last executing test programs: 2m5.648388032s ago: executing program 0 (id=1023): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x1}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10fae7ae97b782c6d000000044fbffff"], 0x10}}], 0x2, 0x0) 2m5.615775529s ago: executing program 4 (id=1025): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x80000) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071104a00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) epoll_create1(0x80000) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071104a00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) 2m5.428836889s ago: executing program 0 (id=1027): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7", 0x1) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f00000024c0)=""/4102, &(0x7f0000000280)=0x1006) r2 = socket$kcm(0x10, 0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x20200, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="a057c59228f8c22c37d7fe065aacca08922b77115c36f433b665cbf797bc81b72c7f55c22a3366b072aaf0a95326c68ca1022240a0b17ed0650d07a0c68958bb603dad1813", 0x45}, {&(0x7f00000000c0)="3be79edd517784dbe0631b1df6dae0515506e3e195a739f9a3eb26474ed3b3a2ba50fd48aa0771063442e86a87ffc5267776d51312ec184b61f41a17530d1d36271d73684b7a303091c0c66b10b67049756f5413ff365fb2e56962d4019087f08efe8c30343cec9a0cfd1d64f136705922dae143d580106c657ad4b5bdbf8ffeac0896487c6b5e758adb1b373d005cc9c1a4c6", 0x93}], 0x2}, 0x1848) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434"], 0x54}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) listen(r4, 0x2) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r4, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001}}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 2m5.396145462s ago: executing program 4 (id=1028): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000130001000100000000000008070000006a1d5d8fe9b5eae2baa0ef1b24ee583dcffb8c91ee5010f78400c7b826c963a453bfbfa28b4ee7d0713961b8c5e00a9ecbf0b62b01a349a0056cca356ed96eb997caf772d20f5edb9999bb4be8ff4079741ca10d57da5b817e33d2d662e58336d786453f5e1ecc3b6f0c34bff815c1899a5fa6f3c4b6b255506676868df69a9404405fd90710408e57a2db7829d23a08b836568481", @ANYRES32=r2, @ANYBLOB="00000000113200000c001a800800048004000a80"], 0x2c}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x5}, {0x8}, {0xb, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x5c, 0x2c, 0xd27, 0xffffffff, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x2, 0x9}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0xad}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x20054004) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m4.90121135s ago: executing program 4 (id=1033): epoll_create1(0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@loopback, 0x0}, &(0x7f0000000040)=0x14) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0xd3, &(0x7f0000000080)="8dace0e10048e42db75a12392961e5f2f74b1ea3a7d54d4b1eeb2dbe3dedcd9d1498b9afc13a0ff6d725c7098df0c701af204ac21cf2d5112fbeb60c54410998a74924527a85a46890ab232f436936518dd28a1f54826e75289d49c90dd6464510c0907b380d00512df173aac361745bcd01c1b9e4aeec2b688b840fba16078292b499e39a9c12cd15bcb59e5d4963edbdf1be4b5cf84795606582e8e83fc6ad137308c5cf2aa204deb7acdcafd42819acd2200d20265040862885b9938a9dd698dbda74ba2cb9926d962780cbf2b1ea0a559b", 0x44, 0x0, &(0x7f0000000180)="e62667da67cffbf017c3559b9cd94332e4b0533949b988addcd6b592d8fda62c0169d6bda76eb5568500bcdb4184e4caf3a0cb47e91c4a5bf95f0fd4ba16fef5926da20c"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_delroute={0x24, 0x19, 0x120, 0x70bd2c, 0x25dfdbfb, {0xa, 0x4, 0x0, 0x8, 0xff, 0x3, 0xfe, 0x1, 0x1400}, [@RTA_EXPIRES={0x8, 0x17, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000003c0)={0x7}, 0x1) sendmsg$key(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2, 0x10, 0x8, 0x9, 0x12, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@loopback, 0x25, 0x59c491cb95373282, 0x14}, @sadb_x_policy={0x8, 0x12, 0x1, 0x3, 0x0, 0x0, 0x7, {0x6, 0xff, 0x0, 0xb, 0x0, 0x5, 0x0, @in=@broadcast, @in=@remote}}, @sadb_ident={0x2, 0xa, 0x0, 0x0, 0x2c}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}]}, 0x90}}, 0x50) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000005c0)={0x2, 0x7, 0x2, 0x0, 0x23d, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_ident={0x2, 0xb, 0x6, 0x0, 0x6}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd25}, @sadb_sa={0x2, 0x1, 0x4d3, 0xf3, 0x86, 0x43, 0x0, 0x40000000}, @sadb_key={0x201, 0x8, 0x8000, 0x0, "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"}, @sadb_x_sec_ctx={0x11, 0x18, 0x3, 0x44, 0x7d, "9fd2f3ac4cc38f549e71260e7b4f595dbb3c81d07a052c5e737e49fb3df55abf7617147a7743ff2565030562057f1f8d906b4d4ab931b73c724081ba0bc79479a91965ed0928a0dace9746df82a0cce814cedc8a2f307dcc2a765b8c8bcc684680ef09cbaba2081274523bc61d7b2ddef58cbb4db09882b88bfe05e009"}, @sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x0, 0x0, 0xe1, {0x6, 0x32, 0x9f, 0xd7, 0x0, 0x38, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1}}, @sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x6e6bbc, 0xfff, {0x6, 0x3c, 0x1, 0x0, 0x0, 0xb41, 0x0, @in6=@private2, @in=@broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0xa, 0x8}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x6e6bbf, 0x0, {0x6, 0x3c, 0x2, 0xfd, 0x0, 0x5, 0x0, @in6=@local, @in6=@remote}}, @sadb_x_sec_ctx={0xa, 0x18, 0x65, 0x80, 0x47, "07112e055744d6f58a226e697147f4d4920917e1912c9c40bd4399247a79e62e00550190ebae64a344312bf2f143a6d880e205e33b6ca3bf422721a4d4c189424686dddbdd0d4d"}]}, 0x11e8}}, 0x40c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001880)={0x3, &(0x7f0000001840)=[{0x7, 0x2, 0x9, 0x20}, {0x7, 0x40, 0xf}, {0x81, 0x8, 0x1, 0x80000001}]}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001900)=@generic={&(0x7f00000018c0)='./file0\x00', 0x0, 0x10}, 0x18) pipe(&(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@bloom_filter={0x1e, 0xbb, 0x8, 0x0, 0x0, r5, 0x3, '\x00', r1, r6, 0x4, 0x4, 0x5, 0x9}, 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00), 0x200000, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000002d40)={{'\x00', 0x2}, {0x1ff}, 0x4, 0x0, 0x0, &(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)='./file1\x00', &(0x7f0000001ac0)="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", 0x182, 0x0, &(0x7f0000001c80)={0x2, 0x94, {0x0, 0xc, 0x22, "c56903598e40b0e535b434c807d02172fb27c744e95543769b515d07270aec3ee983", 0x65, "2ae89e2bd5644ea62e82b1a9496a0541ac80f9b2509edecd4a0916fe98b815e5bd813872616359dad10b8f2848307eb0ec2eaa747ecbbdd675303709a9bef7b49a5c879b50b0fa385fa5b4ccae67edee33cf92ac145cdf2fafc249cb2d49686cd20861d9ea"}, 0x1000, "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"}, 0x10a0}) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000002dc0)) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1d}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x60}, 0x10) sendmsg$AUDIT_USER(r4, &(0x7f0000003040)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003000)={&(0x7f0000002f40)={0xb4, 0x3ed, 0x100, 0x70bd2b, 0x25dfdbfe, "086d5aef79f4cf3f908472f5a0a5da1469c5677a9c30d296312969b5291f9f1f0635438b2c984ccec2890084a970bad55f09d86cd8d8b2f89af30d0fbe05414576d0f0e56e84debedb6c43d8125d58b8e43151e2035b547539c080696a3ab6089b6d4f3ff069de073de6942cf62ee6a8368d619b61d2fbba0858a3fbbbaf4c59b2eed30361953aca12f1b47645a0f896bb10c5fe492f9110082042054e15f50e08e3a6", ["", "", "", "", "", ""]}, 0xb4}, 0x1, 0x0, 0x0, 0x40040}, 0x20048040) sendmsg$AUDIT_GET(r7, &(0x7f0000003140)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x10, 0x3e8, 0x800, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000810) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000003180)={r3}) connect(r9, &(0x7f00000031c0)=@in={0x2, 0x4e24, @multicast2}, 0x80) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x50, 0x3, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000880) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000033c0)={0xffffffffffffffff, r6, 0x0, 0x1, &(0x7f0000003380)='\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000003400)={r10}, 0x4) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x8) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f0000003440)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000003480)={0x3, 'bridge0\x00', {0x4b}, 0xfffc}) setsockopt$inet_icmp_ICMP_FILTER(r9, 0x1, 0x1, &(0x7f00000034c0)={0x9}, 0x4) 2m4.647803471s ago: executing program 4 (id=1036): r0 = socket$kcm(0x10, 0x400000002, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/4094, 0xffe}, {&(0x7f0000002280)=""/4095, 0xfff}, {&(0x7f0000001140)=""/161, 0xa1}], 0x3}, 0x40000020) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)="a144ddb3a19c78abde2a", 0xa}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000340), 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2464f4acc8171e", @ANYRES32=0x0, @ANYBLOB="0c000d800800030000000000"], 0x24}, 0x1, 0x5502000000000000}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000140), &(0x7f0000000180)=0x28) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000027bd70001bdbdf25"], 0x10}}, 0x20000084) r6 = socket$alg(0x26, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x1000006, 0x11, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r7, &(0x7f0000000540)=ANY=[], 0x32600) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000071105a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) close(0x4) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) 2m3.989628142s ago: executing program 0 (id=1044): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000180)=0x4, 0x4) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/15, 0xf, 0x2000, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010100}}, 0x24) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)=ANY=[], 0xa) 2m3.889781127s ago: executing program 0 (id=1045): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) 2m3.75562356s ago: executing program 0 (id=1047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES32], 0x38}}], 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002c00ed002bbd7000ffdbdf25077c0000100001800c00dd800800f400", @ANYRES32=r1, @ANYBLOB="080003"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc090) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@remote, @broadcast, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@broadcast, @remote, 0x0}, &(0x7f0000000200)=0xc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}], 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0x7, 0xe, {{0x15, 0x4, 0x1, 0x1c, 0x54, 0x64, 0x0, 0x3, 0x29, 0x0, @remote, @remote, {[@ssrr={0x89, 0x23, 0xdd, [@empty, @dev={0xac, 0x14, 0x14, 0x28}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @private=0xa010101, @rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xfd, 0x0, 0x9, [0x51, 0xc0, 0x1000]}, @ssrr={0x89, 0xb, 0xdd, [@rand_addr=0x64010102, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe4, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x48d4}, 0x4080800) 2m3.626337359s ago: executing program 4 (id=1048): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r1, &(0x7f00000000c0), 0x0}, 0x20) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, &(0x7f0000000480)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r3, r5, 0x25, 0x4, @val=@iter={0x0}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, r3, 0x4}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) 2m3.445501022s ago: executing program 0 (id=1050): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x514a3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}]}, 0x4c}}, 0x8040) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) 2m2.963302335s ago: executing program 32 (id=1050): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x514a3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}]}, 0x4c}}, 0x8040) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) 2m2.90020753s ago: executing program 4 (id=1054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {0x0, 0xfff2}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ipvlan1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2m2.76308155s ago: executing program 33 (id=1054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {0x0, 0xfff2}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ipvlan1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 24.036407513s ago: executing program 5 (id=2511): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x1e, 0x80000, 0x7f) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0x3, 0x1}, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x1d, r4}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{0x1, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "4a4b7e836eb6681f"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r5, 0xff07, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000040)=0x22, 0x4) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x21000101}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0xec, 0x9, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x6, 0x1a, '[\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7f}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4e76}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'team_slave_1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xb}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'syzkaller1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000042}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r9, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x21, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000780)=r5) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000600001008001b0000000000"], 0x30}}, 0x0) 23.096407193s ago: executing program 5 (id=2530): unshare(0x28000600) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="766f81ce50cf0180c20000000800450000b0000000000011907a000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f3bcb307b3aae0f5bab054ff6445cbb2c5a57df67d544af6e8dafe09"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/231, 0xe7}], 0x1}, 0x1}], 0x1, 0x40002000, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) (async, rerun: 64) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48000) (async, rerun: 64) socket$inet6(0xa, 0x4, 0x18dc) (async, rerun: 32) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (rerun: 32) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000080)=""/129, 0x81}, {0x0}], 0x2, 0x80000001, 0x1) (async) r4 = socket(0x10, 0x80003, 0x0) (async, rerun: 64) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000200), 0x8) (async) sendto$inet(r7, &(0x7f0000000700)="ab12bb69", 0x4, 0x840, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x13}, 0x1c) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) (async, rerun: 32) socket(0x10, 0x3, 0x0) (async, rerun: 32) socket$caif_stream(0x25, 0x1, 0x3) 22.931074457s ago: executing program 5 (id=2534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x16, r2, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x44050) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r4, 0x4, 0x70bd2c, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000340)={'sit0\x00', &(0x7f00000007c0)={@broadcast, 0x0, 0x0, 0x90, 0x0, [{@remote}, {@initdev}, {@loopback}, {@empty}, {@multicast2}, {@loopback}, {@broadcast}, {}, {@initdev}]}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmsg$unix(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f0000000880)=""/230, 0xe6}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000240)}, {&(0x7f0000000480)=""/226, 0xe2}, {&(0x7f0000000580)=""/224, 0xe0}], 0x6, &(0x7f00000006c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x2) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000ac0)=@ccm_128={{0x304}, "6bad71b350e22a00", "ccaa54dbfef3216ec09b63757e98ed63", "cde21de0", "bcad0b2f6d5df9b2"}, 0x28) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r8, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x4, &(0x7f0000002440)=@gcm_128={{0x303}, "dd280da8e6f1bd16", "5f30af85076308d11df37b00d53ab595", "d0a9d503", "d206576855a4cc7c"}, 0x28) 22.6130503s ago: executing program 5 (id=2538): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191) listen(r1, 0x100) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000540)={0x3b}, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000000)={0x80}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r6 = socket(0x29, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x2, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffff17}}}]}, 0x58}}, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={r8, @local, @broadcast}, 0xc) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf256c00010008000300", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x40800) 22.231737656s ago: executing program 6 (id=2548): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x1, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xfffffffc, 0x2}]}]}}, 0x0, 0x3a}, 0x20) 22.129075708s ago: executing program 6 (id=2550): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000000)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$can_j1939(0x1d, 0x2, 0x7) 22.101566568s ago: executing program 6 (id=2551): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) (async, rerun: 64) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) connect$can_bcm(r3, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000300000000000000", @ANYBLOB="0080220294bbf164"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r4, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32], 0x60}}, 0x0) (rerun: 64) 21.721590716s ago: executing program 5 (id=2555): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000340), 0x4) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000140), 0x0) 21.06019547s ago: executing program 6 (id=2567): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000200)="7800000018002507b9409b14ffff00000200be040205e8056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a00000000e000e218bcddf66ed538f252325000", 0x78, 0x2400c090, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x5}, {0xa, 0xffff}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x4, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r4, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 20.916993243s ago: executing program 6 (id=2570): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x811}, 0x8805) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x2, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getaddr={0x14, 0x16, 0x8, 0x70bd2a, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000002}, 0x4000000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x800) shutdown(r4, 0x1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000940}, 0x10) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@getaddr={0x14, 0x16, 0x1, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40000) (async) r11 = socket(0x6, 0xa, 0x3) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r11, 0x84, 0x4, &(0x7f0000000780), &(0x7f00000007c0)=0x4) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000800)=""/96, &(0x7f0000000880)=0x60) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000900)=@add_del={0x2, &(0x7f00000008c0)='macvtap0\x00'}) (async) r12 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r12, 0x942e, 0x0) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r11, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r6, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0xb}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8000) (async) bind$alg(r11, &(0x7f0000000a80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001cc0)={0xffffffffffffffff, 0x0, 0xb6, 0x1000, &(0x7f0000000b00)="15348491cc50fc938670a75a141e7761a01f923b7713e247e78a2feeb8778c87edf92dc763aec91933f5fbf7c139944b6fd2b3c3bccbc4f26a57279d96f1c8981efd77c234d0a84610dd41b1557c1cca0bb5a04a315d68b978e136259919a9697d088f8a1327dbfff5bececece9b09a7cd3af8ecbec0fb35ca5d4a4fe0800de21efee8d9782c42cec309a73968cc084f7a82f2f50764f3a8910e1d1b2e091e3be53c797ce57a1002814cddc77d7930ae8a309d8a3647", &(0x7f0000000bc0)=""/4096, 0x0, 0x0, 0xb7, 0x33, &(0x7f0000001bc0)="622b7ac9fba14a30c83a4debeb002b0db6cad32f9dd82322460a1e9d78511ff999d02585809e9d8d07a0d82c29b17c6f676c9927389c85c1c55ff7aa86ddf2c1b6b059553bffd1da907abe940522619c7dce6797d113e9b8324c23b821d8e763d818eb96a40df1be903c9cd48539fb4f86d75c15f2ebcd9c00fc05e0867c44ebb81577fdf926d4702f43eed665bb4d7e447a7242ae55102250da7ee757dca29b363410cf40095e0718217a190ed00203e9ee9f2714072d", &(0x7f0000001c80)="da418b1cffab56bbff886d10e677898a77b6958c24d2ae48019b830bf3265569a5f627142cc798a776b77580bfa0df26fbb558", 0x2, 0x0, 0x7}, 0x50) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001d80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r13, &(0x7f0000001e40)={&(0x7f0000001d40), 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x28, r14, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000451}, 0x881) 20.787180775s ago: executing program 6 (id=2573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xb, 0x10000, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r8, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) write$nci(r6, &(0x7f0000000280)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x2, @f={0x7, 0x5, 0x2, 0xe5, {0x5, 0x12, "c71dcc80b3c4f576ebda506287a4ebf7e501"}, 0x2}}, 0x1c) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x27}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c0}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4008010}, 0x8077c8ebe7a997a5) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0x50, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in6=@mcast2}}}, 0x50}}, 0x20004004) 20.700634905s ago: executing program 5 (id=2575): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r0, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 17.200821227s ago: executing program 1 (id=2624): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000300)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x6}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@typed={0x4, 0xe8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 17.142091422s ago: executing program 1 (id=2625): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000001640)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f00000000c0)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000040)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}, {{&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000140)="f7d11cb927605915ab0604862d63b118ea2b746b94c265f1679a99d1f75fceb83f65ad273ceeb462b8aa7dfb09ca683466b09c6aa8a3b41ec46e21619cdd5f96806786f6", 0x44}, {&(0x7f00000001c0)="b15f8e0f0ee447983ef3f73ce74ac53c0e58e99ee46e7620a923c6a54f9453dcdf48ce35486e9a47388dc859b9bd54cd7443fe927dbb9638b514bc6a9cecb802f506492fdeb396d21b2a971c6e90be710aada90a52c402816dee64a532b30f91ede7631984aa1facee3a68070896259a1cfaa21b40dde0189444057249e5c77be5986de4d24c1be0912bdf24dd096a99a59a258c51eed441a9277ffe5b6dac545512f7582ddd68839d", 0xa9}, {&(0x7f0000000280)="fab5b3f7f44b48afa892d88e3aad52793a5c03b596d1f2a946b29a3e66b485b57d7b30f32f12bee12e1623c324885714faee8f89bf4ce89e58274d8c674f7b056828892e542164e2fc2c0933c980505bcd1def2d20037b8013463fa77ac9ae111a668ab8d946ca1851a34b8fa9eb9f980058dabaefb928b4b2012f209a377bd6eff4c1eecdf26cdb3a27a8a309604c6a09c209189ce1408195581c9cf0eb8a51f381cefa9bffa51fe35be4a669d9b36ac8873891235bd2243c359930a6e59ec6a1bc8608b128ee118a013c", 0xcb}, {&(0x7f0000000380)="e48036043746ad8a52e9e07001a4013e33ff347696ae56bdb4f9ef1882b80894a144319b1a89d0e6e045981edc1b7abf585e4a5b63617c5ed11c819d84e734b6796595fa2d5876215d9bf2b68e4cbc12ce1ccf71693e5ac019583d2c3d8d47fa9e3d", 0x62}, {&(0x7f0000001440)="132b4ff90fa0910efd28aa501457f3cbb4dddafa00c34b3bffc6f3bcc7ecaf05c15f89a9e6ff2846f26b7555fe3f0532a77e603327b502b5839e4ce668397bc09f63df4a5145b454637ad55f0a2cc3bdcc228a52faab12d0e75fffe5a313dda924a7776f68e50590dc09b9fdb612ad7628dd0b03a11e73b7b31d5771815eda2b7f592a0fb4042af4229a61169bb48ec347e90df9b693b35543536c8bed5af59965507f5e377f244875c910bb9d3d8bd1ab8aac1ccfa476a9b7b8bda8d0ebec798cb59fed93ad86eb9de39fb00fd5ef0c24377af033099ba04a09df658b115aed5148e07755c7a04a72219dbd81fcba944a", 0xf1}], 0x6, &(0x7f00000016c0)=[@ip_tos_u8={{0x2a, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0xe4, 0x0, 0x1, 0x7}}, @ip_ttl={{0x0, 0x0, 0x2, 0x8}}, @ip_retopts={{0x0, 0x0, 0x7, {[@ra, @end, @rr={0x7, 0x0, 0x3a, [@loopback, @rand_addr=0x64010100]}, @generic={0x83, 0x0, "710979da50401c38240263"}, @cipso={0x86, 0x0, 0x3, [{0x0, 0x0, "d1e95af9bc4c7d19"}, {0x1, 0x0, "36db044dcc9c0cfe460b596b94"}]}, @ssrr={0x89, 0x0, 0x98, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x25}, @remote, @dev={0xac, 0x14, 0x14, 0x21}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x0, 0x0, [{0x1, 0x0, "1399a2430f9b51bae6148c5bbfd0ee"}, {0x5, 0x0, "970d8030"}]}]}}}], 0x48}}], 0x2, 0x0) (async) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) (async) socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000004060104000000000000000000060000050001"], 0x1c}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x4008) 16.828407141s ago: executing program 1 (id=2630): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@generic={0xf7}}}, 0x0) bind$inet6(r1, &(0x7f0000000100), 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r3, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x49}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000140)={r8, 0x80, "3561cb8b5546e3903cea5e2dd477da9338f9cfa4d81cf18f83ce8a70327308a7de5b45abfff6bfb6bd8a3a0a4451e9018292db9b2bba8fb10bbbc6e1bb0d1bfbb9079cdf2ee1d4a30349d41032a44ad9f20a489a23e5fb171e4cfd83ea4b5fdcc16e08df687a410e1479fb258cd2ae02cac78a3e687ece7c95a60bb9448e0250"}, &(0x7f00000000c0)=0x88) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) syz_emit_ethernet(0xca, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@rr={0x7, 0x3, 0xdd}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private=0x4000, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r11}]}}}]}, 0x40}}, 0x44) 16.251217685s ago: executing program 2 (id=2637): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x6}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001400)=ANY=[@ANYBLOB="20000000120001000000020000000000070001"], 0x20}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001293cf0a000000050000000000000200"], 0x14}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x88, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@generic="989a6a72fc3cfaa07de1d706d7a8ec9d4da91292e931d20939228bb2df3d0d32dec5f8f40edc2e4e3ce0c8ab9722f58c4e64ebf2c210e823c47c4558c1ece632bb335c777823659e23405f29446ea802131db876f8d3f4e9860e4bb920ad1d49470d55278fc3359efaa34c75edcc570e749f3789fb966b"]}, 0x88}], 0x1, 0x0, 0x0, 0x41}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 16.084689535s ago: executing program 2 (id=2639): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x18) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x8, 0x0, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20004000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000005c40)=ANY=[@ANYRES32=r4], 0x9) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0xb4, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x6c4, r11, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x1d8, 0x8, 0x0, 0x1, [{0x1d4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x4}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x490, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "79a82301762c3381e653abe080e2fdda4d1e3d1d50e46e01027f042818131375"}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @private2, 0x80000001}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x364, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fcad1ef460710263052bd3af0b528c2c5efa4e5f12b34da3cdb861016b5978ca"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @empty}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x102}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4f, @private1, 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x6c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) 16.082862522s ago: executing program 1 (id=2641): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x14, 0x14, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r8, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x68, r8, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24000040}, 0xc000) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r11, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x42, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x8e0, r6, 0x100, 0x800, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x358, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xed32}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x140, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03\x03\x03\x03\x03\x03'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x67}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xa7\x13+^@+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7a8c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf60}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xacfb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc6b}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x1a, 0x5, "11afeef4d6eb5391ee234b7309318c5abfb2bca0de13"}, @ETHTOOL_A_BITSET_MASK={0x43, 0x5, "9bd88d2daf1fbc2f9e271efad157179867e27263b54b5b3a9cbd56260abe77a45d46a95c66de3aabedd7ef1a399d294fe7a6c93c6be0899b080a9ac2cf9321"}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '(\xfb+[:$\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{\':&%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6e49cf45}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03\x03\x03\x03\x03\x03'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/\x1b\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03\x03\x03\x03\x03\x03'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03\x03\x03\x03\x03\x03'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03\x03\x03\x03\x03\x03'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03\x03\x03\x03\x03\x03'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}]}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.%\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x230}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0xbc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb8, 0x5, "b6541b613162b598b3d6bfca68f75168fe1278368d54c467f506affd254a9551c7488b6efaeeee1c77b734da653f4236761ac8f1eee415a91b97dab6c772b09558c74d2ca7a1ba1192442b7b900efcfc5274c66a2cf2e828eb18a9d17b4a9077a00774171900cea8a68ea56a1af0463efaf34b6e42d4d61c29be6d83b4b829833976573b4c223d03683aeb8f19ccd2b2ec2b94a957688750beda6081f05b48a1c6370a5f3701b5f453195023793a054e2e2fec76"}]}, @ETHTOOL_A_FEATURES_WANTED={0x154, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03\x03\x03\x03\x03\x03'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03\x03\x03\x03\x03\x03'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '['}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03\x03\x03\x03\x03\x03'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x160, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe4, 0x5, "8d11dd6e0fdec9bb32051cca84d97ba46c327e754fafa3e32b5429ac78d422d9d1f3af7b05dfffb651ec36650ce5773a9451b6b6663795292b98d8dfe9d52674718fcb9bfa447e13f412e579661daae2c092adc41d5fd7a69821cc8500db8981c9765c80cbf8b3a674a90caff5bf48a4428b2c6f2c9e2c3d179fe4dea874508b3c8df1b3ed63bd1f674ff92a85deed7f80cb99698dc753e13ffbcd4831c56cfe147a9221fd4124f0f9247f5c6ddb81afa789a774882f828abafeed9eb3a4f82239bd5c2977a720c114da443080aab19b7df6e168f0f9ff805d4a2d49f84f3111"}, @ETHTOOL_A_BITSET_VALUE={0x76, 0x4, "23d2561adc3c94e6663589bc7d7fe688a53398a175a14b0c538dc76cde78eed9b5f35d509790e6794fa8d0e9597e3546e829f333bb111d9d299e1ea638cca37f9b19e6d4282354d3761181a111d0aa01b3dcd662e91960b2a9932e02d391978de7e6db9bc61db0e797b842858141ed24d7ec"}]}, @ETHTOOL_A_FEATURES_WANTED={0xb0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x93, 0x4, "1c5d2786aafd37c7487d5f0331b871b3a39c49061596bec33191362b7ce93c4e3ec6be35f50a4943ddba3969e77eb276b9e7eaf055873c0efea9389ca093b326d1ffc39b492f6d746200f0856315bfb800f38b2f75788dc283acad6e61811bf6d66a1c6e0206329f94bd5f30633e0c6089043b811cfd6d610fbfab56007c643b096c21e38cc57c2c68ece5b4439b03"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_FEATURES_WANTED={0x90, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x74, 0x5, "dddaaeb7a40794e11f063f501b07a87a657c4e231ea24d31147545bb815e61499ff30481b2e193cff61bc2640bd7c725c920f49020b7df09f1adf938c0c93a143100a9e195fc4db951649a0b63100bab670c89978855f29a6ac681690cfee492897efee396985ae30a8b82851e2d8a07"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x8000}, 0x8a0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0000000000e6f4f2b0a5a2bf1e845ff49e12", @ANYRES32=r4, @ANYBLOB="0a001800030303030303000010005a800c000180050002003e000000"], 0x38}}, 0x0) 16.022651952s ago: executing program 3 (id=2642): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x5, 0x0) setsockopt$inet6_tcp_int(r1, 0x10f, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r0, 0x0, 0xa, 0x1) 16.016913367s ago: executing program 2 (id=2643): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0xa}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="00008500000050eaff0018110400"/28, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.848942465s ago: executing program 3 (id=2644): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = accept4$packet(r1, 0x0, &(0x7f0000000040), 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48300, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000000c0)=0x800, &(0x7f0000000100)=0x4) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000140)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000180)={r2, 0x6, 0x2, 0x2}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x2, 0x6, [0x5, 0x5, 0x200, 0xffff, 0x6, 0x1]}, &(0x7f0000000340)=0x14) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000380)={r7, 0x40, 0x8, 0xffff}, &(0x7f00000003c0)=0x10) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000400)={0x50000000}) accept4(r4, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000004c0)=0x80, 0x800) accept4$nfc_llcp(r8, &(0x7f0000000500), &(0x7f0000000580)=0x60, 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), r9) socket$phonet_pipe(0x23, 0x5, 0x2) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000600)={r5}, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r10, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x140a, 0x8, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x60}}, 0x20000810) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000780), &(0x7f00000007c0)=0x4) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0x662f, '\x00', 0x0, r10, 0x5, 0x2, 0x2}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000008c0)=@o_path={&(0x7f0000000800)='./file0\x00', r11, 0x4000, r9}, 0x18) sendmmsg(r1, &(0x7f0000000b40)=[{{&(0x7f0000000900)=@rc={0x1f, @none, 0x1}, 0x80, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=[{0x58, 0x114, 0xf9, "e31db2678d5c1fbee37ccacf428a0c57cdd73ed2a1f108f1c69e71eb02225a034382de385b27c045757136972be248a0f8a8de094b5543c2032eb81874dd611e0a5488bf177a"}, {0xa0, 0xe1, 0x1, "045cc53c1aa983862d42ab59bd3d8f5b0424a3f00882567c3bee3610477af720b1137b701119ea5d8ca2ba4fa18e71eef049e1072dbdc57316ec6c0a2b55621c5655989a9c3f6661d5d0670cf351add22dcfcf38176961e5d49be7b3545a8196262a45b5bb9f4fac87a8e6674a2fd600f81f27c9bf1fec84b5a7ff202846b501eb1d27ce6f6093b89390c8b320a5f87d"}, {0x70, 0x103, 0xc, "c60bef7515c6a6a22657e07b36f1641692a0bef89cbc0e0bdd675461db1612f4e2e62b7a69a8e4f10f37198e9646ceb04b87f5e8574ec64640116f1505109baef75e7750df6562603676286b8bb0afae327799954bc2388805"}], 0x168}}], 0x1, 0x20000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r12, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x58, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x5c}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x58}}, 0x22008840) 15.847537839s ago: executing program 2 (id=2645): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x3f8, r2, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IE={0x28a, 0x2a, [@measure_req={0x26, 0xe5, {0x7, 0x2, 0x3, "d3f7f9a088e085d226863da422089f940ecd216647c26d675aeb3500e94890b8fb45b2e3639f14042719657104eccfda4830b0999d264366c243208cf84f4ac3067445d8d02dfaead734e5816d60925c8d553f5a543a9c932de46c19a2932198476eb4fe52df99c64bfcdbe303564d1edd4988e846a22aba5083d5877d12406317714d4812d04c3237c2a413c099d4c4a5fc3a95f65e677f377e441c4efb7e72bce813c5e46b4fc1163696b6a33bd6f21a23930141d3d4201aad8fd778a4510905e5482f9b046920aa27facd25d3424d8fdb315b60015a21c6a29b59adea2189bc20"}}, @random={0x5, 0x5e, "0eaf76e159e29d9ec9424386055ef832f398173eb77666e3787b9b7df67e3a367fe56ef5a3794f8c7359c176e580c63517cf6c2478a8b9ca3496a719ac24fcc41b4090b39a444ec4a710f10e1761f07cc485d9a519ee1285f51a7b83972b"}, @link_id={0x65, 0x12, {@initial, @device_b}}, @perr={0x84, 0x5c, {0x92, 0x6, [{{}, @broadcast, 0xc, @void, 0x1b}, {{0x0, 0x1}, @device_b, 0x81, @value=@device_b, 0x1d}, {{}, @broadcast, 0x3, @void, 0x7}, {{}, @broadcast, 0x9, @void, 0x4}, {{0x0, 0x1}, @device_a, 0x7fffffff, @value, 0x22}, {{}, @device_a, 0xb45, @void, 0x5}]}}, @tim={0x5, 0xcb, {0x65, 0x97, 0x4, "54d83e042e47cf38722834cf1c6ee6080a1dc26127fbc2bb15a34f63fd012cce88f09fa8a3bc4f9fcd24edacc5dfb8f6630246e5e6871b00387c820c05cac8e2c62f083eb69752edd9d9d08ef8607623f188d2e510dbebedc9a2c253f7b38acfddc9cd240738015fbe4e6c923c884e82247ea3b440edf5c3f40564c6c037cef9918bc95332e4cf351388ec62b821cb0299624873029946f277b562e3eb8a31e06c332e4a6203e9e710814e86c868c9f63e02ba401c10d638d8b833b636652281af0dd121fc5a0970"}}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x7}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0xd1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0x2}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x54f}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xb}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x100, 0x84, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="6a5690545b8f"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xc0000000}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x31d782c2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x42c}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x175}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x14, 0x1, @random="d59d7096a90bc4c9106aeed763f33034"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x80000000}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="7b63a0637c35"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0xa}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x200}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2229}, @NL80211_BAND_LC={0x8, 0x5, 0x8000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}]}]}, {0x4}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x4000}, 0xc010) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x7fff, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="007b3ad601eb3cf39e88b30aeaea7fecd0d9b4fa25101a7f821352b71d2e8259dcc8bb63518719fb1baae7ceae201fbb5353dc0d5449f561668a47f49211180519150243066a947f10c0f0101c98d3e70ec9ad8c28425cbf5c3d0900609c8cfc4f97", @ANYRES16=0x0, @ANYBLOB="01002bbd700000000000140000000c00018008000100", @ANYRES32=r4, @ANYBLOB="0500190000000000"], 0x28}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaa"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000000)={0xa, 0x0, @remote}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="280000000b14010000e0ffffffffffff070001"], 0x28}}, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x2, 0x3, 0x0, {0xa, 0x4e21, 0x6, @local, 0x65c}}}, 0x3a) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, r12, 0x1, 0x1070bd2d, 0x4, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117500000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x4004090}, 0x4000850) 15.76601433s ago: executing program 3 (id=2646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000a030300"/28], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 15.687917902s ago: executing program 1 (id=2647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x170b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x10, 0x7, 0x3d58, 0x1, 0x1, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) 15.605611052s ago: executing program 3 (id=2648): r0 = socket$isdn_base(0x22, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d00000000000000000038000000000000080000000000000000000003000000000100000002000000000000000000"], 0x0, 0x4e}, 0x20) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x0, 0x3, 0xee, 0xfb}, 0x6) 15.563984611s ago: executing program 3 (id=2649): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x401, 0x4, 0x0, 0x4, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16=r2, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000008000100000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009"], 0x134}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008112a2000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x401, 0x4, 0x0, 0x4, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16=r2, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000008000100000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009"], 0x134}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008112a2000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async) 15.448196367s ago: executing program 3 (id=2650): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000015000000"], 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x7, 0x8, 0x600, 0x84, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x8}, 0x50) (async, rerun: 32) r3 = socket(0x1, 0x2, 0x0) (rerun: 32) bind$unix(r3, &(0x7f00000001c0)=@abs={0x1}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c000100000000000000000002"], 0x114}], 0x1}, 0x0) r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={&(0x7f0000000000)="4588a71fbe65273c83cd71e3435698dfabaf", &(0x7f0000000040)=""/15, &(0x7f0000000400)="21c6b0018b65e4b73ca270742a44509d513b1359de2e55a59eb4db9de89c9d1d9eb71373d2d3ec9f8f56b6acf9ea5f7ff07281c6577de15caa6cff3f318770b271b06eea148cf37dfea107e0ff75fd36d25639eb9283359cb7ab67b5c252d3f0bc4169a0bc8daf3d943f812abc1b40b1c7cf1893ae032fa7d86643acbb24341136987549613e70a5c70d17c2b9d6d28cde9b9c15227f748bf056eaebdcd45123a1970f409e1d7143cc89677097c1cf465648902190e8f51b1bc506c4f473002cf705be49027aed464462224c0250cbbcf5844094b3ec14d463ece2258c495970a3d7ffcfaf98e6d7fa6e95f29d56", &(0x7f0000000500)="3d0d49a9b9bed9a8507e2e3a4eecf90ece2b7e2e96dc277b83750694860dd2e306f4e0c4599dc93a829b2d567f13712de9328e99a8270074a9cf100704ea843cd7d610a261960fbe5f886cda6d8cd9bd59f8022b9445c95be9e5a2a63309b6bf170f7d905ee1f19a351f04c7dbbd2e4714d5bbc5156af67440c1a5bd7b6874f2a14dc650e7c111f093f25960ec79555279c0fb350864bf3a3fa52dce416583a236bc499b4e4b98ec01e9083b8b163dbe0ce2965307f3efe1c3581dae3ebc6482b03bb83d9b212baf7ab37d8d79c97660d5c5b8f063076239d4f61195aca14c8ada78553d839741fe", 0x9, r2, 0x4}, 0x38) (async, rerun: 64) poll(&(0x7f0000000140)=[{r0, 0x4060}, {r2, 0x40}, {r4, 0x444}, {r6, 0x85}], 0x4, 0x7) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="04000000040000000400000025bf000000000000", @ANYRES32, @ANYBLOB="0000000b9c1ad34143f4147600"/29, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r7, &(0x7f0000000180), 0x0}, 0x20) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x2e, 0x9, 0x70bd26, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2000a800}, 0x4008000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000100000000000000030000009500000000000000"], 0x0}, 0x94) 15.358772518s ago: executing program 2 (id=2651): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) write(r0, &(0x7f0000000300)="98a613fd", 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x62, "70a2468ce465f5a1c0fb90ef122283cca7004359ff6e6007aa3d699da6fb4fa1ef8771c2499b01606ec4e57eab5ebb0256b6dd434d288b9ecba7c74b0eed7bac9a9ecf4a1362cb79b9e5f035f7997f268b34072c6e650f0aa364e8fc1642217af80e"}, &(0x7f00000005c0)=0x6a) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r2, @in={{0x2, 0x4e23, @local}}, 0xa, 0x222a, 0x80000000, 0x7fffffff, 0x8}, &(0x7f00000006c0)=0x98) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipmr_delroute={0x34, 0x19, 0x300, 0x70bd2c, 0x25dfdbfd, {0x80, 0x20, 0x80, 0x36, 0xfe, 0x1, 0xfd, 0xb, 0x800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_OIF={0x8}, @RTA_DPORT={0x6, 0x1d, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4018004) r3 = socket(0x840000000002, 0x3, 0xff) shutdown(r3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90de36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c73596f860221156437f4d6b76ecc4b35bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804dbd99ccefb7c09269dd2c5ca93125e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d309d8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc882d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd61dfb3de7f503d58ac8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0d74d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc4511183096eff3188a288c408b10285e7ec75f826e9b08a82cde1f4470545eebc71440623752e87ecc689b7fec2f667e22705b4660b2ef936cce446244bb48f8c7d062ea4a955facf6c2957cfb3c3ee9229efab5b72a5c5266eb493c7c3b08a91971692d9673cb9df620a8240d4f94b9fafd8e2bf0f9cedd1e08f4f10fd8f25f3169ed878624adccb5572cb918e0e3ba7e4ac0967aa65241903509778e63bebf00107524f858d7d48ef9e2c112c75d732344dc0a9bc506172d5a45e3bcb203862307c24c20fe1ffe6b5a43dbc1b20156161b5f59ab9955f2a6fbc64f547a671ded4896d8c4bac78f23e15c8e6cb72599d27607e5a1ad434cdee73d026e5dd14d9824202052181dda714fff7dc43444bc948541f641ac8215a5dae7fa8a50897b916a856aedcdf16be8736b33823ab7b2f1c77554bf2c36e412fcdc2c7c2bf0499ed5dfe84db2d7d3bb802f47dd2ebb7945e09f542d464dfbd2c70a90ab36ebd331a6549fa16f2e83a06c512c83eec56b5b94040d31da56e021a48c8651ebf3e1f8931a6d18150f1d76d07e7d8ecacbed15e9c2a50e610f1d0b523083b182cde6cf655ddd45409400c23fb89eba0db0ab4eee055a60a6ac7fea75703e8e4d737bfabae0fc3c1406b6b454ba694673a69b1782eb0052c2a4e251c8f96c7bcab1845dc347ded7fb207fd19f2bea2e496d63613af735b8e8376658ce4b43a09b53846f0a0218661d917e39bcd79063128f4c5c570b6214db8ed5e1255d48725ad8dc0d3c5aafafb47095dc1f3572650e4b3d0540cec5340638d325897dc3ecc721634875abc32f6ea1c28bf579013269924fc1388f42741b45e99bf7b77322210cf699b2590a33f51f95c572b12156910e926f184d2a309caeef8c206093ee3ab2aec16959da2425"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe3d}, 0x48) sendmmsg$inet(r3, &(0x7f0000001640)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f00000000c0)="a9050000000074640006000000003552bde5c064", 0x14}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x10, 0x10, 0x1, 0x6, {{0x21, 0x4, 0x1, 0x27, 0x84, 0x64, 0x0, 0x7, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}, {[@timestamp={0x44, 0x10, 0x46, 0x0, 0x6, [0x80000000, 0xffff, 0x40]}, @rr={0x7, 0x23, 0x77, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @multicast1, @private=0xa010102, @remote]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, '\n4}r'}]}, @end, @cipso={0x86, 0x17, 0x3, [{0x1, 0x11, "ab230303a782ffe8a2e45c7c9e7cb3"}]}, @timestamp={0x44, 0x18, 0x3e, 0x0, 0x7, [0x611, 0xe, 0x9, 0x1, 0x5]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0xf, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @alu={0x7, 0x0, 0x8, 0x5, 0x1, 0xfffffffffffffff4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @generic={0x8, 0x8, 0x6, 0x6, 0x9}]}, &(0x7f0000000280)='syzkaller\x00', 0x7122, 0x0, 0x0, 0x40f00, 0x5e, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x2, 0x5, 0xffffff01, 0x2}, 0x10, 0x217de, r1, 0x1, 0x0, &(0x7f00000004c0)=[{0x5, 0x1, 0x8, 0xb}], 0x10, 0xffffbc6c}, 0x94) 15.351360456s ago: executing program 1 (id=2652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}}], 0x1, 0x10122, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0x0, 0x2}]}, @ptr]}}, 0x0, 0x3a}, 0x20) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="1400fe004c62729b95d2d68df36c11a94a389c630a00340001010101010100000a003400010101010101000005002001110000000a00060050505050505000001e00340015198c5515c1515d2e49c389a199d559262f4df8b4d46410c83b00001400fe007f4c34e6134c69060769a05ac9cd9df10a003400550f7cb4a07b00001400fe00cce268b8812d5a07ba18744d4588d053"], 0xb0}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000000) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000080)=0x1, 0x4) write(r2, &(0x7f0000000380)="240000001e005f0214e0ffffffffff8dd5d6d87c998ff807000000000000000000000003", 0x7e) sendto$inet6(r2, &(0x7f00000002c0)="641dfd97de6415b9", 0x8, 0x880, &(0x7f00000003c0)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1000005, 0x2010, r3, 0x8000000000000000) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000008c0)={'virt_wifi0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "a138fb1f9492db9fe417b3de0dc411f4be81e902cb8ad5ef160c3e91c8864bb7", "c74bc4ef2a0425cefce2c7579110656b869d50da807f8ce7eb61814a429da10f", "4143b5a7b3752f1fa33f9474bb9787fed87fd666facd431277f34724409c761c", "4ea34884b1e011143195b2d3bd9b36c6b9a1e472440ca265d7f6f1660c6dc12a", "a646ed89db088d4f147cea6360ac305aa1328e4ab21a28764b42e0c6e6e52867", "18f1342f43747e64fe9c3e69", 0x18, 0x3, 0x10000, 0xeef6105, 0xfffffff5}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r1, 0x100, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x84000}, 0x20000041) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300000000fbdbdf250b"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) 15.329310401s ago: executing program 2 (id=2653): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x28, r3, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008091}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)=ANY=[@ANYBLOB="06080000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fddbdf2531000000080001002800000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000700000021000000"], 0x30}}, 0x4800) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x200408c0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x8, 0x0, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x244f6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x3}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.159452247s ago: executing program 34 (id=2575): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r0, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 5.115138458s ago: executing program 35 (id=2573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xb, 0x10000, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r8, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) write$nci(r6, &(0x7f0000000280)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x2, @f={0x7, 0x5, 0x2, 0xe5, {0x5, 0x12, "c71dcc80b3c4f576ebda506287a4ebf7e501"}, 0x2}}, 0x1c) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x27}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c0}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4008010}, 0x8077c8ebe7a997a5) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0x50, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in6=@mcast2}}}, 0x50}}, 0x20004004) 84.476509ms ago: executing program 36 (id=2652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}}], 0x1, 0x10122, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0x0, 0x2}]}, @ptr]}}, 0x0, 0x3a}, 0x20) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="1400fe004c62729b95d2d68df36c11a94a389c630a00340001010101010100000a003400010101010101000005002001110000000a00060050505050505000001e00340015198c5515c1515d2e49c389a199d559262f4df8b4d46410c83b00001400fe007f4c34e6134c69060769a05ac9cd9df10a003400550f7cb4a07b00001400fe00cce268b8812d5a07ba18744d4588d053"], 0xb0}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000000) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000080)=0x1, 0x4) write(r2, &(0x7f0000000380)="240000001e005f0214e0ffffffffff8dd5d6d87c998ff807000000000000000000000003", 0x7e) sendto$inet6(r2, &(0x7f00000002c0)="641dfd97de6415b9", 0x8, 0x880, &(0x7f00000003c0)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1000005, 0x2010, r3, 0x8000000000000000) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000008c0)={'virt_wifi0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "a138fb1f9492db9fe417b3de0dc411f4be81e902cb8ad5ef160c3e91c8864bb7", "c74bc4ef2a0425cefce2c7579110656b869d50da807f8ce7eb61814a429da10f", "4143b5a7b3752f1fa33f9474bb9787fed87fd666facd431277f34724409c761c", "4ea34884b1e011143195b2d3bd9b36c6b9a1e472440ca265d7f6f1660c6dc12a", "a646ed89db088d4f147cea6360ac305aa1328e4ab21a28764b42e0c6e6e52867", "18f1342f43747e64fe9c3e69", 0x18, 0x3, 0x10000, 0xeef6105, 0xfffffff5}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r1, 0x100, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x84000}, 0x20000041) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300000000fbdbdf250b"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) 47.825861ms ago: executing program 37 (id=2653): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x28, r3, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008091}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)=ANY=[@ANYBLOB="06080000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fddbdf2531000000080001002800000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000700000021000000"], 0x30}}, 0x4800) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x200408c0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x8, 0x0, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x244f6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x3}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 38 (id=2650): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000015000000"], 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x7, 0x8, 0x600, 0x84, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x8}, 0x50) (async, rerun: 32) r3 = socket(0x1, 0x2, 0x0) (rerun: 32) bind$unix(r3, &(0x7f00000001c0)=@abs={0x1}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c000100000000000000000002"], 0x114}], 0x1}, 0x0) r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={&(0x7f0000000000)="4588a71fbe65273c83cd71e3435698dfabaf", &(0x7f0000000040)=""/15, &(0x7f0000000400)="21c6b0018b65e4b73ca270742a44509d513b1359de2e55a59eb4db9de89c9d1d9eb71373d2d3ec9f8f56b6acf9ea5f7ff07281c6577de15caa6cff3f318770b271b06eea148cf37dfea107e0ff75fd36d25639eb9283359cb7ab67b5c252d3f0bc4169a0bc8daf3d943f812abc1b40b1c7cf1893ae032fa7d86643acbb24341136987549613e70a5c70d17c2b9d6d28cde9b9c15227f748bf056eaebdcd45123a1970f409e1d7143cc89677097c1cf465648902190e8f51b1bc506c4f473002cf705be49027aed464462224c0250cbbcf5844094b3ec14d463ece2258c495970a3d7ffcfaf98e6d7fa6e95f29d56", &(0x7f0000000500)="3d0d49a9b9bed9a8507e2e3a4eecf90ece2b7e2e96dc277b83750694860dd2e306f4e0c4599dc93a829b2d567f13712de9328e99a8270074a9cf100704ea843cd7d610a261960fbe5f886cda6d8cd9bd59f8022b9445c95be9e5a2a63309b6bf170f7d905ee1f19a351f04c7dbbd2e4714d5bbc5156af67440c1a5bd7b6874f2a14dc650e7c111f093f25960ec79555279c0fb350864bf3a3fa52dce416583a236bc499b4e4b98ec01e9083b8b163dbe0ce2965307f3efe1c3581dae3ebc6482b03bb83d9b212baf7ab37d8d79c97660d5c5b8f063076239d4f61195aca14c8ada78553d839741fe", 0x9, r2, 0x4}, 0x38) (async, rerun: 64) poll(&(0x7f0000000140)=[{r0, 0x4060}, {r2, 0x40}, {r4, 0x444}, {r6, 0x85}], 0x4, 0x7) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="04000000040000000400000025bf000000000000", @ANYRES32, @ANYBLOB="0000000b9c1ad34143f4147600"/29, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r7, &(0x7f0000000180), 0x0}, 0x20) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x2e, 0x9, 0x70bd26, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2000a800}, 0x4008000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000100000000000000030000009500000000000000"], 0x0}, 0x94) kernel console output (not intermixed with test programs): [ 161.564730][ T7859] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 161.583414][ T7859] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 161.604940][ T7859] gretap1: entered promiscuous mode [ 161.627458][ T7859] gretap1: entered allmulticast mode [ 161.755819][ T7875] netlink: 'syz.0.572': attribute type 11 has an invalid length. [ 161.993469][ T7888] netlink: 'syz.0.577': attribute type 12 has an invalid length. [ 162.034012][ T7893] geneve2: entered promiscuous mode [ 162.041229][ T7893] geneve2: entered allmulticast mode [ 162.608937][ T7924] Bluetooth: MGMT ver 1.23 [ 162.869621][ T7938] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 162.989000][ T7938] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 163.000513][ T7938] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 163.401610][ T7969] veth3: entered promiscuous mode [ 163.556496][ T7981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.606794][ T7981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.620354][ T7989] netlink: 'syz.1.609': attribute type 5 has an invalid length. [ 163.709094][ T7990] team1: entered promiscuous mode [ 163.714334][ T7990] team1: entered allmulticast mode [ 163.782559][ T7993] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 163.855185][ T7999] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 164.274748][ T8030] __nla_validate_parse: 47 callbacks suppressed [ 164.274766][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 164.313873][ T8030] netlink: 'syz.2.619': attribute type 5 has an invalid length. [ 164.325885][ T8035] netlink: 'syz.3.623': attribute type 15 has an invalid length. [ 164.369182][ T8030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.619'. [ 164.385584][ T8034] mac80211_hwsim hwsim3 ÿ: renamed from wlan1 (while UP) [ 164.436102][ T8030] geneve2: entered promiscuous mode [ 164.450121][ T8030] geneve2: entered allmulticast mode [ 164.521490][ T35] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 164.537724][ T35] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 164.587693][ T35] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 164.611011][ T35] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 165.041230][ T8072] xt_connbytes: Forcing CT accounting to be enabled [ 165.167109][ T8081] netlink: 32 bytes leftover after parsing attributes in process `syz.4.636'. [ 165.183731][ T8082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.637'. [ 165.355701][ T8094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.641'. [ 165.480606][ T8100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.642'. [ 165.638908][ T8108] netlink: 'syz.2.646': attribute type 7 has an invalid length. [ 166.501976][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 166.628554][ T8167] xt_CT: No such helper "pptp" [ 166.653228][ T8166] hsr_slave_0 (unregistering): left promiscuous mode [ 167.016844][ T8201] netlink: 'syz.4.670': attribute type 1 has an invalid length. [ 167.123099][ T8201] bond3: (slave veth3): Enslaving as an active interface with a down link [ 167.138621][ T8201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.670'. [ 167.163234][ T8209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.672'. [ 167.278656][ T8219] netlink: 'syz.2.673': attribute type 7 has an invalid length. [ 167.305411][ T8222] pimreg: left allmulticast mode [ 167.315327][ T8220] netlink: 'syz.2.673': attribute type 7 has an invalid length. [ 167.479366][ T8231] netlink: 104 bytes leftover after parsing attributes in process `syz.0.677'. [ 168.023721][ T8272] netlink: 'syz.3.685': attribute type 29 has an invalid length. [ 168.168133][ T8266] syzkaller1: entered promiscuous mode [ 168.201475][ T8266] syzkaller1: entered allmulticast mode [ 168.621835][ T8303] tipc: Enabling of bearer rejected, failed to enable media [ 168.794351][ T8311] netlink: 'syz.0.698': attribute type 5 has an invalid length. [ 169.025708][ T8316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.216797][ T8340] netlink: 'syz.0.702': attribute type 13 has an invalid length. [ 169.235243][ T8340] macvtap0: entered allmulticast mode [ 169.241891][ T8340] macvtap0: refused to change device tx_queue_len [ 169.558772][ T8363] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.566369][ T8363] IPv6: NLM_F_CREATE should be set when creating new route [ 169.573871][ T8363] IPv6: NLM_F_CREATE should be set when creating new route [ 169.581183][ T8363] IPv6: NLM_F_CREATE should be set when creating new route [ 169.594282][ T8361] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 169.615924][ T8365] __nla_validate_parse: 7 callbacks suppressed [ 169.615944][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'. [ 169.754893][ T8373] netlink: 80 bytes leftover after parsing attributes in process `syz.2.711'. [ 169.766733][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 169.796616][ T8376] netlink: 104 bytes leftover after parsing attributes in process `syz.1.715'. [ 169.799770][ T8371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.832319][ T8377] netlink: 'syz.0.714': attribute type 1 has an invalid length. [ 169.850341][ T8377] netlink: 'syz.0.714': attribute type 3 has an invalid length. [ 169.885204][ T8377] netlink: 'syz.0.714': attribute type 7 has an invalid length. [ 169.919790][ T8377] netlink: 184 bytes leftover after parsing attributes in process `syz.0.714'. [ 169.931694][ T8377] NCSI netlink: No device for ifindex 131092 [ 169.948460][ T8371] C: renamed from lo [ 169.973092][ T8371] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 170.158289][ T8403] netlink: 11 bytes leftover after parsing attributes in process `syz.0.722'. [ 170.335854][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 170.371029][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.726'. [ 170.569443][ T8421] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 170.683626][ T8421] bond4 (unregistering): Released all slaves [ 170.983331][ T8452] validate_nla: 2 callbacks suppressed [ 170.983353][ T8452] netlink: 'syz.3.737': attribute type 24 has an invalid length. [ 171.120405][ T8460] netlink: 64 bytes leftover after parsing attributes in process `syz.1.740'. [ 171.235233][ T8466] tipc: Enabling of bearer rejected, failed to enable media [ 171.404365][ T8476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.744'. [ 171.578149][ T8489] xt_time: unknown flags 0xf4 [ 171.621084][ T8484] bond6: entered promiscuous mode [ 171.638921][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 171.639518][ T8484] bond6: entered allmulticast mode [ 171.652400][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 171.674390][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 171.688647][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 171.701510][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 171.702227][ T8484] 8021q: adding VLAN 0 to HW filter on device bond6 [ 171.722805][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 171.742896][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 171.755578][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 171.774859][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 171.789906][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 171.802724][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 171.816370][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 171.868700][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 171.886262][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 171.905476][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 171.950021][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 172.022772][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 172.076400][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 172.103374][ T8520] netlink: 'syz.2.755': attribute type 1 has an invalid length. [ 172.126358][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 172.152147][ T8520] bond4: entered promiscuous mode [ 172.157850][ T8520] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.174022][ T8529] IPv6: sit1: Disabled Multicast RS [ 172.214768][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 172.231734][ T8529] sit1: entered allmulticast mode [ 172.252744][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 172.303502][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 172.320556][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 172.348601][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 172.387067][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 172.400715][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 172.413362][ T8495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 172.436994][ T8538] netlink: 'syz.0.758': attribute type 2 has an invalid length. [ 172.445992][ T8539] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.819634][ T8565] netlink: 'syz.3.768': attribute type 2 has an invalid length. [ 173.132938][ T8578] tipc: Started in network mode [ 173.137875][ T8578] tipc: Node identity 6ed58d8d558b, cluster identity 4711 [ 173.158029][ T8578] tipc: Enabled bearer , priority 0 [ 173.240991][ T8586] x_tables: duplicate underflow at hook 3 [ 173.267525][ T8578] syzkaller0: entered promiscuous mode [ 173.274358][ T8578] syzkaller0: entered allmulticast mode [ 173.283444][ T8578] tipc: Resetting bearer [ 173.302050][ T8577] tipc: Resetting bearer [ 173.652708][ T8604] netlink: 'syz.4.780': attribute type 1 has an invalid length. [ 174.507182][ T8577] tipc: Disabling bearer [ 174.520488][ T8604] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 174.534670][ T8612] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 174.574009][ T5953] tipc: Node number set to 996052365 [ 174.716193][ T8623] __nla_validate_parse: 35 callbacks suppressed [ 174.716214][ T8623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.784'. [ 174.779998][ T8625] bridge2: entered allmulticast mode [ 174.885404][ T8633] netlink: 56 bytes leftover after parsing attributes in process `syz.0.787'. [ 174.983117][ T8639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.095074][ T8644] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 175.095112][ T8642] nbd: socks must be embedded in a SOCK_ITEM attr [ 175.132188][ T8646] block nbd4: not configured, cannot reconfigure [ 175.151907][ T8642] netlink: 5 bytes leftover after parsing attributes in process `syz.0.790'. [ 175.176697][ T8642] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 175.375026][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.796'. [ 175.417891][ T8660] netlink: 'syz.4.796': attribute type 64 has an invalid length. [ 175.434658][ T8662] syzkaller0: entered promiscuous mode [ 175.436429][ T8660] netlink: 20 bytes leftover after parsing attributes in process `syz.4.796'. [ 175.448764][ T8662] syzkaller0: entered allmulticast mode [ 175.893524][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'. [ 176.173201][ T30] audit: type=1800 audit(1765483878.601:3): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.806" name="memory.events" dev="tmpfs" ino=781 res=0 errno=0 [ 176.671496][ T8733] netlink: 324 bytes leftover after parsing attributes in process `syz.3.818'. [ 176.761311][ T8738] netlink: 'syz.3.821': attribute type 1 has an invalid length. [ 176.761718][ T8732] block nbd0: server does not support multiple connections per device. [ 176.770155][ T8738] netlink: 'syz.3.821': attribute type 2 has an invalid length. [ 176.796909][ T8732] block nbd0: shutting down sockets [ 176.924856][ T8742] netlink: 'syz.2.822': attribute type 1 has an invalid length. [ 177.017098][ T8754] netlink: 104 bytes leftover after parsing attributes in process `syz.1.825'. [ 177.061661][ T8753] netlink: 104 bytes leftover after parsing attributes in process `syz.1.825'. [ 177.071758][ T8742] 8021q: adding VLAN 0 to HW filter on device bond5 [ 177.387779][ T8778] netlink: 'syz.0.833': attribute type 11 has an invalid length. [ 177.401424][ T8778] netlink: 'syz.0.833': attribute type 4 has an invalid length. [ 177.409185][ T8778] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.833'. [ 177.564469][ T8785] netlink: 'syz.4.836': attribute type 6 has an invalid length. [ 177.593905][ T8785] netlink: 'syz.4.836': attribute type 6 has an invalid length. [ 177.625853][ T8785] netlink: 'syz.4.836': attribute type 1 has an invalid length. [ 177.634101][ T8785] netlink: 'syz.4.836': attribute type 2 has an invalid length. [ 177.652037][ T8785] netlink: 'syz.4.836': attribute type 3 has an invalid length. [ 178.341278][ T8832] netlink: 'syz.4.850': attribute type 1 has an invalid length. [ 178.432196][ T8832] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.500675][ T8835] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.520826][ T8835] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 178.563853][ T8835] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 178.864855][ T8860] nftables ruleset with unbound set [ 179.462537][ T8899] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 179.474763][ T8899] syzkaller0: entered promiscuous mode [ 179.506913][ T8899] syzkaller0: entered allmulticast mode [ 179.564250][ T8899] tipc: Enabled bearer , priority 0 [ 179.595068][ T8898] tipc: Resetting bearer [ 179.618431][ T8898] tipc: Disabling bearer [ 179.725389][ T8918] __nla_validate_parse: 10 callbacks suppressed [ 179.725411][ T8918] netlink: 152 bytes leftover after parsing attributes in process `syz.1.875'. [ 179.935865][ T8922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.878'. [ 179.957562][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'. [ 180.056017][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'. [ 180.255906][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 180.282137][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'. [ 180.414814][ T8952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.888'. [ 180.474285][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 180.883390][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.899'. [ 180.953008][ T8995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.900'. [ 181.870076][ T9142] validate_nla: 5 callbacks suppressed [ 181.870096][ T9142] netlink: 'syz.3.921': attribute type 1 has an invalid length. [ 182.156435][ T9180] netlink: 'syz.2.924': attribute type 30 has an invalid length. [ 182.159854][ T9177] netlink: 'syz.2.924': attribute type 30 has an invalid length. [ 183.377267][ T9288] ip6gre1: entered allmulticast mode [ 183.428472][ T9292] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 183.472262][ T9287] pim6reg1: entered promiscuous mode [ 183.490616][ T9287] pim6reg1: entered allmulticast mode [ 183.804781][ T9307] : entered promiscuous mode [ 184.009733][ T9309] bond5 (unregistering): Released all slaves [ 184.446742][ T9314] syzkaller0: entered promiscuous mode [ 184.452452][ T9314] syzkaller0: entered allmulticast mode [ 184.483985][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 185.863100][ T9365] syzkaller0: entered promiscuous mode [ 185.868929][ T9365] syzkaller0: entered allmulticast mode [ 186.125868][ T9393] ip6gretap0: mtu less than device minimum [ 186.237382][ T9402] netlink: 'syz.1.963': attribute type 1 has an invalid length. [ 186.276120][ T9402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.376033][ T9409] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 186.405853][ T9409] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 186.442745][ T9409] gretap1: entered promiscuous mode [ 186.464695][ T9409] gretap1: entered allmulticast mode [ 186.491339][ T9402] bond3: (slave geneve3): making interface the new active one [ 186.500677][ T9402] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 186.627095][ T30] audit: type=1800 audit(1765483889.051:4): pid=9420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.967" name="memory.events" dev="tmpfs" ino=968 res=0 errno=0 [ 186.650913][ T30] audit: type=1804 audit(1765483889.081:5): pid=9420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.967" name="/newroot/185/memory.events" dev="tmpfs" ino=968 res=1 errno=0 [ 186.978397][ T9442] __nla_validate_parse: 18 callbacks suppressed [ 186.978418][ T9442] netlink: 56 bytes leftover after parsing attributes in process `syz.1.975'. [ 187.047020][ T9446] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 187.058270][ T9453] netlink: 'syz.2.978': attribute type 63 has an invalid length. [ 187.070959][ T9453] tipc: Trying to set illegal importance in message [ 187.316050][ T9471] netlink: 'syz.0.983': attribute type 1 has an invalid length. [ 187.327271][ T9466] netlink: 'syz.4.982': attribute type 27 has an invalid length. [ 187.351752][ T9463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.363925][ T9463] bond0: (slave rose0): Enslaving as an active interface with an up link [ 187.538238][ T9487] openvswitch: netlink: Flow key attr not present in new flow. [ 187.587449][ T9493] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.985'. [ 187.638952][ T9495] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.709433][ T9495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.984'. [ 187.783081][ T9495] netlink: 'syz.3.984': attribute type 1 has an invalid length. [ 187.886612][ T9509] netlink: 52 bytes leftover after parsing attributes in process `syz.2.992'. [ 188.276969][ T9531] netlink: 44 bytes leftover after parsing attributes in process `syz.2.998'. [ 188.422571][ T9539] openvswitch: netlink: Key 3 has unexpected len 12 expected 4 [ 188.776376][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 189.010386][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1008'. [ 189.124729][ T9578] netlink: 'syz.4.1008': attribute type 7 has an invalid length. [ 189.301669][ T9596] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1012'. [ 189.775440][ T9625] ipt_REJECT: ECHOREPLY no longer supported. [ 190.075681][ T9637] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1022'. [ 190.330195][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1027'. [ 190.370605][ T9652] netlink: 'syz.0.1027': attribute type 1 has an invalid length. [ 190.387363][ T9652] syz.0.1027: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 190.442460][ T9652] CPU: 1 UID: 0 PID: 9652 Comm: syz.0.1027 Not tainted syzkaller #0 PREEMPT(full) [ 190.442490][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.442511][ T9652] Call Trace: [ 190.442522][ T9652] [ 190.442532][ T9652] dump_stack_lvl+0x189/0x250 [ 190.442576][ T9652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.442599][ T9652] ? __pfx__printk+0x10/0x10 [ 190.442627][ T9652] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 190.442659][ T9652] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 190.442693][ T9652] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 190.442727][ T9652] warn_alloc+0x214/0x310 [ 190.442755][ T9652] ? stack_depot_save_flags+0x40/0x850 [ 190.442783][ T9652] ? __pfx_warn_alloc+0x10/0x10 [ 190.442811][ T9652] ? kasan_save_track+0x3e/0x80 [ 190.442836][ T9652] ? __kasan_kmalloc+0x93/0xb0 [ 190.442863][ T9652] ? xsk_setsockopt+0x4dc/0x8d0 [ 190.442882][ T9652] ? do_sock_setsockopt+0x17c/0x1b0 [ 190.442910][ T9652] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 190.442938][ T9652] ? do_syscall_64+0xfa/0xf80 [ 190.442963][ T9652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.442994][ T9652] __vmalloc_node_range_noprof+0x125/0x12d0 [ 190.443052][ T9652] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.443083][ T9652] ? __kasan_kmalloc+0x93/0xb0 [ 190.443117][ T9652] vmalloc_user_noprof+0xad/0xf0 [ 190.443143][ T9652] ? xskq_create+0xbf/0x170 [ 190.443167][ T9652] xskq_create+0xbf/0x170 [ 190.443193][ T9652] xsk_init_queue+0xb0/0x110 [ 190.443218][ T9652] xsk_setsockopt+0x4dc/0x8d0 [ 190.443242][ T9652] ? __pfx_xsk_setsockopt+0x10/0x10 [ 190.443266][ T9652] ? __pfx_aa_sk_perm+0x10/0x10 [ 190.443299][ T9652] ? aa_sock_opt_perm+0xff/0x1a0 [ 190.443323][ T9652] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 190.443349][ T9652] ? __pfx_xsk_setsockopt+0x10/0x10 [ 190.443380][ T9652] do_sock_setsockopt+0x17c/0x1b0 [ 190.443416][ T9652] __x64_sys_setsockopt+0x13f/0x1b0 [ 190.443452][ T9652] do_syscall_64+0xfa/0xf80 [ 190.443486][ T9652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.443505][ T9652] ? clear_bhb_loop+0x60/0xb0 [ 190.443530][ T9652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.443549][ T9652] RIP: 0033:0x7f1a4278f749 [ 190.443573][ T9652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.443590][ T9652] RSP: 002b:00007f1a43578038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.443613][ T9652] RAX: ffffffffffffffda RBX: 00007f1a429e5fa0 RCX: 00007f1a4278f749 [ 190.443626][ T9652] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 190.443639][ T9652] RBP: 00007f1a42813f91 R08: 0000000000000004 R09: 0000000000000000 [ 190.443651][ T9652] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.443664][ T9652] R13: 00007f1a429e6038 R14: 00007f1a429e5fa0 R15: 00007ffdab391cf8 [ 190.443699][ T9652] [ 190.734863][ T9652] Mem-Info: [ 190.738089][ T9652] active_anon:4708 inactive_anon:0 isolated_anon:0 [ 190.738089][ T9652] active_file:3440 inactive_file:39915 isolated_file:0 [ 190.738089][ T9652] unevictable:768 dirty:62 writeback:0 [ 190.738089][ T9652] slab_reclaimable:11413 slab_unreclaimable:100448 [ 190.738089][ T9652] mapped:29075 shmem:1357 pagetables:1080 [ 190.738089][ T9652] sec_pagetables:0 bounce:0 [ 190.738089][ T9652] kernel_misc_reclaimable:0 [ 190.738089][ T9652] free:1328630 free_pcp:12665 free_cma:0 [ 190.783862][ T9652] Node 0 active_anon:18632kB inactive_anon:0kB active_file:13760kB inactive_file:159456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116300kB dirty:248kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12764kB pagetables:4184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 190.817274][ T9652] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 190.848332][ T9652] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.879633][ T9652] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 190.885530][ T9652] Node 0 DMA32 free:1414256kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18932kB inactive_anon:0kB active_file:13760kB inactive_file:159456kB unevictable:1536kB writepending:248kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:32712kB local_pcp:11552kB free_cma:0kB [ 190.928024][ T9652] lowmem_reserve[]: 0 0 0 0 0 [ 190.956688][ T9652] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 191.042397][ T9652] lowmem_reserve[]: 0 0 0 0 0 [ 191.047197][ T9652] Node 1 Normal free:3885056kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17896kB local_pcp:5672kB free_cma:0kB [ 191.093441][ T9652] lowmem_reserve[]: 0 0 0 0 0 [ 191.098566][ T9652] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 191.142766][ T9652] Node 0 DMA32: 966*4kB (UME) 464*8kB (UM) 165*16kB (UM) 274*32kB (UME) 96*64kB (UME) 28*128kB (UME) 10*256kB (UM) 6*512kB (UME) 8*1024kB (ME) 4*2048kB (M) 333*4096kB (UM) = 1414696kB [ 191.189546][ T9652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 191.217185][ T9679] netlink: 'syz.2.1037': attribute type 24 has an invalid length. [ 191.218831][ T9652] Node 1 Normal: 94*4kB (UE) 49*8kB (UME) 42*16kB (UME) 101*32kB (UME) 23*64kB (UME) 4*128kB (UME) 4*256kB (UM) 3*512kB (ME) 3*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3885056kB [ 191.333784][ T9688] netlink: 'syz.1.1038': attribute type 1 has an invalid length. [ 191.365622][ T9652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.417375][ T9652] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 191.453720][ T9652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.498859][ T9652] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 191.547304][ T9652] 44757 total pagecache pages [ 191.571472][ T9652] 0 pages in swap cache [ 191.582552][ T9652] Free swap = 124996kB [ 191.597328][ T9705] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.600533][ T9652] Total swap = 124996kB [ 191.621460][ T9652] 2097051 pages RAM [ 191.625332][ T9652] 0 pages HighMem/MovableOnly [ 191.663236][ T9652] 424280 pages reserved [ 191.667489][ T9652] 0 pages cma reserved [ 191.697429][ T9710] syzkaller0: entered promiscuous mode [ 191.706269][ T9710] syzkaller0: entered allmulticast mode [ 191.944838][ T9722] netlink: 'syz.3.1046': attribute type 2 has an invalid length. [ 191.974513][ T9722] 9: entered promiscuous mode [ 192.201867][ T9730] netlink: 'syz.3.1049': attribute type 5 has an invalid length. [ 192.209883][ T9730] __nla_validate_parse: 21 callbacks suppressed [ 192.209899][ T9730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1049'. [ 192.898601][ T4463] bridge_slave_1: left allmulticast mode [ 192.910235][ T4463] bridge_slave_1: left promiscuous mode [ 192.930550][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.961271][ T4463] bridge_slave_0: left allmulticast mode [ 192.979756][ T4463] bridge_slave_0: left promiscuous mode [ 192.989494][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.521541][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.535760][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.544323][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.555099][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.573643][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.627287][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.637388][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.645466][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.653690][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.664181][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.911065][ T4463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.922797][ T4463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.932836][ T4463] bond0 (unregistering): Released all slaves [ 193.947048][ T4463] bond1 (unregistering): Released all slaves [ 193.961145][ T4463] bond2 (unregistering): Released all slaves [ 193.976520][ T4463] bond3 (unregistering): Released all slaves [ 193.994816][ T4463] bond4 (unregistering): Released all slaves [ 194.017933][ T4463] bond5 (unregistering): Released all slaves [ 194.104755][ T4463] bond6 (unregistering): Released all slaves [ 194.201389][ T4463] : left promiscuous mode [ 194.281383][ T9754] lo speed is unknown, defaulting to 1000 [ 194.326535][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.836895][ T9758] lo speed is unknown, defaulting to 1000 [ 194.989994][ T9765] lec:lec_atm_close: lec0: Shut down! [ 195.020864][ T9792] netlink: 'syz.3.1067': attribute type 11 has an invalid length. [ 195.190638][ T9787] netlink: 271 bytes leftover after parsing attributes in process `syz.3.1067'. [ 195.408387][ T9754] chnl_net:caif_netlink_parms(): no params data found [ 195.414309][ T9805] netlink: 'syz.2.1069': attribute type 1 has an invalid length. [ 195.441069][ T9805] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1069'. [ 195.475206][ T9805] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1069'. [ 195.487130][ T9805] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1069'. [ 195.508480][ T9809] netlink: 'syz.3.1071': attribute type 9 has an invalid length. [ 195.600201][ T5850] Bluetooth: hci0: command tx timeout [ 195.689333][ T9818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1073'. [ 195.717371][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 195.759793][ T5850] Bluetooth: hci4: command tx timeout [ 195.814609][ T9821] bridge0: port 3(batadv1) entered blocking state [ 195.821444][ T9821] bridge0: port 3(batadv1) entered disabled state [ 195.828156][ T9821] batadv1: entered allmulticast mode [ 195.836708][ T9821] batadv1: entered promiscuous mode [ 195.906776][ T4463] hsr_slave_0: left promiscuous mode [ 195.930167][ T4463] hsr_slave_1: left promiscuous mode [ 195.947404][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.966560][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.319986][ T3557] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 196.329488][ T3557] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 196.570273][ T4463] team0 (unregistering): Port device team_slave_1 removed [ 196.612761][ T4463] team0 (unregistering): Port device team_slave_0 removed [ 197.056902][ T9754] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.077193][ T9754] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.085023][ T9754] bridge_slave_0: entered allmulticast mode [ 197.098040][ T9754] bridge_slave_0: entered promiscuous mode [ 197.125712][ T9754] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.153360][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.175089][ T9754] bridge_slave_1: entered allmulticast mode [ 197.190029][ T9754] bridge_slave_1: entered promiscuous mode [ 197.297891][ T9879] openvswitch: netlink: Duplicate or invalid key (type 0). [ 197.308264][ T9879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.319984][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 197.323626][ T9754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.347580][ T9879] : entered promiscuous mode [ 197.361528][ T9754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.594405][ T9754] team0: Port device team_slave_0 added [ 197.617684][ T9754] team0: Port device team_slave_1 added [ 197.636196][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 197.657543][ T9894] netlink: 'syz.2.1090': attribute type 30 has an invalid length. [ 197.680498][ T5850] Bluetooth: hci0: command tx timeout [ 197.698221][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'. [ 197.742595][ T9754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.751148][ T9754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.780522][ T9754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.822082][ T4463] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.839519][ T5850] Bluetooth: hci4: command tx timeout [ 197.848928][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'. [ 197.860330][ T9754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.867306][ T9754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.897625][ T9754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.962628][ T4463] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.999785][ T9903] gre0: entered promiscuous mode [ 198.017342][ T9758] chnl_net:caif_netlink_parms(): no params data found [ 198.155633][ T4463] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.251973][ T9754] hsr_slave_0: entered promiscuous mode [ 198.258776][ T9754] hsr_slave_1: entered promiscuous mode [ 198.281416][ T4463] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.313826][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1097'. [ 198.456572][ T9758] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.471904][ T9758] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.480987][ T9758] bridge_slave_0: entered allmulticast mode [ 198.488391][ T9758] bridge_slave_0: entered promiscuous mode [ 198.512042][ T9758] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.524335][ T9758] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.532299][ T9758] bridge_slave_1: entered allmulticast mode [ 198.540820][ T9758] bridge_slave_1: entered promiscuous mode [ 198.547632][ T5949] IPVS: starting estimator thread 0... [ 198.633434][ T9758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.649613][ T9932] IPVS: using max 29 ests per chain, 69600 per kthread [ 198.654987][ T9758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.788719][ T9758] team0: Port device team_slave_0 added [ 198.812527][ T9758] team0: Port device team_slave_1 added [ 198.832445][ T4463] bridge_slave_1: left allmulticast mode [ 198.838614][ T4463] bridge_slave_1: left promiscuous mode [ 198.844614][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.856805][ T4463] bridge_slave_0: left allmulticast mode [ 198.862843][ T4463] bridge_slave_0: left promiscuous mode [ 198.868697][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.260543][ T9947] x_tables: ip6_tables: TEE.1 target: invalid size 40 (kernel) != (user) 160 [ 199.362592][ T9949] ip6t_srh: unknown srh match flags 5F28 [ 199.418710][ T9951] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 199.432375][ T4463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.439005][ T9951] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 199.453672][ T4463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.467000][ T4463] bond0 (unregistering): Released all slaves [ 199.557757][ T4463] bond1 (unregistering): Released all slaves [ 199.559608][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 199.643377][ T4463] bond2 (unregistering): Released all slaves [ 199.658476][ T4463] bond3 (unregistering): (slave veth3): Releasing active interface [ 199.668413][ T4463] bond3 (unregistering): Released all slaves [ 199.753076][ T4463] bond4 (unregistering): Released all slaves [ 199.759328][ T5850] Bluetooth: hci0: command tx timeout [ 199.839836][ T9953] veth0: entered promiscuous mode [ 199.883958][ T9758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.899766][ T9758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.935191][ T5850] Bluetooth: hci4: command tx timeout [ 199.968573][ T9758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.982811][ T9958] netlink: 'syz.1.1106': attribute type 1 has an invalid length. [ 200.004564][ T9758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.012427][ T9758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.043283][ T9758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.087887][ T9960] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 200.101251][ T9960] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 200.111846][ T9960] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 200.151918][ T9962] tipc: Enabled bearer , priority 0 [ 200.158805][ T9959] bond0: entered promiscuous mode [ 200.164144][ T9959] bond_slave_0: entered promiscuous mode [ 200.170149][ T9959] bond_slave_1: entered promiscuous mode [ 200.176084][ T9959] bond0: entered allmulticast mode [ 200.182404][ T9959] bond_slave_0: entered allmulticast mode [ 200.189585][ T9959] bond_slave_1: entered allmulticast mode [ 200.271032][ T9950] veth0: left promiscuous mode [ 200.273491][ T9964] netlink: 'syz.1.1108': attribute type 24 has an invalid length. [ 200.307606][ T9959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1107'. [ 200.332813][ T9957] tipc: Disabling bearer [ 200.436320][ T9758] hsr_slave_0: entered promiscuous mode [ 200.454650][ T9758] hsr_slave_1: entered promiscuous mode [ 200.467563][ T9758] debugfs: 'hsr0' already exists in 'hsr' [ 200.479012][ T9758] Cannot create hsr debugfs directory [ 200.498179][ T9975] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1112'. [ 200.507882][ T9754] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.527124][ T9754] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 200.623125][ T9754] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.664721][ T9754] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.245691][ T4463] hsr_slave_1: left promiscuous mode [ 201.256079][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.272180][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.292926][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.308178][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.373267][ T4463] veth1_macvtap: left promiscuous mode [ 201.380249][ T4463] veth0_macvtap: left promiscuous mode [ 201.388623][ T4463] veth1_vlan: left promiscuous mode [ 201.395242][ T4463] veth0_vlan: left promiscuous mode [ 201.805138][ T4463] team0 (unregistering): Port device team_slave_1 removed [ 201.840187][ T5850] Bluetooth: hci0: command tx timeout [ 201.851498][ T4463] team0 (unregistering): Port device team_slave_0 removed [ 202.003232][ T5850] Bluetooth: hci4: command tx timeout [ 202.122020][ T2995] smc: removing ib device sz1 [ 202.303086][T10032] netlink: 'syz.1.1126': attribute type 5 has an invalid length. [ 202.606382][ T9758] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 202.633005][ T9758] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 202.668638][ T9758] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 202.751192][ T9758] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 202.885178][ T9754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.894447][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1131'. [ 203.213044][T10066] hsr_slave_0 (unregistering): left promiscuous mode [ 203.369721][ T9754] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.526835][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.534095][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.658105][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.665384][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.995718][ T9758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.066775][ T9758] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.115135][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.122390][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.443188][T10112] wireguard0: entered promiscuous mode [ 204.456261][T10112] wireguard0: entered allmulticast mode [ 204.467176][T10112] team0: Device wireguard0 is of different type [ 204.541843][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.549198][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.655134][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1147'. [ 204.672976][T10117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.762787][ T9758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.795127][ T9758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.892631][ T9754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.323069][ T9758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.537492][T10139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1151'. [ 205.734659][T10150] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1152'. [ 205.760200][T10153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1153'. [ 205.780996][ T9754] veth0_vlan: entered promiscuous mode [ 205.803705][T10153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1153'. [ 205.811559][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 206.005883][T10155] hsr_slave_1 (unregistering): left promiscuous mode [ 206.006029][T10160] Bluetooth: MGMT ver 1.23 [ 206.043574][ T9754] veth1_vlan: entered promiscuous mode [ 206.147735][ T9754] veth0_macvtap: entered promiscuous mode [ 206.202305][ T9754] veth1_macvtap: entered promiscuous mode [ 206.261589][T10170] netlink: 'syz.2.1157': attribute type 10 has an invalid length. [ 206.281758][T10168] syzkaller0: entered promiscuous mode [ 206.287376][T10168] syzkaller0: entered allmulticast mode [ 206.300937][ T9754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.336278][ T9754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.347175][T10168] tipc: Enabled bearer , priority 0 [ 206.374187][T10166] tipc: Resetting bearer [ 206.394361][T10166] tipc: Disabling bearer [ 206.426607][ T9447] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.438767][ T9447] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.451589][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'. [ 206.451730][ T9758] veth0_vlan: entered promiscuous mode [ 206.469679][ T9447] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.484039][ T9447] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.497166][T10176] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1160'. [ 206.516802][ T9758] veth1_vlan: entered promiscuous mode [ 206.666669][ T9758] veth0_macvtap: entered promiscuous mode [ 206.674244][T10182] Cannot find add_set index 0 as target [ 206.682362][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.687515][ T9758] veth1_macvtap: entered promiscuous mode [ 206.708637][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.784311][ T7252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.802304][ T7252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.823614][ T9758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.864566][ T9758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.941333][ T7252] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.951293][ T7252] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.989973][ T7252] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.011392][ T7252] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.061303][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1051'. [ 207.097598][T10189] netlink: 'syz.5.1051': attribute type 15 has an invalid length. [ 207.206721][T10189] netlink: 'syz.5.1051': attribute type 15 has an invalid length. [ 207.220233][T10198] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.227950][T10198] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.238800][T10202] --map-set only usable from mangle table [ 207.306978][ T50] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 207.318740][T10202] veth1_virt_wifi: entered allmulticast mode [ 207.383837][ T50] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 207.400940][ T50] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 16391 - 0 [ 207.532247][ T50] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 207.579269][ T50] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 16391 - 0 [ 207.623752][ T50] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 207.633072][ T50] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 16391 - 0 [ 207.670426][ T50] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 16391 - 0 [ 207.699548][T10221] netlink: 'syz.2.1177': attribute type 1 has an invalid length. [ 207.713633][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.734355][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.869628][ T4463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.879580][ T4463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.951493][T10242] netlink: 'syz.1.1180': attribute type 1 has an invalid length. [ 208.052543][T10244] __nla_validate_parse: 8 callbacks suppressed [ 208.052563][T10244] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1182'. [ 208.082636][T10240] : entered promiscuous mode [ 208.095169][T10242] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 208.108330][T10242] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 208.118974][T10242] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 208.214546][T10249] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1184'. [ 208.246564][T10251] Illegal XDP return value 900970475 on prog (id 236) dev N/A, expect packet loss! [ 208.274233][T10251] syzkaller0: entered promiscuous mode [ 208.302489][T10251] syzkaller0: entered allmulticast mode [ 208.405656][T10251] netlink: 'syz.2.1185': attribute type 1 has an invalid length. [ 208.414572][T10251] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1185'. [ 208.887826][T10293] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1197'. [ 209.099224][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 209.112487][T10301] xt_l2tp: v2 tid > 0xffff: 1114244 [ 209.174427][T10304] syzkaller0: entered promiscuous mode [ 209.180242][T10304] syzkaller0: entered allmulticast mode [ 209.355797][ T30] audit: type=1800 audit(1765483911.781:6): pid=10310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1203" name="memory.events" dev="tmpfs" ino=64 res=0 errno=0 [ 209.387547][T10299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1199'. [ 209.449782][ T30] audit: type=1804 audit(1765483911.811:7): pid=10310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1203" name="/newroot/9/memory.events" dev="tmpfs" ino=64 res=1 errno=0 [ 209.901273][T10340] sctp: [Deprecated]: syz.3.1214 (pid 10340) Use of int in max_burst socket option. [ 209.901273][T10340] Use struct sctp_assoc_value instead [ 210.240177][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1219'. [ 210.268013][T10360] netlink: 'syz.5.1219': attribute type 3 has an invalid length. [ 210.331721][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1221'. [ 210.365046][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 210.682614][T10379] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 210.702554][T10379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1223'. [ 210.860786][T10379] syz.2.1223 (10379) used greatest stack depth: 17656 bytes left [ 210.946567][T10390] syzkaller0: entered promiscuous mode [ 210.979574][T10390] syzkaller0: entered allmulticast mode [ 211.018751][T10390] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 211.051662][T10399] netlink: 'syz.1.1229': attribute type 5 has an invalid length. [ 211.439750][T10427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.492851][T10427] vcan0: entered allmulticast mode [ 211.763882][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 211.763914][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 211.776173][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 212.347511][T10480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.611889][T10492] __nla_validate_parse: 12 callbacks suppressed [ 213.611909][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'. [ 213.749669][T10500] delete_channel: no stack [ 213.793147][T10504] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1258'. [ 213.837472][T10502] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1260'. [ 213.867599][T10502] netlink: 'syz.5.1260': attribute type 4 has an invalid length. [ 213.885194][T10502] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1260'. [ 214.153780][T10523] netlink: 'syz.2.1267': attribute type 8 has an invalid length. [ 214.432212][T10534] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 214.491832][T10542] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 214.506498][T10542] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1273'. [ 214.545448][T10544] sctp: [Deprecated]: syz.2.1275 (pid 10544) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.545448][T10544] Use struct sctp_sack_info instead [ 215.036786][T10572] lo: entered allmulticast mode [ 215.048600][T10569] netlink: 'syz.6.1286': attribute type 1 has an invalid length. [ 215.069331][T10569] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1286'. [ 215.079025][T10569] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1286'. [ 215.505411][T10592] xt_HMARK: proto mask must be zero with L3 mode [ 215.861098][T10574] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 215.980690][T10615] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 215.996620][T10618] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 216.044817][T10621] veth9: entered allmulticast mode [ 216.252716][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'. [ 216.262052][T10636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1308'. [ 216.941731][T10664] netlink: 'syz.5.1317': attribute type 33 has an invalid length. [ 217.009006][T10664] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 217.041424][T10664] bond1 (unregistering): Released all slaves [ 217.050109][ T5154] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.320090][T10694] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1321'. [ 217.527620][T10700] syzkaller0: entered promiscuous mode [ 217.534515][T10700] syzkaller0: entered allmulticast mode [ 217.544815][T10700] tipc: Started in network mode [ 217.555322][T10700] tipc: Node identity 5240ee335504, cluster identity 4711 [ 217.564120][T10700] tipc: Enabled bearer , priority 0 [ 217.620016][T10699] tipc: Resetting bearer [ 217.656805][T10710] netlink: 'syz.1.1329': attribute type 2 has an invalid length. [ 217.670432][T10710] netlink: 'syz.1.1329': attribute type 1 has an invalid length. [ 217.681787][T10710] netlink: 'syz.1.1329': attribute type 2 has an invalid length. [ 217.690523][T10710] netlink: 'syz.1.1329': attribute type 1 has an invalid length. [ 217.698476][T10710] netlink: 'syz.1.1329': attribute type 2 has an invalid length. [ 217.724508][T10699] tipc: Disabling bearer [ 217.902544][T10722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.490481][T10731] infiniband syz1: set down [ 218.504108][T10731] infiniband syz1: added ipvlan0 [ 218.614445][T10762] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 218.632115][T10731] RDS/IB: syz1: added [ 218.636781][T10731] smc: adding ib device syz1 with port count 1 [ 218.650649][T10731] smc: ib device syz1 port 1 has no pnetid [ 218.741645][T10767] sctp: [Deprecated]: syz.6.1344 (pid 10767) Use of int in max_burst socket option. [ 218.741645][T10767] Use struct sctp_assoc_value instead [ 219.032778][T10781] __nla_validate_parse: 1 callbacks suppressed [ 219.032798][T10781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1349'. [ 219.052258][T10780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1349'. [ 219.097725][T10780] syzkaller0: entered promiscuous mode [ 219.122079][T10780] syzkaller0: entered allmulticast mode [ 219.138589][T10781] TC_ACT_REPEAT abuse ? [ 219.961306][T10820] netlink: 'syz.3.1362': attribute type 1 has an invalid length. [ 220.078109][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1362'. [ 220.394502][T10839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1367'. [ 220.686613][T10847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1369'. [ 220.696169][T10847] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1369'. [ 220.874578][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1373'. [ 221.049367][T10864] netlink: 'syz.2.1377': attribute type 1 has an invalid length. [ 221.126468][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1379'. [ 221.126762][T10873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1379'. [ 221.719833][T10904] nbd6: detected capacity change from 0 to 63 [ 221.731555][T10905] block nbd6: NBD_DISCONNECT [ 221.737418][T10905] block nbd6: Disconnected due to user request. [ 221.801642][T10905] block nbd6: shutting down sockets [ 221.893661][T10927] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1391'. [ 222.183598][T10949] netlink: zone id is out of range [ 222.188791][T10949] netlink: zone id is out of range [ 222.204812][T10948] x_tables: duplicate underflow at hook 2 [ 222.212367][T10945] veth3: entered allmulticast mode [ 222.222801][T10949] netlink: zone id is out of range [ 222.241433][T10949] netlink: zone id is out of range [ 222.246608][T10949] netlink: zone id is out of range [ 222.270324][T10949] netlink: zone id is out of range [ 222.290615][T10949] netlink: zone id is out of range [ 222.338779][T10956] vlan2: entered allmulticast mode [ 222.346466][T10956] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 222.557686][T10969] IPv6: sit1: Disabled Multicast RS [ 222.590908][T10969] sit1: entered allmulticast mode [ 222.773724][T10976] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 223.534089][T11034] policy can only be matched on NF_INET_PRE_ROUTING [ 223.534112][T11034] unable to load match [ 223.741822][T11045] bond7: ARP target 1.0.0.0 is already present [ 223.750270][T11045] bond7: option arp_ip_target: invalid value (1) [ 223.765472][T11045] bond7 (unregistering): Released all slaves [ 223.782820][T11048] netlink: 'syz.6.1432': attribute type 2 has an invalid length. [ 224.011757][T11060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.214544][T11081] netlink: 'syz.5.1441': attribute type 1 has an invalid length. [ 224.228428][T11084] __nla_validate_parse: 3 callbacks suppressed [ 224.228447][T11084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1442'. [ 224.236033][T11083] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 224.254641][T11083] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 224.318318][T11084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1442'. [ 224.360056][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1441'. [ 224.434959][T11090] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1445'. [ 224.908169][T11124] xt_l2tp: invalid flags combination: 0 [ 224.996090][T11130] netlink: 'syz.5.1461': attribute type 1 has an invalid length. [ 224.996154][T11132] netlink: 'syz.3.1459': attribute type 3 has an invalid length. [ 225.004267][T11130] netlink: 'syz.5.1461': attribute type 4 has an invalid length. [ 225.004288][T11130] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1461'. [ 225.201743][T11141] syzkaller0: entered promiscuous mode [ 225.215966][T11141] syzkaller0: entered allmulticast mode [ 225.284968][T11151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1465'. [ 225.366219][T11155] syzkaller1: entered promiscuous mode [ 225.374894][T11155] syzkaller1: entered allmulticast mode [ 225.462553][T11166] netlink: 'syz.3.1468': attribute type 1 has an invalid length. [ 225.628093][T11172] syzkaller0: entered promiscuous mode [ 225.633701][T11172] syzkaller0: entered allmulticast mode [ 225.657123][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1473'. [ 225.818251][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1474'. [ 225.857052][T11184] vlan0: entered promiscuous mode [ 225.876388][T11184] bridge0: entered promiscuous mode [ 226.050415][T11196] netlink: 'syz.6.1478': attribute type 2 has an invalid length. [ 226.058457][T11197] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1479'. [ 226.078514][T11197] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1479'. [ 226.111975][T11196] netlink: 'syz.6.1478': attribute type 1 has an invalid length. [ 226.206306][T11209] netlink: 'syz.5.1482': attribute type 23 has an invalid length. [ 226.816115][T11261] netlink: 'syz.5.1495': attribute type 9 has an invalid length. [ 226.835685][T11261] netlink: 'syz.5.1495': attribute type 6 has an invalid length. [ 226.890438][T11264] mac80211_hwsim hwsim22 ÿ: renamed from wlan1 [ 227.133355][T11276] veth5: entered allmulticast mode [ 227.473234][T11300] GUP no longer grows the stack in syz.6.1508 (11300): 200000003000-20000000a000 (200000001000) [ 227.537254][T11300] CPU: 0 UID: 0 PID: 11300 Comm: syz.6.1508 Not tainted syzkaller #0 PREEMPT(full) [ 227.537284][T11300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.537297][T11300] Call Trace: [ 227.537304][T11300] [ 227.537314][T11300] dump_stack_lvl+0x189/0x250 [ 227.537346][T11300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.537370][T11300] ? __pfx__printk+0x10/0x10 [ 227.537396][T11300] ? find_vma+0xe7/0x160 [ 227.537435][T11300] __get_user_pages+0x2470/0x2a00 [ 227.537467][T11300] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 227.537517][T11300] ? rcu_is_watching+0x15/0xb0 [ 227.537554][T11300] __gup_longterm_locked+0xde4/0x1660 [ 227.537584][T11300] ? try_grab_folio_fast+0x1bf/0x6a0 [ 227.537618][T11300] ? gup_fast_fallback+0x1b86/0x22d0 [ 227.537644][T11300] gup_fast_fallback+0x1d65/0x22d0 [ 227.537706][T11300] ? __pfx_gup_fast_fallback+0x10/0x10 [ 227.537727][T11300] ? __mutex_lock+0x335/0x1350 [ 227.537766][T11300] ? is_valid_gup_args+0x11f/0x200 [ 227.537791][T11300] ? get_user_pages_fast+0x4d/0xb0 [ 227.537817][T11300] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 227.537854][T11300] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 227.537874][T11300] ? wait_for_space+0x248/0x2d0 [ 227.537896][T11300] iov_iter_get_pages2+0x5e/0xa0 [ 227.537938][T11300] __se_sys_vmsplice+0x548/0x10d0 [ 227.537981][T11300] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 227.538005][T11300] ? __pfx_futex_wake+0x10/0x10 [ 227.538093][T11300] ? do_syscall_64+0xbe/0xf80 [ 227.538125][T11300] do_syscall_64+0xfa/0xf80 [ 227.538153][T11300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.538173][T11300] ? clear_bhb_loop+0x60/0xb0 [ 227.538199][T11300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.538219][T11300] RIP: 0033:0x7fb0dcd8f749 [ 227.538237][T11300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.538253][T11300] RSP: 002b:00007fb0ddbd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 227.538275][T11300] RAX: ffffffffffffffda RBX: 00007fb0dcfe5fa0 RCX: 00007fb0dcd8f749 [ 227.538290][T11300] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 227.538303][T11300] RBP: 00007fb0dce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 227.538315][T11300] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 227.538327][T11300] R13: 00007fb0dcfe6038 R14: 00007fb0dcfe5fa0 R15: 00007fff2b610db8 [ 227.538362][T11300] [ 227.545165][T11309] syzkaller0: entered promiscuous mode [ 227.818195][T11309] syzkaller0: entered allmulticast mode [ 227.830757][T11311] : renamed from bridge_slave_0 (while UP) [ 227.992809][T11321] netlink: 'syz.5.1513': attribute type 1 has an invalid length. [ 228.061937][T11321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.126424][T11323] bond1: (slave veth3): Enslaving as an active interface with a down link [ 228.186988][T11323] bond1: (slave veth0_to_bond): making interface the new active one [ 228.197849][T11323] veth0_to_bond: entered promiscuous mode [ 228.210897][T11323] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 228.225446][T11334] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 228.252893][T11341] xt_CONNSECMARK: invalid mode: 0 [ 228.276669][T11321] bond1: (slave veth5): Enslaving as an active interface with a down link [ 228.340830][T11341] lo speed is unknown, defaulting to 1000 [ 228.350168][T11341] lo speed is unknown, defaulting to 1000 [ 228.360924][T11341] lo speed is unknown, defaulting to 1000 [ 228.997704][T11341] infiniband sz1: set active [ 229.012393][ T41] lo speed is unknown, defaulting to 1000 [ 229.018354][T11376] nbd0: detected capacity change from 0 to 127 [ 229.040506][T11341] infiniband sz1: added lo [ 229.111056][T11341] RDS/IB: sz1: added [ 229.115301][T11341] smc: adding ib device sz1 with port count 1 [ 229.122294][T11341] smc: ib device sz1 port 1 has no pnetid [ 229.128638][ T5843] lo speed is unknown, defaulting to 1000 [ 229.141415][T11341] lo speed is unknown, defaulting to 1000 [ 229.275270][ T5154] block nbd0: Receive control failed (result -32) [ 229.306986][T11392] __nla_validate_parse: 12 callbacks suppressed [ 229.307008][T11392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1531'. [ 229.564871][T11408] netlink: 580 bytes leftover after parsing attributes in process `syz.2.1537'. [ 229.565636][T11341] lo speed is unknown, defaulting to 1000 [ 229.701855][T11414] tipc: Enabled bearer , priority 0 [ 229.728662][T11414] syzkaller0: entered promiscuous mode [ 229.740330][T11414] syzkaller0: entered allmulticast mode [ 229.745287][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1539'. [ 229.758792][T11420] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1540'. [ 229.768725][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1539'. [ 229.971384][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1539'. [ 229.989695][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1539'. [ 230.000764][T11341] lo speed is unknown, defaulting to 1000 [ 230.059076][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'. [ 230.063590][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1542'. [ 230.112464][T11414] tipc: Resetting bearer [ 230.156110][T11413] tipc: Resetting bearer [ 230.251396][T11413] tipc: Disabling bearer [ 230.497223][T11341] lo speed is unknown, defaulting to 1000 [ 230.693008][T11465] validate_nla: 1 callbacks suppressed [ 230.693028][T11465] netlink: 'syz.5.1551': attribute type 9 has an invalid length. [ 230.773123][T11341] lo speed is unknown, defaulting to 1000 [ 231.148645][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1555'. [ 231.216727][T11486] Bluetooth: MGMT ver 1.23 [ 231.245083][T11488] netlink: 'syz.2.1558': attribute type 10 has an invalid length. [ 231.295723][T11488] dummy0: entered promiscuous mode [ 231.311704][T11488] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 231.551948][T11506] netlink: 'syz.2.1564': attribute type 21 has an invalid length. [ 231.943717][T11516] netlink: 'syz.3.1565': attribute type 1 has an invalid length. [ 231.953019][ T41] lo speed is unknown, defaulting to 1000 [ 231.973685][T11525] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20000 [ 232.207570][T11536] veth1_to_bond: entered allmulticast mode [ 232.234907][T11539] netlink: 'syz.2.1572': attribute type 1 has an invalid length. [ 232.450447][T11536] bond0: (slave bond_slave_1): Releasing backup interface [ 232.628640][T11536] veth1_to_bond (unregistering): left allmulticast mode [ 232.691528][T11558] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 233.078583][T11575] netlink: 'syz.1.1582': attribute type 2 has an invalid length. [ 233.225073][T11582] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 233.250010][T11582] bond2: option packets_per_slave: allowed values 0 - 65535 [ 233.260959][T11582] bond2 (unregistering): Released all slaves [ 233.290647][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 233.296844][ T5154] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 233.512215][T11606] x_tables: duplicate underflow at hook 1 [ 233.735576][T11619] tipc: Started in network mode [ 233.749596][T11619] tipc: Node identity cacf4ed5eb7b, cluster identity 4711 [ 233.779351][T11619] tipc: Enabled bearer , priority 0 [ 233.810024][T11627] syzkaller0: entered allmulticast mode [ 233.902904][T11619] tipc: Resetting bearer [ 233.952018][T11617] tipc: Resetting bearer [ 234.020599][T11617] tipc: Disabling bearer [ 234.084709][T11642] bond1: left promiscuous mode [ 234.098844][T11642] bond2: left promiscuous mode [ 234.117741][T11642] hsr1: left promiscuous mode [ 234.123461][T11642] team1: left promiscuous mode [ 234.128980][T11642] geneve2: left promiscuous mode [ 234.136745][T11642] bond4: left promiscuous mode [ 234.336127][T11659] : renamed from bridge_slave_0 (while UP) [ 234.365851][T11662] lo: entered allmulticast mode [ 234.584557][T11680] netlink: 'syz.3.1611': attribute type 1 has an invalid length. [ 234.605661][T11679] veth0: entered promiscuous mode [ 234.654123][T11680] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 235.079694][T11678] veth0: left promiscuous mode [ 235.157840][T11707] netlink: 'syz.2.1623': attribute type 27 has an invalid length. [ 235.172130][T11705] __nla_validate_parse: 20 callbacks suppressed [ 235.172152][T11705] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1622'. [ 235.352489][T11720] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1621'. [ 235.592087][T11710] xt_hashlimit: overflow, try lower: 3/0 [ 235.960654][T11754] xt_l2tp: invalid flags combination: 8 [ 236.013210][T11757] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 236.146432][T11770] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1635'. [ 236.251911][T11770] netlink: 'syz.1.1635': attribute type 16 has an invalid length. [ 236.274854][T11770] netlink: 'syz.1.1635': attribute type 3 has an invalid length. [ 236.345095][T11770] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1635'. [ 236.381153][T11778] openvswitch: netlink: Message has 1 unknown bytes. [ 236.387926][T11778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.515195][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1641'. [ 236.540439][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1638'. [ 236.741483][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1642'. [ 236.924406][T11809] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 236.942611][T11809] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 237.110168][T11817] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 237.121400][T11817] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 237.128421][T11817] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 237.272275][T11826] netlink: 'syz.6.1651': attribute type 26 has an invalid length. [ 237.300489][T11827] dvmrp0: entered allmulticast mode [ 237.432961][T11835] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1653'. [ 237.498491][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1655'. [ 237.601545][T11840] IPv6: sit1: Disabled Multicast RS [ 237.620239][T11840] sit1: entered allmulticast mode [ 237.928491][T11854] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1659'. [ 238.314307][T11874] bridge2: entered promiscuous mode [ 238.326894][T11874] bridge2: entered allmulticast mode [ 238.546707][ T2995] netdevsim netdevsim5 netdevsim0: set [0, 2] type 1 family 0 port 8472 - 0 [ 238.570987][T11887] syzkaller1: entered promiscuous mode [ 238.599169][T11887] syzkaller1: entered allmulticast mode [ 238.608504][T11889] netlink: 'syz.2.1672': attribute type 1 has an invalid length. [ 238.646412][T11889] netlink: 'syz.2.1672': attribute type 3 has an invalid length. [ 238.732776][ T2995] netdevsim netdevsim5 netdevsim1: set [0, 2] type 1 family 0 port 8472 - 0 [ 238.753829][ T2995] netdevsim netdevsim5 netdevsim2: set [0, 2] type 1 family 0 port 8472 - 0 [ 238.792179][ T2995] netdevsim netdevsim5 netdevsim3: set [0, 2] type 1 family 0 port 8472 - 0 [ 238.833039][T11906] sctp: [Deprecated]: syz.5.1676 (pid 11906) Use of int in maxseg socket option. [ 238.833039][T11906] Use struct sctp_assoc_value instead [ 238.937225][T11910] Cannot find set identified by id 1 to match [ 239.321750][T11937] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 239.362320][T11937] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 239.391803][T11937] gretap1: entered promiscuous mode [ 239.415112][T11937] gretap1: entered allmulticast mode [ 239.732947][T11953] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 239.750300][T11953] bond2 (unregistering): Released all slaves [ 239.830570][ T4463] veth0_to_bond: left promiscuous mode [ 240.197531][T11977] __nla_validate_parse: 10 callbacks suppressed [ 240.197550][T11977] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1691'. [ 240.239976][T11966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.448076][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1696'. [ 240.514720][T11991] netlink: 'syz.3.1698': attribute type 12 has an invalid length. [ 240.557081][T11996] sctp: [Deprecated]: syz.1.1697 (pid 11996) Use of int in maxseg socket option. [ 240.557081][T11996] Use struct sctp_assoc_value instead [ 240.693640][T12004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1701'. [ 240.713127][T11991] bond3: option primary_reselect: invalid value (255) [ 240.724018][T11991] bond3 (unregistering): Released all slaves [ 240.953984][T12014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1704'. [ 240.981971][T12014] block nbd1: Unsupported socket: should be TCP or UNIX. [ 241.200594][T12026] netlink: 'syz.1.1706': attribute type 1 has an invalid length. [ 242.267421][T12006] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 242.328114][T12026] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 242.394140][T12030] veth7: entered promiscuous mode [ 242.510782][T12037] --map-set only usable from mangle table [ 242.712656][T12041] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 242.726040][T12041] bond7: option packets_per_slave: allowed values 0 - 65535 [ 242.768369][T12041] bond7 (unregistering): Released all slaves [ 242.915952][T12072] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1717'. [ 242.950283][T12075] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1718'. [ 243.080107][T12086] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1722'. [ 243.092080][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1721'. [ 243.108878][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1721'. [ 243.128804][T12077] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1721'. [ 243.277056][T12100] netlink: 'syz.5.1725': attribute type 1 has an invalid length. [ 243.291362][T12101] netlink: 'syz.3.1724': attribute type 4 has an invalid length. [ 243.563201][T12121] netlink: 'syz.5.1727': attribute type 12 has an invalid length. [ 243.582421][T12121] xt_TCPMSS: Only works on TCP SYN packets [ 243.592388][ T7252] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 243.783668][T12134] netlink: 'syz.1.1733': attribute type 3 has an invalid length. [ 243.906910][T12142] macsec3: entered promiscuous mode [ 243.914225][T12142] macsec3: entered allmulticast mode [ 243.923522][T12142] bond6: (slave macsec3): Error -34 calling dev_set_mtu [ 243.965395][T12146] blkio.reset_stats is deprecated [ 244.198442][T12160] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 244.274880][T12154] syzkaller1: entered promiscuous mode [ 244.293345][T12154] syzkaller1: entered allmulticast mode [ 244.730616][T12183] policy can only be matched on NF_INET_PRE_ROUTING [ 244.730636][T12183] unable to load match [ 245.077271][T12205] netlink: 'syz.5.1753': attribute type 12 has an invalid length. [ 245.103956][T12206] netlink: 'syz.6.1752': attribute type 15 has an invalid length. [ 245.108944][T12205] xt_hashlimit: invalid rate [ 245.139587][T12205] bond0: entered allmulticast mode [ 245.148348][T12205] bond_slave_0: entered allmulticast mode [ 245.168887][T12205] bond_slave_1: entered allmulticast mode [ 245.197760][T12208] team_slave_0: entered promiscuous mode [ 245.203649][T12208] team_slave_1: entered promiscuous mode [ 245.211492][ T5154] Bluetooth: hci4: command tx timeout [ 245.237879][T12208] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 245.261717][T12209] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 245.327943][T12211] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 245.350162][T12216] __nla_validate_parse: 8 callbacks suppressed [ 245.350183][T12216] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1757'. [ 245.395138][T12216] block nbd5: not configured, cannot reconfigure [ 245.422084][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1758'. [ 245.508793][T12223] xfrm1: entered promiscuous mode [ 245.589481][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1758'. [ 245.590387][T12223] xfrm1: entered allmulticast mode [ 245.665929][T12233] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1759'. [ 245.707063][T12233] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1759'. [ 245.774183][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1759'. [ 245.950234][T12248] netlink: 'syz.6.1764': attribute type 1 has an invalid length. [ 245.975082][T12248] netlink: 'syz.6.1764': attribute type 1 has an invalid length. [ 246.001879][T12248] netlink: 'syz.6.1764': attribute type 1 has an invalid length. [ 246.022239][T12251] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1764'. [ 246.043650][T12248] netlink: 'syz.6.1764': attribute type 2 has an invalid length. [ 246.074078][T12248] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1764'. [ 246.981864][T12285] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1770'. [ 248.368852][T12311] netlink: 'syz.1.1779': attribute type 29 has an invalid length. [ 248.395804][T12312] netlink: 'syz.1.1779': attribute type 29 has an invalid length. [ 248.451447][T12312] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1779'. [ 248.542132][T12318] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 249.132959][T12362] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 249.804672][T12395] sctp: [Deprecated]: syz.5.1796 (pid 12395) Use of int in maxseg socket option. [ 249.804672][T12395] Use struct sctp_assoc_value instead [ 249.896443][T12393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.256937][T12411] Cannot find add_set index 2 as target [ 250.308457][T12415] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 250.355117][T12413] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 250.398622][T12418] netlink: 'syz.1.1804': attribute type 16 has an invalid length. [ 250.417144][T12418] netlink: 'syz.1.1804': attribute type 17 has an invalid length. [ 250.439245][T12415] bridge0: port 1() entered disabled state [ 250.528785][T12418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.570285][T12424] __nla_validate_parse: 6 callbacks suppressed [ 250.570308][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1806'. [ 250.645085][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1805'. [ 250.668247][ C0] vcan0: j1939_session_tx_dat: 0xffff88807ca69800: queue data error: -100 [ 250.941270][T12443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1811'. [ 251.098059][T12453] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1812'. [ 251.248226][T12466] netlink: 'syz.2.1818': attribute type 83 has an invalid length. [ 251.326453][T12468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1819'. [ 251.407421][T12472] xt_TCPMSS: Only works on TCP SYN packets [ 251.476081][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1821'. [ 251.689545][T12487] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 251.966792][T12505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1832'. [ 251.981250][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1832'. [ 251.994847][T12507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1832'. [ 252.289274][T12525] netlink: 'syz.1.1838': attribute type 10 has an invalid length. [ 252.590309][T12547] FAULT_INJECTION: forcing a failure. [ 252.590309][T12547] name failslab, interval 1, probability 0, space 0, times 0 [ 252.608068][T12547] CPU: 0 UID: 0 PID: 12547 Comm: syz.5.1848 Not tainted syzkaller #0 PREEMPT(full) [ 252.608114][T12547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.608127][T12547] Call Trace: [ 252.608135][T12547] [ 252.608143][T12547] dump_stack_lvl+0x189/0x250 [ 252.608173][T12547] ? __pfx____ratelimit+0x10/0x10 [ 252.608199][T12547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.608235][T12547] ? __pfx__printk+0x10/0x10 [ 252.608268][T12547] ? __pfx___might_resched+0x10/0x10 [ 252.608287][T12547] ? fs_reclaim_acquire+0x7d/0x100 [ 252.608319][T12547] should_fail_ex+0x414/0x560 [ 252.608345][T12547] should_failslab+0xa8/0x100 [ 252.608376][T12547] __kmalloc_noprof+0xcb/0x800 [ 252.608401][T12547] ? tomoyo_encode+0x28b/0x550 [ 252.608427][T12547] tomoyo_encode+0x28b/0x550 [ 252.608453][T12547] tomoyo_realpath_from_path+0x58d/0x5d0 [ 252.608477][T12547] ? tomoyo_domain+0xd8/0x130 [ 252.608503][T12547] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 252.608531][T12547] tomoyo_path_number_perm+0x1e8/0x5a0 [ 252.608573][T12547] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 252.608618][T12547] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 252.608666][T12547] ? __fget_files+0x2a/0x420 [ 252.608687][T12547] ? __fget_files+0x3a0/0x420 [ 252.608703][T12547] ? __fget_files+0x2a/0x420 [ 252.608725][T12547] security_file_ioctl+0xcb/0x2d0 [ 252.608755][T12547] __se_sys_ioctl+0x47/0x170 [ 252.608782][T12547] do_syscall_64+0xfa/0xf80 [ 252.608808][T12547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.608827][T12547] ? clear_bhb_loop+0x60/0xb0 [ 252.608851][T12547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.608870][T12547] RIP: 0033:0x7f779618f749 [ 252.608887][T12547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.608904][T12547] RSP: 002b:00007f7797046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.608925][T12547] RAX: ffffffffffffffda RBX: 00007f77963e5fa0 RCX: 00007f779618f749 [ 252.608939][T12547] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 252.608970][T12547] RBP: 00007f7797046090 R08: 0000000000000000 R09: 0000000000000000 [ 252.608982][T12547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.608993][T12547] R13: 00007f77963e6038 R14: 00007f77963e5fa0 R15: 00007fff696fe0f8 [ 252.609028][T12547] [ 252.609049][T12547] ERROR: Out of memory at tomoyo_realpath_from_path. [ 252.701111][T12549] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1849'. [ 253.098136][T12577] delete_channel: no stack [ 253.117141][T12565] netlink: 'syz.1.1852': attribute type 11 has an invalid length. [ 253.408543][T12596] netlink: 'syz.3.1862': attribute type 1 has an invalid length. [ 253.448695][T12600] xt_l2tp: wrong L2TP version: 0 [ 253.485571][T12602] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 253.492813][T12597] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 253.526765][T12602] netlink: 'syz.2.1865': attribute type 58 has an invalid length. [ 253.776131][T12617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.864024][T12617] C: renamed from lo (while UP) [ 253.893560][T12617] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 253.941097][T12626] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 254.254389][T12636] netlink: 'syz.2.1873': attribute type 9 has an invalid length. [ 254.281082][T12636] netlink: 'syz.2.1873': attribute type 6 has an invalid length. [ 254.511870][T12613] lo speed is unknown, defaulting to 1000 [ 254.805608][T12674] veth0_macvtap: mtu less than device minimum [ 254.828641][T12677] vlan2: entered allmulticast mode [ 254.840374][T12677] erspan0: entered allmulticast mode [ 254.994733][T12686] netlink: 'syz.6.1883': attribute type 83 has an invalid length. [ 255.216806][T12698] IPv6: NLM_F_REPLACE set, but no existing node found! [ 255.778258][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.861631][T12735] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 255.888087][T12735] netlink: 'syz.6.1899': attribute type 6 has an invalid length. [ 255.907833][T12732] netlink: 'syz.2.1898': attribute type 29 has an invalid length. [ 255.937294][T12735] netlink: 'syz.6.1899': attribute type 6 has an invalid length. [ 255.953559][T12737] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 256.023755][T12738] __nla_validate_parse: 8 callbacks suppressed [ 256.023775][T12738] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1898'. [ 256.111191][T12747] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1902'. [ 256.417698][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1903'. [ 256.468333][T12760] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1903'. [ 256.531636][T12768] FAULT_INJECTION: forcing a failure. [ 256.531636][T12768] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 256.552323][T12768] CPU: 0 UID: 0 PID: 12768 Comm: syz.5.1906 Not tainted syzkaller #0 PREEMPT(full) [ 256.552352][T12768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.552365][T12768] Call Trace: [ 256.552373][T12768] [ 256.552381][T12768] dump_stack_lvl+0x189/0x250 [ 256.552408][T12768] ? __pfx____ratelimit+0x10/0x10 [ 256.552447][T12768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.552469][T12768] ? __pfx__printk+0x10/0x10 [ 256.552496][T12768] ? __might_fault+0xb0/0x130 [ 256.552532][T12768] should_fail_ex+0x414/0x560 [ 256.552561][T12768] _copy_from_user+0x2d/0xb0 [ 256.552590][T12768] ioctl_standard_iw_point+0x59d/0xd40 [ 256.552629][T12768] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 256.552661][T12768] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 256.552688][T12768] ? __pfx___mutex_lock+0x10/0x10 [ 256.552721][T12768] ? full_name_hash+0x92/0xe0 [ 256.552741][T12768] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 256.552772][T12768] ioctl_standard_call+0xaf/0x1b0 [ 256.552801][T12768] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 256.552829][T12768] wext_ioctl_dispatch+0xee/0x410 [ 256.552852][T12768] ? __pfx_ioctl_standard_call+0x10/0x10 [ 256.552881][T12768] wext_handle_ioctl+0x100/0x1c0 [ 256.552910][T12768] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 256.552950][T12768] sock_ioctl+0x15f/0x790 [ 256.552974][T12768] ? __pfx_sock_ioctl+0x10/0x10 [ 256.552999][T12768] ? __fget_files+0x3a0/0x420 [ 256.553015][T12768] ? __fget_files+0x2a/0x420 [ 256.553036][T12768] ? bpf_lsm_file_ioctl+0x9/0x20 [ 256.553055][T12768] ? __pfx_sock_ioctl+0x10/0x10 [ 256.553076][T12768] __se_sys_ioctl+0xfc/0x170 [ 256.553102][T12768] do_syscall_64+0xfa/0xf80 [ 256.553129][T12768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.553149][T12768] ? clear_bhb_loop+0x60/0xb0 [ 256.553172][T12768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.553190][T12768] RIP: 0033:0x7f779618f749 [ 256.553207][T12768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.553223][T12768] RSP: 002b:00007f7797046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.553244][T12768] RAX: ffffffffffffffda RBX: 00007f77963e5fa0 RCX: 00007f779618f749 [ 256.553258][T12768] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 256.553274][T12768] RBP: 00007f7797046090 R08: 0000000000000000 R09: 0000000000000000 [ 256.553285][T12768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.553294][T12768] R13: 00007f77963e6038 R14: 00007f77963e5fa0 R15: 00007fff696fe0f8 [ 256.553323][T12768] [ 256.985978][T12779] netlink: 'syz.5.1910': attribute type 1 has an invalid length. [ 257.001371][T12780] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1911'. [ 257.102960][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1914'. [ 257.169356][T12790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1916'. [ 257.181847][T12790] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1916'. [ 257.195484][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1914'. [ 257.308146][T12796] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1918'. [ 257.391536][T12798] veth0_to_bond: entered allmulticast mode [ 257.957207][T12841] netlink: 'syz.3.1932': attribute type 7 has an invalid length. [ 258.017592][T12839] x_tables: duplicate underflow at hook 1 [ 258.582631][T12825] lec:lec_atm_close: lec0: Shut down! [ 259.126965][T12904] ipt_REJECT: TCP_RESET invalid for non-tcp [ 259.186614][T12908] gretap0: entered promiscuous mode [ 259.243596][T12908] gretap0: left promiscuous mode [ 259.633438][T12924] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 259.701594][T12924] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 259.750448][T12924] gretap1: entered promiscuous mode [ 259.786141][T12924] gretap1: entered allmulticast mode [ 260.208413][T12946] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.230589][T12946] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.353381][T12946] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.390796][T12946] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.422556][T12921] pimreg: entered allmulticast mode [ 260.484851][T12946] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.514546][T12946] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.645186][T12946] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.661734][T12946] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.680567][T12973] validate_nla: 2 callbacks suppressed [ 260.680587][T12973] netlink: 'syz.2.1966': attribute type 10 has an invalid length. [ 260.697168][T12973] team0: entered promiscuous mode [ 260.707542][T12973] team_slave_0: entered promiscuous mode [ 260.713731][T12973] team_slave_1: entered promiscuous mode [ 260.724906][T12973] bridge0: port 4(team0) entered blocking state [ 260.737698][T12973] bridge0: port 4(team0) entered disabled state [ 260.746221][T12973] team0: entered allmulticast mode [ 260.752051][T12973] team_slave_0: entered allmulticast mode [ 260.758093][T12973] team_slave_1: entered allmulticast mode [ 260.768286][T12973] bridge0: port 4(team0) entered blocking state [ 260.774747][T12973] bridge0: port 4(team0) entered forwarding state [ 260.902739][ T1134] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.922498][ T1134] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.045549][T12981] __nla_validate_parse: 28 callbacks suppressed [ 261.045567][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1968'. [ 261.087359][T12988] veth0: entered promiscuous mode [ 261.096710][ T1134] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.111163][ T1134] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.146465][ T1134] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.157453][ T1134] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.171141][T12987] veth0: left promiscuous mode [ 261.192135][ T1134] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.202160][ T1134] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.405937][T13014] netlink: 'syz.3.1979': attribute type 7 has an invalid length. [ 261.445811][T13012] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1978'. [ 261.456804][T13014] netlink: 'syz.3.1979': attribute type 7 has an invalid length. [ 261.566553][T13024] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1980'. [ 261.576546][T13024] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1980'. [ 261.783497][T13043] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1985'. [ 261.871676][ T30] audit: type=1800 audit(1765483964.301:8): pid=13046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1989" name="memory.events" dev="tmpfs" ino=2049 res=0 errno=0 [ 261.944806][T13048] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 262.222697][T13068] openvswitch: netlink: Unknown key attributes 2 [ 262.325309][T13073] tipc: Failed to obtain node identity [ 262.349556][T13073] tipc: Enabling of bearer rejected, failed to enable media [ 262.393144][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 262.447554][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1999'. [ 262.472559][T13081] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1999'. [ 262.605248][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2001'. [ 262.644068][T13082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2000'. [ 262.791325][T13074] lo speed is unknown, defaulting to 1000 [ 263.381969][T13129] Cannot find add_set index 2 as target [ 263.516891][T13134] Unknown options in mask b7f2 [ 263.604232][T13140] 8021q: VLANs not supported on wg2 [ 264.466655][T13162] bond8: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 264.476805][T13172] netlink: 'syz.6.2029': attribute type 1 has an invalid length. [ 264.491539][T13162] bond8 (unregistering): Released all slaves [ 264.596621][T13172] bond2: entered promiscuous mode [ 264.631092][T13172] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.639543][T13177] bond2: entered allmulticast mode [ 264.657820][T13180] pimreg: entered allmulticast mode [ 264.665287][T13182] openvswitch: netlink: Missing key (keys=40, expected=80) [ 264.707391][T13177] bond2: (slave bridge7): making interface the new active one [ 264.728072][T13177] bridge7: entered promiscuous mode [ 264.758281][T13177] bridge7: entered allmulticast mode [ 264.771922][T13177] bond2: (slave bridge7): Enslaving as an active interface with an up link [ 265.355559][T13221] netlink: 'syz.3.2046': attribute type 10 has an invalid length. [ 265.368696][T13220] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002 [ 265.377679][T13221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.429788][T13221] batadv0: entered promiscuous mode [ 265.435385][T13221] batadv0: entered allmulticast mode [ 265.453434][T13226] sctp: [Deprecated]: syz.6.2047 (pid 13226) Use of int in max_burst socket option. [ 265.453434][T13226] Use struct sctp_assoc_value instead [ 265.476921][T13221] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 266.051926][T13271] __nla_validate_parse: 9 callbacks suppressed [ 266.051947][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2060'. [ 266.068616][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2060'. [ 266.094607][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2060'. [ 266.113960][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2060'. [ 266.138006][T13276] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2061'. [ 266.505404][T13294] IPv6: Can't replace route, no match found [ 266.544228][T13294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.585943][T13294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.633962][T13305] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.645998][T13294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.668963][T13294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.149973][T13330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2073'. [ 267.346078][T13335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2076'. [ 267.415230][T13343] netlink: 'syz.2.2077': attribute type 9 has an invalid length. [ 267.447642][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2078'. [ 267.582317][ T5948] IPVS: starting estimator thread 0... [ 267.664805][T13350] tipc: Enabled bearer , priority 10 [ 267.673253][T13351] IPVS: using max 26 ests per chain, 62400 per kthread [ 267.934008][T13367] batadv1: entered allmulticast mode [ 268.027364][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2088'. [ 268.053457][T13380] openvswitch: netlink: Flow actions attr not present in new flow. [ 268.081104][T13379] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 268.132141][T13379] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 268.143630][T13379] gretap2: entered promiscuous mode [ 268.149845][T13379] gretap2: entered allmulticast mode [ 268.224120][T13387] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2090'. [ 268.779764][ T41] tipc: Node number set to 121957939 [ 268.861536][T13428] pimreg3: entered allmulticast mode [ 268.901505][T13434] sctp: [Deprecated]: syz.1.2104 (pid 13434) Use of int in max_burst socket option. [ 268.901505][T13434] Use struct sctp_assoc_value instead [ 269.160688][T13446] netlink: 'syz.3.2107': attribute type 1 has an invalid length. [ 269.168485][T13446] netlink: 'syz.3.2107': attribute type 3 has an invalid length. [ 269.172720][T13449] syzkaller1: entered promiscuous mode [ 269.183443][T13449] syzkaller1: entered allmulticast mode [ 269.272724][T13454] netlink: 'syz.5.2110': attribute type 32 has an invalid length. [ 269.512256][T13470] xt_bpf: check failed: parse error [ 269.883138][T13490] vlan3: entered promiscuous mode [ 269.895791][T13490] vlan3: entered allmulticast mode [ 269.912741][T13490] hsr_slave_1: entered allmulticast mode [ 270.116669][T13498] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 270.128598][T13501] netlink: 'syz.6.2120': attribute type 4 has an invalid length. [ 270.329639][ T30] audit: type=1804 audit(1765483972.751:9): pid=13516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2125" name="/newroot/445/cgroup.controllers" dev="tmpfs" ino=2290 res=1 errno=0 [ 270.407620][ T30] audit: type=1800 audit(1765483972.751:10): pid=13516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2125" name="cgroup.controllers" dev="tmpfs" ino=2290 res=0 errno=0 [ 270.432292][T13520] netlink: 'syz.2.2127': attribute type 1 has an invalid length. [ 271.076309][T13569] sit0: entered promiscuous mode [ 271.161258][T13569] netlink: 'syz.2.2141': attribute type 1 has an invalid length. [ 271.183674][T13574] __nla_validate_parse: 16 callbacks suppressed [ 271.183697][T13574] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2145'. [ 271.220324][T13569] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2141'. [ 271.783733][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2160'. [ 271.989682][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2163'. [ 272.077384][T13643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2165'. [ 272.192305][T13647] bond3: entered allmulticast mode [ 272.197830][T13647] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.313014][T13655] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2169'. [ 272.436481][T13664] syzkaller0: entered promiscuous mode [ 272.450365][T13664] syzkaller0: entered allmulticast mode [ 272.521200][T13664] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2171'. [ 272.656502][T13676] tipc: Enabled bearer , priority 10 [ 272.834812][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2177'. [ 272.843313][T13685] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2180'. [ 272.855480][T13685] syzkaller1: entered promiscuous mode [ 272.867174][T13685] syzkaller1: entered allmulticast mode [ 273.077761][T13697] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 273.158503][T13702] netlink: 'syz.1.2185': attribute type 3 has an invalid length. [ 273.183746][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2187'. [ 273.328996][T13715] bridge0: port 4(team0) entered disabled state [ 273.335624][T13715] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.343306][T13715] bridge0: port 1() entered disabled state [ 273.557014][T13728] sctp: [Deprecated]: syz.2.2194 (pid 13728) Use of int in maxseg socket option. [ 273.557014][T13728] Use struct sctp_assoc_value instead [ 273.598806][T13730] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 273.787665][ T5948] tipc: Node number set to 565464789 [ 273.882792][T13745] bridge0: entered promiscuous mode [ 273.888514][T13745] macsec1: entered promiscuous mode [ 273.910834][T13745] macsec1: entered allmulticast mode [ 273.932256][T13745] bridge0: entered allmulticast mode [ 273.938947][T13745] bridge0: port 3(macsec1) entered blocking state [ 273.972639][T13745] bridge0: port 3(macsec1) entered disabled state [ 273.988718][T13745] bridge0: left allmulticast mode [ 273.996805][T13745] bridge0: left promiscuous mode [ 274.036866][T13747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.258146][T13774] openvswitch: netlink: IPv4 tunnel dst address is zero [ 274.305226][T13777] veth0: entered promiscuous mode [ 274.331687][T13779] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 274.734258][T13771] veth0: left promiscuous mode [ 275.476294][T13821] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 276.227015][T13871] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.244582][T13868] __nla_validate_parse: 12 callbacks suppressed [ 276.244605][T13868] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2235'. [ 276.473970][T13891] netlink: 'syz.1.2241': attribute type 29 has an invalid length. [ 276.707375][T13909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2248'. [ 276.831933][T13923] syzkaller1: entered promiscuous mode [ 276.838720][T13923] syzkaller1: entered allmulticast mode [ 276.957531][T13933] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2254'. [ 276.969572][T13933] unsupported nlmsg_type 40 [ 277.095790][T13942] gre0: left promiscuous mode [ 277.223989][T13942] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.277859][T13942] bond0: left promiscuous mode [ 277.306611][T13942] bond_slave_0: left promiscuous mode [ 277.320667][T13942] bond_slave_1: left promiscuous mode [ 277.326368][T13942] batadv0: left promiscuous mode [ 277.363103][T13942] bond0: left allmulticast mode [ 277.368593][T13942] bond_slave_0: left allmulticast mode [ 277.374614][T13942] bond_slave_1: left allmulticast mode [ 277.384271][T13942] batadv0: left allmulticast mode [ 277.405347][T13942] team_slave_1: left promiscuous mode [ 277.470632][T13942] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 277.521015][T13966] openvswitch: netlink: IP tunnel dst address not specified [ 277.585101][T13955] netlink: 'syz.3.2253': attribute type 29 has an invalid length. [ 277.619616][T13944] netlink: 'syz.3.2253': attribute type 29 has an invalid length. [ 277.719751][T13962] netlink: 'syz.3.2253': attribute type 29 has an invalid length. [ 277.736768][T13962] netlink: 'syz.3.2253': attribute type 29 has an invalid length. [ 277.760401][T13962] netlink: 'syz.3.2253': attribute type 29 has an invalid length. [ 277.776331][T13962] netlink: 'syz.3.2253': attribute type 29 has an invalid length. [ 277.788903][T13962] netlink: 'syz.3.2253': attribute type 29 has an invalid length. [ 277.886751][T13991] syzkaller0: entered promiscuous mode [ 277.892520][T13991] syzkaller0: entered allmulticast mode [ 277.901789][T13991] 0: reclassify loop, rule prio 0, protocol 800 [ 277.931066][ T7362] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 278.578982][T14046] netlink: 'syz.2.2278': attribute type 1 has an invalid length. [ 278.763717][ T41] hid-generic 0005:0002:5508.0001: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 278.786049][T14061] netlink: 576 bytes leftover after parsing attributes in process `syz.3.2279'. [ 278.864788][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2283'. [ 279.444024][T14102] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2291'. [ 279.515837][T14105] xt_SECMARK: invalid mode: 9 [ 279.529662][T14106] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2292'. [ 279.825487][T14124] netlink: 'syz.2.2299': attribute type 1 has an invalid length. [ 279.840641][T14124] netlink: 4070 bytes leftover after parsing attributes in process `syz.2.2299'. [ 279.988292][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2304'. [ 280.124409][T14143] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2307'. [ 280.428670][T14166] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 280.765666][T14183] netlink: 'syz.1.2318': attribute type 1 has an invalid length. [ 280.904213][T14191] block nbd1: not configured, cannot reconfigure [ 281.126498][T14195] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 281.372713][T14216] __nla_validate_parse: 2 callbacks suppressed [ 281.372734][T14216] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2327'. [ 281.447100][T14223] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2329'. [ 282.018346][T14257] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2343'. [ 282.037975][T14260] netlink: 'syz.1.2342': attribute type 21 has an invalid length. [ 282.567869][T14284] netlink: 'syz.3.2350': attribute type 23 has an invalid length. [ 282.634825][T14287] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2351'. [ 282.648608][T14284] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 282.670963][T14287] bridge_slave_1: left allmulticast mode [ 282.676963][T14287] bridge_slave_1: left promiscuous mode [ 282.708433][T14287] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.709338][T14289] nbd1: detected capacity change from 0 to 127 [ 282.746781][T14287] bridge_slave_0: left allmulticast mode [ 282.757376][T14287] bridge_slave_0: left promiscuous mode [ 282.763748][T14290] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2352'. [ 282.778599][T14287] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.797006][T14290] block nbd0: reconnected socket [ 282.827139][ T5154] block nbd1: Receive control failed (result -32) [ 282.842941][ T5844] block nbd0: Receive control failed (result -32) [ 283.204605][T14319] syzkaller1: entered promiscuous mode [ 283.217747][T14319] syzkaller1: entered allmulticast mode [ 283.241984][T14319] netlink: 'syz.2.2360': attribute type 62 has an invalid length. [ 283.287462][T14326] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2362'. [ 283.299489][T14323] bond2: option resend_igmp: invalid value (32767) [ 283.306138][T14323] bond2: option resend_igmp: allowed values 0 - 255 [ 283.315573][T14323] bond2 (unregistering): Released all slaves [ 283.386989][T14322] bond6: Unable to set up delay as MII monitoring is disabled [ 283.398165][T14322] bond6 (unregistering): Released all slaves [ 283.671710][T14351] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2368'. [ 284.123933][T14379] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2378'. [ 284.170791][T14379] vlan2: entered allmulticast mode [ 284.176196][T14379] erspan0: entered allmulticast mode [ 284.365086][T14400] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2386'. [ 284.532348][T14407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2387'. [ 284.841949][T14423] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 284.851758][T14423] bond2: option packets_per_slave: allowed values 0 - 65535 [ 284.863294][T14423] bond2 (unregistering): Released all slaves [ 284.976162][T14426] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 284.999389][T14426] syzkaller1: linktype set to 823 [ 285.137116][T14444] 8021q: VLANs not supported on gre0 [ 285.315844][T14456] xt_socket: unknown flags 0xe4 [ 285.663519][T14475] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 285.708915][T14477] netlink: 'syz.2.2412': attribute type 12 has an invalid length. [ 285.761321][T14477] bond9: option primary_reselect: invalid value (255) [ 285.776594][T14477] bond9 (unregistering): Released all slaves [ 285.844048][T14483] ip6tnl0: entered allmulticast mode [ 286.107328][T14492] 8021q: VLANs not supported on gre0 [ 286.153062][T14492] syzkaller0: entered promiscuous mode [ 286.158587][T14492] syzkaller0: entered allmulticast mode [ 286.493820][T14514] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 286.510891][T14519] __nla_validate_parse: 11 callbacks suppressed [ 286.510913][T14519] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2422'. [ 286.537365][T14514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.581579][T14523] netlink: 'syz.6.2426': attribute type 1 has an invalid length. [ 286.591229][T14516] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2424'. [ 286.601860][T14514] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2424'. [ 286.885066][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2429'. [ 286.885066][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2429'. [ 287.061322][T14547] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2432'. [ 287.061969][T14517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2423'. [ 287.081595][T14517] netlink: 'syz.3.2423': attribute type 7 has an invalid length. [ 287.099581][T14517] netlink: 'syz.3.2423': attribute type 8 has an invalid length. [ 287.114382][T14517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2423'. [ 287.143111][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'. [ 287.181214][T14555] veth0_macvtap: left promiscuous mode [ 287.270007][T14558] netlink: 'syz.2.2434': attribute type 2 has an invalid length. [ 287.610496][T14575] xt_TCPMSS: Only works on TCP SYN packets [ 287.614982][T14578] xt_TCPMSS: Only works on TCP SYN packets [ 287.627678][T14577] netlink: 'syz.3.2440': attribute type 1 has an invalid length. [ 287.678686][T14577] bond6: entered promiscuous mode [ 287.685901][T14577] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.935576][T14603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2449'. [ 287.982021][T14603] vcan0 (unregistering): left allmulticast mode [ 288.140957][T14614] openvswitch: netlink: IP tunnel dst address not specified [ 288.218434][T14619] netlink: 'syz.5.2454': attribute type 1 has an invalid length. [ 288.287419][T14619] bond2: entered promiscuous mode [ 288.293090][T14619] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.334850][T14622] bond2: (slave bridge0): making interface the new active one [ 288.343883][T14622] bridge0: entered promiscuous mode [ 288.350963][T14622] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 288.383355][T14619] bond2: (slave bridge5): Enslaving as a backup interface with an up link [ 288.463078][T14622] bond2: (slave bridge6): Enslaving as a backup interface with an up link [ 288.557835][T14619] bond2: (slave bridge7): Enslaving as a backup interface with an up link [ 288.622596][T14619] bond2: (slave bridge8): Enslaving as a backup interface with an up link [ 288.696804][T14622] bond2: (slave bridge9): Enslaving as a backup interface with an up link [ 288.751132][T14622] bond2: (slave bridge10): Enslaving as a backup interface with an up link [ 288.805069][T14619] bond2: (slave bridge11): Enslaving as a backup interface with an up link [ 288.915077][T14622] bond2: (slave bridge12): Enslaving as a backup interface with an up link [ 288.977842][T14622] bond2: (slave bridge13): Enslaving as a backup interface with an up link [ 289.045106][T14619] bond2: (slave bridge14): Enslaving as a backup interface with an up link [ 289.113937][T14622] bond2: (slave bridge15): Enslaving as a backup interface with an up link [ 289.591474][T14692] netlink: 'syz.1.2471': attribute type 22 has an invalid length. [ 289.612870][T14698] netlink: 'syz.2.2473': attribute type 1 has an invalid length. [ 289.933762][T14708] wlan0 speed is unknown, defaulting to 1000 [ 289.936010][T14711] siw: device registration error -23 [ 289.940163][T14708] wlan0 speed is unknown, defaulting to 1000 [ 289.940933][T14708] wlan0 speed is unknown, defaulting to 1000 [ 289.988437][T14708] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 290.115471][T14708] wlan0 speed is unknown, defaulting to 1000 [ 290.176188][T14708] wlan0 speed is unknown, defaulting to 1000 [ 290.194070][T14708] wlan0 speed is unknown, defaulting to 1000 [ 290.212951][T14708] wlan0 speed is unknown, defaulting to 1000 [ 290.232231][T14708] wlan0 speed is unknown, defaulting to 1000 [ 290.314247][T14734] netlink: 'syz.5.2482': attribute type 12 has an invalid length. [ 290.889360][T14766] erspan0: entered promiscuous mode [ 290.897419][T14770] netlink: 'syz.2.2496': attribute type 1 has an invalid length. [ 291.000269][T14770] 8021q: adding VLAN 0 to HW filter on device bond9 [ 291.081539][T14776] bond9: (slave geneve3): making interface the new active one [ 291.111787][T14776] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 291.631529][T14817] Bluetooth: MGMT ver 1.23 [ 291.831324][T14832] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 291.848845][T14832] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 291.952348][T14839] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 291.971987][T14839] bond5 (unregistering): Released all slaves [ 292.185451][T14855] __nla_validate_parse: 133 callbacks suppressed [ 292.185473][T14855] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2520'. [ 292.280141][T14859] xt_socket: unknown flags 0xe4 [ 292.309650][T14864] netlink: 'syz.2.2522': attribute type 21 has an invalid length. [ 292.317858][T14864] IPv6: NLM_F_CREATE should be specified when creating new route [ 292.353510][T14866] bridge4: entered promiscuous mode [ 292.371154][T14866] bridge4: entered allmulticast mode [ 292.445425][T14867] bridge4: entered promiscuous mode [ 292.453328][T14867] bridge4: entered allmulticast mode [ 292.513078][T14869] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2524'. [ 292.523028][T14869] tipc: Invalid UDP bearer configuration [ 292.523088][T14869] tipc: Enabling of bearer rejected, failed to enable media [ 292.806598][T14898] tipc: Started in network mode [ 292.812934][T14898] tipc: Node identity 3ab0e084885b, cluster identity 4711 [ 292.822389][T14898] tipc: Enabled bearer , priority 0 [ 292.833162][T14898] syzkaller0: entered promiscuous mode [ 292.838811][T14898] syzkaller0: entered allmulticast mode [ 292.872871][T14898] tipc: Resetting bearer [ 292.891019][T14903] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2534'. [ 292.903014][T14895] tipc: Resetting bearer [ 292.964204][T14895] tipc: Disabling bearer [ 293.136915][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2539'. [ 293.176518][T14929] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2538'. [ 293.298788][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2542'. [ 293.314043][T14938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2542'. [ 293.437555][T14947] TCP: TCP_TX_DELAY enabled [ 293.551897][T14953] netlink: 'syz.2.2549': attribute type 25 has an invalid length. [ 293.560073][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2549'. [ 293.623754][T14953] netlink: 'syz.2.2549': attribute type 25 has an invalid length. [ 293.631965][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2549'. [ 293.759022][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2552'. [ 293.773472][T14963] xt_TCPMSS: Only works on TCP SYN packets [ 293.875535][T14966] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 293.888997][T14966] bond10 (unregistering): Released all slaves [ 293.924730][T14969] tipc: Enabled bearer , priority 10 [ 293.932893][T14969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.047664][T14973] batadv_slave_1: entered promiscuous mode [ 294.494114][T14999] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.501435][T14999] IPv6: NLM_F_CREATE should be set when creating new route [ 294.574923][T15005] netlink: 'syz.3.2564': attribute type 3 has an invalid length. [ 294.584132][T15005] netlink: 'syz.3.2564': attribute type 2 has an invalid length. [ 294.700826][T15011] netlink: 'syz.6.2567': attribute type 1 has an invalid length. [ 294.741171][T15011] netlink: 'syz.6.2567': attribute type 2 has an invalid length. [ 294.877379][T14971] batadv_slave_1: left promiscuous mode [ 295.040529][ T5948] tipc: Node number set to 3001802884 [ 295.103312][ T7252] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 295.224843][T15053] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 295.865281][T15039] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 295.880407][T15039] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 295.912629][T15039] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 295.918597][T15039] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 295.947072][T15039] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 295.954676][T15039] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 295.972972][T15039] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 295.979297][T15039] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 295.993841][T15039] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 295.999987][T15039] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 296.123501][T15082] Cannot find add_set index 0 as target [ 296.143546][T15082] tipc: Enabled bearer , priority 0 [ 296.152479][T15082] syzkaller0: entered promiscuous mode [ 296.158003][T15082] syzkaller0: entered allmulticast mode [ 296.173521][T15082] tipc: Resetting bearer [ 296.221059][T15080] tipc: Resetting bearer [ 296.261577][T15080] tipc: Disabling bearer [ 296.697779][T15114] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 296.710434][ T1167] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 296.724219][ T1167] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 296.748023][ T1167] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 296.757985][ T1167] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.007021][T15137] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 297.032172][T15138] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 4 [ 297.670344][T15184] __nla_validate_parse: 15 callbacks suppressed [ 297.670365][T15184] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2615'. [ 297.766487][T15187] netlink: 'syz.2.2616': attribute type 11 has an invalid length. [ 297.776112][T15187] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2616'. [ 298.065427][T15198] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 298.464108][T15211] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2623'. [ 298.767881][T15224] netlink: 'syz.2.2627': attribute type 3 has an invalid length. [ 298.945680][T15234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2631'. [ 299.000765][T15239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2632'. [ 299.018842][T15239] x_tables: duplicate underflow at hook 3 [ 299.284244][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2635'. [ 299.965915][T15288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2645'. [ 300.058885][T15291] netlink: 'syz.2.2645': attribute type 1 has an invalid length. [ 300.071878][T15288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.081010][T15288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.086911][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 300.108613][T15288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.121095][T15288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.204550][T15300] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2649'. [ 300.216593][T15300] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2649'. [ 300.339086][T15308] ieee802154 phy0 wpan0: encryption failed: -22 [ 300.724105][T15320] netlink: 'syz.1.2652': attribute type 3 has an invalid length. [ 308.470142][ T7362] batman_adv: batadv1: IGMP Querier appeared [ 308.476169][ T7362] batman_adv: batadv1: MLD Querier appeared [ 317.204644][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.643843][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.084675][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 452.239829][ T31] INFO: task kworker/0:3:5843 blocked for more than 143 seconds. [ 452.250973][ T31] Not tainted syzkaller #0 [ 452.255940][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.265397][ T31] task:kworker/0:3 state:D stack:24344 pid:5843 tgid:5843 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 452.277937][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 452.284766][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 452.288076][ T31] [ 452.291208][ T31] __schedule+0x14bc/0x5000 [ 452.296501][ T31] ? __pfx___schedule+0x10/0x10 [ 452.301772][ T31] ? schedule+0x91/0x360 [ 452.306363][ T31] schedule+0x165/0x360 [ 452.310622][ T31] schedule_preempt_disabled+0x13/0x30 [ 452.316121][ T31] __mutex_lock+0x7e6/0x1350 [ 452.321236][ T31] ? __mutex_lock+0x5bb/0x1350 [ 452.326790][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 452.355833][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 452.381233][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 452.387061][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 452.405099][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 452.411316][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 452.417085][ T31] process_scheduled_works+0xad1/0x1770 [ 452.423068][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 452.429275][ T31] worker_thread+0x8a0/0xda0 [ 452.433906][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 452.440341][ T31] ? __kthread_parkme+0x7b/0x200 [ 452.445739][ T31] kthread+0x711/0x8a0 [ 452.450265][ T31] ? __pfx_worker_thread+0x10/0x10 [ 452.455400][ T31] ? __pfx_kthread+0x10/0x10 [ 452.460033][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.465251][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 452.470591][ T31] ? __pfx_kthread+0x10/0x10 [ 452.475202][ T31] ret_from_fork+0x599/0xb30 [ 452.480151][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 452.485305][ T31] ? __switch_to_asm+0x39/0x70 [ 452.491254][ T31] ? __switch_to_asm+0x33/0x70 [ 452.496060][ T31] ? __pfx_kthread+0x10/0x10 [ 452.500716][ T31] ret_from_fork_asm+0x1a/0x30 [ 452.505604][ T31] [ 452.508708][ T31] INFO: task syz.6.2573:15031 blocked for more than 143 seconds. [ 452.516877][ T31] Not tainted syzkaller #0 [ 452.521886][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.530600][ T31] task:syz.6.2573 state:D stack:25784 pid:15031 tgid:15031 ppid:9758 task_flags:0x400040 flags:0x00080002 [ 452.542809][ T31] Call Trace: [ 452.546092][ T31] [ 452.549124][ T31] __schedule+0x14bc/0x5000 [ 452.553683][ T31] ? __pfx___schedule+0x10/0x10 [ 452.558549][ T31] ? schedule+0x91/0x360 [ 452.562856][ T31] schedule+0x165/0x360 [ 452.567028][ T31] schedule_preempt_disabled+0x13/0x30 [ 452.572730][ T31] __mutex_lock+0x7e6/0x1350 [ 452.577341][ T31] ? __mutex_lock+0x5bb/0x1350 [ 452.582163][ T31] ? rfkill_unregister+0xc8/0x220 [ 452.587195][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 452.592273][ T31] ? __pfx_device_del+0x10/0x10 [ 452.597145][ T31] ? __cancel_work_sync+0x5c/0x110 [ 452.602627][ T31] rfkill_unregister+0xc8/0x220 [ 452.607520][ T31] nfc_unregister_device+0x96/0x2a0 [ 452.612774][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 452.618497][ T31] virtual_ncidev_close+0x56/0x90 [ 452.623563][ T31] __fput+0x44c/0xa70 [ 452.627584][ T31] task_work_run+0x1d4/0x260 [ 452.632946][ T31] ? __pfx_task_work_run+0x10/0x10 [ 452.638082][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 452.643783][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 452.649365][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 452.654705][ T31] ? rcu_is_watching+0x15/0xb0 [ 452.659965][ T31] do_syscall_64+0x2e3/0xf80 [ 452.664572][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.670676][ T31] ? clear_bhb_loop+0x60/0xb0 [ 452.675363][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.681320][ T31] RIP: 0033:0x7fb0dcd8f749 [ 452.685738][ T31] RSP: 002b:00007fff2b610f18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 452.694413][ T31] RAX: 0000000000000000 RBX: 00007fb0dcfe7da0 RCX: 00007fb0dcd8f749 [ 452.702430][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 452.711609][ T31] RBP: 00007fb0dcfe7da0 R08: 0000000000000174 R09: 000000142b61120f [ 452.719911][ T31] R10: 00007fb0dcfe7cb0 R11: 0000000000000246 R12: 000000000004834f [ 452.727893][ T31] R13: 00007fb0dcfe6090 R14: ffffffffffffffff R15: 00007fff2b611030 [ 452.736030][ T31] [ 452.739190][ T31] INFO: task syz.5.2575:15039 blocked for more than 143 seconds. [ 452.746958][ T31] Not tainted syzkaller #0 [ 452.752321][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.761096][ T31] task:syz.5.2575 state:D stack:26080 pid:15039 tgid:15037 ppid:9754 task_flags:0x400040 flags:0x00080002 [ 452.773108][ T31] Call Trace: [ 452.776411][ T31] [ 452.779706][ T31] __schedule+0x14bc/0x5000 [ 452.784275][ T31] ? __pfx___schedule+0x10/0x10 [ 452.789240][ T31] ? schedule+0x91/0x360 [ 452.793516][ T31] schedule+0x165/0x360 [ 452.797687][ T31] schedule_preempt_disabled+0x13/0x30 [ 452.803631][ T31] __mutex_lock+0x7e6/0x1350 [ 452.808268][ T31] ? __mutex_lock+0x5bb/0x1350 [ 452.813332][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 452.818645][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 452.823841][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 452.829147][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 452.835083][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 452.841883][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 452.847646][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 452.852809][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 452.858548][ T31] rfkill_set_block+0x1d2/0x440 [ 452.863454][ T31] rfkill_fop_write+0x44b/0x570 [ 452.868325][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 452.873969][ T31] ? security_kernfs_init_security+0x270/0x290 [ 452.880291][ T31] ? rw_verify_area+0x255/0x4d0 [ 452.885189][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 452.890796][ T31] vfs_write+0x27e/0xb30 [ 452.895090][ T31] ? __pfx_vfs_write+0x10/0x10 [ 452.900218][ T31] ? __fget_files+0x2a/0x420 [ 452.904839][ T31] ? __fget_files+0x2a/0x420 [ 452.909488][ T31] ? __fget_files+0x3a0/0x420 [ 452.914187][ T31] ? __fget_files+0x2a/0x420 [ 452.918788][ T31] ksys_write+0x145/0x250 [ 452.923167][ T31] ? __pfx_ksys_write+0x10/0x10 [ 452.928210][ T31] ? do_syscall_64+0xbe/0xf80 [ 452.933161][ T31] do_syscall_64+0xfa/0xf80 [ 452.937678][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.943810][ T31] ? clear_bhb_loop+0x60/0xb0 [ 452.948513][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.954498][ T31] RIP: 0033:0x7f779618f749 [ 452.958954][ T31] RSP: 002b:00007f7797046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 452.967445][ T31] RAX: ffffffffffffffda RBX: 00007f77963e5fa0 RCX: 00007f779618f749 [ 452.975950][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 452.983999][ T31] RBP: 00007f7796213f91 R08: 0000000000000000 R09: 0000000000000000 [ 452.992040][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.000300][ T31] R13: 00007f77963e6038 R14: 00007f77963e5fa0 R15: 00007fff696fe0f8 [ 453.008296][ T31] [ 453.011359][ T31] INFO: task syz.3.2650:15304 blocked for more than 144 seconds. [ 453.021506][ T31] Not tainted syzkaller #0 [ 453.026452][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 453.035390][ T31] task:syz.3.2650 state:D stack:24408 pid:15304 tgid:15303 ppid:5839 task_flags:0x400140 flags:0x00080002 [ 453.047432][ T31] Call Trace: [ 453.050806][ T31] [ 453.053765][ T31] __schedule+0x14bc/0x5000 [ 453.058305][ T31] ? __pfx___schedule+0x10/0x10 [ 453.063431][ T31] ? schedule+0x91/0x360 [ 453.067690][ T31] schedule+0x165/0x360 [ 453.071909][ T31] schedule_preempt_disabled+0x13/0x30 [ 453.077411][ T31] __mutex_lock+0x7e6/0x1350 [ 453.082055][ T31] ? rcu_is_watching+0x15/0xb0 [ 453.086828][ T31] ? __mutex_lock+0x5bb/0x1350 [ 453.091937][ T31] ? rfkill_register+0x37/0x8e0 [ 453.096808][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 453.101876][ T31] ? netdev_run_todo+0xe1b/0xea0 [ 453.106850][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 453.112085][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 453.117374][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 453.123239][ T31] rfkill_register+0x37/0x8e0 [ 453.127926][ T31] wiphy_register+0x246a/0x2d20 [ 453.132937][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 453.138152][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 453.143483][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 453.148615][ T31] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 453.155084][ T31] ieee80211_register_hw+0x3473/0x40d0 [ 453.160662][ T31] ? ieee80211_register_hw+0x13f1/0x40d0 [ 453.166358][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 453.172277][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 453.178216][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 453.184391][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 453.190777][ T31] ? __hrtimer_setup+0x181/0x200 [ 453.195749][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 453.201598][ T31] mac80211_hwsim_new_radio+0x2f8b/0x5240 [ 453.207364][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 453.213764][ T31] ? __asan_memset+0x22/0x50 [ 453.218374][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 453.224029][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 453.229202][ T31] ? do_syscall_64+0xfa/0xf80 [ 453.233995][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.240320][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 453.245447][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 453.251224][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 453.256788][ T31] ? rcu_is_watching+0x15/0xb0 [ 453.261630][ T31] ? __nla_parse+0x40/0x60 [ 453.266089][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 453.272837][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 453.278452][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 453.284650][ T31] ? bpf_lsm_capable+0x9/0x20 [ 453.289400][ T31] ? security_capable+0x7e/0x2e0 [ 453.294375][ T31] genl_rcv_msg+0x60e/0x790 [ 453.298891][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.304165][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 453.309814][ T31] netlink_rcv_skb+0x208/0x470 [ 453.314600][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.319678][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.325018][ T31] ? down_read+0x274/0x2e0 [ 453.329792][ T31] ? genl_rcv+0xd/0x40 [ 453.333889][ T31] genl_rcv+0x28/0x40 [ 453.337878][ T31] netlink_unicast+0x82f/0x9e0 [ 453.342787][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 453.348088][ T31] ? netlink_sendmsg+0x642/0xb30 [ 453.353092][ T31] ? skb_put+0x11b/0x210 [ 453.357348][ T31] netlink_sendmsg+0x805/0xb30 [ 453.362599][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.367897][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 453.372885][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.378179][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.383531][ T31] __sock_sendmsg+0x21c/0x270 [ 453.388244][ T31] ____sys_sendmsg+0x505/0x820 [ 453.393309][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.398625][ T31] ? import_iovec+0x74/0xa0 [ 453.403192][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 453.407915][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.413243][ T31] ? futex_wait+0x285/0x360 [ 453.417809][ T31] ? __fget_files+0x2a/0x420 [ 453.422639][ T31] ? __fget_files+0x3a0/0x420 [ 453.427326][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 453.432398][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.437886][ T31] ? do_syscall_64+0xbe/0xf80 [ 453.446309][ T31] do_syscall_64+0xfa/0xf80 [ 453.451078][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.457162][ T31] ? clear_bhb_loop+0x60/0xb0 [ 453.461861][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.467756][ T31] RIP: 0033:0x7fe00098f749 [ 453.472234][ T31] RSP: 002b:00007fe00188a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.480989][ T31] RAX: ffffffffffffffda RBX: 00007fe000be5fa0 RCX: 00007fe00098f749 [ 453.488969][ T31] RDX: 0000000004008000 RSI: 0000200000000100 RDI: 0000000000000027 [ 453.497008][ T31] RBP: 00007fe000a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 453.505052][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.513284][ T31] R13: 00007fe000be6038 R14: 00007fe000be5fa0 R15: 00007fff2b2ae228 [ 453.522209][ T31] [ 453.525284][ T31] INFO: task syz.1.2652:15310 blocked for more than 144 seconds. [ 453.533104][ T31] Not tainted syzkaller #0 [ 453.538043][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 453.546959][ T31] task:syz.1.2652 state:D stack:27672 pid:15310 tgid:15309 ppid:5837 task_flags:0x400040 flags:0x00080002 [ 453.558948][ T31] Call Trace: [ 453.562368][ T31] [ 453.565342][ T31] __schedule+0x14bc/0x5000 [ 453.570147][ T31] ? __pfx___schedule+0x10/0x10 [ 453.575026][ T31] ? schedule+0x91/0x360 [ 453.579333][ T31] schedule+0x165/0x360 [ 453.583523][ T31] schedule_preempt_disabled+0x13/0x30 [ 453.589060][ T31] __mutex_lock+0x7e6/0x1350 [ 453.593687][ T31] ? __mutex_lock+0x5bb/0x1350 [ 453.598467][ T31] ? genl_rcv_msg+0x10d/0x790 [ 453.603429][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 453.608481][ T31] ? radix_tree_lookup+0x240/0x290 [ 453.613638][ T31] genl_rcv_msg+0x10d/0x790 [ 453.618159][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.623228][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 453.628203][ T31] netlink_rcv_skb+0x208/0x470 [ 453.633279][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.638324][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.643681][ T31] ? down_read+0x274/0x2e0 [ 453.648156][ T31] ? genl_rcv+0xd/0x40 [ 453.652268][ T31] genl_rcv+0x28/0x40 [ 453.656266][ T31] netlink_unicast+0x82f/0x9e0 [ 453.661449][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 453.666761][ T31] ? netlink_sendmsg+0x642/0xb30 [ 453.671754][ T31] ? skb_put+0x11b/0x210 [ 453.676016][ T31] netlink_sendmsg+0x805/0xb30 [ 453.680992][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.686294][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 453.691513][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.696818][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.702150][ T31] __sock_sendmsg+0x21c/0x270 [ 453.706855][ T31] __sys_sendto+0x3bd/0x520 [ 453.711443][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 453.716506][ T31] ? count_memcg_event_mm+0x21/0x260 [ 453.722063][ T31] ? exc_page_fault+0x82/0x100 [ 453.726862][ T31] __x64_sys_sendto+0xde/0x100 [ 453.731683][ T31] do_syscall_64+0xfa/0xf80 [ 453.736206][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.742316][ T31] ? clear_bhb_loop+0x60/0xb0 [ 453.747006][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.753156][ T31] RIP: 0033:0x7f838b1915dc [ 453.757581][ T31] RSP: 002b:00007f838bf40ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 453.766053][ T31] RAX: ffffffffffffffda RBX: 00007f838bf40fc0 RCX: 00007f838b1915dc [ 453.774068][ T31] RDX: 0000000000000020 RSI: 00007f838bf41010 RDI: 0000000000000003 [ 453.782293][ T31] RBP: 0000000000000000 R08: 00007f838bf40f14 R09: 000000000000000c [ 453.790328][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 453.798319][ T31] R13: 00007f838bf40f68 R14: 00007f838bf41010 R15: 0000000000000000 [ 453.806448][ T31] [ 453.809855][ T31] INFO: task syz.1.2652:15317 blocked for more than 144 seconds. [ 453.817604][ T31] Not tainted syzkaller #0 [ 453.822612][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 453.831354][ T31] task:syz.1.2652 state:D stack:27976 pid:15317 tgid:15309 ppid:5837 task_flags:0x400040 flags:0x00080002 [ 453.844207][ T31] Call Trace: [ 453.847528][ T31] [ 453.850538][ T31] __schedule+0x14bc/0x5000 [ 453.855096][ T31] ? __pfx___schedule+0x10/0x10 [ 453.859997][ T31] ? schedule+0x91/0x360 [ 453.864248][ T31] schedule+0x165/0x360 [ 453.868411][ T31] schedule_preempt_disabled+0x13/0x30 [ 453.874100][ T31] __mutex_lock+0x7e6/0x1350 [ 453.878739][ T31] ? __mutex_lock+0x5bb/0x1350 [ 453.883548][ T31] ? genl_rcv_msg+0x10d/0x790 [ 453.888235][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 453.893298][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 453.899561][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 453.905498][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 453.911921][ T31] ? radix_tree_lookup+0x240/0x290 [ 453.917054][ T31] genl_rcv_msg+0x10d/0x790 [ 453.921801][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.926887][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 453.932216][ T31] netlink_rcv_skb+0x208/0x470 [ 453.936996][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.942086][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.947413][ T31] ? down_read+0x274/0x2e0 [ 453.951903][ T31] ? genl_rcv+0xd/0x40 [ 453.956014][ T31] genl_rcv+0x28/0x40 [ 453.960339][ T31] netlink_unicast+0x82f/0x9e0 [ 453.965158][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 453.970562][ T31] ? netlink_sendmsg+0x642/0xb30 [ 453.975532][ T31] ? skb_put+0x11b/0x210 [ 453.979843][ T31] netlink_sendmsg+0x805/0xb30 [ 453.984633][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.990265][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 453.995229][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.000830][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.006154][ T31] __sock_sendmsg+0x21c/0x270 [ 454.010902][ T31] __sys_sendto+0x3bd/0x520 [ 454.015426][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 454.020751][ T31] ? count_memcg_event_mm+0x21/0x260 [ 454.026080][ T31] ? exc_page_fault+0x82/0x100 [ 454.030931][ T31] __x64_sys_sendto+0xde/0x100 [ 454.035745][ T31] do_syscall_64+0xfa/0xf80 [ 454.040316][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.046398][ T31] ? clear_bhb_loop+0x60/0xb0 [ 454.051439][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.057359][ T31] RIP: 0033:0x7f838b1915dc [ 454.061848][ T31] RSP: 002b:00007f83893d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 454.070344][ T31] RAX: ffffffffffffffda RBX: 00007f83893d3fc0 RCX: 00007f838b1915dc [ 454.078348][ T31] RDX: 0000000000000020 RSI: 00007f83893d4010 RDI: 0000000000000003 [ 454.087178][ T31] RBP: 0000000000000000 R08: 00007f83893d3f14 R09: 000000000000000c [ 454.095224][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 454.103291][ T31] R13: 00007f83893d3f68 R14: 00007f83893d4010 R15: 0000000000000000 [ 454.111550][ T31] [ 454.114644][ T31] INFO: task syz.1.2652:15319 blocked for more than 145 seconds. [ 454.122477][ T31] Not tainted syzkaller #0 [ 454.127447][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 454.136175][ T31] task:syz.1.2652 state:D stack:28280 pid:15319 tgid:15309 ppid:5837 task_flags:0x400040 flags:0x00080002 [ 454.148363][ T31] Call Trace: [ 454.151715][ T31] [ 454.154659][ T31] __schedule+0x14bc/0x5000 [ 454.159452][ T31] ? __pfx___schedule+0x10/0x10 [ 454.164366][ T31] ? schedule+0x91/0x360 [ 454.168660][ T31] schedule+0x165/0x360 [ 454.173085][ T31] schedule_preempt_disabled+0x13/0x30 [ 454.178557][ T31] __mutex_lock+0x7e6/0x1350 [ 454.183187][ T31] ? __mutex_lock+0x5bb/0x1350 [ 454.187966][ T31] ? genl_rcv_msg+0x10d/0x790 [ 454.192710][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 454.197758][ T31] ? radix_tree_lookup+0x240/0x290 [ 454.203110][ T31] genl_rcv_msg+0x10d/0x790 [ 454.207635][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.212702][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 454.217659][ T31] netlink_rcv_skb+0x208/0x470 [ 454.222477][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.227511][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 454.233046][ T31] ? down_read+0x274/0x2e0 [ 454.237470][ T31] ? genl_rcv+0xd/0x40 [ 454.241606][ T31] genl_rcv+0x28/0x40 [ 454.245600][ T31] netlink_unicast+0x82f/0x9e0 [ 454.250454][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 454.255780][ T31] ? netlink_sendmsg+0x642/0xb30 [ 454.260958][ T31] ? skb_put+0x11b/0x210 [ 454.265219][ T31] netlink_sendmsg+0x805/0xb30 [ 454.270072][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.275395][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 454.280436][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.285751][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.291298][ T31] __sock_sendmsg+0x21c/0x270 [ 454.296076][ T31] __sys_sendto+0x3bd/0x520 [ 454.300649][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 454.305754][ T31] ? fd_install+0x95/0x3d0 [ 454.310357][ T31] ? fd_install+0x307/0x3d0 [ 454.314913][ T31] __x64_sys_sendto+0xde/0x100 [ 454.320066][ T31] do_syscall_64+0xfa/0xf80 [ 454.324603][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.330720][ T31] ? clear_bhb_loop+0x60/0xb0 [ 454.335405][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.341320][ T31] RIP: 0033:0x7f838b1915dc [ 454.345757][ T31] RSP: 002b:00007f8388fb0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 454.354409][ T31] RAX: ffffffffffffffda RBX: 00007f8388fb0fc0 RCX: 00007f838b1915dc [ 454.362441][ T31] RDX: 0000000000000020 RSI: 00007f8388fb1010 RDI: 0000000000000006 [ 454.370463][ T31] RBP: 0000000000000000 R08: 00007f8388fb0f14 R09: 000000000000000c [ 454.378437][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 454.386698][ T31] R13: 00007f8388fb0f68 R14: 00007f8388fb1010 R15: 0000000000000000 [ 454.394737][ T31] [ 454.397777][ T31] INFO: task syz.2.2653:15312 blocked for more than 145 seconds. [ 454.405814][ T31] Not tainted syzkaller #0 [ 454.410993][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 454.419712][ T31] task:syz.2.2653 state:D stack:28280 pid:15312 tgid:15311 ppid:5841 task_flags:0x400040 flags:0x00080002 [ 454.431747][ T31] Call Trace: [ 454.435062][ T31] [ 454.438033][ T31] __schedule+0x14bc/0x5000 [ 454.442891][ T31] ? __pfx___schedule+0x10/0x10 [ 454.447776][ T31] ? schedule+0x91/0x360 [ 454.452047][ T31] schedule+0x165/0x360 [ 454.456242][ T31] schedule_preempt_disabled+0x13/0x30 [ 454.461735][ T31] __mutex_lock+0x7e6/0x1350 [ 454.466432][ T31] ? __mutex_lock+0x5bb/0x1350 [ 454.471439][ T31] ? genl_rcv_msg+0x10d/0x790 [ 454.476129][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 454.484907][ T31] ? radix_tree_lookup+0x240/0x290 [ 454.490089][ T31] genl_rcv_msg+0x10d/0x790 [ 454.494623][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.500028][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 454.505006][ T31] netlink_rcv_skb+0x208/0x470 [ 454.509852][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.514903][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 454.520268][ T31] ? down_read+0x274/0x2e0 [ 454.524738][ T31] ? genl_rcv+0xd/0x40 [ 454.528810][ T31] genl_rcv+0x28/0x40 [ 454.533031][ T31] netlink_unicast+0x82f/0x9e0 [ 454.537822][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 454.543165][ T31] ? netlink_sendmsg+0x642/0xb30 [ 454.548116][ T31] ? skb_put+0x11b/0x210 [ 454.552446][ T31] netlink_sendmsg+0x805/0xb30 [ 454.557252][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.562849][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 454.567815][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.573172][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.578463][ T31] __sock_sendmsg+0x21c/0x270 [ 454.583187][ T31] __sys_sendto+0x3bd/0x520 [ 454.587721][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 454.592988][ T31] ? count_memcg_event_mm+0x21/0x260 [ 454.598310][ T31] ? exc_page_fault+0x82/0x100 [ 454.603163][ T31] __x64_sys_sendto+0xde/0x100 [ 454.608033][ T31] do_syscall_64+0xfa/0xf80 [ 454.612582][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.618673][ T31] ? clear_bhb_loop+0x60/0xb0 [ 454.623596][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.629565][ T31] RIP: 0033:0x7fcaf35915dc [ 454.634011][ T31] RSP: 002b:00007fcaf445aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 454.642521][ T31] RAX: ffffffffffffffda RBX: 00007fcaf445afc0 RCX: 00007fcaf35915dc [ 454.650738][ T31] RDX: 0000000000000020 RSI: 00007fcaf445b010 RDI: 0000000000000006 [ 454.658881][ T31] RBP: 0000000000000000 R08: 00007fcaf445af14 R09: 000000000000000c [ 454.666909][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 454.674976][ T31] R13: 00007fcaf445af68 R14: 00007fcaf445b010 R15: 0000000000000000 [ 454.683228][ T31] [ 454.686282][ T31] [ 454.686282][ T31] Showing all locks held in the system: [ 454.694038][ T31] 1 lock held by khungtaskd/31: [ 454.698886][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 454.708823][ T31] 2 locks held by getty/5591: [ 454.713878][ T31] #0: ffff8880338f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 454.723811][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 454.733959][ T31] 3 locks held by kworker/0:3/5843: [ 454.739498][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 454.750556][ T31] #1: ffffc900042ffb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 454.764137][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 454.775751][ T31] 2 locks held by syz.6.2573/15031: [ 454.780976][ T31] #0: ffff88807c959100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 454.790779][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 454.801224][ T31] 2 locks held by syz.5.2575/15039: [ 454.806440][ T31] #0: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 454.816596][ T31] #1: ffff88807c959100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 454.826408][ T31] 3 locks held by syz.3.2650/15304: [ 454.831943][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 454.840196][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 454.849236][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 454.859512][ T31] 2 locks held by syz.1.2652/15310: [ 454.864725][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 454.872973][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 454.882508][ T31] 2 locks held by syz.1.2652/15317: [ 454.887714][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 454.896178][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 454.905228][ T31] 2 locks held by syz.1.2652/15319: [ 454.910481][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 454.918727][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 454.927966][ T31] 2 locks held by syz.2.2653/15312: [ 454.933236][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 454.941511][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 454.950878][ T31] 2 locks held by syz-executor/15328: [ 454.956253][ T31] #0: ffff88807b60f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 454.966498][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 454.976575][ T31] 2 locks held by syz-executor/15329: [ 454.982191][ T31] #0: ffff88805433c118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 454.992253][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 455.002325][ T31] 2 locks held by syz-executor/15333: [ 455.007696][ T31] #0: ffff88807b61e118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 455.018049][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 455.028031][ T31] 2 locks held by syz-executor/15334: [ 455.033472][ T31] #0: ffff88807b61f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 455.043759][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 455.053730][ T31] 2 locks held by syz-executor/15335: [ 455.059135][ T31] #0: ffff88807b61d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 455.069525][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 455.079545][ T31] 2 locks held by syz-executor/15338: [ 455.084954][ T31] #0: ffff8880265d3118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 455.095081][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 455.105288][ T31] 2 locks held by syz-executor/15339: [ 455.110699][ T31] #0: ffff88807c9c1918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 455.120820][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 455.131056][ T31] 2 locks held by syz-executor/15343: [ 455.136435][ T31] #0: ffff8880567d6118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 455.146513][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 455.156508][ T31] 2 locks held by syz-executor/15344: [ 455.162109][ T31] #0: ffff88807a7d7118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 455.172151][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 455.182110][ T31] 2 locks held by syz-executor/15345: [ 455.187488][ T31] #0: ffff88807a7d6918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 455.197765][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 455.207745][ T31] 2 locks held by syz-executor/15348: [ 455.213176][ T31] #0: ffff888055d23118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 455.223447][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 455.233543][ T31] 2 locks held by syz-executor/15349: [ 455.238931][ T31] #0: ffff88807d0d0918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 455.249386][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 455.259407][ T31] 2 locks held by syz-executor/15352: [ 455.264797][ T31] #0: ffff88807a9e3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 455.274993][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 455.285193][ T31] 2 locks held by syz-executor/15353: [ 455.290608][ T31] #0: ffff8880304ab918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 455.300682][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 455.310880][ T31] 2 locks held by syz-executor/15355: [ 455.316246][ T31] #0: ffff8880265d1918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 455.326375][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 455.336354][ T31] [ 455.338699][ T31] ============================================= [ 455.338699][ T31] [ 455.347406][ T31] NMI backtrace for cpu 0 [ 455.347424][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 455.347441][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 455.347450][ T31] Call Trace: [ 455.347456][ T31] [ 455.347463][ T31] dump_stack_lvl+0x189/0x250 [ 455.347484][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.347500][ T31] ? __pfx__printk+0x10/0x10 [ 455.347528][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 455.347545][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 455.347561][ T31] ? __pfx__printk+0x10/0x10 [ 455.347604][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 455.347626][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 455.347643][ T31] watchdog+0xf3c/0xf80 [ 455.347664][ T31] ? watchdog+0x1e2/0xf80 [ 455.347686][ T31] kthread+0x711/0x8a0 [ 455.347707][ T31] ? __pfx_watchdog+0x10/0x10 [ 455.347723][ T31] ? __pfx_kthread+0x10/0x10 [ 455.347742][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.347758][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 455.347775][ T31] ? __pfx_kthread+0x10/0x10 [ 455.347793][ T31] ret_from_fork+0x599/0xb30 [ 455.347816][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 455.347844][ T31] ? __switch_to_asm+0x39/0x70 [ 455.347860][ T31] ? __switch_to_asm+0x33/0x70 [ 455.347875][ T31] ? __pfx_kthread+0x10/0x10 [ 455.347893][ T31] ret_from_fork_asm+0x1a/0x30 [ 455.347922][ T31] [ 455.347927][ T31] Sending NMI from CPU 0 to CPUs 1: [ 455.496030][ C1] NMI backtrace for cpu 1 [ 455.496048][ C1] CPU: 1 UID: 0 PID: 2995 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 455.496068][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 455.496080][ C1] Workqueue: events_unbound toggle_allocation_gate [ 455.496111][ C1] RIP: 0010:walk_to_pmd+0x1ec/0x460 [ 455.496140][ C1] Code: 8b 0b 49 89 df 49 c1 ef 1e 41 81 e7 ff 01 00 00 41 c1 e7 03 49 01 ef 0f 84 de 00 00 00 4c 89 fd 48 c1 ed 03 42 80 7c 2d 00 00 <74> 08 4c 89 ff e8 da 3d 1a 00 4d 8b 37 4c 89 f6 48 83 e6 9f 31 ff [ 455.496155][ C1] RSP: 0018:ffffc9000b8a7608 EFLAGS: 00000246 [ 455.496170][ C1] RAX: 1ffffffff1b306a4 RBX: 00002aaaaaaab000 RCX: ffff88802e859e80 [ 455.496184][ C1] RDX: 0000000000000000 RSI: 800000001a062007 RDI: 0000000000000000 [ 455.496195][ C1] RBP: 1ffff1100340c4aa R08: ffffea0000086f87 R09: 1ffffd4000010df0 [ 455.496208][ C1] R10: dffffc0000000000 R11: fffff94000010df1 R12: 000ffffffffff000 [ 455.496221][ C1] R13: dffffc0000000000 R14: 800000001a062007 R15: ffff88801a062550 [ 455.496234][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 455.496248][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.496260][ C1] CR2: 000055caa5f2f000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 455.496275][ C1] Call Trace: [ 455.496282][ C1] [ 455.496291][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x1a0 [ 455.496317][ C1] __get_locked_pte+0x27/0xd0 [ 455.496342][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x1a0 [ 455.496364][ C1] __text_poke+0x2e6/0x9f0 [ 455.496387][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 455.496406][ C1] ? perf_event_text_poke+0x13d/0x190 [ 455.496427][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x1a0 [ 455.496449][ C1] ? __pfx___text_poke+0x10/0x10 [ 455.496466][ C1] ? rcu_is_watching+0x15/0xb0 [ 455.496486][ C1] ? trace_contention_end+0x39/0x100 [ 455.496515][ C1] smp_text_poke_batch_finish+0x90a/0x1130 [ 455.496541][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 455.496566][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 455.496596][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 455.496620][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 455.496642][ C1] static_key_enable+0x1a/0x20 [ 455.496660][ C1] toggle_allocation_gate+0xad/0x240 [ 455.496684][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 455.496708][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 455.496739][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 455.496766][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 455.496792][ C1] process_scheduled_works+0xad1/0x1770 [ 455.496841][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 455.496877][ C1] worker_thread+0x8a0/0xda0 [ 455.496907][ C1] kthread+0x711/0x8a0 [ 455.496930][ C1] ? __pfx_worker_thread+0x10/0x10 [ 455.496946][ C1] ? __pfx_kthread+0x10/0x10 [ 455.496967][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.496987][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 455.497007][ C1] ? __pfx_kthread+0x10/0x10 [ 455.497027][ C1] ret_from_fork+0x599/0xb30 [ 455.497054][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 455.497084][ C1] ? __switch_to_asm+0x39/0x70 [ 455.497104][ C1] ? __switch_to_asm+0x33/0x70 [ 455.497123][ C1] ? __pfx_kthread+0x10/0x10 [ 455.497144][ C1] ret_from_fork_asm+0x1a/0x30 [ 455.497173][ C1]