last executing test programs: 4m17.984162672s ago: executing program 3 (id=479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x6, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40ebe4ec9ca5cb72}, 0x0) 4m17.815953952s ago: executing program 3 (id=481): r0 = socket$inet6(0xa, 0x2, 0x0) clock_gettime(0x3, &(0x7f0000002000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000002040)={r1, r2/1000+60000}, 0x10) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) shutdown(r0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x30c4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x10) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e01000000000c00020007e1010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010001fff40", @ANYRES32=0x0, @ANYBLOB="0000010000000000240012800b00010067726574617000001400028008000700ac141428050009000900000008000a00", @ANYRES32=r8, @ANYBLOB="08001f0009000000"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4m17.538137328s ago: executing program 3 (id=484): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x9}, 0x20) r2 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) r4 = getuid() sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x26c4, 0x19, 0x1, 0x70bd2a, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x2590, 0x12, 0x0, 0x1, [@typed={0xc, 0xbf, 0x0, 0x0, @u64=0xd}, @typed={0x8, 0x92, 0x0, 0x0, @pid}, @nested={0x2578, 0x3b, 0x0, 0x1, [@nested={0x2573, 0x45, 0x0, 0x1, [@nested={0x90, 0xcc, 0x0, 0x1, [@nested={0x4, 0x136}, @nested={0x4, 0x5d}, @generic="78657c2ffa5ada87fac09c70c245f4e7d87cc004275bea9f72d56d3d3820c1994dba18ebc0e7eb34dc5907ddb763d04102068f3a251a7cb9ee3adffb58bea1dae6212122ad2f6896cf0aad201505bdfb94527cb0575325edb68b973816fc9f62e996bee70edddf795b2c68072afdab38b1621b64d43ef067", @nested={0x4, 0x62}, @nested={0x4, 0x91}, @nested={0x4, 0x10d}]}, @generic="7db12b1ecb3265322a3f12ff844ac1e4998c901e94a3d7d23a67643b6967f65c86b53a94f3f2c6f19451c455bc4ce07d90c9c446aa1e004c604f811a4e27fd342e035ddbb0e3f77ff45a05a4d079c0396ce2e5ed73ea5571ca77fc705c9f5b28911c141599b15cb388f2af6cdf30296e5accf8f975e6b6bd42dd88abefb561e15b5663f887b66ac3cb736025cd24daeb7b4a00ddf8bde10923bb5fd43126345e66efcbdcee090e975507e813e8370b604870e6d1f611eab4c455161721cc88c1ac51c61ff0a484b70be65de0a6d3fb8516ccb51871a89a9731f6fb770bedd299906e5ef6d53b6602ed15dd41", @nested={0x280, 0x120, 0x0, 0x1, [@generic="82bbb33e1bf317cc15ae76b2c57db27b92dd9dfe5d5902b3a203efc6e22fea4af7bebb559ebaa4dd4e6776a37747c56659fec822c4133268498a74400918f4ad227b93066599348b2c7fada9bc8ca6285021edae04d3f7c176878a3de28ed1fce84f77c7d5ab6c3baede6793e3abc398aa1388870356427866f0621eb33d326657279dbf6cc89f7a4339f02722e3b8ef3549594461980a3e2d196958d234f6f08e15fbf88bc221765054065b226a66655c13bdea32859501f43f5e1b", @generic="27dc0fcd6d6543e291e5e742318241b857df9b9cd1d71b482772611f26335c28c5455058a076cc67bae7baf225bdf6290c6ad833fc8bb230074f537fa83ef12dfa07dcd337fe64dc8080076b587bd80e417a7e4f05bacc4b6af203650149fe94af1bf5c734bd4467e0931c5e1b2fea5ae7f6306f1d70028fe3cdb61c785a8f060a0c54d1255873d916728734451124c7f7e79965ded1833c9ae449cf5168028033a945cd59562518e43f28b2a80915f404272862764b1f6c50d43b6e8528868395d31278c4f06a4d9eff1c2af711a60424faa8ebf27cb9a81c0b0dfd36d141e3055084cb749388953e6c31774408b52c76e5e81aa0c905835be3", @nested={0x4, 0x7f}, @typed={0x8, 0x70, 0x0, 0x0, @pid=r2}, @generic="e03ca668f8759abd2447c18c7d2a83c9c417aeeac7ec91b9b07d6e9aa7523632bbd01e7bd732302538072db2e68f6e3e1e5b9747ffc44f0fc5e71f366f3cc9f1ee3d4f8dc3c205d094662786540d1743ca84f2ee824bba0152a8da9040edf65fd2778dd884f118ec2be7295ed529733b15124d96f608f721311253a88b4ab2c156ec3e4ce14ab39bd880d2e85052485bfb94cf1a7e121147432ab258d9bbe72eee95d8f35febc2e37d0031f0fcbbb84bdee6", @typed={0x8, 0x46, 0x0, 0x0, @uid=r3}]}, @generic="8b490cc5f76f5ad3dab214c65caff04b354032394ac61d9f92a46aebb95b1384894b48aff62f08b1e7dc9ed54e8e2b02eb10af8addd902205f582dbef40285e0cbcbab43ec2196", @typed={0x6, 0xf0, 0x0, 0x0, @str='}\x00'}, @generic="3346ee0f6b8cc3b3dbcfcd59e346926fdbd41c7c2a2a02c855240c22707e07e4a35da2a16c826faec76e376afee11ab4c89b13a1c974424a28a8e9858f6db7e5eec94ce9b7995a65247cf2e453037a90fde4cb5830762f280c521e1ad1c54c8e5bc902a0924d1d524256ae5d459263c99908d97b006f1a386cd7464a1e7f32db551b3201ee03c1d3ca72d5c33876d3f7f93065c18dafb039451e5db86d58d7fe3cc0056c80d4c94b291e6b0b1ebc43ab1379f49688f5606f893478a07870c7dfda3c29d3fb10b886146da8d0eea32328777d647d4c7ed1274a64daed40aeb60b", @typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@loopback}, @nested={0x2024, 0x68, 0x0, 0x1, [@generic="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", @generic="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", @typed={0x6, 0xe9, 0x0, 0x0, @str='{\x00'}, @typed={0x8, 0x57, 0x0, 0x0, @uid=r4}, @nested={0x4, 0xf9}, @typed={0x4, 0xe}, @nested={0x4, 0xef}, @nested={0x4, 0x9f}]}, @typed={0x8, 0x135, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x4, 0x1a}]}]}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0xfa, 0x0, 0x1, [@nested={0x118, 0x13e, 0x0, 0x1, [@nested={0x114, 0xa0, 0x0, 0x1, [@nested={0x110, 0x61, 0x0, 0x1, [@nested={0x10c, 0x6d, 0x0, 0x1, [@nested={0x108, 0xd1, 0x0, 0x1, [@nested={0x104, 0x112, 0x0, 0x1, [@nested={0xfd, 0xcd, 0x0, 0x1, [@generic="42110f1d6f88ff52f41c6a703875b814ba2c48b3f0cf607256b8d243a3227bb11571d268c41187452c28663be3d9e39505157b48b9212b07ca7b4686a2a55f4f80cbea3f494421c794c12d35f89faffe1de6605dfada605ad7c5d1212f30e4f92cf2ae0e57c77aa34e47801d546b04458c2f6011fb906b6ed5217cb687ba4ddfe78e78b635fdfc513245c2cf7b69f9218d14bb4039e9e3c4cd1c649f4cdea528557d814da783fd6a399fb44d9ceae7ab2e046a74094f015f2aad655abdd7d7bd884d9eacfdffb8d690d970427074e38ab80e3fd67c77f2ec7fb214f91cdf12924a9bc02b01c5e2618391a7ef7c9a44cdce8b538dc7", @nested={0x4, 0x28}]}]}]}]}]}]}]}]}]}]}, 0x26c4}, 0x1, 0x0, 0x0, 0x5}, 0x0) 4m17.434568695s ago: executing program 3 (id=485): r0 = socket(0x1f, 0x1, 0x4) r1 = socket(0x1d, 0x3, 0x6969e037) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r2, 0x1}, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x7e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40820}, 0x20040845) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000002840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002800)={&(0x7f0000000300)={0x24c8, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x34}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x2450, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x23f8, 0x4, 0x0, 0x1, [{0x4}, {0x118, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80}, @NL80211_PKTPAT_PATTERN={0xa4, 0x2, "1fb8de6dabe7203041eca189378fdfd5338318e4ab29f93e9e67d4d7238d99d09fa2afda4e53ad21b900b400c5f5443bd18f0e7dfb4ed1ef0143e1cff2108e392374a5260cab9c79531299fcfb935be2b700582f2c0e08a8f751ce1bb2958570a0d9bfc49bd386e171f98e6134cf4547640b958e86f96393720459b18b35d6a59c548ac4147d9b7b9a8cf9514a3d08410daf970548b9d1fe13654c4b0f9db9a5"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffffff9}, @NL80211_PKTPAT_PATTERN={0x19, 0x2, "5469aa03a06441e22c5099a5fdff13076a6b8bfce7"}, @NL80211_PKTPAT_PATTERN={0x33, 0x2, "51614f5286cd93cde4e93c502551e6b3b1d5c1635c97f20b1eab00b5b5cfe91f96855299474095e2a1c58ee418edb3"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffffff8}]}, {0x21cc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x22, 0x1, "217f5ccf0cc186ef5b0c54dbb2ebb574095df395c8509989047496936ac1"}, @NL80211_PKTPAT_MASK={0x36, 0x1, "eb41ac7de079078835025c7bb6239875b75aeb27527373e0b7194ed8b70f21a125fe3f392beb77b26d4f41755ffa5f579311"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x5f, 0x1, "7590c7e2029bb9999f988e20c356a81d55e093c8cb72354bc56b26666fcf088fbc0379a06211d6121f8bf7f77aa190321c10a9c7abe75ff07eacc96d4ed291150837caa0d70909ae828987ea8e0e9c1ac219eb44a57aa53cf0c649"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_PATTERN={0x2e, 0x2, "c7d9f99e47baeba3592c214c29572815ddd3495e7d528df5f4dd516c0aec5a7ec80bf726609f590f522c"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfe1}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_MASK={0xbb, 0x1, "1cbda04087387752c2a67d567ff7ba66328ec2ed82974d97b5030afd528a7d4cf83a5bec3eade299f9e3b655b47397f8b092e2a7c7004bbee31a9c177ab845ea4b3c5fa4894dea6ba53844f1e07ee5e7c69d461b39135de2365858c0054c3e4daa61538b97c09bf6b3d4e8f7011ad42f03cddf8a3c0db236457408091c5121b561f2cf6f12798d0a283eea6aa7c3e9591ac2226bf421e86f727c34c4fdc06a37e781d4a4bf57fca85dd10b2f9a9a2e4803b480135727c9"}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xbb, 0x1, "27ce76813e494f490d9fa1705867afeed4bae549d06404988680889d4c7743009b3d8dcb6118ae4ceca4b7ab816ef0fa59f9d2a779f853bbba9096da0860b0b27df80e28f8ecd00ec97fe7c5949eb0cb3f33b54084b2e4e9adb69374db770961b27f29803e845d537d71578b118d8b0423953fce7e009df0eb24c6f907d9bd563345a792d1989dd406eb1baa15adf149c3c551642deb46d78182f491244723196fa584d611d8f08ca49bc50f1152814ccd7a67d6bb3efc"}, @NL80211_PKTPAT_PATTERN={0x2b, 0x2, "483c8dd67f379dea2864084a352352c90f5aa510da08b16554ee1038599d0f4b564ef18cc5e7eb"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x18935747}]}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x54, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast1}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @rand_addr=0x64010100}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast1}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @empty}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x2f, 0xa, "580bfdbd8f0905a99447ffa09844ab9136a085fdaab822a5accbc3337075dda6bd750f1a3364a49781e147"}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x5c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x50, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x31, 0x6, "39595f340599ae032b826cf34edd72b7ee5ffded70e1b57ce86697e22c5943ca6d600acfa986328812d7beff9a"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x1ff, 0x1, 0x6}}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x1}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x24c8}, 0x1, 0x0, 0x0, 0x81}, 0x24040002) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000002880)={0x3, 'ip6tnl0\x00', {0xffffff7f}, 0xe4}) sendmsg$nl_generic(r1, &(0x7f0000002bc0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002900)={0x274, 0x11, 0x100, 0x70bd2d, 0x25dfdbfc, {0xf}, [@typed={0x5, 0x16, 0x0, 0x0, @str='\x00'}, @generic="d715f1e53f71ebaf07a61b601534432e7648a34dc5bfe85e6927df1bcfa513e8d212ea98445427fbbe5f6341044607da49f7bb2099055f65182107a2a98d633570713af59cc2d1fac7b1776f11abf95ee1a7e8b8f7c0175baecfa42127790761a37a1fde03ded17f1f5821a03de660865f", @generic="e29f45d23cc0695aa3", @generic="6355eb2c3105de66a080fc0b65ee2cffdd19626e51e7883815564523052d11c7d737762c14181019d0877d1369c00cc5898afc1f5c57199140e1a87ca949bb5e63194b8d91bc7d0fd33977a9d3c858479adc2b1244e527b15457ab4e088102474c93d6e9715d8479a57b2a0eda77229f07381edac44a2046cfe64e44f675ed89ba4fc3e661687baba84f9afc02fe89e30c4040b7449431ef8630b4447efeb75c3d9a8e009f3323d3dd9a72a6d67561d651ca85eb6645bf5bdf1c4dd7d8a45d7f192355e0ce528ce0666defaff75bfa4140d4dc0721f5cdceb856ba7c18", @generic="fe79ec944a2d609c585988c6c6d444ca9514f0fd84c054e19a53bdc538bfc8a754abe6b71f7753614059e96e218de27b17bdb52032cab4e19223edef594261e3ed3d1650df329d05217cee27505e70dc35374146d69b4b992ba7457dae5c8162925339e623a9e1f411eecefd55ab3507e8dccb27eabad8a0b8622d0e4bc118e6a5e598d3cdfdfae0058c381366c87f7c6745634667b8946d22b1face708a52bb5362ce248f28a0bb16c90ca26e3091e3bcd83bfc8e6063c497ae879d453846e3c1510abe0839aa8ce9112cab649e020ea54f8cb5e72eb03af5a23fc675ac6d3f4f1bb4c75a48bfb799eab925b516085f5173c0d670712bfcd1", @typed={0x8, 0xda, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x274}, 0x1, 0x0, 0x0, 0x80}, 0x20000008) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002c00)) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x24, r3, 0x30, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xf8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x811) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000002d40), &(0x7f0000002d80)=0xc) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x38, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x30, r3, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x63}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x70}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80000}, 0x20008886) bind$bt_hci(r0, &(0x7f0000003000)={0x1f, 0x4, 0x2}, 0x6) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003100)={&(0x7f0000003080)={0x68, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x74}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xee}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffc}]}, 0x68}, 0x1, 0x0, 0x0, 0x48040}, 0x8000) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000003500)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000034c0)={&(0x7f00000031c0)={0x2bc, r3, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x290, 0x2a, [@random_vendor={0xdd, 0x63, "fa71444e047330e5efc21c09f20965d73e8d5c3ebd2f0e3f1a77a2e7842923692baba3301c2b3a13585dc7ac1ba53a49f12d14024a55bc8181a2f14a0c8b9bbb0e4f7b514819dda43debba8e4adac55b19a90bcedc06bd1b1adb75842d1b417c8782b0"}, @random={0x99, 0xe9, "2117880ccf6acc157d9ff56c98f059700d2d5c93d4649e6075c66d21836400b7caf4f2d9adc3da2e70bbf91749dc8e6cfa21235a197a9c6603e2b91e17db998d98f63cea681bbdbf3aec44af846e1e0e3c41eac96688b4984f2f2332772781180b4d27d2919ef45954bb6a94dbb31de0977bdb178a7069bfeb9ec18bfb60e4e90e357a31a18efd6582c6efb3de6240e8f8b64f5cbc5788bed688808f744b37f0a3e65ab51dc0fc661fdcb5c543d24bddac87100b2e8b43dbb3cd68175e5fef6a5fdabf92488da98f24f97bb3eff56e403fc37ae2d1b15dd6fead38d97d9bed072f94d90bf2ef3283dc"}, @mic={0x8c, 0x18, {0xd46, "de80ce937a76", @long="4f5ed4e2d93d6cae3cf89c9254938b4e"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @channel_switch={0x25, 0x3, {0x1, 0xb0, 0x7}}, @prep={0x83, 0x1f, {{}, 0x9, 0x6, @device_b, 0x7fff, @void, 0x3, 0xa19, @broadcast, 0x101}}, @measure_req={0x26, 0xf2, {0x1, 0xeb, 0x1, "788f22101251787cb680ce6139699aadfddc5565a811d38a455abef8090e18f3b1c054bc46e494bb1421ed8be76e7da3e6753e468a515dbcd4efdc748c0644327ff0e1a60a1342445191b66a1899fba12c8cd4362411a4daa4d2fa24b81dbd980c575cb8a97ae32dc5f859e188addd271716b16242a2cdcaf57a89c57213870050449523217c97daeb8e20d46c8b02a0d92710652018739e89657f1b0616541a98021ad7ecc0e90a1d5e0ed3bdef7a097812f568a7c19555633f6f39c59741bddf2bd16fc509c1787fcbe327b3e20d94e51b717c1dc577ae51862fcd11ee69e86770f77a95fc982664c44df8e31947"}}]}, @NL80211_ATTR_SSID={0x17, 0x34, @random="f2b65a2fba99c050cc4c9f72be2e86805936d9"}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000003540)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f0000003640)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x20, r3, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2f}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000003680)={r2, 0xe2, "f70417695fd958c50f715d56f6e80ccc3ff42964cd38cbf9b39d6525c78e5db2a08e51227bbdfd3d1cca399bc19f9ef8cbba10095334de79045bbba0b1dd2f46c3b7f952fc67d02ee276e6a0d70aa400fa33d23b63286ee39e2b2e450f4e784828770fb00e5dd34841ee291488e6fd5d89a933464ae57e0a298b795266a8fafe04140030d1f1fadf80779a35e68e16fa341e10c99087771f585ffea8fa8180aede090cec7f30d40d1d9e625033015d5387fb8b538d489bc05cbf35c17f689adc6a8f7e85f3235d9e32b8c0be1ef68be8b7d6fae6452af2a01dd1e300c923d3da6303"}, &(0x7f0000003780)=0xea) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000037c0)={r8, 0x96}, 0x8) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000003800)={0x0, @dev}, &(0x7f0000003840)=0xc) accept4$phonet_pipe(r5, &(0x7f0000003880), &(0x7f00000038c0)=0x10, 0x800) 4m17.02580398s ago: executing program 3 (id=486): r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfffffffffffffdb0}, 0x10000) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) 4m16.74730651s ago: executing program 3 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010102000000000000000002000000240002800c000280040001003a00000014000180080001007f000001080002"], 0x44}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) 4m16.374183926s ago: executing program 32 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010102000000000000000002000000240002800c000280040001003a00000014000180080001007f000001080002"], 0x44}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) 56.9771316s ago: executing program 4 (id=1775): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0xf8, 0xa, 0x8, 0x40, 0x0, 0xc, 0xf6, 0x0, 0x40, 0x2, 0x10, 0x4, 0x7, 0x9}, 0xe) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x44}}, 0x28000000) 55.66641358s ago: executing program 2 (id=1778): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0xfffd, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x7ff, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 55.610482627s ago: executing program 4 (id=1779): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100d2704000000dbaf78e073a7650400", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006000600000000000500070000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000680)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x38, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0xffff, @loopback, @remote}, "ffff07718e9bf703"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 55.356665627s ago: executing program 4 (id=1785): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x3ff, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 55.269626726s ago: executing program 2 (id=1786): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200080}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x406, 0x63}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0xf}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xb6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x48}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c084}, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200080}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x406, 0x63}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0xf}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xb6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x48}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c084}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) (async) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000d40)=[{{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000300)=""/226, 0xe2}, {&(0x7f0000000400)=""/116, 0x74}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000000580)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/154, 0x9a}], 0x1, &(0x7f0000000700)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000880)=""/44, 0x2c}, {&(0x7f00000008c0)=""/217, 0xd9}, {&(0x7f0000000a00)=""/119, 0x77}, {&(0x7f0000000a80)=""/13, 0xd}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000ac0)=""/93, 0x5d}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/76, 0x4c}], 0x9, &(0x7f0000000d00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x3, 0x40000000, 0x0) sendmmsg$unix(r3, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="18acf8b1ed479de320cdbff21bc648a4423880b9fb95564f48c38e3fdaea755288c2a91a1ef344702de01af77d599320e22a0ea41b13aa09", 0x38}], 0x1}}], 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000002380)=ANY=[@ANYBLOB="7400000003080500000000000000000005001ffc4c00048008000840fffffffe080005400000000708000940000000030800094000000000080003400000000008000940000000080800084000000101080001400000000008000b40000000090900010073797a30000000000500030006"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0xfffffffd, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x0) 55.10947731s ago: executing program 2 (id=1788): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) (async) r1 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt(r1, 0x4, 0x3e1, &(0x7f0000000040)=""/237, &(0x7f0000000140)=0xed) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x18, 0x18, {0x2, @bearer=@l2={'ib', 0x3a, 'veth0_vlan\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x84) (async, rerun: 64) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000002c0)=0x0) (rerun: 64) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000300)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"099ed1d1c709cdc6273c49f634774ae2", r3, r4, {0x33d, 0x1}, {0x9}, 0x0, [0x0, 0x7, 0xfffffffffffffff8, 0x7f, 0xfffffffffffffb5c, 0x2, 0x0, 0xe, 0x6, 0xb77, 0xaf3e, 0x3, 0x4, 0x5, 0x7fffffff, 0x6]}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r6, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x48005) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt(r7, 0x1, 0x2, &(0x7f00000005c0)="9371cd4ccd6cf3175ee289506e97f6066b1ee26c5edb634481cf559bbe4985d8026fdba5b3a2c99edccdf4", 0x2b) (async, rerun: 64) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x18}, 0x18) (async, rerun: 64) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000680)={@private1, 0x0}, &(0x7f00000006c0)=0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000700)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, r8}, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}]}, 0x54}, 0x1, 0x0, 0x0, 0x84050}, 0x400c080) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000880)={'wpan3\x00'}) (async) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f00000008c0)) r10 = socket$inet6(0xa, 0x1, 0x1) (async) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) bind$ax25(r11, &(0x7f0000000900)={{0x3, @bcast, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r5) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r12, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x938a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41000}, 0x40) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r5) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000b00)={0x0, @in6={{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffd}}, 0x8, 0xfff7}, 0x90) r13 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000bc0), 0x2, 0x0) write$cgroup_type(r13, &(0x7f0000000c00), 0x9) 54.920254132s ago: executing program 4 (id=1791): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0xe9, 0x9, 0x2, 0x72, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x0, 0x66, 0x1}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex=r0, 0x37, 0x1, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x18}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x80) 54.88996559s ago: executing program 2 (id=1792): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f0000000000)=""/171, &(0x7f0000000100)=0xab) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'sit0\x00'}) 54.78770377s ago: executing program 2 (id=1793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) accept4(r2, 0x0, 0x0, 0x80000) (async, rerun: 64) setsockopt(0xffffffffffffffff, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206", 0x47) (rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xe, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x8, 0x2, "32ad"}, 0xa) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async, rerun: 32) sendto$inet6(r7, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) (async, rerun: 32) socket$inet6(0xa, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000a200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) close(0xffffffffffffffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000000100008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r12}, 0xc) 54.733641015s ago: executing program 4 (id=1794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000340), &(0x7f0000000380)=0x28) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x128, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6eecdeaf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff98}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x869}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20060004}, 0xc000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x8, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa, 0xff}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 54.541684259s ago: executing program 4 (id=1797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="70010000", @ANYRES16=r3, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}, @typed={0x4, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x40005) 54.192181749s ago: executing program 33 (id=1797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="70010000", @ANYRES16=r3, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}, @typed={0x4, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x40005) 54.180786713s ago: executing program 2 (id=1800): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r0}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0xfe55, 0xfffffffffffffffc}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000140)="14ec6d", 0x3}], 0x1, 0x0, 0x0, 0x20010080}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 53.794664768s ago: executing program 34 (id=1800): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r0}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0xfe55, 0xfffffffffffffffc}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000140)="14ec6d", 0x3}], 0x1, 0x0, 0x0, 0x20010080}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 30.853440491s ago: executing program 7 (id=1977): r0 = socket(0x840000000002, 0x3, 0xfa) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000004c00000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf}, 0x70) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x40) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) sendmmsg$inet(r2, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001040)="90", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x160}}], 0x2, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@multicast1, 0x0, 0x0, 0x60, 0x0, [{@loopback}, {@initdev}, {@multicast2}, {@remote}, {@remote}, {@loopback}]}}) 30.634435411s ago: executing program 7 (id=1979): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xfdff, 0x3}, 0x6) write(r4, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x2}}, 0x10) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[], 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f00000001c0)={0x89, @rand_addr, 0x0, 0x0, 'wrr\x00', 0x0, 0x10000000, 0x800000}, 0x2c) r7 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRES8, @ANYRESOCT=r6, @ANYRES32=r3, @ANYRESOCT=r7, @ANYRES32=0x0, @ANYBLOB="9f92089203f4d121ae4c45a0b2190c88cf5213d6743e858f8af1ee82ef6c6587ff2169da1204af5b077d0dea2adc0a4034d7eedbeeaf9cca4d125e230bb0dc4f6992d59082567785d26f2d9ceced5d2d3a7467ebbd65d8ed85"], 0x250}, 0x1, 0x0, 0x0, 0x2004c010}, 0x800) unshare(0x6a040000) unshare(0x44000000) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r8, 0x107, 0xe, &(0x7f0000000000), 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x7a, 0x0, &(0x7f0000000040)=0x5e) 28.96174259s ago: executing program 0 (id=1996): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0xffffffc9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x40000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1}, 0x94) accept$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x9, 0xa1, 0x4, 0x4003, 0x200, 0x20}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv6=@mcast2, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0xff, 0x1, 0x1, [0x9, 0x1, 0x8, 0x2, 0x4, 0x9, 0xe000, 0xeb, 0x1, 0xd9, 0x40, 0x1, 0x4d24, 0x7, 0x15c, 0x3], 0xa}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x98, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400030002000100ac14144100000000000000001400020002000000e000000200000000000000000d0001007564703a99"], 0x54}}, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0xa4, r5, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x825, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8771}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000084}, 0x22000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="7a0a00ff00000000711061000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x805c}, 0xc0) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a030000000000000000000100000808000240000000050900010073797a300000740028000000000a01040000000000000000010000090900010073797a30000000000800024000000007"], 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000080) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) listen(0xffffffffffffffff, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r8) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000900)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00022dbd7000efdbdf250900000009000700534ea864040000000a000600080211000001000008006e800400010009000700826a6a4eac0000000a000600080211000000000004002800"], 0x50}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r9, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000d00000001000000f542000008000200", @ANYRES32=r0, @ANYBLOB="03000000000000000040000000006582227a4b54e331ece4000000000000", @ANYRES32=r9, @ANYRES32=r0, @ANYBLOB="03000000000000000400"/28], 0x50) 28.190689065s ago: executing program 0 (id=2000): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}, {&(0x7f0000000080)="b18696042bcd3ef8fbdfad", 0xffffff77}, {&(0x7f0000000140)="11ab515ac28d7b165d2100004c16f19cf1cac3b97f4e4d52b38b907978150017405855d19d4a6219cd34904db1c0327672085a512ebbd566c5d531db7f5ef295458f31b3c0e457253081ca7fa55e5f72c74a25ff854f937f475e68784295202bca19c666f276a8f560387925908586edf7a4ad4ea51f9aa72a908b3b99764915e06a473d59f7d2c6cf5debdb4010e7848a644e3dd2d3b95fe1e9a18bdab8cb4a75bc66dbed40e51ee282f1fc7a0009bec4c30e6774ea36d840de7063950b774ce336405aca67b2f4fd4440ffd8624a9fcb1264958598f0c327fa3c6f915c78", 0xd}], 0x3}, 0x240088d4) 28.188939233s ago: executing program 0 (id=2002): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socketpair(0x5, 0x80004, 0xc11f, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x28040010) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x0) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote, @netrom, 0x1, @default}, &(0x7f0000000040)=0x1c, 0x800) getsockopt$rose(r1, 0x104, 0x6, &(0x7f0000000080), &(0x7f00000003c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000feff00", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 27.415946228s ago: executing program 1 (id=2009): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000800)={'veth0_to_hsr\x00', 0xffff0000}) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000800)={'veth0_to_hsr\x00', 0xffff0000}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006740)=@newchain={0x1c58, 0x64, 0x0, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xf}, {0x5, 0x7}, {0xc, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c28, 0x2, [@TCA_FLOW_POLICE={0xc10, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x4, 0x401, 0x100, 0x2, 0x6, 0x2, 0xc, 0x9, 0xb9f0945, 0x1, 0x4, 0x6, 0x38, 0x8, 0x9d14, 0x8, 0xff, 0x33, 0x101, 0x0, 0x8, 0x5, 0xffff0001, 0x2, 0x1000, 0x14, 0xfffffff7, 0x9, 0x3fffc, 0xa, 0x7ff, 0x5, 0xb, 0x5, 0xdcb, 0xd7, 0x401, 0x3, 0x580f, 0x1000, 0x0, 0x5, 0x7, 0x29e0, 0x10001, 0x7f, 0x1, 0x46c6, 0x5, 0x4, 0x73a0, 0x2, 0x4, 0x5, 0x9, 0x3ff, 0x8, 0x80000001, 0x10, 0x6, 0x3, 0x80000001, 0x8, 0xffff, 0x6, 0x8, 0x6, 0x7, 0x6, 0x400, 0x0, 0x100, 0x8001, 0x9, 0x1, 0xfffffffb, 0x8, 0x0, 0x9d, 0x8, 0x5e, 0xb31, 0x8, 0x4, 0xff, 0x97, 0x7, 0x8, 0x10, 0x1, 0xc, 0x6, 0x3, 0x40000000, 0xff, 0xb, 0xff, 0x8, 0x3, 0x400, 0x5, 0x0, 0x9d, 0x2, 0xbda6, 0xcc, 0x7, 0xc4c6, 0x1, 0x9, 0x6, 0x2, 0x7, 0xc1b3d865, 0x1, 0x5, 0x2, 0x0, 0x10, 0x13, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x4, 0x8001, 0x10, 0x6, 0x4, 0x2, 0x0, 0x1, 0x7, 0x4, 0x2, 0x9b5, 0xfffffff8, 0x1, 0x9, 0x0, 0xffffffff, 0x9f1, 0x3, 0x4, 0xb05, 0x1, 0xbc39, 0x8, 0x6, 0x5, 0xa, 0x3, 0x2b6, 0x0, 0x6, 0x1800, 0x8000, 0x1, 0xff, 0x3a5, 0x4, 0x1a, 0x6, 0x401, 0x1000, 0x9, 0x9, 0x22f89baf, 0x9, 0xa, 0x2, 0x5, 0x3, 0x9, 0x4, 0x9367, 0x0, 0x0, 0x1, 0x2, 0xfffffffc, 0x1, 0x400, 0x2d6, 0xfff, 0xf6, 0x6, 0x7, 0x5, 0x4, 0x2, 0x4, 0x2, 0x21e2, 0x8, 0x2, 0x10000, 0x800, 0x4, 0x7178, 0x0, 0x0, 0x3e, 0x1, 0x3, 0x9, 0x8, 0xa24, 0x1, 0x0, 0x0, 0xe, 0x0, 0xfffffffd, 0x1, 0x10001, 0x6, 0x3, 0x7, 0x2, 0x4, 0x0, 0xaa31, 0xcd32, 0x2, 0x6, 0xfff, 0x70, 0x4, 0x6, 0x0, 0x3, 0x8e9, 0x6, 0x3, 0x3, 0x4fba, 0x5, 0x1, 0x401, 0x0, 0x7, 0x4e, 0x8, 0x1, 0x8000, 0x2, 0x40, 0x5, 0xbc, 0x0, 0x800]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6, 0x1, 0x6, 0x0, 0x2, 0xff, 0x5, 0x40000000, 0x7f, 0x0, 0x4, 0x8, 0x5, 0x6, 0x9, 0x3b, 0x4, 0x82a, 0x10, 0x2, 0x6, 0x1ff, 0xa6, 0x3fe, 0x5, 0x6, 0x4, 0xffff8000, 0x8001, 0x408c2ae0, 0x2, 0x8, 0xffff, 0x8001, 0x1, 0x9, 0x7b8b87bf, 0x946, 0xaa28, 0x80, 0xa, 0x3, 0x6, 0x6, 0x2, 0xac02, 0x0, 0x4, 0x7, 0x5, 0x6, 0x466, 0x7, 0x3, 0x2, 0x401, 0x3, 0x5, 0xfffffff8, 0xd702, 0xf, 0x8, 0xcb4, 0x100, 0x0, 0x13a, 0x6, 0x6, 0x6, 0x58ce, 0xe02, 0x5, 0x3, 0x5, 0x6, 0x29, 0x0, 0x400, 0x2b11, 0x81, 0x0, 0x7f, 0x10, 0x6, 0x800, 0x7487, 0x1, 0x2, 0x8, 0x0, 0x2, 0x4, 0x5, 0x3, 0x2, 0x7ff, 0x3, 0xe, 0xe, 0x7ff, 0x4, 0xcb, 0x9, 0x100, 0x10, 0x2, 0x40, 0x5, 0x6, 0xf, 0x0, 0x3, 0x1e22, 0x3, 0x0, 0x7, 0x12dbe0, 0x726, 0x2, 0x8, 0xf8, 0x1, 0x6, 0x7, 0x4, 0x30, 0xffffff2f, 0x0, 0xb6be, 0x5, 0x7, 0xb69b, 0x5, 0x8000, 0xc, 0x5, 0x483, 0x80, 0x30, 0x3, 0x65, 0xff, 0x4, 0x7, 0x59, 0x7, 0x0, 0x40, 0xfffffffa, 0x0, 0x431, 0x4, 0x7, 0x4, 0x6, 0xd, 0x7b2b, 0xf, 0x3, 0x200, 0x9, 0x5, 0x7, 0x9, 0x0, 0x3ff, 0x0, 0xfffffff2, 0x8001, 0xffffff7f, 0x8, 0x2, 0x0, 0x8, 0x0, 0xffff7be8, 0x8, 0xa300, 0xe, 0x2, 0xfffffffd, 0x9, 0x101, 0x4, 0x54, 0x5, 0x6e, 0x6fd4, 0x398d1d17, 0x0, 0x8, 0x3, 0x7, 0x4, 0x8000, 0x0, 0xab9a, 0x9, 0x1, 0x2, 0x4, 0x6, 0x14000, 0x1, 0x9, 0x0, 0xe8000000, 0x4, 0x81, 0x3, 0x5b9, 0xb, 0x3ff, 0xefde, 0x68c, 0x9, 0x3, 0xcf, 0x2, 0x9c76, 0x7, 0x2, 0x6000000, 0x0, 0x55b8, 0xb, 0x9, 0x9, 0x1, 0x401, 0x100, 0x1000, 0x7, 0x5, 0x4, 0xffffffff, 0x5, 0x800, 0x7fffffff, 0x10000, 0xfffffff7, 0x0, 0x8, 0x6, 0x7, 0xffff509b, 0xfffffff8, 0x7, 0x2, 0x8, 0x2, 0x6240, 0xfff, 0x5, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x358, 0x0, 0x7106, 0x80000000, 0xb, 0x5, 0x3, 0xb, 0xfffffff9, 0x1, 0x2, 0x2, 0x5, 0x6d0, 0x3, 0x0, 0x6, 0x0, 0x5, 0x400, 0x4, 0x6, 0x1, 0x7fffffff, 0xb72, 0x5, 0x800, 0x8, 0x0, 0x4, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x1, 0x2, 0x0, 0x70200000, 0x4, 0x8, 0xe, 0xfffffffc, 0x1, 0x6, 0x1ff, 0x80000001, 0x1, 0x4, 0x9, 0x0, 0x8001, 0x65, 0x1ff, 0x8, 0x7, 0x3, 0x3, 0x7, 0x4, 0x1, 0x929, 0x8, 0x4aa, 0x3d8056eb, 0xff, 0x8, 0xfffeffff, 0x4, 0x0, 0x9, 0x9, 0x8, 0x1, 0x10001, 0xfffffc01, 0x800, 0x1, 0x3, 0x4, 0x47c2, 0x0, 0x80000001, 0xfffffff7, 0x200, 0x5, 0x7, 0x0, 0xf9da, 0x7f34, 0x81, 0x7c, 0x6, 0x8, 0x9, 0x6, 0x9, 0x3, 0x9, 0x74c, 0x7ff, 0x2e, 0x5, 0x2, 0x9, 0x7, 0x9, 0x40, 0x400, 0xe769, 0x4, 0x0, 0x80, 0x5, 0x100, 0x7ff, 0x9, 0x4, 0x0, 0x8, 0x4, 0x2, 0xfffffffd, 0x10001, 0x14000, 0x0, 0x10001, 0x4, 0x40, 0xffffffff, 0x7fffffff, 0x6, 0x401, 0x4, 0x7, 0x4, 0x7, 0x3ea, 0x1000, 0xffff4e7a, 0x23, 0x7, 0x6a8, 0x10, 0x5, 0x6, 0xf37, 0x1, 0x5, 0x2, 0x5, 0x4, 0x4, 0x8, 0x3, 0x2, 0x9, 0x0, 0x8, 0x8, 0x5, 0x7, 0x400, 0x800, 0x4, 0x729, 0x0, 0x0, 0x100, 0x9, 0x5, 0xe, 0x2, 0x9, 0x10001, 0x6, 0x8000, 0x10000, 0xb, 0x1, 0x6, 0x10001, 0x9, 0x2, 0xee, 0x5, 0x4, 0x7, 0x2, 0x7, 0x1, 0xd8f, 0x80000000, 0x2, 0x401, 0xf, 0xcf, 0x5, 0x1, 0x71a8, 0x7fffffff, 0x7ff, 0x5, 0x6f, 0x7, 0x8, 0xffffff40, 0x254b, 0xc4f, 0x8000, 0x9, 0x744d, 0x6, 0xad1, 0x10, 0x11, 0x10, 0x7, 0xc2, 0xa, 0x2, 0x3, 0x1, 0x3, 0xf73b, 0xa, 0x9, 0x10000, 0x3, 0x2, 0x6, 0x10000, 0x80000000, 0x7, 0x1, 0x1, 0xffffffff, 0xc6e3, 0x9, 0x101000, 0x0, 0x2, 0x6, 0x3c, 0x9, 0x8, 0x3, 0xfffffffc, 0x9, 0x5, 0x2, 0xb4, 0x9, 0x2, 0x48]}]}, @TCA_FLOW_POLICE={0x1014, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x8a51, 0x1, 0x7, 0x3, 0x8, 0xfff, 0x3, 0x3, 0xa, 0x93, 0x4, 0x4, 0x0, 0x1c000, 0x2, 0x6, 0x4, 0x80000001, 0x7, 0xcd6, 0x9, 0x6, 0x0, 0x2, 0x6, 0x6, 0x6336f786, 0xb9c4, 0x7, 0x4003, 0x5, 0x79c, 0x200, 0x2, 0x8, 0xd53, 0x13, 0xffffffff, 0x240, 0x9, 0x7, 0xffffff8f, 0xf1, 0x0, 0x68000000, 0x7b, 0x200, 0x80000000, 0x8, 0x10, 0xf8000000, 0x7f80, 0x303, 0x2, 0x5, 0x5, 0xfffffffc, 0x13cc, 0x7ff, 0x4, 0x7, 0x6, 0x1, 0x4000000, 0x81, 0x2, 0x2, 0x49fa, 0xfd8c, 0x9, 0x3, 0x7, 0xc20c, 0xe2f, 0xa2, 0x5, 0x0, 0x3, 0x2, 0x0, 0x9, 0x5, 0x3fbe, 0x9, 0x1, 0x7, 0x2, 0x400, 0x8000, 0x0, 0xff, 0x3, 0x8, 0x400, 0x4, 0xffffcd11, 0xf33, 0x0, 0x800, 0xa, 0x39, 0x7, 0x9, 0x9, 0x7f, 0x101, 0xc00, 0x8, 0x8001, 0x0, 0x1, 0x0, 0xffff, 0x9, 0x2, 0x10000, 0x4ba, 0x7fffffff, 0xcf1, 0x400, 0xd, 0x800, 0x9, 0x5, 0x8c3, 0x2, 0x3212, 0x4, 0x0, 0x8, 0x2, 0x9, 0x2, 0x80000000, 0x1, 0x5a, 0x72a8, 0xf000000, 0x0, 0x7, 0xfffffeff, 0xf, 0x6, 0x9, 0x7, 0x6, 0x6, 0x102, 0x0, 0x3, 0xe, 0x6, 0x4, 0x5, 0x7, 0x7fc0, 0x5, 0x9, 0xc0, 0x5, 0x0, 0x3, 0x8, 0xbf728e3, 0xca, 0x400, 0xa, 0x8, 0xb4, 0xa, 0xa1f, 0x400, 0x9, 0x1ff, 0x4, 0x40, 0x3, 0xfffffffa, 0x1000000, 0x5, 0x5, 0x2, 0xe, 0x3, 0x6, 0xffffffff, 0x1, 0xf60, 0xe, 0x5, 0x7, 0xfffffffc, 0x0, 0xc89, 0x2, 0x6, 0x9, 0x1, 0x10000, 0x95f1, 0x6, 0x4, 0x8, 0x8000, 0x7, 0x6, 0x116, 0x3, 0xb8, 0x80000000, 0x3, 0x7, 0x7, 0x9, 0xfffffe00, 0xbde, 0x8, 0xdd000000, 0x4, 0x8, 0x4, 0x40, 0x7, 0x32, 0x0, 0xa7ef, 0x800, 0xb5, 0xce, 0x8, 0x8, 0x9, 0x2, 0x1, 0x800, 0x9, 0x4, 0x2, 0x1ff, 0xd, 0x4, 0x37, 0x5, 0x696b, 0x1967, 0x76, 0x9, 0x9c, 0xf4, 0xfff, 0xffffffff, 0x2, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3f3, 0x80000000, 0xfc2, 0x0, 0xf, 0x6000, 0x8001, 0x111a, 0x2, 0x9, 0x5, 0x0, 0x800, 0xa0, 0xb, 0x6d1, 0x3, 0x9, 0x0, 0x9902, 0x6, 0x10d7022d, 0x20eb15d5, 0xfffffb97, 0x4, 0x17, 0x51, 0x6c, 0x10, 0x0, 0x9, 0xb990, 0x8000, 0x2aa9, 0x5, 0x5, 0x5, 0x78, 0xffffded0, 0x8, 0x6, 0xfffffffe, 0xfffffffa, 0xe000000, 0x2, 0x800, 0x6, 0x3, 0x7, 0x1, 0x6, 0x80, 0x6, 0x43, 0x9, 0x3ff, 0x4, 0x200, 0x5a3, 0x5, 0x0, 0x2, 0x0, 0x6e900, 0x9, 0x0, 0xffff8000, 0x7ff, 0x3, 0x2, 0xfffffff7, 0x7, 0x5, 0x3, 0x101, 0x8b, 0x7fffffff, 0x5, 0xe, 0x80, 0xcd, 0x5, 0x80000000, 0x9, 0x4, 0x3, 0x18000000, 0x4, 0x9, 0x3, 0x5, 0x6, 0x4, 0x5, 0x4, 0x6, 0x1, 0xffffffff, 0xd3e, 0x4a, 0x8, 0x9, 0x8001, 0x34fa, 0x0, 0x4, 0x3, 0x800, 0x6, 0x5bfb0197, 0x5, 0x6, 0x5, 0xfffffff8, 0x8, 0x7, 0xbf, 0x4, 0x5, 0x3, 0x9, 0xc, 0xfffffd7c, 0x3, 0x1, 0x8bd0, 0xfff, 0xf61f, 0x2, 0xfffffffb, 0x7, 0x8, 0x6, 0xfffffff8, 0x1, 0x6, 0x66, 0x7578, 0xf4, 0x21, 0x2, 0x4, 0x8, 0x1, 0x100, 0x8, 0x800, 0xa, 0x4, 0x80000000, 0x8, 0x6, 0x8, 0x8, 0x7f, 0x0, 0x3, 0x6, 0x2, 0xffff, 0xfffffff6, 0x8, 0x3ff, 0x1, 0x9, 0xc, 0x3, 0x1, 0x8, 0x4, 0x4, 0x95, 0x7ff, 0x7, 0x6, 0x200, 0xfe9, 0x7, 0x5, 0x10000, 0x1, 0xa7, 0xb, 0x6, 0x99, 0x94b, 0x6, 0x6, 0x95b, 0x1, 0x0, 0x7, 0x6, 0x9, 0x5, 0x0, 0x0, 0x5, 0x480, 0x4, 0x5, 0x3ff, 0x1, 0x6, 0x7, 0x7, 0x50c, 0x6, 0xd, 0x0, 0x3, 0x3, 0x8, 0x3e94d338, 0xffff, 0x80000000, 0x4, 0x0, 0x3, 0x7, 0x401, 0x4, 0x4, 0x8874, 0x9, 0x1, 0x0, 0x7ff, 0x8, 0x4, 0xf, 0x9, 0x3, 0x3, 0x0, 0x9, 0x4, 0x0, 0x80000001, 0x0, 0xffff, 0xfffffffc, 0xf, 0xd3, 0x10, 0x10001, 0x200, 0x800, 0x800, 0x400, 0x7, 0x5, 0x1, 0x2a, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xfffffffd, 0x2, 0x0, 0x5, 0x9, 0x5, 0x6, 0xfffffff8, 0x6, 0x2, 0x1, 0x13, 0x7f, 0x0, 0x7fffffff, 0x8001, 0xaa, 0xb422, 0x5, 0x9, 0x885, 0xffffffff, 0x4, 0x5, 0xe870, 0x63bc, 0xa6, 0x4, 0x5, 0xcf, 0x7fffffff, 0x10, 0x9, 0x0, 0x3, 0x9, 0x7, 0x2, 0x6, 0x6, 0x6, 0x4, 0x80000001, 0x3, 0xfffffbff, 0x6, 0x7fff, 0x4, 0x1705ba6e, 0x4, 0x8, 0x6, 0x4, 0x800, 0x3, 0x8, 0x0, 0x0, 0x81, 0x8, 0x919, 0xffff, 0x0, 0x9, 0xffffffff, 0x7, 0x7, 0x2, 0x790, 0x0, 0x95e, 0x1, 0xfffffffb, 0xb, 0x0, 0x7a64, 0xbf16, 0x5, 0x2, 0xe6d, 0x0, 0x2, 0x8, 0xe, 0x0, 0x10000, 0x553, 0x5, 0x2, 0x3d5, 0xc, 0xffff, 0x1, 0x8, 0x7, 0x2, 0x6, 0x5ddcff5, 0x6, 0x80000000, 0x1, 0x9, 0x7, 0xc333, 0x5, 0x9, 0x9, 0xffff, 0x3ff, 0x8, 0xfffffff3, 0x6, 0x9, 0x200, 0x7f, 0x2, 0x9, 0x1, 0xf0, 0x1, 0x4, 0x7f, 0xf9, 0x8, 0x10000000, 0x1, 0x6, 0x1000, 0x6, 0x4, 0xc6d, 0x7, 0x7ff, 0x7, 0x180, 0x8, 0xfffffffe, 0x0, 0x2, 0x8, 0x2, 0x8, 0x3, 0x3, 0x1, 0x9, 0x4, 0x2, 0x101, 0xfff, 0xbd0d, 0x27f3, 0x5, 0x8, 0xb0e, 0x400, 0x100, 0x400, 0x3, 0x7fffffff, 0x6, 0x7, 0x9, 0x8, 0x6e1, 0x790c, 0x7ff, 0x80000000, 0x7, 0x7, 0x7fff, 0x5, 0xfffffff7, 0x0, 0x10, 0x9, 0xd96, 0x50, 0x1, 0x6, 0x4, 0x37, 0xfffffffc, 0x6, 0x7, 0x9, 0x690, 0x3ff, 0x2, 0xff, 0x0, 0x0, 0x7, 0x400, 0x7, 0x0, 0xff, 0x2, 0x1, 0x1ff, 0x8, 0x7, 0xb58a, 0x8, 0x9, 0x5, 0x9c, 0xfffffeff, 0x9, 0x6, 0x8, 0x9, 0x0, 0x9, 0xe, 0x2, 0x5, 0x0, 0x7, 0x8, 0x7, 0x2, 0xfffff520, 0x1, 0xb3a, 0x40400000, 0xe9f77feb, 0x0, 0xcd, 0x9, 0x3, 0x5, 0x800, 0x8, 0x0, 0xffff, 0xc, 0x5, 0x3, 0x9, 0xffffff3b, 0x3, 0x43, 0x1, 0xf, 0x1, 0x9, 0x6, 0x5, 0x7ff, 0xf, 0x8000, 0x800, 0xe9f, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5d, 0x4, 0x0, 0xbf, 0x3, 0x7, 0xb35, 0x0, 0x7f, 0x16f8, 0x1, 0x800, 0xb, 0x3, 0x2, 0x3, 0x4, 0x7, 0x4, 0x9, 0x5, 0xc31f, 0x1ff, 0x4, 0x3, 0x3ff, 0x0, 0x7, 0x2, 0x7, 0x1, 0x6, 0xb, 0x7, 0x78, 0x417, 0x1, 0x10, 0x5, 0xa, 0x7, 0x692, 0x2, 0x8001, 0x0, 0x5, 0x4, 0xf, 0x9, 0x9, 0x1, 0x16, 0x3, 0x5, 0x7, 0xe, 0x9, 0x6, 0x2, 0x2, 0x6, 0x3, 0x9, 0x3, 0x8, 0x6, 0x800, 0x0, 0x4, 0x2, 0x7ba, 0x10, 0x3, 0x0, 0x0, 0x0, 0xfffffff9, 0x4, 0x4, 0x7442, 0x6, 0x9, 0x4, 0x0, 0x309, 0xfffffeb3, 0xabc, 0x9, 0x3, 0x3, 0x6, 0x996, 0x0, 0x1, 0x0, 0x40, 0x7, 0x9, 0x17, 0x1e000000, 0x1c, 0x633, 0x0, 0x1ff, 0x8, 0x7f, 0x3, 0x9, 0x5, 0x3, 0x9, 0xffff, 0x6, 0x8001, 0x9, 0x6, 0x8, 0x5, 0x7fff, 0xff, 0xf7a, 0x3, 0xfffffffd, 0x9, 0x3, 0x8, 0x0, 0x8, 0x5, 0x7fffffff, 0x1ff, 0x6, 0x6, 0x11c8, 0x4, 0x6, 0x400, 0x4, 0x1, 0x6af, 0x0, 0x3, 0xa, 0x6, 0x1, 0x515c91eb, 0xb, 0x6, 0x3, 0x1812, 0x8, 0x6, 0x9, 0x3, 0x2, 0x9, 0x4, 0xfffffff0, 0x5, 0xfffffffe, 0x2, 0xffff, 0xd, 0x7ff, 0x1, 0xab, 0x8, 0x9, 0x5, 0x8000, 0x7, 0x3, 0x1, 0x81, 0x2, 0x3, 0x9, 0x8, 0xe8, 0x9, 0x2, 0x10000, 0x9, 0xc2d, 0x0, 0x9, 0x6, 0x1, 0x2a, 0x80000001, 0x6, 0x6, 0xc, 0xc, 0xfffffffe, 0x1, 0xd5b, 0x4800000, 0x7, 0x25, 0x5, 0x10000, 0x8, 0xfffffffa, 0x3, 0xa, 0x3, 0xe, 0xfffffff9, 0x7, 0x0, 0x1af, 0x101, 0xfffffffa, 0x6, 0x9, 0x2, 0x53f9, 0x5, 0x0, 0x3, 0x1, 0x8, 0x1, 0xdf10, 0x529, 0xffff, 0x3, 0x7f, 0x401, 0x7fff, 0x0, 0x38, 0x86e8, 0x9, 0x3, 0xcc0, 0x5, 0xfffffffc, 0xd91, 0xffffffff, 0x3, 0x1000, 0x800, 0xfffffffa, 0x8, 0x8, 0x9, 0x6a, 0x6, 0x2, 0x6, 0x0, 0x3, 0x400, 0x589]}]}]}}]}, 0x1c58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000084) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x4048020) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r5, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x100, 0x0) (async) recvmmsg$unix(r4, 0x0, 0x0, 0x100, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r4, 0x0, 0x24000881) (async) sendmsg$NL80211_CMD_GET_SCAN(r4, 0x0, 0x24000881) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, 0x0, 0x44805) recvmmsg(r5, 0x0, 0x0, 0x11002, 0x0) sendto$inet(r2, &(0x7f0000000200)='E\x00\x00\x00', 0x4, 0xc040, 0x0, 0x0) close(0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000010000000000001200006f099ca360d7ace30d1f007f04181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000085000000110000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000010000000000001200006f099ca360d7ace30d1f007f04181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000085000000110000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newsa={0x168, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x30}, {@in=@broadcast, 0x0, 0x33}, @in=@multicast2, {0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x1ff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e24, @in6=@mcast1}}, @coaddr={0x14, 0xe, @in=@loopback}]}, 0x168}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) 27.366264764s ago: executing program 0 (id=2010): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048048}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) unshare(0x62040200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x28, 0x1411, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c0d1}, 0xc0004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) 27.365788606s ago: executing program 7 (id=2011): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000534754fc05be2f9c06faa81d5909f37779a4efa3acf2d6138373fa985b70bcad332738dd944adbaac05fc103dc171eb1d6d4e2bd572e13d2a9b4586f1964ca3a56be98251385df6ea14631884290b0", @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b002d000000"], 0x24}}, 0x48000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), r10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r12, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}) write$tun(r11, &(0x7f0000000500)=ANY=[@ANYBLOB="034886dd010000000000140000006028000003082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r14, 0x0, 0x7fffffffffffffff}, 0x18) 26.589698598s ago: executing program 5 (id=2017): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x53, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x40000003, 0xe0, 0x0, 0x4c, 0x1, 0x7, 0x1ff, 0x9, 0x1}}}}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0xf0, 0xfffff818, 0x2, 0x2, 0xfffffff8, 0x7}}, {0x12, 0x2, [0x8, 0x80, 0x6, 0x3, 0x401, 0xfd, 0x7]}}]}]}, 0x8c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x53, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x40000003, 0xe0, 0x0, 0x4c, 0x1, 0x7, 0x1ff, 0x9, 0x1}}}}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0xf0, 0xfffff818, 0x2, 0x2, 0xfffffff8, 0x7}}, {0x12, 0x2, [0x8, 0x80, 0x6, 0x3, 0x401, 0xfd, 0x7]}}]}]}, 0x8c}}, 0x0) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x80000001, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) 26.394421667s ago: executing program 1 (id=2020): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000010428bd70000300000000000000", @ANYRES32=r1, @ANYBLOB="00000000051ce02b7414429792f2440ddb9c020000340012800e00010069703665727370616e000000200002800400120005000b0002000000050008000200000008000100", @ANYRES32=r1, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x12) 26.381802277s ago: executing program 5 (id=2021): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="47c7a4b5302dbd5a2203b7e0193087da6937f6ad1472020000009b388ccf9d56b273acc3578aa2", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) (async) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0) (async) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) getpid() (async) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}, {0x0}], 0x2}, 0x84) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r7, &(0x7f0000000940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) (async) ioctl$SIOCSIFHWADDR(r8, 0x89f1, &(0x7f0000000900)={'bond0\x00', @random}) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000040601040000000000000000070000050500010007000000050001000700000005000100070000000900020073797a32000000cb0900020073797a3100000000"], 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x3, 0xfc) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6(0xa, 0x802, 0x0) 26.202484979s ago: executing program 7 (id=2023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080000040000030014000000456f00b000660000401190780a010102ac1414124e204e08009c9078010000000400000031150048d5e06bdc339f0b82e56e05e8a3f461bf8f05c607f304e7fe0700221bb54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e72bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287b15c14be998215153aaf76bbf0aead9a5cd7bcd4dc8e1acb0a78f4793cfd119c"], 0xbe) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x9e, 0x6, 0x4a4, 0x2, @private1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x20, 0x700, 0xa, 0x5}}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000002c0)=r3) syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="0f539af21094aaaaaaaaaabb86dd601200b0003801000000000000000000000000000000000000000000000000000000ffff7f0000010300907800000000607a1d7900008900fe880000000000000000000000000001ff010000000000000000000000000001cd1724a1ae97901c"], 0x0) 26.202287301s ago: executing program 5 (id=2024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x13, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x82}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) 26.125376722s ago: executing program 1 (id=2025): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x800, 0x5) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x20, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x68}}, 0x0) bind$inet6(r1, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delchain={0x40, 0x65, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0xffff, 0x3}, {0xa, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom(r1, 0x0, 0x0, 0x40000040, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="0200000000000000"], 0x18}}, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$SIOCAX25DELFWD(r7, 0x89eb, 0x0) getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1}, 0x0, &(0x7f0000000380)}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) 25.992366346s ago: executing program 5 (id=2026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2504000000100001800c0001006574683a9f116f2b"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) 25.720273108s ago: executing program 1 (id=2028): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="000000fd0001040008001b"], 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x748, 0xffff8000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20002044}, 0x44080) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 25.708106003s ago: executing program 5 (id=2029): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) socket(0x10, 0x80003, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@nat={'nat\x00', 0x1b, 0x5, 0x5d0, 0x0, 0x2a0, 0xffffffff, 0x2a0, 0x1f8, 0x538, 0x538, 0xffffffff, 0x538, 0x538, 0x5, &(0x7f0000000340), {[{{@ip={@multicast2, @loopback, 0xffffffff, 0x0, 'veth1_to_bridge\x00', 'bridge0\x00', {}, {0xff}, 0x62, 0x1, 0x28}, 0x0, 0x1c0, 0x1f8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x4, 0x497d, 0x1, 0x8001, 0x10, 0x3, 0x0, 0x20, 0x80}, {0x43d}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1a, @broadcast, @local, @gre_key=0x6, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @remote, @loopback, @gre_key=0x4, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0x158, 0x190, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff000000, 0xff000000, 0xffffff00], @ipv4=@remote, [0xffffffff, 0x0, 0x0, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xff, 0xff0001fe, 0xff000000], @ipv6=@empty, [0x0, 0xffffffff, 0x0, 0xffffffff], 0xffff, 0x6, 0x2, 0x4e20, 0x4e24, 0x4e22, 0x4e20, 0x600, 0x2000}, 0x81, 0x2}}, @common=@ah={{0x30}, {[0xae, 0x7]}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @multicast2, @gre_key=0xf573, @port=0x4e22}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x12}, @remote, 0xff000000, 0xffffffff, 'rose0\x00', 'vcan0\x00', {}, {0xff}, 0x6c, 0x2, 0x41}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x10, 0x2, 0x2}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@multicast1, @ipv6=@remote, @port=0x4e23, @gre_key=0x835}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x630) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000200)) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r9, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004600002c000000000006907864010101ac1414aa0100000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02fffe0000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffb0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000084}, 0x4008801) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={r5, 0x6, 0xfffffffffffffff3, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) 25.54991725s ago: executing program 6 (id=2030): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0xc3) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="e00688906b97878270b4e2a5780fadc188fe287a823f5abed27e4fb5cb87096e3d8901282cf56e61a604e941cf082f4889de79c2b3584eb4cc2455696c784b805b072b58615878e38d53a9", 0x4b}, {&(0x7f0000000300)="3599e95720f34e2f35527f68a8807e45206c336a1df7314f4042db703d25bb5312943490dc482149505006f469dfd72981349715e9c181a8a5efc4d7878f76f4ca03c4a57d52456184ffd03a82b11dd769d9f50a78235578b473e82237da105b1a1a2e67ba2d8b3b9e8d5f50d2a535e8a01e30f17cf9cd882eb9f0baa7eb74a176b37df1", 0x84}, {&(0x7f00000003c0)="cf80396936f8a6a14b59caa3096bcf9ce5c989877e242f6121eacbcf31c4776b6b3861535adec08486be4ed6f75b7dda9af055a0d3a762d2d5eddd39769dd82382b2cdee0c3ed2206e79347c5d9b27c103d629bc849f0210c5da759ef2940e299168d000e9578b7e2fab9f36c8a47a7fa9528d37dcf370452ad402561111e42b0766f5414182c108d4f89c3f958ea3ed03a82affced73ca6fd02fc2046a270885e9e007d4aca8b778df400b23322add44fa869fe12fbb1dfd2978708679abb3bbcfc6b5e6d537624db4d642595c3d03b17c17b5b2a4461db0c6e59", 0xdb}, {&(0x7f0000000500)="e63dd3b79d52e25566fb589091ae0936d572354d99d6407f2d69d912f0f7dd838d2814315a52385f68531123012a131a7427055b3c2170b73ee47575a1f00e0c0f0438399ffdc5550d2121c91f223fc29fb265f49e6fc61284d7d4fdaa4a03b5785000050f22d3fd669307b99135c808571cd1067b6498327bb29daabc8c074d891316f7cf56b74b3b81169f36a0c30da540357f6fcaab960df8a99b661a7cf207db6003fa2e0bdf9d1c4376b408dfa27c7cb38ad6aa24e6fad0b595819a681010e247c27aa84e84a2c4b06c4085226ecf65f6c04505668c9a", 0xd9}, {&(0x7f0000000600)="7ede2bf5d6052203748e547c68292a53f38e33bffb13b4a089bf07917afb597537bb458811ff706941e303abc3a6fb78a1c33a190a367d16920e900710b90eedc4228a52581fc386548d40205757eb0daa05e09e0535ce03f632d9c7d65d1e15e7a6a76660d5ab042b77a321d4164d4e6aac68316187b9ac22c2349f66683c3cf786dc6d4edb50f354ef416c486d77f22d9bc7fd82007fb9f5c9cabf72080aba3682f0fae4279c0a70b15c3ed4c60c674ec5f7d7e96edc9f7f4d7be6ac5c6ce26e68653a78117896d3c9a86b1b93b7f7725e76facca1", 0xd6}, {&(0x7f0000000700)="cdd56db2730921b02aa5b7c6ff2e8078e2e8f707694ae912de358fd113b8707eff485095689f250a3219309761cec7c12e5df20ac93f470c4783a6757f58b03b5182c4c193fe2caa04a018eb0379a9e2cb41c89a4ef3f5b4cc4ae97514a89b6810ba4052c1a9f799e766aaa169d57e93ddd81b7f9dad0ea0f8443826a8c72c846689f1ff2aee7215119f9cdac2323a6164854fecb2ab823a7c6978a1", 0x9c}], 0x6, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/432], 0x1b0}}], 0x1, 0x0) 25.546907922s ago: executing program 7 (id=2031): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000008cf0ff4a000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) (async) setsockopt(r1, 0x10, 0x10, &(0x7f0000000000)="40e0060fd7be9e7de4e342a70cfef29c1117ab8e166f787d3731e0927c0f841aa0c84255fb006dcb009d51833742aac56f7ff5bc15cd232f4b9ddd7b3d5cd97a4986d041869f6b12a0e8c93d731a3b8eece260629f50770255a59a0bbe", 0x5d) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000001200)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x4, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.517356427s ago: executing program 6 (id=2032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x10000, 0xfffffffc, 0x0]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) syz_emit_ethernet(0x5a, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x10000, 0xfffffffc, 0x0]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) (async) 25.42634989s ago: executing program 7 (id=2033): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x6a, 0x1, 0x100, 0x4) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x32, 0xfff}) 25.37809808s ago: executing program 1 (id=2034): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) unshare(0x4020400) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x336, 0x0, 0x0, 0xc9e}, 0x600) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) socket$inet6(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0x3a) (async) r2 = socket(0xa, 0x3, 0x3a) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0xc000) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000100)=0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8c0c00", 0x18, 0x6, 0x1, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x20, 0x8, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x8, 0x8, 0x80, 0x80000000, 0x6}, 0x14) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x8, 0x8, 0x80, 0x80000000, 0x6}, 0x14) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r7, 0x1, 0xffdffffc, 0x800001}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 25.233552054s ago: executing program 6 (id=2035): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) (async, rerun: 32) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r3, 0x1}, 0x20) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) (async) unshare(0x20000400) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r6, r7, 0x3, 0x1) (async) getpeername$netrom(r1, &(0x7f0000000140)={{0x3, @rose}, [@default, @remote, @netrom, @null, @null, @remote, @default, @netrom]}, &(0x7f00000001c0)=0x48) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68520, 0x10044}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x4040) 25.133561905s ago: executing program 0 (id=2036): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r6, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/30, 0x1e}, {&(0x7f0000001340)=""/215, 0xd7}, {&(0x7f0000001440)=""/200, 0xc8}, {&(0x7f0000001540)=""/250, 0xfa}, {&(0x7f0000001640)=""/157, 0x9d}, {&(0x7f0000001700)=""/21, 0x15}, {&(0x7f0000001740)=""/210, 0xd2}], 0x230, &(0x7f00000018c0)=""/38, 0x26}, 0x9}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001900)=""/31, 0x1f}, {&(0x7f0000001940)=""/236, 0xec}, {&(0x7f0000001a40)=""/93, 0x5d}, {&(0x7f0000001ac0)=""/211, 0xd3}, {&(0x7f0000001bc0)=""/143, 0x8f}], 0x5, &(0x7f0000001d00)=""/60, 0x3c}, 0xf31}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001d40)=""/233, 0xe9}, {&(0x7f0000001e40)=""/85, 0x55}], 0x2, &(0x7f0000001f00)=""/13, 0xd}, 0xff}, {{&(0x7f0000001f40)=@xdp, 0x80, &(0x7f0000002140)=[{&(0x7f0000001fc0)=""/211, 0xd3}, {&(0x7f00000020c0)=""/78, 0x4e}], 0x2, &(0x7f0000002180)=""/84, 0x54}, 0xfffff5b3}, {{&(0x7f0000002200)=@tipc=@name, 0x80, &(0x7f0000002500)=[{&(0x7f0000002280)=""/43, 0x2b}, {&(0x7f00000022c0)=""/166, 0xa6}, {&(0x7f0000002380)=""/182, 0xb6}, {&(0x7f0000002440)=""/190, 0xbe}], 0x4, &(0x7f0000002540)=""/58, 0x3a}, 0x1ff}, {{&(0x7f0000002580)=@ieee802154, 0x80, &(0x7f0000003880)=[{&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/251, 0xfb}, {&(0x7f0000003700)=""/87, 0x57}, {&(0x7f0000003780)=""/230, 0xe6}], 0x4, &(0x7f00000038c0)=""/131, 0x83}, 0x9}, {{&(0x7f0000003980)=@nl=@proc, 0x80, &(0x7f0000004b80)=[{&(0x7f0000003a00)=""/83, 0x53}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/96, 0x60}, {&(0x7f0000004b00)=""/94, 0x5e}], 0x4}, 0x3}, {{&(0x7f0000004bc0)=@un=@abs, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004c40)=""/196, 0xc4}, {&(0x7f0000004d40)=""/136, 0x88}, {&(0x7f0000004e00)=""/151, 0x97}], 0x3, &(0x7f0000004f00)=""/18, 0x12}, 0x7}], 0x8, 0x10023, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000400)="36345fa139443ceb1c413cc1853ac86686bf36154a2ac5f0345f0c4ab0f513bf72a46f89d841b22a641dddfefb479539f9fdd338da0a005844d698333b9268f7d9e9b00e5eb058f285bd78d6fe8e5f7dea7e2a77f6af1f551da9c1e030147517f648b1ac236eb4a940edc56ebe0c21a6f483f39c024647d34ed80c63dbd58b568a32bf2fdec38f855da9d7f81ec9bad4bb2e", 0x92}], 0x1}, 0x4000) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) recvmmsg(r6, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/30, 0x1e}, {&(0x7f0000001340)=""/215, 0xd7}, {&(0x7f0000001440)=""/200, 0xc8}, {&(0x7f0000001540)=""/250, 0xfa}, {&(0x7f0000001640)=""/157, 0x9d}, {&(0x7f0000001700)=""/21, 0x15}, {&(0x7f0000001740)=""/210, 0xd2}], 0x230, &(0x7f00000018c0)=""/38, 0x26}, 0x9}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001900)=""/31, 0x1f}, {&(0x7f0000001940)=""/236, 0xec}, {&(0x7f0000001a40)=""/93, 0x5d}, {&(0x7f0000001ac0)=""/211, 0xd3}, {&(0x7f0000001bc0)=""/143, 0x8f}], 0x5, &(0x7f0000001d00)=""/60, 0x3c}, 0xf31}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001d40)=""/233, 0xe9}, {&(0x7f0000001e40)=""/85, 0x55}], 0x2, &(0x7f0000001f00)=""/13, 0xd}, 0xff}, {{&(0x7f0000001f40)=@xdp, 0x80, &(0x7f0000002140)=[{&(0x7f0000001fc0)=""/211, 0xd3}, {&(0x7f00000020c0)=""/78, 0x4e}], 0x2, &(0x7f0000002180)=""/84, 0x54}, 0xfffff5b3}, {{&(0x7f0000002200)=@tipc=@name, 0x80, &(0x7f0000002500)=[{&(0x7f0000002280)=""/43, 0x2b}, {&(0x7f00000022c0)=""/166, 0xa6}, {&(0x7f0000002380)=""/182, 0xb6}, {&(0x7f0000002440)=""/190, 0xbe}], 0x4, &(0x7f0000002540)=""/58, 0x3a}, 0x1ff}, {{&(0x7f0000002580)=@ieee802154, 0x80, &(0x7f0000003880)=[{&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/251, 0xfb}, {&(0x7f0000003700)=""/87, 0x57}, {&(0x7f0000003780)=""/230, 0xe6}], 0x4, &(0x7f00000038c0)=""/131, 0x83}, 0x9}, {{&(0x7f0000003980)=@nl=@proc, 0x80, &(0x7f0000004b80)=[{&(0x7f0000003a00)=""/83, 0x53}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/96, 0x60}, {&(0x7f0000004b00)=""/94, 0x5e}], 0x4}, 0x3}, {{&(0x7f0000004bc0)=@un=@abs, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004c40)=""/196, 0xc4}, {&(0x7f0000004d40)=""/136, 0x88}, {&(0x7f0000004e00)=""/151, 0x97}], 0x3, &(0x7f0000004f00)=""/18, 0x12}, 0x7}], 0x8, 0x10023, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000400)="36345fa139443ceb1c413cc1853ac86686bf36154a2ac5f0345f0c4ab0f513bf72a46f89d841b22a641dddfefb479539f9fdd338da0a005844d698333b9268f7d9e9b00e5eb058f285bd78d6fe8e5f7dea7e2a77f6af1f551da9c1e030147517f648b1ac236eb4a940edc56ebe0c21a6f483f39c024647d34ed80c63dbd58b568a32bf2fdec38f855da9d7f81ec9bad4bb2e", 0x92}], 0x1}, 0x4000) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (async) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) (async) 24.885377103s ago: executing program 6 (id=2037): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockname$ax25(r2, &(0x7f0000000080)={{0x3, @netrom}, [@default, @remote, @rose, @netrom, @default, @netrom, @netrom, @rose]}, &(0x7f0000000100)=0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x20040001) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=r5, &(0x7f0000000380)=0x4) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x100, 0x1403, 0x100, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=0x0) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x84, r6, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_VENDOR_DATA={0x35, 0x1f, "ad270c119c133969ed7342a32eb94af51351c5a609389ff596e98929866de88355748ec3a2a1765f3b4150780debccb420"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xe0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_VENDOR_DATA={0x7, 0x1f, "78f5bc"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) sendmsg$NL80211_CMD_PROBE_CLIENT(r13, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r3, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r14, 0x102, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r15) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r13) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xcc, r16, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x257dbbc6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x8000}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x2c}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r12, 0x8917, &(0x7f0000000d80)={'dummy0\x00'}) 24.852124261s ago: executing program 1 (id=2038): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e70315a3490b3d3b83e972dcd6c9511bded6b4b7ddf357fd91a04d3983cc73c4a9e7f23bdb8220e9de0a4cc150deca290a91348d98a346cbd287e1319c0c53359afe60", @ANYRES16=r10, @ANYBLOB="170900100000f9dbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7a, 0xd, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x700, 0xfffffff9, 0x8}}) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x400, 0x7, 0x10, 0x2, 0x100, 0x5}}}}]}, 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x7d, &(0x7f00000001c0)=""/125, 0x40f00, 0x4}, 0x94) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x16, 0x2}, {0xfff5, 0x7}, {0x6, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0x36, &(0x7f0000000200)={&(0x7f0000000740)={0x4c, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_DATA_SEQ={0x2, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x20004040) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 24.800103618s ago: executing program 6 (id=2039): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r0, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0xc3072, 0xffffffffffffffff, 0x3000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000950000a6aa000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x1e}, @private1}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="11072abd7000fcdbdf250500000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x4, 0x98, [0xfffffffffffff096, 0x3, 0x40000, 0x4, 0x3, 0xf], 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000080)=""/152}, &(0x7f00000001c0)=0x78) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10020810}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008800}, 0x8001) 24.72958957s ago: executing program 0 (id=2040): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r3, 0x0, 0x1a, 0x0, &(0x7f00000001c0)=0x2) r4 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1, r4}}, 0x40) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/ipc\x00') unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/28, @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000380)={'batadv_slave_0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r6}, 0x18) connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x2, @none, 0x2, 0x1}, 0xe) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001040)='signal_generate\x00', r7}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = socket(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x6}, 0x1c) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)=ANY=[], 0x54}}, 0x0) 24.645392804s ago: executing program 6 (id=2041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x18, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24008010}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0xfffffff4, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xffffffec) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x8000}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x3, 0x80801, 0xd1) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000002bfa00000000000000"], 0x14}}, 0x0) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000300000000001400000046ad00670068000060069078ac1e0001ffffff0745e11a9314b296b53b5d25867c0a8c27b6478984da4eb57d56be4ee0efb45c215a64d718cb6f639e60026f3fcd218590d2fd47a1803f67d8c3c5ebe25ed9991203e04d3bdc1e70ef"], 0x75) getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x2000800) 24.180000175s ago: executing program 5 (id=2042): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x100007f, 0x8, 0x5, 0x1}}}}]}, 0xad}}, 0x44884) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xbe, 0x0, r3, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 64) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r12, 0x1000) (async, rerun: 32) ioctl$SIOCAX25NOUID(r12, 0x89e3, &(0x7f0000000440)=0x1) (rerun: 32) listen(r11, 0x0) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) 8.221174353s ago: executing program 35 (id=2033): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x6a, 0x1, 0x100, 0x4) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x32, 0xfff}) 6.289359809s ago: executing program 36 (id=2040): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r3, 0x0, 0x1a, 0x0, &(0x7f00000001c0)=0x2) r4 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1, r4}}, 0x40) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/ipc\x00') unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/28, @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000380)={'batadv_slave_0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r6}, 0x18) connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x2, @none, 0x2, 0x1}, 0xe) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001040)='signal_generate\x00', r7}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = socket(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x6}, 0x1c) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)=ANY=[], 0x54}}, 0x0) 3.800507468s ago: executing program 37 (id=2038): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e70315a3490b3d3b83e972dcd6c9511bded6b4b7ddf357fd91a04d3983cc73c4a9e7f23bdb8220e9de0a4cc150deca290a91348d98a346cbd287e1319c0c53359afe60", @ANYRES16=r10, @ANYBLOB="170900100000f9dbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7a, 0xd, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x700, 0xfffffff9, 0x8}}) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x400, 0x7, 0x10, 0x2, 0x100, 0x5}}}}]}, 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x7d, &(0x7f00000001c0)=""/125, 0x40f00, 0x4}, 0x94) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x16, 0x2}, {0xfff5, 0x7}, {0x6, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0x36, &(0x7f0000000200)={&(0x7f0000000740)={0x4c, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_DATA_SEQ={0x2, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x20004040) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 1.978998975s ago: executing program 38 (id=2042): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x100007f, 0x8, 0x5, 0x1}}}}]}, 0xad}}, 0x44884) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xbe, 0x0, r3, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 64) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r12, 0x1000) (async, rerun: 32) ioctl$SIOCAX25NOUID(r12, 0x89e3, &(0x7f0000000440)=0x1) (rerun: 32) listen(r11, 0x0) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) 0s ago: executing program 39 (id=2041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x18, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24008010}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0xfffffff4, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xffffffec) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x8000}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x3, 0x80801, 0xd1) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000002bfa00000000000000"], 0x14}}, 0x0) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000300000000001400000046ad00670068000060069078ac1e0001ffffff0745e11a9314b296b53b5d25867c0a8c27b6478984da4eb57d56be4ee0efb45c215a64d718cb6f639e60026f3fcd218590d2fd47a1803f67d8c3c5ebe25ed9991203e04d3bdc1e70ef"], 0x75) getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x2000800) kernel console output (not intermixed with test programs): devsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.646714][ T36] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 153.655711][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.677219][ T8868] netlink: 'syz.2.727': attribute type 21 has an invalid length. [ 153.704133][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.799028][ T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.810642][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.822148][ T8879] netlink: 'syz.0.731': attribute type 21 has an invalid length. [ 153.823933][ T8881] netlink: 'syz.2.732': attribute type 29 has an invalid length. [ 153.841961][ T8881] netlink: 'syz.2.732': attribute type 29 has an invalid length. [ 153.865030][ T8879] netlink: 'syz.0.731': attribute type 5 has an invalid length. [ 153.888778][ T8879] netlink: 'syz.0.731': attribute type 6 has an invalid length. [ 154.343128][ T8914] set match dimension is over the limit! [ 154.700888][ T8927] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 155.816584][ T8954] syzkaller0: entered promiscuous mode [ 155.822198][ T8954] syzkaller0: entered allmulticast mode [ 155.867512][ T8954] tipc: Enabled bearer , priority 0 [ 155.904233][ T8960] team_slave_1: Caught tx_queue_len zero misconfig [ 155.961191][ T8963] sctp: [Deprecated]: syz.4.750 (pid 8963) Use of int in maxseg socket option. [ 155.961191][ T8963] Use struct sctp_assoc_value instead [ 156.273959][ T8953] tipc: Resetting bearer [ 156.344955][ T8953] tipc: Disabling bearer [ 156.554367][ T8979] __nla_validate_parse: 171 callbacks suppressed [ 156.554387][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 156.577269][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'. [ 156.819809][ T8990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.759'. [ 157.034625][ T9011] sctp: [Deprecated]: syz.4.764 (pid 9011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.034625][ T9011] Use struct sctp_sack_info instead [ 157.057021][ T9013] validate_nla: 1 callbacks suppressed [ 157.057039][ T9013] netlink: 'syz.2.765': attribute type 1 has an invalid length. [ 157.138329][ T9011] ip6t_srh: unknown srh match flags 4000 [ 157.157031][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.764'. [ 157.180485][ T9013] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 157.219156][ T8992] lo speed is unknown, defaulting to 1000 [ 157.247864][ T8992] lo speed is unknown, defaulting to 1000 [ 157.267527][ T8992] lo speed is unknown, defaulting to 1000 [ 157.305280][ T8992] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 157.344507][ T8992] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 157.484347][ T8992] lo speed is unknown, defaulting to 1000 [ 157.528263][ T8992] lo speed is unknown, defaulting to 1000 [ 157.535757][ T8992] lo speed is unknown, defaulting to 1000 [ 157.571685][ T8992] lo speed is unknown, defaulting to 1000 [ 157.592788][ T8992] lo speed is unknown, defaulting to 1000 [ 157.641637][ T8992] lo speed is unknown, defaulting to 1000 [ 157.663768][ T8992] lo speed is unknown, defaulting to 1000 [ 158.007823][ T9038] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 158.182271][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.773'. [ 158.276948][ T9062] netlink: 16 bytes leftover after parsing attributes in process `syz.5.773'. [ 158.490912][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 158.500389][ T9067] netlink: 'syz.4.777': attribute type 5 has an invalid length. [ 158.508676][ T9067] netlink: 48 bytes leftover after parsing attributes in process `syz.4.777'. [ 158.614108][ T9067] geneve2: entered promiscuous mode [ 158.636669][ T9067] geneve2: entered allmulticast mode [ 158.755459][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 158.772728][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 158.833227][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 158.872840][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 159.270181][ T9094] lo speed is unknown, defaulting to 1000 [ 159.487896][ T9107] netlink: 'syz.2.788': attribute type 62 has an invalid length. [ 159.633886][ T9112] netlink: 176 bytes leftover after parsing attributes in process `syz.4.789'. [ 159.648533][ T9112] netlink: 176 bytes leftover after parsing attributes in process `syz.4.789'. [ 159.907166][ T9115] IPVS: Scheduler module ip_vs_ not found [ 160.176769][ T9133] nbd5: detected capacity change from 0 to 63 [ 160.193419][ T9134] block nbd5: NBD_DISCONNECT [ 160.231873][ T9134] block nbd5: Disconnected due to user request. [ 160.260441][ T9111] lo speed is unknown, defaulting to 1000 [ 160.288080][ T9134] block nbd5: shutting down sockets [ 160.322350][ C1] blk_print_req_error: 19 callbacks suppressed [ 160.322369][ C1] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.338121][ C1] buffer_io_error: 48 callbacks suppressed [ 160.338138][ C1] Buffer I/O error on dev nbd5, logical block 0, async page read [ 160.376069][ C1] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.385615][ C1] Buffer I/O error on dev nbd5, logical block 1, async page read [ 160.394249][ C1] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.403769][ C1] Buffer I/O error on dev nbd5, logical block 2, async page read [ 160.411583][ C1] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.421090][ C1] Buffer I/O error on dev nbd5, logical block 3, async page read [ 160.429294][ T6055] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.446875][ T6055] Buffer I/O error on dev nbd5, logical block 0, async page read [ 160.521349][ T6055] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.586798][ T6055] Buffer I/O error on dev nbd5, logical block 1, async page read [ 160.621959][ T6055] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.711687][ T6055] Buffer I/O error on dev nbd5, logical block 2, async page read [ 160.721592][ T9151] netlink: 'syz.0.801': attribute type 15 has an invalid length. [ 160.727434][ T6055] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.760233][ T5842] Bluetooth: hci4: command tx timeout [ 160.768314][ T6055] Buffer I/O error on dev nbd5, logical block 3, async page read [ 160.785400][ T6055] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.795100][ T6055] Buffer I/O error on dev nbd5, logical block 0, async page read [ 160.803170][ T6055] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.812936][ T6055] Buffer I/O error on dev nbd5, logical block 1, async page read [ 160.846921][ T6055] ldm_validate_partition_table(): Disk read failed. [ 160.858326][ T6055] Dev nbd5: unable to read RDB block 0 [ 160.887788][ T6055] nbd5: unable to read partition table [ 160.922296][ T6055] ldm_validate_partition_table(): Disk read failed. [ 160.939695][ T6055] Dev nbd5: unable to read RDB block 0 [ 160.953175][ T6055] nbd5: unable to read partition table [ 161.902054][ T9195] __nla_validate_parse: 5 callbacks suppressed [ 161.902072][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 161.927718][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.810'. [ 161.956969][ T9199] netlink: 'syz.2.809': attribute type 1 has an invalid length. [ 161.996204][ T9199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.087106][ T9199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.094751][ T9199] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 162.107564][ T9199] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 162.189185][ T9216] x_tables: duplicate underflow at hook 1 [ 162.203758][ T9203] gretap1: entered promiscuous mode [ 162.250606][ T9217] tipc: Enabled bearer , priority 0 [ 162.312813][ T9213] syzkaller0: entered promiscuous mode [ 162.376469][ T9213] syzkaller0: entered allmulticast mode [ 162.402649][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 162.421718][ T9222] netlink: 'syz.2.816': attribute type 12 has an invalid length. [ 162.470564][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 162.479648][ T6507] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.531813][ T9213] xt_CT: No such helper "snmp" [ 162.577038][ T6506] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.603718][ T9217] tipc: Resetting bearer [ 162.634702][ T6506] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.691673][ T6506] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.730039][ T9212] tipc: Resetting bearer [ 162.767391][ T9212] tipc: Disabling bearer [ 162.819660][ T9240] tipc: Enabled bearer , priority 0 [ 162.827841][ T9239] syzkaller0: entered promiscuous mode [ 162.833896][ T9239] syzkaller0: entered allmulticast mode [ 162.927464][ T9245] tipc: Resetting bearer [ 163.027171][ T9261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.826'. [ 163.040626][ T9245] tipc: Disabling bearer [ 163.051403][ T9257] netlink: 'syz.5.824': attribute type 1 has an invalid length. [ 163.139248][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.827'. [ 163.211686][ T9257] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.599882][ T9291] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 163.619853][ T9291] netlink: 60 bytes leftover after parsing attributes in process `syz.0.834'. [ 163.631311][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'. [ 163.740047][ T9296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.762831][ T9283] xt_hashlimit: max too large, truncated to 1048576 [ 163.978539][ T9307] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 163.988208][ T9309] netlink: 36 bytes leftover after parsing attributes in process `syz.5.839'. [ 163.993329][ T9268] lo speed is unknown, defaulting to 1000 [ 164.436628][ T30] audit: type=1800 audit(1767404168.242:4): pid=9348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.843" name="blkio.bfq.time_recursive" dev="tmpfs" ino=924 res=0 errno=0 [ 164.975042][ T9357] macvlan1: entered promiscuous mode [ 165.007507][ T9357] ipvlan0: entered promiscuous mode [ 165.024818][ T9357] ipvlan0: left promiscuous mode [ 165.031706][ T9357] macvlan1: left promiscuous mode [ 165.884433][ T9402] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 166.076870][ T9412] netlink: 128 bytes leftover after parsing attributes in process `syz.5.861'. [ 166.217751][ T9421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.257775][ T9421] netlink: 'syz.1.865': attribute type 32 has an invalid length. [ 166.429345][ T9421] bond5: Setting coupled_control to off (0) [ 166.815035][ T9447] tipc: Enabled bearer , priority 0 [ 166.823514][ T9447] syzkaller0: entered promiscuous mode [ 166.831486][ T9447] syzkaller0: entered allmulticast mode [ 166.885991][ T9447] tipc: Resetting bearer [ 166.939276][ T9446] tipc: Resetting bearer [ 167.045432][ T9446] tipc: Disabling bearer [ 167.132788][ T9457] batadv2: entered promiscuous mode [ 167.253000][ T9457] __nla_validate_parse: 2 callbacks suppressed [ 167.253018][ T9457] netlink: 32 bytes leftover after parsing attributes in process `syz.4.872'. [ 167.645691][ T9474] netlink: 168 bytes leftover after parsing attributes in process `syz.2.877'. [ 167.898963][ T8855] IPVS: starting estimator thread 0... [ 167.919583][ T9483] openvswitch: netlink: Tunnel attr 285 out of range max 16 [ 168.007146][ T9484] IPVS: using max 34 ests per chain, 81600 per kthread [ 168.142653][ T9463] lo speed is unknown, defaulting to 1000 [ 168.352546][ T9490] netlink: 'syz.1.880': attribute type 11 has an invalid length. [ 168.361265][ T9490] netlink: 'syz.1.880': attribute type 11 has an invalid length. [ 168.398109][ T9490] netlink: 224 bytes leftover after parsing attributes in process `syz.1.880'. [ 168.419014][ T9492] netlink: 'syz.4.881': attribute type 1 has an invalid length. [ 168.504461][ T9495] netlink: 'syz.4.881': attribute type 6 has an invalid length. [ 168.604733][ T9496] netlink: 'syz.4.881': attribute type 6 has an invalid length. [ 168.982260][ T9505] tipc: Enabled bearer , priority 0 [ 168.989868][ T9505] syzkaller0: entered promiscuous mode [ 168.995353][ T9505] syzkaller0: entered allmulticast mode [ 169.099971][ T9505] tipc: Resetting bearer [ 169.129160][ T9504] tipc: Resetting bearer [ 169.177671][ T9504] tipc: Disabling bearer [ 171.020200][ T9434] Set syz1 is full, maxelem 65536 reached [ 194.202100][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.211880][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.281126][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 196.281362][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.290090][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 239.677931][ T9526] trusted_key: syz.4.891 sent an empty control message without MSG_MORE. [ 239.705044][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.891'. [ 239.758077][ T9530] tipc: Enabled bearer , priority 0 [ 239.790054][ T9530] syzkaller0: entered promiscuous mode [ 239.809623][ T9530] syzkaller0: entered allmulticast mode [ 239.885065][ T9541] netlink: 40 bytes leftover after parsing attributes in process `syz.4.893'. [ 239.894628][ T9541] netlink: 40 bytes leftover after parsing attributes in process `syz.4.893'. [ 239.911651][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.893'. [ 240.007319][ T9529] tipc: Resetting bearer [ 240.024140][ T9529] tipc: Disabling bearer [ 240.051919][ T9544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.894'. [ 240.251118][ T9560] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 240.258096][ T9561] netlink: 'syz.1.899': attribute type 13 has an invalid length. [ 240.267955][ T9562] netlink: 'syz.1.899': attribute type 13 has an invalid length. [ 240.467958][ T6506] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.477917][ T6506] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.490056][ T6506] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.525926][ T6506] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.572331][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'. [ 240.620259][ T9587] syzkaller0: entered promiscuous mode [ 240.625869][ T9587] syzkaller0: entered allmulticast mode [ 240.685239][ T9590] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20003 [ 240.805832][ T9594] netlink: 44 bytes leftover after parsing attributes in process `syz.1.904'. [ 240.838778][ T9567] lo speed is unknown, defaulting to 1000 [ 240.992727][ T9600] netlink: 'syz.5.908': attribute type 5 has an invalid length. [ 241.011290][ T9602] ip6gretap1: entered allmulticast mode [ 241.022639][ T9602] netlink: 'syz.2.907': attribute type 1 has an invalid length. [ 241.141578][ T9600] netlink: 208 bytes leftover after parsing attributes in process `syz.5.908'. [ 241.172970][ T9600] netlink: 'syz.5.908': attribute type 5 has an invalid length. [ 241.812531][ T9628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.915'. [ 241.940574][ T9635] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 242.052541][ T9638] netlink: 'syz.5.917': attribute type 1 has an invalid length. [ 242.063443][ T9638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.242652][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 242.315525][ T9649] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 242.879668][ T9676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.228103][ T9692] syz_tun: entered allmulticast mode [ 243.378886][ T9698] batadv1: entered promiscuous mode [ 243.884428][ T9722] bridge_slave_1: left allmulticast mode [ 243.898013][ T9722] bridge_slave_1: left promiscuous mode [ 243.934594][ T9722] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.955879][ T9722] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 244.077198][ T9699] syz_tun: left allmulticast mode [ 244.514956][ T9752] vlan2: entered promiscuous mode [ 244.539803][ T9752] vlan0: entered promiscuous mode [ 244.565344][ T9752] vlan2: entered allmulticast mode [ 244.587836][ T9752] vlan0: entered allmulticast mode [ 244.596110][ T9752] veth0_vlan: entered allmulticast mode [ 244.625480][ T9752] team0: Port device vlan2 added [ 244.730087][ T9765] __nla_validate_parse: 9 callbacks suppressed [ 244.730104][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.943'. [ 244.798704][ T9765] netlink: 'syz.5.943': attribute type 1 has an invalid length. [ 244.884559][ T9775] xt_l2tp: invalid flags combination: 8 [ 245.013799][ T9780] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 245.174330][ T9787] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 245.211127][ T9787] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 245.222877][ T9786] netlink: 64 bytes leftover after parsing attributes in process `syz.1.950'. [ 245.271585][ T9787] Bluetooth: MGMT ver 1.23 [ 245.409328][ T9795] netlink: 76 bytes leftover after parsing attributes in process `syz.1.952'. [ 245.929582][ T9825] netlink: 'syz.5.961': attribute type 4 has an invalid length. [ 245.965269][ T9832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.963'. [ 246.084830][ T9826] netlink: 84 bytes leftover after parsing attributes in process `syz.2.960'. [ 246.304304][ T9842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.966'. [ 246.390549][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'. [ 246.462826][ T9832] lo speed is unknown, defaulting to 1000 [ 246.745642][ T9854] batadv_slave_1: entered promiscuous mode [ 246.948821][ T9851] bond6: option miimon: invalid value (18446744073709551607) [ 246.976987][ T9851] bond6: option miimon: allowed values 0 - 2147483647 [ 246.989523][ T9851] bond6 (unregistering): Released all slaves [ 247.070071][ T9846] lo speed is unknown, defaulting to 1000 [ 247.296012][ T9862] syzkaller0: entered promiscuous mode [ 247.302633][ T9862] syzkaller0: entered allmulticast mode [ 248.702430][ T9877] lo speed is unknown, defaulting to 1000 [ 248.792449][ T9853] batadv_slave_1: left promiscuous mode [ 248.923768][ T9891] netlink: 'syz.1.978': attribute type 1 has an invalid length. [ 248.980658][ T9897] netlink: 156 bytes leftover after parsing attributes in process `syz.4.980'. [ 249.076957][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 249.136501][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.146090][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.190987][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.204568][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.314395][ T9905] tc_dump_action: action bad kind [ 249.993829][ T9933] netlink: 3 bytes leftover after parsing attributes in process `syz.5.987'. [ 250.080512][ T9907] lo speed is unknown, defaulting to 1000 [ 250.088356][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.987'. [ 250.120970][ T9933] netlink: 3 bytes leftover after parsing attributes in process `syz.5.987'. [ 250.156842][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.987'. [ 250.184023][ T9933] netlink: 3 bytes leftover after parsing attributes in process `syz.5.987'. [ 250.664622][ T9965] netlink: 12 bytes leftover after parsing attributes in process `syz.5.994'. [ 250.675073][ T9966] netlink: 'syz.5.994': attribute type 2 has an invalid length. [ 250.684052][ T9966] netlink: 'syz.5.994': attribute type 8 has an invalid length. [ 250.694886][ T9966] netlink: 132 bytes leftover after parsing attributes in process `syz.5.994'. [ 250.724992][ T9941] lo speed is unknown, defaulting to 1000 [ 251.370218][ T9993] tipc: Enabled bearer , priority 0 [ 251.379568][ T9993] syzkaller0: entered promiscuous mode [ 251.385059][ T9993] syzkaller0: entered allmulticast mode [ 251.409417][ T9997] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1000'. [ 251.451617][ T30] audit: type=1107 audit(1767404255.272:5): pid=9998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 251.464704][ T9993] tipc: Resetting bearer [ 251.579958][ T9991] tipc: Resetting bearer [ 251.662037][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1005'. [ 251.675377][ T9991] tipc: Disabling bearer [ 251.685585][ T9997] team0: No ports can be present during mode change [ 251.693035][T10005] netlink: 'syz.1.1004': attribute type 10 has an invalid length. [ 251.701752][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1005'. [ 251.867064][T10010] netlink: 'syz.2.1007': attribute type 39 has an invalid length. [ 251.897673][T10013] netlink: 'syz.2.1007': attribute type 39 has an invalid length. [ 252.618220][T10018] lo speed is unknown, defaulting to 1000 [ 253.818620][T10062] lo speed is unknown, defaulting to 1000 [ 254.594756][T10114] netlink: 'syz.2.1036': attribute type 6 has an invalid length. [ 254.726523][T10120] netlink: 'syz.2.1037': attribute type 46 has an invalid length. [ 254.727215][T10121] nbd: socks must be embedded in a SOCK_ITEM attr [ 254.796813][T10127] syzkaller0: entered promiscuous mode [ 254.812535][T10127] syzkaller0: entered allmulticast mode [ 254.850359][T10124] tipc: Enabled bearer , priority 0 [ 254.878680][T10107] lo speed is unknown, defaulting to 1000 [ 254.893111][T10124] syzkaller0: entered promiscuous mode [ 254.937207][T10124] syzkaller0: entered allmulticast mode [ 255.025004][T10124] tipc: Resetting bearer [ 255.033894][T10123] tipc: Resetting bearer [ 255.074312][T10123] tipc: Disabling bearer [ 255.400262][T10150] __nla_validate_parse: 7 callbacks suppressed [ 255.400280][T10150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1044'. [ 255.540804][T10151] bond0: Caught tx_queue_len zero misconfig [ 255.546610][T10106] lo speed is unknown, defaulting to 1000 [ 255.709691][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.716123][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.349506][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 256.363313][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1050'. [ 256.514764][T10170] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 256.543331][T10169] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.597336][ T5154] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 257.436785][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'. [ 257.846845][T10197] lo speed is unknown, defaulting to 1000 [ 258.131540][T10213] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1060'. [ 258.248614][T10215] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1061'. [ 259.127349][T10240] bond0: (slave gre0): Error: Device type is different from other slaves [ 259.177112][T10241] bond0: (slave gre0): Error: Device type is different from other slaves [ 259.260077][T10246] team_slave_0: entered promiscuous mode [ 259.266086][T10246] team_slave_1: entered promiscuous mode [ 259.337025][T10253] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1070'. [ 259.346184][T10221] lo speed is unknown, defaulting to 1000 [ 259.375642][ T5154] Bluetooth: hci4: link tx timeout [ 259.382737][ T5154] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 259.393601][ T5154] Bluetooth: hci4: link tx timeout [ 259.400618][ T5154] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 259.409177][ T5154] Bluetooth: hci4: link tx timeout [ 259.414306][ T5154] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 260.681462][T10303] syzkaller0: entered promiscuous mode [ 260.703182][T10303] syzkaller0: entered allmulticast mode [ 261.476991][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 261.755432][T10139] Set syz1 is full, maxelem 65536 reached [ 262.721784][T10349] dvmrp1: left allmulticast mode [ 262.746536][T10348] netlink: 'syz.4.1088': attribute type 1 has an invalid length. [ 262.888783][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 262.925362][T10359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1093'. [ 262.935052][T10354] netlink: 'syz.2.1091': attribute type 30 has an invalid length. [ 263.003756][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1094'. [ 263.048940][T10370] bridge2: port 1(ip6gretap2) entered blocking state [ 263.058889][T10370] bridge2: port 1(ip6gretap2) entered disabled state [ 263.065996][T10370] ip6gretap2: entered allmulticast mode [ 263.078057][T10370] ip6gretap2: entered promiscuous mode [ 263.143852][T10359] bridge2: port 2(veth1) entered blocking state [ 263.151255][T10359] bridge2: port 2(veth1) entered disabled state [ 263.154606][T10378] netlink: 'syz.5.1098': attribute type 32 has an invalid length. [ 263.158438][T10359] veth1: entered allmulticast mode [ 263.186289][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 263.201507][T10359] veth1: entered promiscuous mode [ 263.208237][T10359] bridge2: port 2(veth1) entered blocking state [ 263.214768][T10359] bridge2: port 2(veth1) entered forwarding state [ 263.238418][T10374] IPVS: set_ctl: invalid protocol: 58234 224.0.0.2:20002 [ 263.351563][T10389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1102'. [ 263.411030][T10393] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1103'. [ 263.660741][ T6507] bridge2: port 2(veth1) entered disabled state [ 263.803366][T10419] --map-set only usable from mangle table [ 264.156651][T10436] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 264.175241][ T8855] lo speed is unknown, defaulting to 1000 [ 264.181342][T10440] tipc: Enabled bearer , priority 0 [ 264.185441][T10440] tipc: Resetting bearer [ 264.214926][T10438] tipc: Disabling bearer [ 264.262741][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1118'. [ 264.761580][ T1008] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 264.789048][T10441] lo speed is unknown, defaulting to 1000 [ 264.796798][ T1008] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 265.410612][T10495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1130'. [ 265.436077][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1130'. [ 265.443105][T10463] lo speed is unknown, defaulting to 1000 [ 265.623958][T10468] netlink: 'syz.5.1123': attribute type 1 has an invalid length. [ 265.828736][T10468] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 266.187470][T10522] syzkaller0: entered promiscuous mode [ 266.199117][T10522] syzkaller0: entered allmulticast mode [ 266.594244][T10536] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1142'. [ 266.653919][T10539] syzkaller0: entered promiscuous mode [ 266.671745][T10539] syzkaller0: entered allmulticast mode [ 266.938548][T10554] team0: Port device bridge3 added [ 266.980111][T10554] bridge0: port 3(team0) entered blocking state [ 266.987026][T10554] bridge0: port 3(team0) entered disabled state [ 266.993450][T10554] team0: entered allmulticast mode [ 267.002514][T10554] team_slave_0: entered allmulticast mode [ 267.009207][T10554] team_slave_1: entered allmulticast mode [ 267.017973][ T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf06 [ 267.023740][T10554] bridge3: entered allmulticast mode [ 267.034722][T10554] team0: entered promiscuous mode [ 267.044770][T10554] team_slave_0: entered promiscuous mode [ 267.051476][T10554] team_slave_1: entered promiscuous mode [ 267.057727][T10554] bridge3: entered promiscuous mode [ 267.236002][T10559] lo speed is unknown, defaulting to 1000 [ 267.885394][T10585] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.898565][T10585] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 267.928262][T10588] pimreg1: tun_chr_ioctl cmd 1074025677 [ 267.941614][T10588] pimreg1: linktype set to 804 [ 267.972727][T10585] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.982821][T10585] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 268.062835][T10585] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.076925][T10585] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 268.125660][T10585] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.159629][T10585] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 268.274079][ T1008] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.306731][ T1008] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 268.307258][T10610] __nla_validate_parse: 1 callbacks suppressed [ 268.307272][T10610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1160'. [ 268.344195][ T1008] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.368604][ T1008] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 268.416666][ T1008] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.436636][ T1008] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 268.484789][ T1008] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.493399][ T1008] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 268.527034][T10614] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1162'. [ 268.582245][T10616] netlink: 'syz.2.1163': attribute type 1 has an invalid length. [ 268.623993][T10619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.674353][T10619] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1164'. [ 268.677265][T10620] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 268.721296][T10624] raw_sendmsg: syz.0.1164 forgot to set AF_INET. Fix it! [ 268.875164][T10634] mac80211_hwsim hwsim2 ªªªªª;: renamed from wlan0 [ 269.135443][T10649] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1171'. [ 269.154792][T10649] nbd: must specify at least one socket [ 269.162883][T10650] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1171'. [ 269.173014][T10650] nbd: must specify at least one socket [ 269.179610][T10655] netlink: 'syz.2.1172': attribute type 1 has an invalid length. [ 269.213866][T10655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.237114][T10656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.377765][T10668] netlink: 'syz.1.1175': attribute type 33 has an invalid length. [ 269.394680][T10668] tipc: Enabled bearer , priority 0 [ 269.403530][T10668] syzkaller0: entered promiscuous mode [ 269.411172][T10668] syzkaller0: entered allmulticast mode [ 269.421711][T10668] netlink: 'syz.1.1175': attribute type 6 has an invalid length. [ 269.432076][T10668] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1175'. [ 269.457427][T10665] tipc: Resetting bearer [ 269.499086][T10665] tipc: Disabling bearer [ 269.615702][T10678] veth0_to_batadv: entered allmulticast mode [ 269.637676][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1179'. [ 269.646150][T10682] syzkaller0: entered promiscuous mode [ 269.652371][T10682] syzkaller0: entered allmulticast mode [ 269.670715][T10682] netlink: 'syz.1.1180': attribute type 10 has an invalid length. [ 269.680315][T10682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1180'. [ 269.694980][T10682] geneve0: entered promiscuous mode [ 269.704687][T10682] geneve0: entered allmulticast mode [ 269.712250][T10682] team0: Failed to send options change via netlink (err -105) [ 269.720386][T10682] team0: Port device geneve0 added [ 269.726277][ T6471] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.738926][ T6471] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.751717][ T6471] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.777831][ T6471] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.276610][ T5154] Bluetooth: hci4: command 0x0405 tx timeout [ 270.394228][T10721] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 270.423749][T10722] tipc: Enabled bearer , priority 0 [ 270.462840][T10723] syzkaller0: entered promiscuous mode [ 270.499031][T10723] syzkaller0: entered allmulticast mode [ 270.544662][T10727] xt_TCPMSS: Only works on TCP SYN packets [ 270.615212][T10723] tipc: Resetting bearer [ 270.688347][T10731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.724567][T10723] tipc: Disabling bearer [ 270.852600][T10735] : entered promiscuous mode [ 270.909801][T10735] netlink: 'syz.2.1194': attribute type 21 has an invalid length. [ 270.920720][T10735] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1194'. [ 270.984594][T10740] netlink: 'syz.5.1193': attribute type 1 has an invalid length. [ 271.399128][T10738] bond1: left promiscuous mode [ 271.403948][T10738] bond1: left allmulticast mode [ 271.409415][T10738] bridge1: left allmulticast mode [ 271.414706][T10738] macsec1: left promiscuous mode [ 271.419889][T10738] macsec1: left allmulticast mode [ 271.426101][T10738] geneve2: left promiscuous mode [ 271.470641][ T8855] lo speed is unknown, defaulting to 1000 [ 271.477672][ T8855] syz2: Port: 1 Link DOWN [ 271.499896][ T6471] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.515182][ T6471] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 271.551283][T10760] ip6erspan1: entered allmulticast mode [ 271.653074][T10758] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.665096][T10758] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 271.699762][ T6471] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.710460][ T6471] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 271.722215][ T6471] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.741489][ T6471] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 271.768887][ T6471] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.774435][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1203'. [ 271.803683][ T6471] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 271.869761][T10758] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.883711][T10758] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 272.011950][T10758] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.022683][T10758] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 272.118958][T10758] team0: Port device netdevsim0 removed [ 272.154814][T10758] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.169358][T10758] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 272.213865][T10793] bond2: left promiscuous mode [ 272.219567][T10793] geneve2: left promiscuous mode [ 272.835300][T10828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.146703][T10848] netlink: 'syz.0.1224': attribute type 1 has an invalid length. [ 273.206926][T10848] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.269470][T10853] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.286177][T10853] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 273.298361][T10853] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 273.333878][T10830] lo speed is unknown, defaulting to 1000 [ 273.355047][T10848] gretap1: entered promiscuous mode [ 273.369764][T10848] x_tables: duplicate underflow at hook 1 [ 273.386067][T10856] macvlan0: entered promiscuous mode [ 273.391656][T10856] macvlan0: entered allmulticast mode [ 273.400301][T10856] bond3: entered promiscuous mode [ 273.406797][T10856] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 273.422274][T10856] bond3: left promiscuous mode [ 273.464175][T10863] wg1 speed is unknown, defaulting to 1000 [ 273.484259][T10863] wg1 speed is unknown, defaulting to 1000 [ 273.530291][T10863] wg1 speed is unknown, defaulting to 1000 [ 273.574233][T10863] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 273.697653][T10863] wg1 speed is unknown, defaulting to 1000 [ 273.711524][T10863] wg1 speed is unknown, defaulting to 1000 [ 273.733945][T10863] wg1 speed is unknown, defaulting to 1000 [ 273.751501][T10863] wg1 speed is unknown, defaulting to 1000 [ 273.761424][T10863] wg1 speed is unknown, defaulting to 1000 [ 273.779354][T10863] wg1 speed is unknown, defaulting to 1000 [ 273.788408][T10863] wg1 speed is unknown, defaulting to 1000 [ 273.797289][T10863] wg1 speed is unknown, defaulting to 1000 [ 273.891147][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.891231][T10879] __nla_validate_parse: 6 callbacks suppressed [ 273.891244][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'. [ 273.900687][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 273.955950][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.967644][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 273.985471][ T6471] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.993938][T10868] lo speed is unknown, defaulting to 1000 [ 274.002340][ T6471] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 274.110890][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.121415][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 274.459825][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 274.503304][T10895] netlink: 'syz.1.1236': attribute type 13 has an invalid length. [ 274.561683][ T3778] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.581105][ T3778] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.654140][ T3778] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.691430][ T3778] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.889632][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 274.929943][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'. [ 274.970852][T10919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1241'. [ 275.060593][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1243'. [ 275.322522][T10941] pim6reg1: entered promiscuous mode [ 275.338029][T10941] pim6reg1: entered allmulticast mode [ 275.548198][T10930] lo speed is unknown, defaulting to 1000 [ 275.555719][T10930] wg1 speed is unknown, defaulting to 1000 [ 275.747109][T10960] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1253'. [ 276.143075][T10974] syzkaller1: entered promiscuous mode [ 276.148987][T10974] syzkaller1: entered allmulticast mode [ 276.257090][T10978] ieee802154 phy0 wpan0: encryption failed: -22 [ 276.441945][T10983] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 276.816619][T10991] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 277.079608][T10998] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 277.707312][T10994] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 277.789416][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'. [ 278.137688][T11034] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.1273'. [ 278.371824][T11052] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1277'. [ 279.055936][T11075] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1282'. [ 279.079544][T11075] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1282'. [ 279.182705][T11075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.342400][T11092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1285'. [ 279.405024][T11082] lo speed is unknown, defaulting to 1000 [ 279.413004][T11082] wg1 speed is unknown, defaulting to 1000 [ 279.607940][T11101] netlink: 'syz.2.1287': attribute type 11 has an invalid length. [ 279.616590][T11101] netlink: 'syz.2.1287': attribute type 8 has an invalid length. [ 279.625902][T11108] netlink: 'syz.0.1289': attribute type 1 has an invalid length. [ 279.687713][T11111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1289'. [ 279.761332][T11111] 8021q: adding VLAN 0 to HW filter on device bond4 [ 279.857333][T11108] 8021q: adding VLAN 0 to HW filter on device bond4 [ 279.945498][T11108] bond4: (slave geneve3): making interface the new active one [ 280.024927][T11108] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 280.048204][ T6507] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 280.067372][ T6507] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 280.099600][ T6507] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 280.137570][ T6507] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 280.817720][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1300'. [ 281.075688][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1304'. [ 281.564350][T11181] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1308'. [ 281.852386][T11171] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 282.178243][T11192] netlink: 'syz.5.1312': attribute type 2 has an invalid length. [ 282.237367][T11196] netlink: 'syz.1.1310': attribute type 1 has an invalid length. [ 282.309737][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1310'. [ 282.381885][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1312'. [ 282.532267][T11196] 8021q: adding VLAN 0 to HW filter on device bond6 [ 282.597640][T11198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1311'. [ 282.978538][T11202] veth3: entered promiscuous mode [ 283.097336][T11210] ¾x9ÿ: left allmulticast mode [ 283.102324][T11210] ¾x9ÿ: left promiscuous mode [ 283.122878][T11210] bridge0: port 1(1¾x9ÿ) entered disabled state [ 283.220489][T11210] bond0: (slave bond_slave_0): Releasing backup interface [ 283.277642][T11210] bond0: (slave bond_slave_1): Releasing backup interface [ 283.315044][T11210] team0: Port device team_slave_0 removed [ 283.348122][T11210] team0: Port device team_slave_1 removed [ 283.357528][T11210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.378002][T11210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.398057][T11210] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 283.739662][T11240] netlink: 'syz.5.1321': attribute type 10 has an invalid length. [ 283.795618][T11240] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 284.181902][T11229] lo speed is unknown, defaulting to 1000 [ 284.208177][T11229] wg1 speed is unknown, defaulting to 1000 [ 284.419981][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1324'. [ 284.536776][T11255] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1324'. [ 284.723253][T11244] lo speed is unknown, defaulting to 1000 [ 284.751193][T11259] veth6: entered allmulticast mode [ 284.909308][T11257] netlink: 'syz.0.1325': attribute type 15 has an invalid length. [ 284.949692][T11244] wg1 speed is unknown, defaulting to 1000 [ 285.173661][T11253] lo speed is unknown, defaulting to 1000 [ 285.200861][T11253] wg1 speed is unknown, defaulting to 1000 [ 286.202613][T11318] pim6reg: entered allmulticast mode [ 286.222919][T11318] pim6reg: left allmulticast mode [ 286.365777][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 286.708402][T11350] bridge0: port 4(macvtap1) entered blocking state [ 286.715166][T11350] bridge0: port 4(macvtap1) entered disabled state [ 286.723129][T11350] macvtap1: entered allmulticast mode [ 286.729986][T11350] bridge0: entered allmulticast mode [ 286.738386][T11350] macvtap1: left allmulticast mode [ 286.755394][T11350] bridge0: left allmulticast mode [ 286.879811][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1353'. [ 286.935194][T11364] syz.2.1351 (11364) used obsolete PPPIOCDETACH ioctl [ 287.158472][T11377] syzkaller1: entered promiscuous mode [ 287.170361][T11377] syzkaller1: entered allmulticast mode [ 287.466946][T11390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1360'. [ 287.961309][T11378] lo speed is unknown, defaulting to 1000 [ 288.010392][T11378] wg1 speed is unknown, defaulting to 1000 [ 288.167639][T11419] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1369'. [ 288.214875][T11419] openvswitch: netlink: Flow key attr not present in new flow. [ 289.071352][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 289.326432][T11445] lo speed is unknown, defaulting to 1000 [ 289.334096][T11445] wg1 speed is unknown, defaulting to 1000 [ 289.773269][T11471] lo speed is unknown, defaulting to 1000 [ 289.782707][T11471] wg1 speed is unknown, defaulting to 1000 [ 289.821922][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1383'. [ 290.168005][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 290.218201][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 290.241393][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 290.251575][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 290.262194][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 290.272044][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 290.282741][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 290.293223][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 290.302632][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 291.272493][T11535] lo speed is unknown, defaulting to 1000 [ 291.280580][T11535] wg1 speed is unknown, defaulting to 1000 [ 291.589860][T11547] lo speed is unknown, defaulting to 1000 [ 291.597704][T11547] wg1 speed is unknown, defaulting to 1000 [ 292.993217][T11614] syzkaller1: entered promiscuous mode [ 293.019784][T11614] syzkaller1: entered allmulticast mode [ 293.161720][T11623] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 293.174523][T11623] macvtap1: entered promiscuous mode [ 293.184544][T11623] macvtap1: entered allmulticast mode [ 293.190227][T11623] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 293.213657][T11626] netlink: 'syz.0.1419': attribute type 2 has an invalid length. [ 293.243366][T11624] macvtap1: left promiscuous mode [ 293.267343][T11624] macvtap1: left allmulticast mode [ 293.277014][T11624] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 293.354566][T11634] netlink: 'syz.1.1421': attribute type 7 has an invalid length. [ 293.431909][T11641] tipc: New replicast peer: 255.255.255.255 [ 293.471423][T11641] tipc: Enabled bearer , priority 10 [ 293.513981][T11642] netlink: 'syz.0.1423': attribute type 11 has an invalid length. [ 293.524327][T11642] netlink: 'syz.0.1423': attribute type 11 has an invalid length. [ 293.833738][T11668] netlink: 'syz.2.1433': attribute type 12 has an invalid length. [ 293.837513][T11670] netlink: 'syz.0.1429': attribute type 3 has an invalid length. [ 293.888483][T11670] netlink: 'syz.0.1429': attribute type 1 has an invalid length. [ 294.171950][T11695] pimreg: entered allmulticast mode [ 294.597088][ T8860] tipc: Node number set to 3452503291 [ 294.637235][T11667] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 294.643512][T11667] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 294.658122][T11667] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 294.667980][T11667] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 294.681750][T11667] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 294.710466][T11667] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 294.899186][T11667] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 294.923624][T11667] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 295.148161][T11707] __nla_validate_parse: 115 callbacks suppressed [ 295.148179][T11707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1441'. [ 295.178573][T11707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1441'. [ 295.609017][T11729] batadv_slave_1: entered promiscuous mode [ 295.635499][T11728] batadv_slave_1: left promiscuous mode [ 295.883785][T11737] tipc: Enabled bearer , priority 0 [ 295.974462][T11737] syzkaller0: entered promiscuous mode [ 295.986447][T11737] syzkaller0: entered allmulticast mode [ 295.997099][T11737] tipc: Resetting bearer [ 296.050744][T11735] tipc: Resetting bearer [ 296.077583][T11744] netlink: 'syz.4.1453': attribute type 10 has an invalid length. [ 296.737970][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 297.622637][T11735] tipc: Disabling bearer [ 297.631760][T11727] lo speed is unknown, defaulting to 1000 [ 297.712208][ T8855] tipc: Node number set to 3968660708 [ 297.719354][T11727] wg1 speed is unknown, defaulting to 1000 [ 297.771714][T11772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.893616][T11780] netlink: 'syz.4.1461': attribute type 83 has an invalid length. [ 297.911125][T11780] netlink: 'syz.4.1461': attribute type 83 has an invalid length. [ 297.924735][T11776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1460'. [ 297.934188][T11780] netlink: 'syz.4.1461': attribute type 83 has an invalid length. [ 297.944277][T11780] netlink: 'syz.4.1461': attribute type 83 has an invalid length. [ 297.955982][T11776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1460'. [ 297.977069][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1460'. [ 298.017382][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1463'. [ 298.922967][T11816] validate_nla: 62 callbacks suppressed [ 298.922986][T11816] netlink: 'syz.0.1470': attribute type 15 has an invalid length. [ 299.205085][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'. [ 299.415273][T11839] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 299.598534][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1483'. [ 299.771349][T11872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1488'. [ 299.800171][T11873] nbd: couldn't find a device at index 0 [ 300.160233][T11900] __nla_validate_parse: 2 callbacks suppressed [ 300.160252][T11900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1497'. [ 300.186703][T11896] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1494'. [ 300.269274][T11900] sctp: [Deprecated]: syz.1.1497 (pid 11900) Use of int in max_burst socket option deprecated. [ 300.269274][T11900] Use struct sctp_assoc_value instead [ 300.560430][T11884] lo speed is unknown, defaulting to 1000 [ 300.589850][T11884] wg1 speed is unknown, defaulting to 1000 [ 300.665452][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1500'. [ 300.843854][T11933] IPVS: Scheduler module ip_vs_sip not found [ 300.935407][T11938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1505'. [ 301.000405][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1504'. [ 301.307934][T11959] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1510'. [ 301.335102][T11961] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 301.353756][T11961] CPU: 1 UID: 0 PID: 11961 Comm: syz.2.1512 Not tainted syzkaller #0 PREEMPT(full) [ 301.353784][T11961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.353804][T11961] Call Trace: [ 301.353812][T11961] [ 301.353821][T11961] dump_stack_lvl+0xe8/0x150 [ 301.353857][T11961] sysfs_warn_dup+0x8e/0xa0 [ 301.353881][T11961] sysfs_do_create_link_sd+0xc0/0x110 [ 301.353905][T11961] device_add_class_symlinks+0x1cf/0x240 [ 301.353931][T11961] device_add+0x475/0xb80 [ 301.353956][T11961] wiphy_register+0x1d2e/0x2d20 [ 301.354003][T11961] ? __pfx_wiphy_register+0x10/0x10 [ 301.354031][T11961] ? __pfx_netdev_run_todo+0x10/0x10 [ 301.354056][T11961] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 301.354088][T11961] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 301.354119][T11961] ieee80211_register_hw+0x34a7/0x4110 [ 301.354159][T11961] ? ieee80211_register_hw+0x1411/0x4110 [ 301.354192][T11961] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 301.354233][T11961] ? __hrtimer_setup+0x181/0x200 [ 301.354257][T11961] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 301.354284][T11961] mac80211_hwsim_new_radio+0x2f6d/0x52f0 [ 301.354336][T11961] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 301.354356][T11961] ? kstrndup+0xbf/0x160 [ 301.354388][T11961] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 301.354415][T11961] ? __pfx___nla_validate_parse+0x10/0x10 [ 301.354453][T11961] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 301.354482][T11961] ? rcu_is_watching+0x15/0xb0 [ 301.354510][T11961] ? __nla_parse+0x40/0x60 [ 301.354543][T11961] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 301.354571][T11961] genl_family_rcv_msg_doit+0x215/0x300 [ 301.354598][T11961] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 301.354632][T11961] ? bpf_lsm_capable+0x9/0x20 [ 301.354655][T11961] ? security_capable+0x7e/0x2e0 [ 301.354686][T11961] genl_rcv_msg+0x60e/0x790 [ 301.354711][T11961] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.354730][T11961] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 301.354766][T11961] netlink_rcv_skb+0x208/0x470 [ 301.354793][T11961] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.354813][T11961] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 301.354835][T11961] ? genl_rcv+0x19/0x40 [ 301.354881][T11961] ? down_read+0x274/0x2e0 [ 301.354902][T11961] ? genl_rcv+0xd/0x40 [ 301.354932][T11961] genl_rcv+0x28/0x40 [ 301.354960][T11961] netlink_unicast+0x82f/0x9e0 [ 301.354992][T11961] ? __pfx_netlink_unicast+0x10/0x10 [ 301.355014][T11961] ? __alloc_skb+0x198/0x3a0 [ 301.355035][T11961] ? netlink_sendmsg+0x642/0xb30 [ 301.355059][T11961] ? skb_put+0x11b/0x210 [ 301.355084][T11961] netlink_sendmsg+0x805/0xb30 [ 301.355120][T11961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.355149][T11961] ? aa_sock_msg_perm+0xf1/0x1b0 [ 301.355177][T11961] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.355195][T11961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.355222][T11961] __sock_sendmsg+0x21c/0x270 [ 301.355254][T11961] ____sys_sendmsg+0x505/0x820 [ 301.355284][T11961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.355319][T11961] ? import_iovec+0x74/0xa0 [ 301.355361][T11961] ___sys_sendmsg+0x21f/0x2a0 [ 301.355388][T11961] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.355420][T11961] ? futex_wake+0x4b2/0x560 [ 301.355471][T11961] ? __fget_files+0x2a/0x420 [ 301.355495][T11961] ? __fget_files+0x3a0/0x420 [ 301.355542][T11961] __x64_sys_sendmsg+0x19b/0x260 [ 301.355568][T11961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.355602][T11961] ? rcu_is_watching+0x15/0xb0 [ 301.355639][T11961] do_syscall_64+0xec/0xf80 [ 301.355657][T11961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.355674][T11961] ? trace_irq_disable+0x37/0x100 [ 301.355700][T11961] ? clear_bhb_loop+0x60/0xb0 [ 301.355723][T11961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.355742][T11961] RIP: 0033:0x7fdcddb8f749 [ 301.355759][T11961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.355783][T11961] RSP: 002b:00007fdcdeac0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.355812][T11961] RAX: ffffffffffffffda RBX: 00007fdcddde5fa0 RCX: 00007fdcddb8f749 [ 301.355827][T11961] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007 [ 301.355839][T11961] RBP: 00007fdcddc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 301.355852][T11961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.355864][T11961] R13: 00007fdcddde6038 R14: 00007fdcddde5fa0 R15: 00007fff78f75468 [ 301.355898][T11961] [ 301.799464][T11963] netlink: 'syz.1.1511': attribute type 10 has an invalid length. [ 301.825371][T11963] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1511'. [ 301.835072][T11963] bond0: entered promiscuous mode [ 301.840336][T11963] bond_slave_0: entered promiscuous mode [ 301.849961][T11963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.872648][T11963] bridge0: port 4(bond0) entered blocking state [ 301.879843][T11963] bridge0: port 4(bond0) entered disabled state [ 301.886298][T11963] bond0: entered allmulticast mode [ 301.893055][T11963] bond_slave_0: entered allmulticast mode [ 301.924598][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.184414][T11974] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1514'. [ 302.507736][T12002] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1522'. [ 302.519764][T12004] netlink: 'syz.5.1521': attribute type 4 has an invalid length. [ 302.747818][T12011] bridge0: port 4(bond0) entered blocking state [ 302.754229][T12011] bridge0: port 4(bond0) entered forwarding state [ 302.770743][T12011] bridge0: port 3(team0) entered blocking state [ 302.777204][T12011] bridge0: port 3(team0) entered forwarding state [ 302.802631][T12011] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.867221][T12011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.960894][T12016] syzkaller1: entered promiscuous mode [ 302.971885][T12016] syzkaller1: entered allmulticast mode [ 303.233106][T12010] syzkaller0: entered promiscuous mode [ 303.239345][T12010] syzkaller0: entered allmulticast mode [ 303.570082][T12035] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1534'. [ 303.751109][T12051] bridge0: entered promiscuous mode [ 303.790133][T12051] bridge0: port 5(macvtap1) entered blocking state [ 303.817555][T12051] bridge0: port 5(macvtap1) entered disabled state [ 303.840754][T12051] macvtap1: entered allmulticast mode [ 303.846599][T12051] bridge0: entered allmulticast mode [ 303.853612][T12051] macvtap1: left allmulticast mode [ 303.859572][T12051] bridge0: left allmulticast mode [ 303.873184][T12051] bridge0: left promiscuous mode [ 303.935790][T12055] netlink: 'syz.0.1538': attribute type 21 has an invalid length. [ 304.205887][T12078] netlink: 'syz.5.1543': attribute type 1 has an invalid length. [ 304.240391][T12078] netlink: 'syz.5.1543': attribute type 1 has an invalid length. [ 304.373103][T12086] bond7 (unregistering): Released all slaves [ 304.778682][T12110] team0: No ports can be present during mode change [ 304.898576][T12120] syzkaller0: entered promiscuous mode [ 304.919980][T12120] syzkaller0: entered allmulticast mode [ 305.234273][T12133] __nla_validate_parse: 13 callbacks suppressed [ 305.234293][T12133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1555'. [ 305.291873][T12135] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1557'. [ 305.367487][T12135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1557'. [ 305.386667][T12135] nbd: must specify a size in bytes for the device [ 305.502800][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'. [ 305.512400][T12139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.551805][T12150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1562'. [ 305.948933][T12177] netlink: 'syz.2.1569': attribute type 1 has an invalid length. [ 305.987618][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1569'. [ 306.018763][T12184] netlink: 'syz.5.1572': attribute type 3 has an invalid length. [ 306.048010][T12184] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1572'. [ 306.082807][T12184] netlink: 'syz.5.1572': attribute type 2 has an invalid length. [ 306.094184][T12184] netlink: 'syz.5.1572': attribute type 2 has an invalid length. [ 306.223833][T12203] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1577'. [ 306.237403][T12203] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1577'. [ 306.441044][T12213] netlink: 'syz.1.1581': attribute type 15 has an invalid length. [ 306.454476][T12214] syzkaller0: entered promiscuous mode [ 306.461011][T12213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1581'. [ 306.471819][T12214] syzkaller0: entered allmulticast mode [ 306.518004][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.789461][T12227] netlink: 'syz.1.1585': attribute type 21 has an invalid length. [ 306.857676][T12215] lo speed is unknown, defaulting to 1000 [ 306.865324][T12215] wg1 speed is unknown, defaulting to 1000 [ 307.401739][ T8857] IPVS: starting estimator thread 0... [ 307.443539][T12154] udevd[12154]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 307.456755][T12219] lo speed is unknown, defaulting to 1000 [ 307.474737][T12219] wg1 speed is unknown, defaulting to 1000 [ 307.503076][T12249] IPVS: using max 29 ests per chain, 69600 per kthread [ 307.524804][T12255] tipc: Enabled bearer , priority 0 [ 307.533053][T12245] udevd[12245]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 307.579876][T12258] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 307.580733][T12253] geneve0: entered promiscuous mode [ 307.615634][T12253] geneve0: entered allmulticast mode [ 307.750275][T12255] tipc: Disabling bearer [ 308.281986][T12250] lo speed is unknown, defaulting to 1000 [ 308.398734][T12250] wg1 speed is unknown, defaulting to 1000 [ 309.162351][T12309] netlink: 'syz.0.1605': attribute type 1 has an invalid length. [ 309.261657][T12312] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 309.269415][T12312] syzkaller1: linktype set to 778 [ 309.514856][T12322] tipc: Enabled bearer , priority 0 [ 309.575412][T12322] tipc: Disabling bearer [ 309.699115][T12342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.893311][T12349] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 310.284057][T12372] netlink: 'syz.4.1621': attribute type 1 has an invalid length. [ 310.307501][T12359] bridge0: port 4(bond0) entered disabled state [ 310.314040][T12359] bridge0: port 3(team0) entered disabled state [ 310.382371][T12359] veth3: left promiscuous mode [ 310.433008][T12372] 8021q: adding VLAN 0 to HW filter on device bond5 [ 310.471871][T12375] bond5: (slave ip6gretap2): making interface the new active one [ 310.481974][T12375] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 310.579150][T12388] __nla_validate_parse: 5 callbacks suppressed [ 310.579167][T12388] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1627'. [ 310.592669][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1626'. [ 310.624328][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 310.659107][T12388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1627'. [ 310.705039][T12385] syz.1.1625 (12385) used greatest stack depth: 17688 bytes left [ 310.810116][T12402] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1629'. [ 310.827036][T12402] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1629'. [ 311.305677][T12428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1634'. [ 311.633199][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1640'. [ 311.759806][T12464] netlink: 'syz.5.1644': attribute type 1 has an invalid length. [ 311.812309][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1643'. [ 311.835481][T12467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1643'. [ 311.875299][T12473] openvswitch: netlink: Message has 4 unknown bytes. [ 311.885818][T12466] 8021q: adding VLAN 0 to HW filter on device bond4 [ 312.518359][T12508] netlink: 'syz.1.1658': attribute type 1 has an invalid length. [ 312.528074][T12508] tipc: Enabling of bearer rejected, failed to enable media [ 312.840332][T12495] lo speed is unknown, defaulting to 1000 [ 312.850944][T12495] wg1 speed is unknown, defaulting to 1000 [ 313.517528][T12533] lo speed is unknown, defaulting to 1000 [ 313.560455][T12533] wg1 speed is unknown, defaulting to 1000 [ 313.570117][T12575] netlink: 'syz.0.1670': attribute type 10 has an invalid length. [ 313.586672][T12537] netlink: 'syz.1.1663': attribute type 2 has an invalid length. [ 313.652710][T12563] block nbd3: server does not support multiple connections per device. [ 313.693930][T12563] block nbd3: shutting down sockets [ 314.352877][T12614] tipc: Enabled bearer , priority 0 [ 314.363656][T12614] syzkaller0: entered promiscuous mode [ 314.372410][T12614] syzkaller0: entered allmulticast mode [ 314.383357][T12614] tipc: Resetting bearer [ 314.398253][T12613] tipc: Resetting bearer [ 314.427690][T12613] tipc: Disabling bearer [ 314.818680][T12636] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 314.915670][T12647] syzkaller0: entered promiscuous mode [ 314.923007][T12647] syzkaller0: entered allmulticast mode [ 315.100425][T12655] tipc: Enabled bearer , priority 0 [ 315.109490][T12655] syzkaller0: entered promiscuous mode [ 315.114978][T12655] syzkaller0: entered allmulticast mode [ 315.125903][T12655] tipc: Resetting bearer [ 315.142792][T12655] tipc: Disabling bearer [ 316.625962][T12706] lo speed is unknown, defaulting to 1000 [ 316.633544][T12706] wg1 speed is unknown, defaulting to 1000 [ 316.775221][T12722] netlink: zone id is out of range [ 316.809395][T12722] netlink: zone id is out of range [ 316.816741][T12722] netlink: zone id is out of range [ 316.822849][T12722] netlink: zone id is out of range [ 316.849559][T12722] netlink: zone id is out of range [ 316.868466][T12722] netlink: zone id is out of range [ 316.873954][T12707] can: request_module (can-proto-0) failed. [ 316.913131][T12722] netlink: zone id is out of range [ 316.929313][T12722] netlink: zone id is out of range [ 316.967905][T12722] netlink: zone id is out of range [ 316.973075][T12722] netlink: zone id is out of range [ 317.238090][T12735] __nla_validate_parse: 15 callbacks suppressed [ 317.238110][T12735] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1713'. [ 317.366707][T12735] nbd3: detected capacity change from 0 to 127 [ 317.389543][ T5154] block nbd3: Receive control failed (result -104) [ 317.390410][T12154] block nbd3: Send control failed (result -32) [ 317.489373][T12154] block nbd3: Request send failed, requeueing [ 317.580291][ T25] block nbd3: Dead connection, failed to find a fallback [ 317.588985][ T25] block nbd3: shutting down sockets [ 317.594378][ T25] blk_print_req_error: 138 callbacks suppressed [ 317.594396][ T25] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.613007][ T25] buffer_io_error: 138 callbacks suppressed [ 317.613023][ T25] Buffer I/O error on dev nbd3, logical block 1, async page read [ 317.628245][T12154] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.638476][T12154] Buffer I/O error on dev nbd3, logical block 2, async page read [ 317.646281][T12154] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.665142][T12154] Buffer I/O error on dev nbd3, logical block 3, async page read [ 317.719959][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1720'. [ 317.761445][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1721'. [ 317.788938][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 317.822120][T12775] netlink: 'syz.2.1721': attribute type 13 has an invalid length. [ 317.887689][T12775] netlink: 'syz.2.1721': attribute type 11 has an invalid length. [ 317.929736][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 317.992498][T12784] netlink: 'syz.0.1723': attribute type 3 has an invalid length. [ 318.009329][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1726'. [ 318.018139][T12784] netlink: 'syz.0.1723': attribute type 1 has an invalid length. [ 318.038688][T12784] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1723'. [ 318.080139][T12796] gre0: entered promiscuous mode [ 318.097022][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1726'. [ 318.117156][T12796] gre0: entered allmulticast mode [ 318.141647][T12784] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1723'. [ 318.388722][T12771] lo speed is unknown, defaulting to 1000 [ 318.396221][T12771] wg1 speed is unknown, defaulting to 1000 [ 318.529232][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1733'. [ 318.559267][T12821] FAULT_INJECTION: forcing a failure. [ 318.559267][T12821] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 318.594223][T12821] CPU: 0 UID: 0 PID: 12821 Comm: syz.5.1733 Not tainted syzkaller #0 PREEMPT(full) [ 318.594251][T12821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.594263][T12821] Call Trace: [ 318.594271][T12821] [ 318.594279][T12821] dump_stack_lvl+0xe8/0x150 [ 318.594310][T12821] should_fail_ex+0x414/0x560 [ 318.594343][T12821] _copy_from_iter+0x1cd/0x1630 [ 318.594376][T12821] ? __pfx__copy_from_iter+0x10/0x10 [ 318.594397][T12821] ? __build_skb_around+0x22d/0x3c0 [ 318.594420][T12821] ? __alloc_skb+0x198/0x3a0 [ 318.594439][T12821] ? netlink_sendmsg+0x642/0xb30 [ 318.594482][T12821] ? skb_put+0x11b/0x210 [ 318.594506][T12821] netlink_sendmsg+0x6b2/0xb30 [ 318.594537][T12821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.594565][T12821] ? aa_sock_msg_perm+0xf1/0x1b0 [ 318.594591][T12821] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.594610][T12821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.594636][T12821] __sock_sendmsg+0x21c/0x270 [ 318.594666][T12821] ____sys_sendmsg+0x505/0x820 [ 318.594694][T12821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.594723][T12821] ? import_iovec+0x74/0xa0 [ 318.594745][T12821] ___sys_sendmsg+0x21f/0x2a0 [ 318.594768][T12821] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.594830][T12821] ? __fget_files+0x2a/0x420 [ 318.594852][T12821] ? __fget_files+0x3a0/0x420 [ 318.594885][T12821] __x64_sys_sendmsg+0x19b/0x260 [ 318.594911][T12821] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.594938][T12821] ? __pfx_ksys_write+0x10/0x10 [ 318.594966][T12821] do_syscall_64+0xec/0xf80 [ 318.594986][T12821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.595003][T12821] ? trace_irq_disable+0x37/0x100 [ 318.595026][T12821] ? clear_bhb_loop+0x60/0xb0 [ 318.595048][T12821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.595066][T12821] RIP: 0033:0x7fcb3d98f749 [ 318.595083][T12821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.595100][T12821] RSP: 002b:00007fcb3e78e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.595119][T12821] RAX: ffffffffffffffda RBX: 00007fcb3dbe5fa0 RCX: 00007fcb3d98f749 [ 318.595133][T12821] RDX: 0000000004048850 RSI: 0000200000000140 RDI: 0000000000000003 [ 318.595146][T12821] RBP: 00007fcb3e78e090 R08: 0000000000000000 R09: 0000000000000000 [ 318.595157][T12821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.595168][T12821] R13: 00007fcb3dbe6038 R14: 00007fcb3dbe5fa0 R15: 00007ffea2b59648 [ 318.595197][T12821] [ 318.910564][T12832] xt_TCPMSS: Only works on TCP SYN packets [ 318.917970][T12833] xt_TCPMSS: Only works on TCP SYN packets [ 319.045479][T12839] sctp: [Deprecated]: syz.5.1738 (pid 12839) Use of int in maxseg socket option. [ 319.045479][T12839] Use struct sctp_assoc_value instead [ 319.434561][T12828] lo speed is unknown, defaulting to 1000 [ 319.449035][T12828] wg1 speed is unknown, defaulting to 1000 [ 319.951405][T12870] bond3 (unregistering): Released all slaves [ 320.272715][T12897] IPVS: length: 203 != 24 [ 320.279099][T12897] netlink: 'syz.1.1754': attribute type 1 has an invalid length. [ 320.913232][ T6471] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 320.923510][ T6471] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 320.949313][ T6471] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.976707][ T6471] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 320.991196][T12930] syzkaller0: entered promiscuous mode [ 321.008210][T12930] syzkaller0: entered allmulticast mode [ 321.072059][ T6471] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.081128][ T6471] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 321.122671][ T6471] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.740242][ T6471] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.792603][T12968] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 322.937511][T12986] x_tables: unsorted underflow at hook 2 [ 322.982511][T12989] netlink: 'syz.5.1782': attribute type 6 has an invalid length. [ 323.008278][T12989] __nla_validate_parse: 18 callbacks suppressed [ 323.008295][T12989] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1782'. [ 323.345650][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1787'. [ 323.360146][T13010] netlink: 'syz.4.1785': attribute type 4 has an invalid length. [ 323.534090][T12991] lo speed is unknown, defaulting to 1000 [ 323.554317][T12991] wg1 speed is unknown, defaulting to 1000 [ 323.629904][T13021] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1790'. [ 323.639565][T13021] netlink: 'syz.5.1790': attribute type 1 has an invalid length. [ 323.714607][T13021] geneve0: left promiscuous mode [ 323.738992][T13021] geneve2: left promiscuous mode [ 323.751356][T13021] vlan2: left promiscuous mode [ 323.776423][T13021] vlan0: left promiscuous mode [ 324.070332][ T6509] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.097153][ T6509] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 324.224386][ T6509] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.237224][ T6509] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 324.333876][ T6509] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.362853][ T6509] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 324.417322][T13040] net_ratelimit: 36 callbacks suppressed [ 324.417340][T13040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.440048][T13042] netlink: 'syz.0.1799': attribute type 1 has an invalid length. [ 324.499103][T13042] 8021q: adding VLAN 0 to HW filter on device bond6 [ 324.541658][ T6509] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.586611][ T6509] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 324.619386][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.630176][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.639944][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.648660][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.657257][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.700395][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.709676][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.717444][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.725370][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.733358][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.789509][T13041] bond6: (slave geneve4): making interface the new active one [ 324.847817][T13041] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 324.877236][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 324.884490][T13040] netlink: 'syz.5.1795': attribute type 5 has an invalid length. [ 324.897787][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 324.905913][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 324.914432][ T1008] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.930843][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 324.940093][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 324.971001][ T1008] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.984077][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1801'. [ 325.009625][ T1008] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.066709][ T1008] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.502417][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1806'. [ 325.532434][T13046] lo speed is unknown, defaulting to 1000 [ 325.556256][T13046] wg1 speed is unknown, defaulting to 1000 [ 326.165302][T13046] chnl_net:caif_netlink_parms(): no params data found [ 326.275577][T13053] lo speed is unknown, defaulting to 1000 [ 326.450988][T13053] wg1 speed is unknown, defaulting to 1000 [ 326.718527][ T6509] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 326.761373][ T5154] Bluetooth: hci2: command tx timeout [ 326.783388][ T6509] bond5 (unregistering): (slave ip6gretap2): Releasing active interface [ 326.996954][ T5154] Bluetooth: hci3: command tx timeout [ 327.014304][ T6509] batman_adv: batadv0: Removing interface: gretap1 [ 327.660312][ T6509] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 327.670416][ T6509] bond0 (unregistering): Released all slaves [ 327.764620][ T6509] bond1 (unregistering): Released all slaves [ 327.778028][ T6509] bond2 (unregistering): Released all slaves [ 327.873000][ T6509] bond3 (unregistering): Released all slaves [ 327.888043][ T6509] bond4 (unregistering): Released all slaves [ 327.986745][ T6509] bond5 (unregistering): Released all slaves [ 328.103008][T13120] batman_adv: batadv0: Adding interface: dummy0 [ 328.112523][T13120] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 328.142296][T13120] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 328.231592][T13046] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.256773][T13046] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.264080][T13046] bridge_slave_0: entered allmulticast mode [ 328.272020][T13046] bridge_slave_0: entered promiscuous mode [ 328.284330][ T6509] tipc: Left network mode [ 328.347798][T13046] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.355078][T13046] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.363635][T13046] bridge_slave_1: entered allmulticast mode [ 328.371713][T13046] bridge_slave_1: entered promiscuous mode [ 328.498837][T13046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.541532][T13046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.674764][T13046] team0: Port device team_slave_0 added [ 328.738875][T13046] team0: Port device team_slave_1 added [ 328.837855][ T5154] Bluetooth: hci2: command tx timeout [ 329.008476][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1823'. [ 329.024365][T13157] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1825'. [ 329.027046][T13147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.076888][ T5154] Bluetooth: hci3: command tx timeout [ 329.110888][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1823'. [ 329.120355][T13153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.137862][T13046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.145000][T13046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.172856][T13046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.234600][T13046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.252547][T13046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.281500][T13046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.363428][T13053] chnl_net:caif_netlink_parms(): no params data found [ 329.510134][T13169] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1828'. [ 329.551351][T13046] hsr_slave_0: entered promiscuous mode [ 329.559107][T13046] hsr_slave_1: entered promiscuous mode [ 329.566714][T13046] debugfs: 'hsr0' already exists in 'hsr' [ 329.573217][T13046] Cannot create hsr debugfs directory [ 329.603751][T13169] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1828'. [ 329.643498][T13157] lo speed is unknown, defaulting to 1000 [ 329.724840][T13157] wg1 speed is unknown, defaulting to 1000 [ 329.892138][T13053] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.900591][T13053] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.910877][T13053] bridge_slave_0: entered allmulticast mode [ 329.919933][T13053] bridge_slave_0: entered promiscuous mode [ 329.959947][T13053] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.962240][T13178] xt_limit: Overflow, try lower: 271964/0 [ 329.977690][T13053] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.984917][T13053] bridge_slave_1: entered allmulticast mode [ 329.995173][T13053] bridge_slave_1: entered promiscuous mode [ 330.020384][T13178] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1830'. [ 330.022972][T13165] lo speed is unknown, defaulting to 1000 [ 330.148489][T13165] wg1 speed is unknown, defaulting to 1000 [ 330.193143][T13181] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1830'. [ 330.204507][T13181] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1830'. [ 330.287872][T13179] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1830'. [ 330.340998][T13053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.395473][T13053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.413733][ T6509] hsr_slave_0: left promiscuous mode [ 330.419750][ T6509] hsr_slave_1: left promiscuous mode [ 330.462762][ T6509] pim6reg99999999 (unregistering): left allmulticast mode [ 330.926782][ T5154] Bluetooth: hci2: command tx timeout [ 331.159585][ T5154] Bluetooth: hci3: command tx timeout [ 331.350757][T13053] team0: Port device team_slave_0 added [ 331.367836][T13053] team0: Port device team_slave_1 added [ 331.528572][T13053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.546906][T13053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.573959][T13053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.651144][T13053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.659379][T13053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.687088][T13053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.739820][T13046] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 331.760223][T13046] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 331.771707][ T6509] IPVS: stop unused estimator thread 0... [ 331.792237][T13053] hsr_slave_0: entered promiscuous mode [ 331.802840][T13053] hsr_slave_1: entered promiscuous mode [ 331.811242][T13053] debugfs: 'hsr0' already exists in 'hsr' [ 331.819336][T13053] Cannot create hsr debugfs directory [ 331.825063][T13046] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 331.850556][T13046] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 331.877603][T13198] netlink: 'syz.0.1834': attribute type 1 has an invalid length. [ 332.492966][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 332.512863][T13046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.640377][T13046] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.663810][T13231] bond_slave_0: entered allmulticast mode [ 332.674352][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.681548][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.730623][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.737809][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.750406][T13236] siw: device registration error -23 [ 332.773943][T13053] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 332.785632][T13053] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 332.800842][T13053] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 332.819915][T13053] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 332.882437][T13238] syzkaller0: entered promiscuous mode [ 332.888276][T13238] syzkaller0: entered allmulticast mode [ 332.928976][T13238] netlink: 'syz.5.1845': attribute type 12 has an invalid length. [ 332.997083][ T5154] Bluetooth: hci2: command tx timeout [ 333.246642][ T5154] Bluetooth: hci3: command tx timeout [ 334.457739][T13053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.512576][T13053] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.545748][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.552945][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.613006][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.620283][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.749603][T13266] __nla_validate_parse: 2 callbacks suppressed [ 334.749623][T13266] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1850'. [ 334.905132][T13046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.243949][T13053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.264543][T13292] netlink: 'syz.1.1855': attribute type 17 has an invalid length. [ 335.442535][T13298] tipc: Enabling of bearer rejected, failed to enable media [ 335.612476][T13046] veth0_vlan: entered promiscuous mode [ 335.640540][T13046] veth1_vlan: entered promiscuous mode [ 335.707961][T13046] veth0_macvtap: entered promiscuous mode [ 335.738550][T13046] veth1_macvtap: entered promiscuous mode [ 335.751749][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1857'. [ 335.766175][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1857'. [ 335.793590][T13046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.818900][T13053] veth0_vlan: entered promiscuous mode [ 335.833874][T13046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.862090][ T6506] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.872914][ T6506] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.895854][ T6506] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.915133][ T6506] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.935713][T13053] veth1_vlan: entered promiscuous mode [ 336.013757][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1858'. [ 336.113311][T13053] veth0_macvtap: entered promiscuous mode [ 336.130083][ T3778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.144006][ T3778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.164608][T13053] veth1_macvtap: entered promiscuous mode [ 336.211811][ T6506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.214387][T13053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.224109][ T6506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.252775][T13053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.274900][ T1096] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.288736][ T6506] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.310073][ T6506] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.346049][ T6506] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.509901][T13323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1861'. [ 336.523608][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.572150][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.643735][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.654100][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.920008][T13333] netlink: 'syz.7.1808': attribute type 1 has an invalid length. [ 336.928806][T13333] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1808'. [ 336.948865][T13333] bridge1: entered allmulticast mode [ 336.963882][ T8857] IPVS: starting estimator thread 0... [ 337.077204][T13338] IPVS: using max 35 ests per chain, 84000 per kthread [ 337.148177][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 337.664780][T13388] netlink: 'syz.0.1876': attribute type 3 has an invalid length. [ 338.027254][T13409] tap0: tun_chr_ioctl cmd 1074025681 [ 338.241741][T13420] netlink: 'syz.7.1885': attribute type 1 has an invalid length. [ 338.388478][T13420] bond1 (unregistering): Released all slaves [ 338.427754][T13428] IPVS: set_ctl: invalid protocol: 103 100.1.1.2:20001 [ 338.641213][T13436] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1891'. [ 338.671339][T13438] openvswitch: netlink: Flow key attr not present in new flow. [ 339.893887][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1897'. [ 339.952108][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1897'. [ 340.112785][T13487] bridge0: entered promiscuous mode [ 340.133498][T13487] bridge0: port 3(macvtap1) entered blocking state [ 340.151130][T13487] bridge0: port 3(macvtap1) entered disabled state [ 340.172349][T13487] macvtap1: entered allmulticast mode [ 340.179546][T13487] bridge0: entered allmulticast mode [ 340.217915][T13487] macvtap1: left allmulticast mode [ 340.223064][T13487] bridge0: left allmulticast mode [ 340.351985][T13487] bridge0: left promiscuous mode [ 340.381339][T13477] lo speed is unknown, defaulting to 1000 [ 340.393484][T13477] wg1 speed is unknown, defaulting to 1000 [ 341.024593][T13482] lo speed is unknown, defaulting to 1000 [ 341.032996][T13522] tc_dump_action: action bad kind [ 341.176763][T13482] wg1 speed is unknown, defaulting to 1000 [ 341.348390][T13533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1913'. [ 341.894970][T13562] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 342.099601][T13566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1924'. [ 342.129294][T13566] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1924'. [ 342.238236][T13569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'. [ 342.245853][T13560] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1920'. [ 342.579100][T13574] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 342.589751][T13574] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 342.599352][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'. [ 342.627886][T13578] syzkaller0: entered promiscuous mode [ 342.661496][T13578] syzkaller0: entered allmulticast mode [ 342.714890][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1928'. [ 342.715058][T13575] tipc: Enabled bearer , priority 0 [ 342.927016][T13575] tipc: Resetting bearer [ 343.024189][T13575] tipc: Disabling bearer [ 343.508210][T13611] wg1: entered promiscuous mode [ 343.516122][T13611] wg1: entered allmulticast mode [ 343.650828][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1939'. [ 343.762697][T13620] : entered promiscuous mode [ 343.772069][T13607] netlink: 'syz.0.1937': attribute type 33 has an invalid length. [ 344.052435][T13631] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 344.092788][T13635] tipc: Started in network mode [ 344.129206][T13635] tipc: Node identity , cluster identity 4711 [ 344.142906][T13635] tipc: Failed to set node id, please configure manually [ 344.171242][T13635] tipc: Enabling of bearer rejected, failed to enable media [ 344.171292][T13643] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 344.191682][T13642] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 344.245903][T13643] netlink: 'syz.6.1946': attribute type 1 has an invalid length. [ 344.263043][T13643] netlink: 'syz.6.1946': attribute type 4 has an invalid length. [ 344.304358][T13648] netlink: 'syz.6.1946': attribute type 1 has an invalid length. [ 344.337255][T13648] netlink: 'syz.6.1946': attribute type 4 has an invalid length. [ 344.713712][T13678] netlink: 'syz.5.1954': attribute type 13 has an invalid length. [ 345.383041][T13678] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.451381][T13678] team_slave_0: left promiscuous mode [ 345.472902][T13678] team_slave_1: left promiscuous mode [ 345.854283][T13678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.894451][T13678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.375652][T13691] bond1: option mode: unable to set because the bond device has slaves [ 346.414925][T13696] bond1: (slave lo): Releasing backup interface [ 346.449229][T13696] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 346.474545][T13696] bond0: left allmulticast mode [ 346.480146][T13696] bond_slave_0: left allmulticast mode [ 346.485725][T13696] bond0: left promiscuous mode [ 346.498259][T13696] bond_slave_0: left promiscuous mode [ 346.504475][T13696] bridge0: port 4(bond0) entered disabled state [ 346.534133][T13696] team0: left allmulticast mode [ 346.539994][T13696] team_slave_0: left allmulticast mode [ 346.545585][T13696] team_slave_1: left allmulticast mode [ 346.551866][T13696] bridge3: left allmulticast mode [ 346.557866][T13706] __nla_validate_parse: 12 callbacks suppressed [ 346.557885][T13706] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1961'. [ 346.561734][T13696] geneve0: left allmulticast mode [ 346.583377][T13696] team0: left promiscuous mode [ 346.588999][T13696] team_slave_0: left promiscuous mode [ 346.594693][T13696] team_slave_1: left promiscuous mode [ 346.601059][T13696] bridge3: left promiscuous mode [ 346.606290][T13696] geneve0: left promiscuous mode [ 346.612795][T13696] bridge0: port 3(team0) entered disabled state [ 346.623446][T13696] batman_adv: batadv0: Removing interface: dummy0 [ 346.632858][T13696] bridge_slave_0: left allmulticast mode [ 346.637314][T13712] openvswitch: netlink: Message has -2 unknown bytes. [ 346.646236][T13712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.655384][T13696] bridge_slave_0: left promiscuous mode [ 346.655601][T13696] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.670835][T13696] bridge_slave_1: left allmulticast mode [ 346.677578][T13696] bridge_slave_1: left promiscuous mode [ 346.683455][T13696] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.695857][T13696] bond0: (slave bond_slave_0): Releasing backup interface [ 346.709979][T13696] team0: Port device team_slave_0 removed [ 346.719783][T13696] team0: Port device team_slave_1 removed [ 346.725769][T13696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.739636][T13696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.750407][T13696] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 346.785604][ T3931] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.972884][T13730] Bluetooth: MGMT ver 1.23 [ 347.001809][T13708] bond5: option miimon: invalid value (18446744073709551607) [ 347.010012][T13708] bond5: option miimon: allowed values 0 - 2147483647 [ 347.020969][T13708] bond5 (unregistering): Released all slaves [ 347.049160][ T3931] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.073812][ T3931] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.116956][ T3931] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.134621][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1968'. [ 347.150862][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1968'. [ 347.208926][T13735] team1: entered promiscuous mode [ 347.215620][T13735] team1: entered allmulticast mode [ 347.240490][T13734] team2: entered promiscuous mode [ 347.245619][T13734] team2: entered allmulticast mode [ 347.528840][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1975'. [ 347.761475][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1976'. [ 347.771648][T13772] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1976'. [ 347.819430][ T25] block nbd3: Possible stuck request ffff888024be8000: control (read@0,1024B). Runtime 30 seconds [ 347.940142][T13778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1978'. [ 347.963893][T13783] netlink: 'syz.5.1980': attribute type 10 has an invalid length. [ 348.044814][T13786] netlink: 'syz.5.1980': attribute type 10 has an invalid length. [ 348.058478][T13783] team0: Port device team_slave_0 removed [ 348.285794][T13798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1984'. [ 348.491318][T13813] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1986'. [ 348.716112][T13784] lo speed is unknown, defaulting to 1000 [ 348.724476][T13784] wg1 speed is unknown, defaulting to 1000 [ 348.861126][T13828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1991'. [ 348.892322][T13828] netlink: 'syz.0.1991': attribute type 7 has an invalid length. [ 348.904411][T13828] netlink: 'syz.0.1991': attribute type 8 has an invalid length. [ 348.996668][ T5154] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 349.003156][ T5842] Bluetooth: hci2: command 0x0401 tx timeout [ 349.566946][T13853] tipc: Invalid UDP bearer configuration [ 349.566999][T13853] tipc: Enabling of bearer rejected, failed to enable media [ 349.882021][T13787] lo speed is unknown, defaulting to 1000 [ 349.975698][T13819] lo speed is unknown, defaulting to 1000 [ 349.981828][T13787] wg1 speed is unknown, defaulting to 1000 [ 350.015166][T13816] lo speed is unknown, defaulting to 1000 [ 350.041383][T13819] wg1 speed is unknown, defaulting to 1000 [ 350.097086][T13816] wg1 speed is unknown, defaulting to 1000 [ 350.608497][T13893] vlan0: entered promiscuous mode [ 350.633159][T13893] bond0: entered promiscuous mode [ 351.288102][T13918] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 351.583948][T13931] __nla_validate_parse: 5 callbacks suppressed [ 351.583966][T13931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2014'. [ 351.695434][T13913] lo speed is unknown, defaulting to 1000 [ 351.712153][T13913] wg1 speed is unknown, defaulting to 1000 [ 351.754223][T13934] netlink: 'syz.6.2015': attribute type 11 has an invalid length. [ 351.806219][T13934] bond1: entered promiscuous mode [ 351.815221][T13934] bond1: entered allmulticast mode [ 351.821356][T13934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.830307][T13939] netlink: 'syz.6.2015': attribute type 11 has an invalid length. [ 351.884015][T13938] bond2: entered promiscuous mode [ 351.892997][T13938] bond2: entered allmulticast mode [ 351.899494][T13938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.915696][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2017'. [ 351.932338][T13945] netlink: 39 bytes leftover after parsing attributes in process `syz.5.2017'. [ 352.001054][T13946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2017'. [ 352.011846][T13946] netlink: 39 bytes leftover after parsing attributes in process `syz.5.2017'. [ 352.112851][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 352.173452][T13963] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2020'. [ 352.289329][T13966] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2022'. [ 352.585315][T13975] syzkaller1: entered promiscuous mode [ 352.603758][T13975] syzkaller1: entered allmulticast mode [ 352.851524][T13997] x_tables: duplicate underflow at hook 1 [ 352.953332][T13999] team1: left promiscuous mode [ 352.967754][T13999] team2: left promiscuous mode [ 352.972895][T13999] vlan0: left promiscuous mode [ 352.980205][T13999] bond0: left promiscuous mode [ 353.121150][T14016] netlink: 'syz.1.2034': attribute type 10 has an invalid length. [ 353.132348][T14016] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2034'. [ 353.148669][T14016] bond0: entered promiscuous mode [ 353.155902][T14016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.169539][T14016] bridge0: port 1(bond0) entered blocking state [ 353.178088][T14016] bridge0: port 1(bond0) entered disabled state [ 353.184632][T14016] bond0: entered allmulticast mode [ 353.372394][T14024] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2035'. [ 353.418356][T14024] netlink: 'syz.6.2035': attribute type 5 has an invalid length. [ 353.430244][T14024] netlink: 'syz.6.2035': attribute type 6 has an invalid length. [ 353.586045][T13997] bond0: (slave netdevsim0): Releasing backup interface [ 353.778671][ T30] audit: type=1800 audit(1767404357.602:6): pid=14041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2039" name="memory.events" dev="tmpfs" ino=221 res=0 errno=0 [ 353.846919][ T30] audit: type=1804 audit(1767404357.602:7): pid=14041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2039" name="/newroot/40/memory.events" dev="tmpfs" ino=221 res=1 errno=0 [ 353.988714][T14014] lo speed is unknown, defaulting to 1000 [ 354.062385][T14014] wg1 speed is unknown, defaulting to 1000 [ 354.090479][T14050] syzkaller1: entered promiscuous mode [ 354.107594][T14050] syzkaller1: entered allmulticast mode [ 378.253695][ T25] block nbd3: Possible stuck request ffff888024be8000: control (read@0,1024B). Runtime 60 seconds [ 379.795932][ T5203] udevd[5203]: worker [12154] /devices/virtual/block/nbd3 is taking a long time [ 383.242855][ T5154] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 383.404141][ T5154] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 383.514960][ T5154] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 383.905464][ T5154] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 384.294179][ T5154] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 384.883868][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.453728][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.813981][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.214906][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 386.663651][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.894870][ T5833] Bluetooth: hci6: command tx timeout [ 388.195766][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 388.544785][ T5842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 388.695770][ T5842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 389.215398][T14054] lo speed is unknown, defaulting to 1000 [ 389.415419][T14054] wg1 speed is unknown, defaulting to 1000 [ 389.665709][ T5842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 389.804960][ T5842] Bluetooth: hci5: command tx timeout [ 389.965875][ T5842] Bluetooth: hci6: command tx timeout [ 389.985503][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 391.416053][ T5154] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 391.655103][ T5154] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 391.813809][ T5154] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 391.904549][ T5154] Bluetooth: hci5: command tx timeout [ 392.044713][ T5154] Bluetooth: hci6: command tx timeout [ 392.375789][ T5154] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 392.584496][ T5154] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 392.784917][ T5834] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 392.925621][ T5834] Bluetooth: hci7: command tx timeout [ 393.412850][ T5833] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 393.582747][ T5833] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 393.984163][ T5833] Bluetooth: hci5: command tx timeout [ 394.135506][ T5833] Bluetooth: hci6: command tx timeout [ 394.324850][ T5833] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 394.514501][ T5833] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 395.023707][ T5154] Bluetooth: hci7: command tx timeout [ 396.054077][ T5834] Bluetooth: hci5: command tx timeout [ 397.104477][ T5834] Bluetooth: hci7: command tx timeout [ 397.563182][ T5834] Bluetooth: hci9: command tx timeout [ 397.575989][ T5834] Bluetooth: hci8: command tx timeout [ 399.182934][ T5834] Bluetooth: hci7: command tx timeout [ 399.642717][ T5834] Bluetooth: hci9: command tx timeout [ 399.656139][ T5834] Bluetooth: hci8: command tx timeout [ 401.736101][ T5154] Bluetooth: hci8: command tx timeout [ 401.764968][ T5834] Bluetooth: hci9: command tx timeout [ 403.836318][ T5154] Bluetooth: hci9: command tx timeout [ 403.855970][ T5154] Bluetooth: hci8: command tx timeout [ 408.675209][ T25] block nbd3: Possible stuck request ffff888024be8000: control (read@0,1024B). Runtime 90 seconds [ 439.454351][ T25] block nbd3: Possible stuck request ffff888024be8000: control (read@0,1024B). Runtime 120 seconds [ 441.855854][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 441.934414][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 442.054782][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 442.554801][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 442.975071][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 445.995056][ T5834] Bluetooth: hci0: command tx timeout [ 447.173395][ T5834] Bluetooth: hci2: command 0x0401 tx timeout [ 447.254527][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 447.563408][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 447.934808][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 448.044142][ T5154] Bluetooth: hci0: command tx timeout [ 448.115451][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 448.593774][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 448.954666][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 450.141193][ T5833] Bluetooth: hci0: command tx timeout [ 451.805141][ T5833] Bluetooth: hci1: command tx timeout [ 452.005877][ T5833] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 452.203372][ T5833] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 452.205332][ T5834] Bluetooth: hci0: command tx timeout [ 452.415509][ T5833] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 452.844784][ T5834] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 453.003544][ T5834] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 453.154521][ T5834] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 453.394283][ T5834] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 453.614283][ T5834] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 453.884331][ T5842] Bluetooth: hci1: command tx timeout [ 454.434217][ T5834] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 454.805826][ T5842] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 455.994998][ T5842] Bluetooth: hci1: command tx timeout [ 457.275047][ T5842] Bluetooth: hci10: command tx timeout [ 458.054781][ T5842] Bluetooth: hci1: command tx timeout [ 458.545493][ T5842] Bluetooth: hci11: command tx timeout [ 459.324406][ T5842] Bluetooth: hci10: command tx timeout [ 460.604580][ T5842] Bluetooth: hci11: command tx timeout [ 461.432691][ T5842] Bluetooth: hci10: command tx timeout [ 462.443913][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.704856][ T5833] Bluetooth: hci11: command tx timeout [ 462.714607][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.925164][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 463.484977][ T5833] Bluetooth: hci10: command tx timeout [ 463.605930][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 463.924585][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 464.775907][ T5833] Bluetooth: hci11: command tx timeout [ 466.533619][ T5833] Bluetooth: hci3: command tx timeout [ 468.603845][ T5833] Bluetooth: hci3: command tx timeout [ 470.174072][ T25] block nbd3: Possible stuck request ffff888024be8000: control (read@0,1024B). Runtime 150 seconds [ 470.684286][ T5833] Bluetooth: hci3: command tx timeout [ 472.765429][ T5833] Bluetooth: hci3: command tx timeout [ 473.681518][ T6503] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.546290][ T6503] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.934644][ T6503] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.775829][ T6503] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.505091][T14076] lo speed is unknown, defaulting to 1000 [ 495.705257][T14069] lo speed is unknown, defaulting to 1000 [ 495.745001][T14076] wg1 speed is unknown, defaulting to 1000 [ 495.804026][ T6503] bridge_slave_1: left allmulticast mode [ 496.053622][ T6503] bridge_slave_1: left promiscuous mode [ 496.240668][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.153737][ T6503] bridge_slave_0: left allmulticast mode [ 498.274787][ T6503] bridge_slave_0: left promiscuous mode [ 498.424247][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.333566][ T5203] udevd[5203]: worker [12154] /devices/virtual/block/nbd3 timeout; kill it [ 499.494114][ T5203] udevd[5203]: seq 20563 '/devices/virtual/block/nbd3' killed [ 500.993762][ T25] block nbd3: Possible stuck request ffff888024be8000: control (read@0,1024B). Runtime 180 seconds [ 502.425183][ T5842] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 502.585541][ T5842] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 502.704518][ T5842] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 503.345910][ T5842] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 503.964927][ T5842] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 507.175728][ T5833] Bluetooth: hci12: command tx timeout [ 508.704188][ T5833] Bluetooth: hci6: command 0x0406 tx timeout [ 509.275585][ T5834] Bluetooth: hci12: command tx timeout [ 509.956304][ T5842] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 510.166278][ T5842] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 510.424924][ T5842] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 510.745730][ T5842] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 510.884554][ T5842] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 511.180438][ T5842] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 511.275080][ T5842] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 511.354735][ T5842] Bluetooth: hci12: command tx timeout [ 511.404226][T14103] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 512.655979][T14106] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 512.915460][T14106] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 513.402724][T14106] Bluetooth: hci12: command tx timeout [ 514.054375][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 514.073434][T14106] Bluetooth: hci7: command 0x0406 tx timeout [ 514.283767][ T5834] Bluetooth: hci13: command tx timeout [ 516.055996][T14103] Bluetooth: hci14: command tx timeout [ 516.413774][T14106] Bluetooth: hci13: command tx timeout [ 516.623563][T14106] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 516.734456][T14106] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 516.965440][ T5834] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 517.625179][ T5834] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 517.904415][ T5834] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 518.125784][ T5834] Bluetooth: hci14: command tx timeout [ 518.445038][ T5834] Bluetooth: hci13: command tx timeout [ 518.865318][T14105] Bluetooth: hci9: command 0x0406 tx timeout [ 518.893666][T14105] Bluetooth: hci8: command 0x0406 tx timeout [ 519.835552][ T5834] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 520.184842][ T5834] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 520.212569][T14103] Bluetooth: hci14: command tx timeout [ 520.395909][ T5834] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 520.524289][ T5834] Bluetooth: hci13: command tx timeout [ 520.856115][T14103] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 521.455513][T14106] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 521.484366][T14103] Bluetooth: hci15: command tx timeout [ 522.284259][T14105] Bluetooth: hci14: command tx timeout [ 523.572793][T14106] Bluetooth: hci15: command tx timeout [ 524.533919][T14106] Bluetooth: hci16: command tx timeout [ 525.665481][T14106] Bluetooth: hci15: command tx timeout [ 526.624770][T14106] Bluetooth: hci16: command tx timeout [ 527.723494][T14106] Bluetooth: hci15: command tx timeout [ 528.775041][T14106] Bluetooth: hci16: command tx timeout [ 530.846305][T14106] Bluetooth: hci16: command tx timeout [ 531.645849][ T25] block nbd3: Possible stuck request ffff888024be8000: control (read@0,1024B). Runtime 210 seconds [ 545.175950][ T6503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.626114][ T6503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.655194][ T6503] bond0 (unregistering): Released all slaves [ 548.425283][T14068] lo speed is unknown, defaulting to 1000 [ 549.205723][T14069] wg1 speed is unknown, defaulting to 1000 [ 550.574103][T14072] lo speed is unknown, defaulting to 1000 [ 551.164837][T14060] lo speed is unknown, defaulting to 1000 [ 551.222737][T14068] wg1 speed is unknown, defaulting to 1000 [ 557.666026][T14072] wg1 speed is unknown, defaulting to 1000 [ 558.073147][T14087] lo speed is unknown, defaulting to 1000 [ 562.335190][ T25] block nbd3: Possible stuck request ffff888024be8000: control (read@0,1024B). Runtime 240 seconds [ 564.023549][T14105] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 564.625525][T14105] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 564.894911][T14105] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 565.393899][T14105] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 565.614167][T14105] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 568.065434][T14060] wg1 speed is unknown, defaulting to 1000 [ 568.775549][T14106] Bluetooth: hci17: command tx timeout [ 570.044227][T14106] Bluetooth: hci0: command 0x0406 tx timeout [ 570.845941][T14103] Bluetooth: hci17: command tx timeout [ 570.975446][T14103] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 571.374731][T14103] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 571.744567][T14103] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 572.494545][ T5834] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 572.764734][ T5834] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 572.876300][ T5834] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 572.934304][ T5834] Bluetooth: hci17: command tx timeout [ 573.045550][T14103] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 573.324222][ T5842] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 573.625609][ T5842] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 573.933600][ T5842] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 575.031712][ T5842] Bluetooth: hci17: command tx timeout [ 575.164712][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 576.373805][ T5842] Bluetooth: hci18: command tx timeout [ 577.093873][T14087] wg1 speed is unknown, defaulting to 1000 [ 578.364255][T14103] Bluetooth: hci19: command tx timeout [ 578.473664][T14103] Bluetooth: hci18: command tx timeout [ 580.283650][T14103] Bluetooth: hci11: command 0x0406 tx timeout [ 580.284440][T14106] Bluetooth: hci10: command 0x0406 tx timeout [ 580.454356][T14106] Bluetooth: hci19: command tx timeout [ 580.533758][T14106] Bluetooth: hci18: command tx timeout [ 582.554086][T14105] Bluetooth: hci19: command tx timeout [ 582.605353][T14105] Bluetooth: hci18: command tx timeout [ 584.633458][ T5834] Bluetooth: hci19: command tx timeout [ 585.106180][ T5842] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 585.262899][ T5842] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 585.364249][ T5842] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 585.913213][ T5842] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 586.504210][ T5842] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 588.055505][ T5834] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 588.365159][ T5834] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 588.436152][ T5834] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 589.185411][T14105] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 589.244848][T14105] Bluetooth: hci20: command tx timeout [ 589.413056][T14106] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 590.525524][T14106] Bluetooth: hci3: command 0x0406 tx timeout [ 591.334207][ T5834] Bluetooth: hci20: command tx timeout [ 593.034130][ T5834] Bluetooth: hci21: command tx timeout [ 593.115800][ T25] block nbd3: Possible stuck request ffff888024be8000: control (read@0,1024B). Runtime 270 seconds [ 593.414283][ T5834] Bluetooth: hci20: command tx timeout [ 595.091278][ T5834] Bluetooth: hci21: command tx timeout [ 595.485341][ T5834] Bluetooth: hci20: command tx timeout [ 595.693883][T14081] lo speed is unknown, defaulting to 1000 [ 597.165022][ T5834] Bluetooth: hci21: command tx timeout [ 599.245107][ T5834] Bluetooth: hci21: command tx timeout [ 623.785083][ T25] block nbd3: Possible stuck request ffff888024be8000: control (read@0,1024B). Runtime 300 seconds [ 625.345697][T14106] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 625.523636][T14106] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 625.644952][T14106] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 626.454582][T14106] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 626.813604][T14106] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 628.473800][ T5834] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 628.625315][ T5834] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 628.914866][ T5834] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 629.326314][ T5834] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 629.661096][ T5834] Bluetooth: hci22: command tx timeout [ 629.665099][T14105] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 631.563979][T14105] Bluetooth: hci12: command 0x0406 tx timeout [ 631.725164][T14105] Bluetooth: hci22: command tx timeout [ 632.535041][T14105] Bluetooth: hci23: command tx timeout [ 633.814715][ T5842] Bluetooth: hci22: command tx timeout [ 634.624645][T14105] Bluetooth: hci23: command tx timeout [ 635.234518][T14106] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 [ 635.323129][T14106] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9 [ 635.454376][T14106] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9 [ 635.894051][T14106] Bluetooth: hci22: command tx timeout [ 636.395088][T14106] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4 [ 636.604956][T14106] Bluetooth: hci13: command 0x0406 tx timeout [ 636.690996][T14106] Bluetooth: hci23: command tx timeout [ 636.731761][ T5834] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2 [ 638.854697][T14106] Bluetooth: hci23: command tx timeout [ 639.773203][ T31] INFO: task syz-executor:14085 blocked for more than 143 seconds. [ 639.943689][ T31] Not tainted syzkaller #0 [ 640.074751][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 640.255874][ T31] task:syz-executor state:D stack:24864 pid:14085 tgid:14085 ppid:1 task_flags:0x400140 flags:0x00080002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 640.553229][ T31] Call Trace: [ 640.684803][ T31] [ 640.766225][ T31] __schedule+0x149b/0x4fd0 [ 640.896097][ T31] ? __schedule+0x14b1/0x4fd0 [ 641.054564][ T31] ? __pfx___schedule+0x10/0x10 [ 641.183887][T14105] Bluetooth: hci24: command tx timeout [ 641.363208][ T31] ? schedule+0x91/0x360 [ 641.524181][ T31] schedule+0x165/0x360 [ 641.575354][ T31] schedule_preempt_disabled+0x13/0x30 [ 641.684036][ T31] __mutex_lock+0x7e6/0x1350 [ 641.733931][T14105] Bluetooth: hci14: command 0x0406 tx timeout [ 641.795516][ T31] ? __mutex_lock+0x5bb/0x1350 [ 641.813612][T14105] Bluetooth: hci15: command 0x0406 tx timeout [ 641.864165][ T31] ? add_one_compat_dev+0xf0/0x650 [ 641.883058][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 642.015552][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 642.554900][ T31] ? rdma_dev_init_net+0x22d/0x2f0 [ 642.703869][ T31] add_one_compat_dev+0xf0/0x650 [ 642.795128][ T31] ? down_read+0x274/0x2e0 [ 642.924764][ T31] rdma_dev_init_net+0x238/0x2f0 [ 643.244998][ T5834] Bluetooth: hci24: command tx timeout [ 643.426198][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 643.545871][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 643.643981][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 643.765102][ T31] ? trace_kmalloc+0x1f/0xb0 [ 643.783741][ T31] ? __kmalloc_noprof+0x43e/0x800 [ 643.823666][ T31] ops_init+0x35c/0x5c0 [ 643.853884][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 643.936294][ T31] setup_net+0x110/0x330 [ 644.053473][ T31] ? __pfx_setup_net+0x10/0x10 [ 644.105045][ T5833] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1 [ 644.275565][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 644.305005][ T5833] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9 [ 644.515665][ T31] ? preinit_net+0x47d/0x780 [ 644.545438][T14103] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9 [ 644.934242][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 645.124701][ T31] copy_net_ns+0x3e3/0x570 [ 645.174651][ T5154] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4 [ 645.323786][ T5154] Bluetooth: hci24: command tx timeout [ 645.433115][ T31] create_new_namespaces+0x3e7/0x6a0 [ 645.633417][ T31] ? security_capable+0x7e/0x2e0 [ 645.685518][T14105] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2 [ 646.023525][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 646.323206][ T31] ksys_unshare+0x4c8/0x8c0 [ 646.445336][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 646.603831][ T31] __x64_sys_unshare+0x38/0x50 [ 646.924744][ T5834] Bluetooth: hci16: command 0x0406 tx timeout [ 646.965870][ T31] do_syscall_64+0xec/0xf80 [ 647.184043][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.285120][ T31] ? trace_irq_disable+0x37/0x100 [ 647.405860][ T5833] Bluetooth: hci24: command tx timeout [ 647.633404][ T31] ? clear_bhb_loop+0x60/0xb0 [ 647.734488][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.824906][ T31] RIP: 0033:0x7fd32d390f47 [ 647.975382][ T31] RSP: 002b:00007ffd69c58ac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 648.193293][ T31] RAX: ffffffffffffffda RBX: 00007fd32d5e5f40 RCX: 00007fd32d390f47 [ 648.365577][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 648.494260][ T31] RBP: 00007fd32d5e67b8 R08: 0000000000000000 R09: 0000000000000000 [ 648.596287][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 648.774461][ T31] R13: 0000000000000003 R14: 00007ffd69c58d98 R15: 0000000000000000 [ 648.873316][ T31] [ 649.035380][ T31] [ 649.035380][ T31] Showing all locks held in the system: [ 649.203661][ T31] 1 lock held by pool_workqueue_/3: [ 649.324582][ T31] 1 lock held by khungtaskd/31: [ 649.593980][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 649.715474][ T31] 4 locks held by kworker/u8:15/3931: