12162] lo speed is unknown, defaulting to 1000 [ 234.388799][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1868'. [ 234.611921][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1874'. [ 234.918413][T12396] sch_fq: defrate 0 ignored. [ 235.176097][T12412] netlink: 'syz.4.1884': attribute type 5 has an invalid length. [ 235.260146][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1885'. [ 235.797211][T12463] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1899'. [ 235.937764][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1902'. [ 236.106763][ T5932] syz_tun: tun_net_xmit 110 [ 236.216193][ T5932] syz_tun: tun_net_xmit 110 [ 237.052003][T12524] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.078425][T12524] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.090401][T12533] net_ratelimit: 1 callbacks suppressed [ 237.090419][T12533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.150264][T12530] bond0: entered promiscuous mode [ 237.155454][T12530] !: entered promiscuous mode [ 237.161832][T12530] bond_slave_1: entered promiscuous mode [ 237.173713][T12530] batadv0: entered promiscuous mode [ 237.189104][T12530] debugfs: 'hsr1' already exists in 'hsr' [ 237.194972][T12530] Cannot create hsr debugfs directory [ 237.201533][T12530] hsr1: entered allmulticast mode [ 237.209937][T12530] bond0: entered allmulticast mode [ 237.215202][T12530] !: entered allmulticast mode [ 237.222229][T12530] bond_slave_1: entered allmulticast mode [ 237.238983][T12530] batadv0: entered allmulticast mode [ 237.245099][T12530] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 237.300414][T12530] bond0: left promiscuous mode [ 237.305524][T12530] !: left promiscuous mode [ 237.310587][T12530] bond_slave_1: left promiscuous mode [ 237.387210][T12530] batadv0: left promiscuous mode [ 237.445468][T12524] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.447797][T12545] netlink: 'syz.0.1926': attribute type 1 has an invalid length. [ 237.460016][T12524] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.463966][T12545] netlink: 'syz.0.1926': attribute type 1 has an invalid length. [ 237.565846][T12548] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 237.622423][T12524] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.635151][T12524] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.696926][T12549] bond4: entered allmulticast mode [ 237.702575][T12549] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.713320][T12549] bridge0: port 3(bond4) entered blocking state [ 237.719895][T12549] bridge0: port 3(bond4) entered disabled state [ 237.731642][T12549] bond4: entered promiscuous mode [ 237.737928][T12549] bridge0: port 3(bond4) entered blocking state [ 237.744473][T12549] bridge0: port 3(bond4) entered forwarding state [ 237.800040][T12524] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.815448][T12524] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.871012][T12560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.880835][T12560] netlink: 'syz.5.1930': attribute type 1 has an invalid length. [ 238.000684][T10234] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.016865][T12568] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 238.025970][T10234] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.054989][T10235] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.056348][T12568] netlink: 'syz.0.1934': attribute type 21 has an invalid length. [ 238.078231][T10235] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.099235][T12567] netlink: 'syz.5.1933': attribute type 8 has an invalid length. [ 238.126899][T10235] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.135716][T10235] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.182781][T10241] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.216707][T10241] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.254880][T12582] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 238.543837][T10241] bridge0: port 3(bond4) entered disabled state [ 238.561892][T12598] netem: incorrect gi model size [ 238.583259][T12598] netem: change failed [ 238.607471][T12609] netem: incorrect gi model size [ 238.613867][T12609] netem: change failed [ 238.835704][T12623] netlink: 'syz.4.1953': attribute type 21 has an invalid length. [ 238.863317][T12623] netlink: 'syz.4.1953': attribute type 22 has an invalid length. [ 238.884049][T12623] netlink: 'syz.4.1953': attribute type 23 has an invalid length. [ 238.901189][T12623] netlink: 'syz.4.1953': attribute type 25 has an invalid length. [ 238.917188][T12623] __nla_validate_parse: 6 callbacks suppressed [ 238.917208][T12623] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1953'. [ 239.010231][T12639] netlink: 'syz.6.1958': attribute type 8 has an invalid length. [ 239.055213][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1958'. [ 239.166115][ T5866] Bluetooth: hci3: command 0x0405 tx timeout [ 239.212684][T12656] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 239.233416][T12656] bridge0: port 1(erspan0) entered disabled state [ 239.463002][T12671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1967'. [ 239.661302][T12678] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1971'. [ 239.669316][T12676] tipc: Enabled bearer , priority 0 [ 239.700220][T12678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.707932][T12678] IPv6: NLM_F_CREATE should be set when creating new route [ 239.727126][T12684] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1973'. [ 239.737853][T12676] tipc: Disabling bearer [ 239.988891][T12695] bond2: (slave bridge0): making interface the new active one [ 240.011575][T12695] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 240.030826][T12697] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1977'. [ 240.041378][T12697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1977'. [ 240.052266][T12697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1977'. [ 240.062035][T12697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1977'. [ 240.231061][T12714] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1982'. [ 240.418630][T12725] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 241.652287][T12796] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.661556][T12796] team0: Failed to send port change of device bond7 via netlink (err -105) [ 241.671404][T12796] team0: Failed to send options change via netlink (err -105) [ 241.679537][T12796] team0: Port device bond7 added [ 241.694052][T10241] team0: Failed to send port change of device bond7 via netlink (err -105) [ 241.854023][T12810] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 242.304148][T12847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.346832][ T6105] lo speed is unknown, defaulting to 1000 [ 242.472754][T12854] validate_nla: 5 callbacks suppressed [ 242.472773][T12854] netlink: 'syz.4.2026': attribute type 23 has an invalid length. [ 243.361176][T12909] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 243.497109][T12922] netlink: 'syz.0.2046': attribute type 13 has an invalid length. [ 243.546613][T12922] netlink: 'syz.0.2046': attribute type 17 has an invalid length. [ 243.824405][T12922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.860463][T12912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.280188][T12952] netlink: 'syz.2.2056': attribute type 5 has an invalid length. [ 244.603643][T12973] __nla_validate_parse: 16 callbacks suppressed [ 244.603732][T12973] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2064'. [ 244.684964][T12979] pimreg: entered allmulticast mode [ 244.779318][T12986] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2067'. [ 244.846463][ C0] syz_tun: tun_net_xmit 70 [ 244.853516][T12992] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2067'. [ 244.905818][T12986] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2067'. [ 244.928480][T12990] team0: Device gtp0 is of different type [ 245.119557][T13001] lo speed is unknown, defaulting to 1000 [ 245.183794][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2075'. [ 245.488885][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 245.630290][T13001] syzkaller0 speed is unknown, defaulting to 1000 [ 245.642886][T12998] lo speed is unknown, defaulting to 1000 [ 245.659216][T13032] openvswitch: netlink: IPv6 tunnel dst address is zero [ 246.016494][T13051] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 246.020382][T13053] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2089'. [ 246.025348][T13051] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 246.195747][T13063] netlink: 'syz.6.2091': attribute type 4 has an invalid length. [ 246.219878][T13063] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2091'. [ 246.261749][T13063] `: renamed from bond0 (while UP) [ 246.289915][T12998] syzkaller0 speed is unknown, defaulting to 1000 [ 246.787854][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2092'. [ 246.841971][T13067] netlink: 'syz.0.2092': attribute type 4 has an invalid length. [ 246.921535][T13073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.350271][T13098] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2102'. [ 247.377933][T13098] netlink: 'syz.6.2102': attribute type 18 has an invalid length. [ 247.475142][T13099] syzkaller0: entered promiscuous mode [ 247.481286][T13099] syzkaller0: entered allmulticast mode [ 247.500928][T13095] macvlan0: mtu less than device minimum [ 249.234470][T13138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2108'. [ 249.713968][T13177] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.631435][T13237] netlink: 'syz.4.2138': attribute type 83 has an invalid length. [ 250.822358][T13250] __nla_validate_parse: 3 callbacks suppressed [ 250.822375][T13250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2142'. [ 251.308645][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2154'. [ 251.353933][T13282] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2154'. [ 251.417582][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 251.432094][T13285] gretap1: left promiscuous mode [ 251.468136][T13285] bridge2: left promiscuous mode [ 251.475092][T13296] netlink: 'syz.5.2159': attribute type 2 has an invalid length. [ 251.533572][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2160'. [ 251.538675][T13296] netlink: 'syz.5.2159': attribute type 1 has an invalid length. [ 252.281847][T13354] tap0: tun_chr_ioctl cmd 1074025676 [ 252.289128][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.294336][T13354] tap0: owner set to 0 [ 252.525724][T13366] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2183'. [ 252.543090][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2183'. [ 252.584134][T13366] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2183'. [ 252.595016][T13366] netlink: 'syz.4.2183': attribute type 2 has an invalid length. [ 252.618347][T13366] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2183'. [ 252.820958][T10241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.832923][T10241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.861911][T13382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.099130][T13397] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 253.111880][T13395] IPVS: stopping master sync thread 13397 ... [ 253.184654][T13401] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2192'. [ 253.221484][T13401] gretap0: entered promiscuous mode [ 253.242985][T13402] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2192'. [ 253.267227][T13402] 0{X: renamed from gretap0 [ 253.281140][T13402] 0{X: left promiscuous mode [ 253.300624][T13402] 0{X: entered allmulticast mode [ 253.310544][T13402] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 254.027744][T13457] netlink: 'syz.6.2207': attribute type 4 has an invalid length. [ 254.052890][T13461] netlink: 'syz.0.2211': attribute type 4 has an invalid length. [ 254.083745][T13457] netlink: 'syz.6.2207': attribute type 4 has an invalid length. [ 254.092446][T13459] rdma_rxe: rxe_newlink: failed to add lo [ 254.502050][T13492] syz_tun: entered allmulticast mode [ 254.596977][T13492] syz_tun: left allmulticast mode [ 255.067201][T13528] netlink: 'syz.2.2234': attribute type 1 has an invalid length. [ 255.081618][T13531] netlink: 'syz.0.2233': attribute type 1 has an invalid length. [ 255.097708][T13536] netlink: 'syz.6.2236': attribute type 7 has an invalid length. [ 255.631378][T13559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.644788][T13559] bond3: entered allmulticast mode [ 255.731511][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.746437][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.892491][T13559] bond3 (unregistering): Released all slaves [ 256.107818][T13597] __nla_validate_parse: 9 callbacks suppressed [ 256.107837][T13597] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2256'. [ 256.221259][T13597] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2256'. [ 256.238646][T13606] netlink: 'syz.6.2259': attribute type 1 has an invalid length. [ 256.278610][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2259'. [ 256.328841][T13606] veth0: entered promiscuous mode [ 256.340494][T13605] veth0: left promiscuous mode [ 256.454938][T13619] IPv6: sit1: Disabled Multicast RS [ 256.482930][T13619] sit1: entered allmulticast mode [ 256.524324][T13618] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2263'. [ 256.540079][T13621] netlink: 'syz.5.2265': attribute type 10 has an invalid length. [ 256.564457][T13628] netlink: 'syz.5.2265': attribute type 10 has an invalid length. [ 256.601149][T13627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2263'. [ 256.933766][T13666] syzkaller0: entered promiscuous mode [ 256.941241][T13666] syzkaller0: entered allmulticast mode [ 257.063880][T13674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'. [ 257.095023][T13674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'. [ 257.611192][T13685] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2282'. [ 257.723529][T13691] sctp: [Deprecated]: syz.0.2283 (pid 13691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.723529][T13691] Use struct sctp_sack_info instead [ 257.785371][T13694] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2285'. [ 257.814788][T13694] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 257.895512][T13705] netlink: 'syz.6.2287': attribute type 12 has an invalid length. [ 257.909021][T13705] netlink: 'syz.6.2287': attribute type 29 has an invalid length. [ 257.918144][T13705] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2287'. [ 258.337267][T13731] dvmrp1: entered allmulticast mode [ 258.349475][T13731] dvmrp1: left allmulticast mode [ 258.894039][T13764] bond0: entered promiscuous mode [ 258.916782][T13764] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 258.932881][T13764] bridge_slave_1: entered promiscuous mode [ 258.942605][T13764] bond0: left promiscuous mode [ 258.964080][T13764] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 258.974404][T13764] bridge_slave_1: left promiscuous mode [ 259.427626][T13788] tipc: Enabling of bearer rejected, failed to enable media [ 259.458488][T13786] syzkaller1: entered allmulticast mode [ 260.324496][T13836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.348076][T13832] nbd5: detected capacity change from 0 to 63 [ 260.349369][T13836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.363536][ T5863] block nbd5: Receive control failed (result -32) [ 260.417419][T13836] sctp: [Deprecated]: syz.6.2333 (pid 13836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.417419][T13836] Use struct sctp_sack_info instead [ 260.602380][T13853] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.835135][T13861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.902589][T13870] netdevsim netdevsim2 : renamed from netdevsim0 [ 261.120788][T13887] __nla_validate_parse: 7 callbacks suppressed [ 261.120807][T13887] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2351'. [ 261.395834][T13900] netlink: 'syz.0.2357': attribute type 24 has an invalid length. [ 261.465099][T13910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2359'. [ 261.479679][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2359'. [ 261.534076][T13913] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 261.783776][T13931] netlink: 'syz.6.2366': attribute type 7 has an invalid length. [ 261.803994][T13931] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2366'. [ 261.982625][T13943] netlink: 'syz.6.2370': attribute type 13 has an invalid length. [ 262.016534][T13943] veth0_macvtap: left promiscuous mode [ 262.041251][T13943] macvtap0: entered allmulticast mode [ 262.125545][T13943] macvtap0: refused to change device tx_queue_len [ 262.137338][ T11] block nbd0: Possible stuck request ffff888025310000: control (read@0,4096B). Runtime 120 seconds [ 262.529116][ T5863] Bluetooth: hci3: command 0x0405 tx timeout [ 262.576931][T13983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2378'. [ 262.579610][T13984] netlink: 'syz.0.2380': attribute type 5 has an invalid length. [ 262.594214][T13984] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2380'. [ 262.603716][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2378'. [ 262.620091][T13984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2380'. [ 262.828581][T13995] syzkaller0: entered promiscuous mode [ 262.834191][T13995] syzkaller0: entered allmulticast mode [ 263.384618][T14001] lo speed is unknown, defaulting to 1000 [ 263.479635][T14014] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2389'. [ 263.577217][T14019] netlink: 'syz.0.2390': attribute type 64 has an invalid length. [ 263.596608][T14019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2390'. [ 263.630446][T14023] netlink: 'syz.0.2390': attribute type 64 has an invalid length. [ 263.721600][T14026] tipc: Enabling of bearer rejected, already enabled [ 263.764079][T14026] tipc: Resetting bearer [ 263.771154][T10471] syzkaller0 speed is unknown, defaulting to 1000 [ 263.782450][ T43] syzkaller0 speed is unknown, defaulting to 1000 [ 263.791387][T10471] syz2: Port: 1 Link ACTIVE [ 263.987746][T14043] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 264.096556][T14026] lo speed is unknown, defaulting to 1000 [ 264.132032][T14001] syzkaller0 speed is unknown, defaulting to 1000 [ 264.389991][T14054] netlink: 'syz.5.2400': attribute type 1 has an invalid length. [ 264.625304][T14054] veth13: entered promiscuous mode [ 264.637992][T14054] bond3: (slave veth13): Enslaving as a backup interface with a down link [ 264.649417][T14026] syzkaller0 speed is unknown, defaulting to 1000 [ 264.679360][T14071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 264.935633][T14084] netlink: 'syz.2.2409': attribute type 3 has an invalid length. [ 265.187799][T14093] hsr_slave_1: left promiscuous mode [ 265.463277][T14074] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 265.485835][T10225] nci: nci_rsp_packet: unknown rsp opcode 0x26 [ 265.488091][T14106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.505824][T10225] nci: nci_rsp_packet: unknown rsp opcode 0x26 [ 265.513381][T10225] nci: nci_rsp_packet: unknown rsp opcode 0x26 [ 265.551275][T14119] 8021q: VLANs not supported on ip6tnl0 [ 265.567449][T10225] nci: nci_rsp_packet: unknown rsp opcode 0x26 [ 265.573702][T10225] nci: nci_rsp_packet: unknown rsp opcode 0x26 [ 265.825038][T14128] veth7: entered promiscuous mode [ 266.155387][T14141] __nla_validate_parse: 8 callbacks suppressed [ 266.155404][T14141] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2421'. [ 266.329810][T14152] netlink: 'syz.6.2425': attribute type 26 has an invalid length. [ 266.365186][T14154] pim6reg: entered allmulticast mode [ 266.399014][T14154] pim6reg: left allmulticast mode [ 266.761875][T14181] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2433'. [ 267.427459][T14219] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2447'. [ 267.947543][T14257] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2459'. [ 267.964686][T14257] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2459'. [ 268.215492][T14264] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2461'. [ 268.239418][T14264] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2461'. [ 268.521009][T14273] nbd: socks must be embedded in a SOCK_ITEM attr [ 268.561980][T14280] netlink: 'syz.0.2465': attribute type 1 has an invalid length. [ 268.614063][T14273] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2465'. [ 268.702343][T14282] tipc: Enabled bearer , priority 0 [ 268.719452][T14282] tipc: Resetting bearer [ 268.731403][T14285] smc: net device erspan0 applied user defined pnetid SYZ0 [ 268.744242][T14281] tipc: Disabling bearer [ 268.745076][T14287] netlink: 'syz.0.2469': attribute type 11 has an invalid length. [ 268.951449][T14300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2473'. [ 268.962049][T14300] netlink: 'syz.2.2473': attribute type 20 has an invalid length. [ 268.973164][T14300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2473'. [ 268.987656][T14300] netlink: 'syz.2.2473': attribute type 20 has an invalid length. [ 269.259266][T14322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.617947][T14341] macvtap1: entered promiscuous mode [ 269.623333][T14341] vlan0: entered promiscuous mode [ 269.629406][T14341] macvtap1: entered allmulticast mode [ 269.635036][T14341] vlan0: entered allmulticast mode [ 269.641028][T14341] veth0_vlan: entered allmulticast mode [ 270.673790][T14414] netlink: 'syz.2.2509': attribute type 4 has an invalid length. [ 270.697130][T14406] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.730049][T14404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.755332][T14420] bridge_slave_1: left allmulticast mode [ 270.786669][T14420] bridge_slave_1: left promiscuous mode [ 270.792540][T14420] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.831609][T14420] bridge_slave_0: left allmulticast mode [ 270.838073][T14420] bridge_slave_0: left promiscuous mode [ 270.851830][T14420] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.000791][T14432] netem: change failed [ 271.021465][T14434] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 271.165742][T14443] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 271.187329][T14446] __nla_validate_parse: 13 callbacks suppressed [ 271.187348][T14446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2522'. [ 271.553812][T14474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2531'. [ 271.565642][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2531'. [ 271.769021][T14491] wg1: entered promiscuous mode [ 271.774204][T14491] wg1: entered allmulticast mode [ 271.792740][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2537'. [ 271.804291][T14493] netlink: 'syz.2.2537': attribute type 3 has an invalid length. [ 271.958506][T14500] netlink: 'syz.2.2540': attribute type 2 has an invalid length. [ 271.969310][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2540'. [ 271.982846][T14500] netlink: 'syz.2.2540': attribute type 1 has an invalid length. [ 272.143967][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2544'. [ 272.330750][T14523] netlink: 'syz.0.2549': attribute type 8 has an invalid length. [ 272.452653][T14477] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 272.477236][T14529] FAULT_INJECTION: forcing a failure. [ 272.477236][T14529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.526033][T14529] CPU: 1 UID: 0 PID: 14529 Comm: syz.0.2551 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 272.526062][T14529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.526073][T14529] Call Trace: [ 272.526081][T14529] [ 272.526090][T14529] dump_stack_lvl+0x189/0x250 [ 272.526118][T14529] ? __pfx____ratelimit+0x10/0x10 [ 272.526141][T14529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.526163][T14529] ? __pfx__printk+0x10/0x10 [ 272.526188][T14529] ? __might_fault+0xb0/0x130 [ 272.526223][T14529] should_fail_ex+0x414/0x560 [ 272.526249][T14529] _copy_from_user+0x2d/0xb0 [ 272.526267][T14529] kstrtouint_from_user+0xc4/0x170 [ 272.526292][T14529] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 272.526334][T14529] proc_fail_nth_write+0x88/0x200 [ 272.526355][T14529] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 272.526383][T14529] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 272.526406][T14529] vfs_write+0x27e/0xa90 [ 272.526439][T14529] ? __pfx_vfs_write+0x10/0x10 [ 272.526465][T14529] ? __fget_files+0x2a/0x420 [ 272.526494][T14529] ? __fget_files+0x3a0/0x420 [ 272.526517][T14529] ? __fget_files+0x2a/0x420 [ 272.526549][T14529] ksys_write+0x145/0x250 [ 272.526583][T14529] ? __pfx_ksys_write+0x10/0x10 [ 272.526602][T14529] ? rcu_is_watching+0x15/0xb0 [ 272.526628][T14529] ? do_syscall_64+0xbe/0x3b0 [ 272.526655][T14529] do_syscall_64+0xfa/0x3b0 [ 272.526675][T14529] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.526696][T14529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.526715][T14529] ? clear_bhb_loop+0x60/0xb0 [ 272.526741][T14529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.526760][T14529] RIP: 0033:0x7fbf4358d69f [ 272.526777][T14529] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 272.526793][T14529] RSP: 002b:00007fbf44350030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 272.526813][T14529] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbf4358d69f [ 272.526826][T14529] RDX: 0000000000000001 RSI: 00007fbf443500a0 RDI: 0000000000000007 [ 272.526838][T14529] RBP: 00007fbf44350090 R08: 0000000000000000 R09: fffffffffffffef0 [ 272.526850][T14529] R10: 0000000000000880 R11: 0000000000000293 R12: 0000000000000001 [ 272.526861][T14529] R13: 00007fbf437b6038 R14: 00007fbf437b5fa0 R15: 00007ffe88d01718 [ 272.526893][T14529] [ 272.883530][T14545] netlink: 'syz.4.2557': attribute type 2 has an invalid length. [ 272.896016][T14545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2557'. [ 273.265354][T14574] netlink: 'syz.5.2566': attribute type 25 has an invalid length. [ 273.647556][ T5863] Bluetooth: hci4: command 0x0405 tx timeout [ 273.831639][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'. [ 273.841696][T14608] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 273.849753][T14608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.153801][T14627] lo speed is unknown, defaulting to 1000 [ 274.643584][T14627] syzkaller0 speed is unknown, defaulting to 1000 [ 274.873654][T14650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2586'. [ 274.948667][T10228] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 274.959884][T10235] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.972527][T10235] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.982146][T10235] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.084139][T14656] netlink: 'syz.4.2588': attribute type 1 has an invalid length. [ 275.220178][T14672] netlink: 'syz.2.2593': attribute type 10 has an invalid length. [ 275.250632][T14671] policy can only be matched on NF_INET_PRE_ROUTING [ 275.250654][T14671] unable to load match [ 275.270247][T14672] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2593'. [ 275.301030][T14672] batadv0: entered promiscuous mode [ 275.329054][T14672] batadv0: entered allmulticast mode [ 275.338112][T14672] bridge0: port 2(batadv0) entered blocking state [ 275.346114][T14672] bridge0: port 2(batadv0) entered disabled state [ 275.360658][T14672] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 275.742549][T14655] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 275.908992][T14709] syzkaller1: entered promiscuous mode [ 275.928745][T14709] syzkaller1: entered allmulticast mode [ 276.023035][T14718] lo speed is unknown, defaulting to 1000 [ 276.573505][T14718] syzkaller0 speed is unknown, defaulting to 1000 [ 276.585838][T14750] __nla_validate_parse: 2 callbacks suppressed [ 276.592087][T14750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2615'. [ 276.604043][T14752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.767539][T14762] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2619'. [ 277.395636][T14793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2630'. [ 277.436312][T14793] veth0: entered promiscuous mode [ 277.437219][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2631'. [ 277.452904][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2630'. [ 277.488132][T14797] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2632'. [ 277.529439][T14792] veth0: left promiscuous mode [ 277.567246][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'. [ 277.585150][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'. [ 277.675226][T14811] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.683898][T14811] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.743610][T14818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.773873][T14824] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2638'. [ 277.806892][T14824] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2638'. [ 277.948445][T14841] netlink: 'syz.4.2640': attribute type 4 has an invalid length. [ 277.963797][T14841] netlink: 'syz.4.2640': attribute type 4 has an invalid length. [ 278.032805][T14841] netlink: 'syz.4.2640': attribute type 10 has an invalid length. [ 278.069556][T14841] bond0: (slave wlan1): Opening slave failed [ 279.035176][T14918] netem: invalid attributes len -24 [ 279.049329][T14918] netem: change failed [ 279.083266][T14925] netlink: 'syz.0.2672': attribute type 4 has an invalid length. [ 279.383194][T14916] tipc: Resetting bearer [ 279.490049][ T43] syzkaller0 speed is unknown, defaulting to 1000 [ 279.490087][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.498361][ T43] syz2: Port: 1 Link DOWN [ 279.511558][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 279.522958][T14937] netlink: 'syz.2.2676': attribute type 4 has an invalid length. [ 279.524355][T14942] veth1_macvtap: left promiscuous mode [ 279.575543][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.597661][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 279.618365][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.656475][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 279.689648][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.736002][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 280.255422][T14996] tipc: Enabling of bearer rejected, failed to enable media [ 280.590215][T15016] netlink: 'syz.2.2700': attribute type 2 has an invalid length. [ 280.944116][T15031] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 281.263757][T15047] sctp: [Deprecated]: syz.0.2709 (pid 15047) Use of int in maxseg socket option. [ 281.263757][T15047] Use struct sctp_assoc_value instead [ 281.428749][T15056] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 281.592056][T15063] __nla_validate_parse: 21 callbacks suppressed [ 281.592076][T15063] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2707'. [ 281.611651][T15063] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2707'. [ 281.697373][T15067] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2713'. [ 281.714459][T15067] netlink: 'syz.0.2713': attribute type 1 has an invalid length. [ 281.763485][T15067] 8021q: adding VLAN 0 to HW filter on device bond6 [ 281.972418][T15082] netlink: 'syz.6.2716': attribute type 2 has an invalid length. [ 282.019372][T15082] netlink: 'syz.6.2716': attribute type 1 has an invalid length. [ 282.330173][T15102] IPv6: sit1: Disabled Multicast RS [ 282.361632][T15102] sit1: entered allmulticast mode [ 282.727393][T15121] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2728'. [ 282.757513][T15121] netlink: 'syz.5.2728': attribute type 6 has an invalid length. [ 282.773993][T15121] netlink: 'syz.5.2728': attribute type 1 has an invalid length. [ 282.804600][T15121] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.2728'. [ 282.834313][T15125] lo speed is unknown, defaulting to 1000 [ 282.841046][T15121] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2728'. [ 283.060881][T15125] syzkaller0 speed is unknown, defaulting to 1000 [ 283.168535][T15138] netlink: 212264 bytes leftover after parsing attributes in process `syz.5.2731'. [ 283.300086][T15144] xt_limit: Overflow, try lower: 604147548/4200216962 [ 283.423005][T15146] team_slave_0: entered promiscuous mode [ 283.429367][T15146] team_slave_0: entered allmulticast mode [ 283.503347][T15148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2738'. [ 283.642777][T15155] netlink: 'syz.0.2738': attribute type 4 has an invalid length. [ 283.661653][ T24] lo speed is unknown, defaulting to 1000 [ 283.697782][ T24] syz0: Port: 1 Link DOWN [ 283.701037][T15163] netlink: 'syz.0.2738': attribute type 4 has an invalid length. [ 283.702850][ T24] lo speed is unknown, defaulting to 1000 [ 283.742520][T15162] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2741'. [ 283.750435][ T24] lo speed is unknown, defaulting to 1000 [ 283.776051][T15155] netlink: 'syz.0.2738': attribute type 10 has an invalid length. [ 283.786788][ T24] syz0: Port: 1 Link ACTIVE [ 283.795784][T15155] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 283.816356][ T5918] lo speed is unknown, defaulting to 1000 [ 284.172272][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2751'. [ 284.886939][T15227] netlink: 'syz.2.2764': attribute type 24 has an invalid length. [ 285.019101][T15244] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20004 [ 285.356502][T15260] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 285.373489][T15253] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.380741][T15253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.388268][T15253] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.395498][T15253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.500045][T15253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.525563][T15272] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 285.683054][T15281] dvmrp3: entered allmulticast mode [ 285.994252][T15296] validate_nla: 1 callbacks suppressed [ 285.994270][T15296] netlink: 'syz.2.2787': attribute type 11 has an invalid length. [ 286.060226][T15296] : renamed from bridge_slave_0 (while UP) [ 286.137225][T15300] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 286.605182][T15323] netlink: 'syz.2.2795': attribute type 1 has an invalid length. [ 286.613119][T15323] netlink: 'syz.2.2795': attribute type 4 has an invalid length. [ 286.621276][T15323] __nla_validate_parse: 3 callbacks suppressed [ 286.621292][T15323] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2795'. [ 286.853763][T15335] netlink: 'syz.5.2800': attribute type 1 has an invalid length. [ 286.865018][T15335] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2800'. [ 287.142863][T15357] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 287.212516][T15366] bond4: entered promiscuous mode [ 287.217904][T15366] bond4: entered allmulticast mode [ 287.224173][T15366] 8021q: adding VLAN 0 to HW filter on device bond4 [ 287.348967][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2811'. [ 287.477276][T15366] bond4 (unregistering): Released all slaves [ 287.561240][T15385] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 287.608157][T15388] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2815'. [ 287.749198][T15401] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2819'. [ 287.798348][T15407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2818'. [ 287.966102][T15413] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 288.032817][T15413] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 288.062569][T15413] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2821'. [ 288.083370][T15419] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2823'. [ 288.350001][T15441] netlink: 212384 bytes leftover after parsing attributes in process `syz.0.2829'. [ 288.381466][T15441] netlink: zone id is out of range [ 288.397350][T15441] netlink: zone id is out of range [ 288.416219][T15441] netlink: zone id is out of range [ 288.447318][T15447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2829'. [ 288.478839][T15441] netlink: zone id is out of range [ 288.496795][T15441] netlink: get zone limit has 8 unknown bytes [ 289.671776][T15501] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 290.143259][T15519] lo speed is unknown, defaulting to 1000 [ 290.302861][T15519] syzkaller0 speed is unknown, defaulting to 1000 [ 290.719761][T15539] netlink: 'syz.6.2854': attribute type 7 has an invalid length. [ 290.907237][T15541] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.922388][T15541] bond5: entered allmulticast mode [ 290.930892][T15541] bond0: (slave bond5): Enslaving as an active interface with an up link [ 291.098291][T15552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.136973][T15553] netlink: 'syz.2.2858': attribute type 39 has an invalid length. [ 291.333838][T15565] netlink: 'syz.0.2863': attribute type 14 has an invalid length. [ 291.357717][T15565] netlink: 'syz.0.2863': attribute type 13 has an invalid length. [ 292.010786][T15625] __nla_validate_parse: 15 callbacks suppressed [ 292.010806][T15625] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2883'. [ 292.116969][T15627] dvmrp1: entered allmulticast mode [ 292.206518][ T11] block nbd0: Possible stuck request ffff888025310000: control (read@0,4096B). Runtime 150 seconds [ 292.248611][T15627] syzkaller0: entered promiscuous mode [ 292.259341][T15643] netlink: 512 bytes leftover after parsing attributes in process `syz.4.2889'. [ 292.261683][T15627] syzkaller0: entered allmulticast mode [ 292.655257][T15660] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 292.770694][T15669] netlink: 'syz.5.2897': attribute type 10 has an invalid length. [ 292.817563][T15672] netlink: 'syz.0.2898': attribute type 29 has an invalid length. [ 292.850421][T15672] netlink: 'syz.0.2898': attribute type 29 has an invalid length. [ 292.863084][T15673] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2898'. [ 293.045609][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2901'. [ 293.665611][T15689] Bluetooth: MGMT ver 1.23 [ 293.684296][T15689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2903'. [ 294.369248][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 294.579513][T15683] : entered promiscuous mode [ 294.760195][T15696] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2906'. [ 294.789406][T15698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2905'. [ 294.815141][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2907'. [ 294.862348][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2909'. [ 294.885684][T15706] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 294.919584][T15706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.971938][T15702] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2909'. [ 295.398843][T15713] team0 (unregistering): Port device bond7 removed [ 295.554581][T15735] batman_adv: batadv0: Adding interface: wlan1 [ 295.575503][T15735] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.604843][T15735] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 295.726657][ T5866] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 295.733311][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 295.835240][T15755] tipc: Enabling of bearer rejected, already enabled [ 295.850199][T15755] tipc: Resetting bearer [ 295.858839][ T24] syzkaller0 speed is unknown, defaulting to 1000 [ 295.865292][ T24] syz2: Port: 1 Link ACTIVE [ 296.132370][T15782] vlan0: entered allmulticast mode [ 296.138437][T15782] erspan0: entered allmulticast mode [ 296.459215][T15799] netlink: 'syz.0.2939': attribute type 13 has an invalid length. [ 296.470232][T15802] bond0: (slave bond_slave_1): Releasing backup interface [ 296.478083][T15802] bond_slave_1: left allmulticast mode [ 296.493473][T15799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.520783][T15744] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 296.592370][T15804] macvlan0: entered promiscuous mode [ 296.620750][T15804] macvlan0: entered allmulticast mode [ 296.773566][T15818] tipc: New replicast peer: 255.255.255.255 [ 296.790409][T15818] tipc: Enabled bearer , priority 10 [ 297.212117][T15853] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 297.459373][T15871] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !忿$ULDDw}zR3p(@ [ 297.529714][T15876] IPv6: sit1: Disabled Multicast RS [ 297.547412][T15876] sit1: entered allmulticast mode [ 297.808907][T15884] __nla_validate_parse: 8 callbacks suppressed [ 297.808925][T15884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2963'. [ 297.824787][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2963'. [ 297.837348][T15884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2963'. [ 298.134509][T15908] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2971'. [ 298.147179][T15911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.156252][T15908] openvswitch: netlink: Flow key attr not present in new flow. [ 298.158081][T15908] netlink: 'syz.4.2971': attribute type 6 has an invalid length. [ 298.179593][T15910] netlink: 'syz.5.2970': attribute type 8 has an invalid length. [ 298.240301][T15919] netlink: 'syz.5.2970': attribute type 1 has an invalid length. [ 298.271886][T15919] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2970'. [ 298.309164][T15921] ieee802154 phy1 wpan1: encryption failed: -22 [ 298.402995][T15927] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2978'. [ 298.411187][T15925] bridge12: entered promiscuous mode [ 298.426546][T15925] bridge12: entered allmulticast mode [ 298.579153][T15936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2980'. [ 298.615046][T15936] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 298.686315][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2984'. [ 298.758092][T15946] ip_vti0: left allmulticast mode [ 298.799924][T15946] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 298.821923][T15946] vlan2: left promiscuous mode [ 298.837206][T15946] veth1_to_bond: left promiscuous mode [ 298.849298][T15946] vlan2: left allmulticast mode [ 298.858483][T15946] veth1_to_bond: left allmulticast mode [ 298.882804][T15946] bridge1: left promiscuous mode [ 298.896433][T15946] bridge1: left allmulticast mode [ 298.912915][T15946] tipc: Resetting bearer [ 298.968588][T15946] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 298.979165][T15946] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 298.992766][T15946] vlan4: left allmulticast mode [ 299.001388][T15946] bond0: left allmulticast mode [ 299.016817][T15946] bond5: left allmulticast mode [ 299.030460][T15946] bond2: left promiscuous mode [ 299.044760][T15946] bond2: left allmulticast mode [ 299.096532][ T5932] syzkaller0 speed is unknown, defaulting to 1000 [ 299.103162][ T5932] syz2: Port: 1 Link DOWN [ 299.107891][T10240] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.181317][T10240] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.256898][T10240] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.276980][T10225] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.339944][T15967] netlink: 'syz.4.2990': attribute type 1 has an invalid length. [ 299.368900][T15967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2990'. [ 299.512339][T15974] pim6reg1: entered promiscuous mode [ 299.521144][T15974] pim6reg1: entered allmulticast mode [ 299.792701][ T5863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.805765][ T5863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.815535][ T5863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.831408][ T5863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.841774][ T5863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.922381][T15994] lo speed is unknown, defaulting to 1000 [ 300.264514][T15994] syzkaller0 speed is unknown, defaulting to 1000 [ 300.738802][T15994] chnl_net:caif_netlink_parms(): no params data found [ 300.830355][T16044] netlink: 'syz.5.3008': attribute type 83 has an invalid length. [ 301.028696][T16049] lo speed is unknown, defaulting to 1000 [ 301.100350][T16064] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3011'. [ 301.114503][T16064] netlink: 'syz.6.3011': attribute type 1 has an invalid length. [ 301.334029][T16066] veth9: entered promiscuous mode [ 301.347199][T15994] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.354490][T15994] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.362287][T15994] bridge_slave_0: entered allmulticast mode [ 301.369775][T15994] bridge_slave_0: entered promiscuous mode [ 301.378033][T16049] syzkaller0 speed is unknown, defaulting to 1000 [ 301.378946][T15994] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.393044][T15994] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.401983][T15994] bridge_slave_1: entered allmulticast mode [ 301.412736][T15994] bridge_slave_1: entered promiscuous mode [ 301.536602][T15994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.562833][T15994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.720981][T15994] team0: Port device team_slave_0 added [ 301.732115][T15994] team0: Port device team_slave_1 added [ 301.886506][ T5863] Bluetooth: hci5: command tx timeout [ 301.980193][T15994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.987437][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.014997][T15994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.050224][T15994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.059936][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.101500][T15994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.181671][T16091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.283821][T15994] hsr_slave_0: entered promiscuous mode [ 302.308029][T15994] hsr_slave_1: entered promiscuous mode [ 302.392427][T16105] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 302.471445][T16105] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20000 [ 302.523893][T10228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.539183][T10228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.680206][T16116] sctp: [Deprecated]: syz.2.3027 (pid 16116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.680206][T16116] Use struct sctp_sack_info instead [ 302.857426][T15994] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.871464][T16123] __nla_validate_parse: 3 callbacks suppressed [ 302.871483][T16123] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3030'. [ 302.893753][T15994] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.905825][T16123] netlink: zone id is out of range [ 302.912031][T16123] netlink: get zone limit has 8 unknown bytes [ 303.036022][T15994] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.048932][T15994] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.188882][T15994] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.228871][T15994] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.318041][T10228] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.362656][T15994] bond0: (slave netdevsim0): Releasing backup interface [ 303.387532][T15994] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.389883][T16142] netlink: 'syz.4.3035': attribute type 1 has an invalid length. [ 303.408297][T15994] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.450033][T10228] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.477790][T10228] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.497277][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.695678][T15994] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 303.711606][T16150] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3040'. [ 303.741296][T15994] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 303.772068][T16152] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3041'. [ 303.783126][T15994] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 303.843088][T15994] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 303.911483][T16163] ieee802154 phy1 wpan1: encryption failed: -22 [ 303.969071][ T5863] Bluetooth: hci5: command 0x041b tx timeout [ 304.054818][T15994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.111686][T15994] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.127644][T16172] tipc: Enabling not permitted [ 304.133254][T16172] tipc: Enabling of bearer rejected, failed to enable media [ 304.154941][T10229] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.162267][T10229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.222782][T10229] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.230036][T10229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.319920][T16181] tipc: Enabling of bearer rejected, already enabled [ 304.332255][T16183] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3049'. [ 304.345661][T16181] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 304.354743][T16181] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 304.370756][T16181] tipc: Resetting bearer [ 304.381409][ T5925] syzkaller0 speed is unknown, defaulting to 1000 [ 304.388341][ T5925] syz2: Port: 1 Link ACTIVE [ 304.519973][T16189] veth0: entered promiscuous mode [ 304.530171][T16189] veth0: left promiscuous mode [ 304.551023][T16192] sctp: [Deprecated]: syz.4.3053 (pid 16192) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.551023][T16192] Use struct sctp_sack_info instead [ 304.984613][T15994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.129476][T15994] veth0_vlan: entered promiscuous mode [ 305.158201][T15994] veth1_vlan: entered promiscuous mode [ 305.237667][T15994] veth0_macvtap: entered promiscuous mode [ 305.248586][T16228] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3063'. [ 305.261900][T16228] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3063'. [ 305.272958][T15994] veth1_macvtap: entered promiscuous mode [ 305.285062][T16228] netlink: 'syz.5.3063': attribute type 5 has an invalid length. [ 305.302341][T16228] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3063'. [ 305.315320][T15994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.343343][T15994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.374854][T10229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.408056][T10229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.434024][T10229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.449889][T10229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.574532][T10228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.594555][T10228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.629885][T16242] rdma_rxe: rxe_newlink: failed to add lo [ 305.670918][T10228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.681262][T10228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.730660][T16246] netlink: 'syz.2.3068': attribute type 4 has an invalid length. [ 306.018413][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3072'. [ 306.046059][ T5866] Bluetooth: hci5: command 0x041b tx timeout [ 306.302549][T16268] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3076'. [ 306.356069][T16269] netlink: 'syz.4.3075': attribute type 1 has an invalid length. [ 306.363907][T16269] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3075'. [ 306.404955][T16269] netlink: 'syz.4.3075': attribute type 1 has an invalid length. [ 306.413018][T16268] tap0: tun_chr_ioctl cmd 1074025677 [ 306.436120][T16268] tap0: linktype set to 65534 [ 306.468013][T16271] veth15: entered allmulticast mode [ 306.515573][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.534549][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.545014][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.553479][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.562717][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.621165][T16273] lo speed is unknown, defaulting to 1000 [ 306.708156][ C0] ------------[ cut here ]------------ [ 306.713695][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 306.724614][ C0] WARNING: CPU: 0 PID: 15 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 306.734512][ C0] Modules linked in: [ 306.738463][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 306.750226][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.760329][ C0] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 306.766633][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 62 14 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 306.786323][ C0] RSP: 0018:ffffc90000147258 EFLAGS: 00010246 [ 306.792415][ C0] RAX: 63d50cbad0e3d600 RBX: 000000000000000c RCX: ffff88801cebbc00 [ 306.800434][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 306.808449][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 306.816486][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888030d06de8 [ 306.824512][ C0] R13: 0000000000000000 R14: ffff8880769c0e40 R15: ffff8880769c30d8 [ 306.832544][ C0] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 306.841538][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.848175][ C0] CR2: 00007f5e3dee56c0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 306.856184][ C0] Call Trace: [ 306.859467][ C0] [ 306.862423][ C0] rate_control_send_low+0x194/0x7a0 [ 306.867780][ C0] rate_control_get_rate+0x20b/0x5d0 [ 306.873101][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 306.878974][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 306.885323][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 306.890759][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 306.896544][ C0] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 306.902227][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 306.908706][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 306.914314][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 306.920026][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 306.925616][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 306.931330][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 306.936955][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 306.942463][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 306.948646][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 306.954236][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 306.961518][ C0] __iterate_interfaces+0x2a8/0x590 [ 306.966784][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 306.972892][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 306.980162][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 306.986314][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 306.993380][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 306.998635][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 307.004457][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 307.009722][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 307.015547][ C0] ? read_tsc+0x9/0x20 [ 307.019702][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 307.024927][ C0] handle_softirqs+0x283/0x870 [ 307.029742][ C0] ? run_ksoftirqd+0x9b/0x100 [ 307.034467][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 307.039922][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 307.044986][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 307.050090][ C0] run_ksoftirqd+0x9b/0x100 [ 307.054637][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 307.059814][ C0] smpboot_thread_fn+0x53f/0xa60 [ 307.064778][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 307.069890][ C0] kthread+0x70e/0x8a0 [ 307.073993][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 307.079516][ C0] ? __pfx_kthread+0x10/0x10 [ 307.084141][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.089508][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.094734][ C0] ? __pfx_kthread+0x10/0x10 [ 307.099433][ C0] ret_from_fork+0x3fc/0x770 [ 307.104055][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 307.109315][ C0] ? __switch_to_asm+0x39/0x70 [ 307.114112][ C0] ? __switch_to_asm+0x33/0x70 [ 307.118948][ C0] ? __pfx_kthread+0x10/0x10 [ 307.123574][ C0] ret_from_fork_asm+0x1a/0x30 [ 307.128441][ C0] [ 307.131477][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 307.138775][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 307.150333][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.160391][ C0] Call Trace: [ 307.163664][ C0] [ 307.166587][ C0] dump_stack_lvl+0x99/0x250 [ 307.171191][ C0] ? __asan_memcpy+0x40/0x70 [ 307.175787][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.180998][ C0] ? __pfx__printk+0x10/0x10 [ 307.185602][ C0] vpanic+0x281/0x750 [ 307.189603][ C0] ? __pfx__printk+0x10/0x10 [ 307.194284][ C0] ? __pfx_vpanic+0x10/0x10 [ 307.198785][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 307.204081][ C0] panic+0xb9/0xc0 [ 307.207801][ C0] ? __pfx_panic+0x10/0x10 [ 307.212229][ C0] __warn+0x31b/0x4b0 [ 307.216205][ C0] ? __rate_control_send_low+0x5df/0x820 [ 307.221849][ C0] ? __rate_control_send_low+0x5df/0x820 [ 307.227499][ C0] report_bug+0x2be/0x4f0 [ 307.231832][ C0] ? __rate_control_send_low+0x5df/0x820 [ 307.237465][ C0] ? __rate_control_send_low+0x5df/0x820 [ 307.243096][ C0] ? __rate_control_send_low+0x5e1/0x820 [ 307.248731][ C0] handle_bug+0x84/0x160 [ 307.252976][ C0] exc_invalid_op+0x1a/0x50 [ 307.257477][ C0] asm_exc_invalid_op+0x1a/0x20 [ 307.262315][ C0] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 307.268552][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 62 14 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 307.288161][ C0] RSP: 0018:ffffc90000147258 EFLAGS: 00010246 [ 307.294226][ C0] RAX: 63d50cbad0e3d600 RBX: 000000000000000c RCX: ffff88801cebbc00 [ 307.302186][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 307.310149][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 307.318113][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888030d06de8 [ 307.326079][ C0] R13: 0000000000000000 R14: ffff8880769c0e40 R15: ffff8880769c30d8 [ 307.334061][ C0] ? __rate_control_send_low+0x5de/0x820 [ 307.339883][ C0] rate_control_send_low+0x194/0x7a0 [ 307.345179][ C0] rate_control_get_rate+0x20b/0x5d0 [ 307.350653][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 307.356454][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 307.362777][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 307.368150][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 307.373863][ C0] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 307.379500][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 307.385734][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 307.391283][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 307.396827][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 307.402381][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 307.407923][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 307.413489][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 307.418990][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 307.425084][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 307.430730][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 307.437930][ C0] __iterate_interfaces+0x2a8/0x590 [ 307.443130][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 307.449201][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 307.456399][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 307.462468][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 307.469497][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 307.474694][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 307.480585][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 307.485881][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 307.491692][ C0] ? read_tsc+0x9/0x20 [ 307.495771][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 307.500873][ C0] handle_softirqs+0x283/0x870 [ 307.505643][ C0] ? run_ksoftirqd+0x9b/0x100 [ 307.510320][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 307.515623][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 307.520638][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 307.525646][ C0] run_ksoftirqd+0x9b/0x100 [ 307.530144][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 307.535260][ C0] smpboot_thread_fn+0x53f/0xa60 [ 307.540206][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 307.545243][ C0] kthread+0x70e/0x8a0 [ 307.549307][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 307.554846][ C0] ? __pfx_kthread+0x10/0x10 [ 307.559431][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.564619][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.569814][ C0] ? __pfx_kthread+0x10/0x10 [ 307.574395][ C0] ret_from_fork+0x3fc/0x770 [ 307.578974][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 307.584079][ C0] ? __switch_to_asm+0x39/0x70 [ 307.588920][ C0] ? __switch_to_asm+0x33/0x70 [ 307.593670][ C0] ? __pfx_kthread+0x10/0x10 [ 307.598255][ C0] ret_from_fork_asm+0x1a/0x30 [ 307.603029][ C0] [ 307.606396][ C0] Kernel Offset: disabled [ 307.610791][ C0] Rebooting in 86400 seconds..