last executing test programs: 3m40.681897758s ago: executing program 0 (id=116): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) (async) close(0x3) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) (async) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xfffffffffffffe5e, 0x2, {{0x2, [0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_newvlan={0x24, 0x70, 0x1, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}]}, 0x24}, 0x1, 0x0, 0x0, 0x48841}, 0x80) (async) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x90) 3m40.619312741s ago: executing program 0 (id=118): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c0001e003000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000040)={0x7}, 0x4) sendto$inet6(r3, &(0x7f0000000080)="5e57a1440554bb046fe28cfc7656", 0xe, 0x4000, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @mcast1, 0xffff}, 0x1c) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m39.579477249s ago: executing program 0 (id=124): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000000)=""/141, &(0x7f00000000c0)=0x8d) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000100)={0x6, 'bond_slave_0\x00', {0x3}, 0x3}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x6, 0x1, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x80, 0x7800, 0xa9, 0xc3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@mpls_getnetconf={0x34, 0x52, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_IFINDEX={0x8, 0x1, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044000}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x956, 0x0, r6, 0x1, '\x00', r4, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSCOMPRESS(r7, 0x4010744d) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x8}, 0x18) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000600)={0x9, 0x1ff, 0x8000, 0x5}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000640)) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000680)) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r7) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, r10, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x49, 0xa8, @random="26cb3855a0770bc880e5a4bb56feb11fe23ef2e961ca3a2d7e3af5cd33fe2cc90e7a8be974a1488133f4fd441a993ca9a5ca1c67e92cece3928b1691afcaa1ecd22bb22ce1"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x70}, 0x1, 0x0, 0x0, 0x8884}, 0x80) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x3f7, 0x400, 0x70bd27, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r8) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000d40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f00000009c0)={0x30c, r11, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xdd1, 0x4e}}}}, [@NL80211_ATTR_FRAME={0x2ec, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @device_a, @initial, {0xb, 0xe}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, @void, @void, @void, @val={0x2d, 0x1a, {0x4000, 0x3, 0x1, 0x0, {0x42, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x2}}, @val={0x72, 0x6}, [{0xdd, 0x7c, "92125b44f469cbf1158f9dfc514807193999d628eae3d99eea09843b1b40d00ce46f7ac025da1932a8f4e879745810ff97595353f3b3217035da083ac626e934115f4cdbd50e596bfb95614037b7058310e873460f4e7efec510578d083997c0ab2a914a75679cae2d40b2cc03e26153b736ea9f935f3dcefa95ef39"}, {0xdd, 0x50, "d13482bf75c8e67fbab5a242d0044a2bbadb41c4e7dc772997a70ab86a35562afc8f24041471ec187898e318c44675601b2fede48cca1589ecf0042380dbb7af5799357c26019c4591fc69f104fb1a47"}, {0xdd, 0xc9, "13f89cd718b216df6014141e49a348d70d306be4df80b6d0fdd6f74b48da96bb28a98d3ad3504e976b4886b1d0fd07acd8d8ac2eee004088ba856f589440dfae8fd6064d261b8eb99d03deeab2b10d61f3533315a1a194beb5f8c1e2f4a972af200e24c272fb7370659d48313792365b774c6fb7e8049dd8f882a7cf476f8e7cd13eacf369b278c1eac30053d48aed9d16478a9f181d8dc051666848010d70c10e74b436829eb445af3b034af1870c89fb0b6af8884b58eff3834a9539f441eebe4133c99490303204"}, {0xdd, 0x8f, "7bee13eb51022818c2f48be7210572f3d4fae996771bdb84f14f832b3eed4f5c0af9265ae45c4602290c35e69443443e2091918a5e9d07d633b93b314f45d6cc5b686057ea834290d42c1d9ece4d6e66009be4e24e2d3cb26690287d013f7449d1520b05d6945a34050c3b79d2aaed15ca21d47258756b1e471afe5b230a91cf476b5e0b1767c1ef558bf1b8591904"}, {0xdd, 0x7a, "c1fab23df60926a78103cdd453b8e624bc8a8d903f883edeb490142bfce0bc23b8330730ffbcaa3bf46e539cc33dd5d981eac1c6a777e57f4216bd3b0b086d0e24c4c5012a633e022611fc6da73954e57deb81344fcd682b939dbe2494144a89e160dcefbe8c68be26602ab9aa33c94a548ec994508d34902691"}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x810}, 0x4010040) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000d80)={0x0, 'geneve1\x00', {0x1}, 0xfff8}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000e00)={0x0}, &(0x7f0000000e40)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x60, r10, 0x4, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000f80)='wg0\x00', 0x4) sendmsg$inet(r0, &(0x7f00000012c0)={&(0x7f0000000fc0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001080)=[{&(0x7f0000001000)="4add724018244132ef94230517e7653f72fb8cc137bc4b2b1c637043cf291394a96a23d6eb5143d29233f11817c21c60678b580bf09a22fc2767debd61b46358db7cf778934c263704d2440ca4ad29b22e90a4bfce8b", 0x56}], 0x1, &(0x7f00000010c0)=[@ip_retopts={{0x70, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xc2, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x4}]}, @timestamp_prespec={0x44, 0x34, 0x96, 0x3, 0x3, [{@broadcast, 0x4}, {@empty, 0x2000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xcb00}, {@multicast2, 0x40}]}, @end, @timestamp_prespec={0x44, 0x14, 0xc1, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x400000}, {@rand_addr=0x64010102, 0x1}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x86, 0x10, "0e4c607cfd833d3bf0eef8213f6b"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@cipso={0x86, 0x51, 0x2, [{0x1, 0x5, "1c281b"}, {0x7, 0x7, "4e539ded20"}, {0x6, 0x10, "a83d548f9d071ae198c621555e78"}, {0x0, 0x9, "1b86abf8b7c706"}, {0x5, 0xc, "21f4fe415482fe9c549b"}, {0x0, 0xd, "333f36fcd6424eefdd7228"}, {0x0, 0x5, "3872b7"}, {0x2, 0x8, "8f3e96143d44"}]}, @rr={0x7, 0x13, 0x60, [@local, @remote, @private=0xa010100, @loopback]}, @noop, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast2, @rand_addr=0x64010102]}, @lsrr={0x83, 0xb, 0xc1, [@loopback, @broadcast]}, @generic={0x44, 0x11, "843cf94b08c3169d454c0103c6d6c0"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x1c8}, 0x40080) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0x5, 0xb4, 0x6, 0x9, 0x10000, r8, 0x717, '\x00', r3, 0xffffffffffffffff, 0x2, 0x4}, 0x50) 3m38.865495878s ago: executing program 0 (id=126): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) listen(r2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 3m38.647417986s ago: executing program 0 (id=130): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) r0 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) close(r0) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x2, 0x0, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01"], 0x1c}}, 0x0) 3m38.189889546s ago: executing program 0 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000010000895000000354f0000d578e9f076fe1083e55b8ad3a5c34e45db541359293d6874b8c20f89f0f7df7f2297b286d9954204d4403dd1664a00bf6666d0756f82e4f5ca28cd58714a47974ecd2e4bf01754920b6e7133400f6c47c7dc8d38e2dde689fe4146bcf469e20b3cbe031c1cdbaf9004dc7f8d31f06ae10075a58b3b5874b29f321d57b3ca363e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xab41}]}, 0x44}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m41.030218826s ago: executing program 32 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000010000895000000354f0000d578e9f076fe1083e55b8ad3a5c34e45db541359293d6874b8c20f89f0f7df7f2297b286d9954204d4403dd1664a00bf6666d0756f82e4f5ca28cd58714a47974ecd2e4bf01754920b6e7133400f6c47c7dc8d38e2dde689fe4146bcf469e20b3cbe031c1cdbaf9004dc7f8d31f06ae10075a58b3b5874b29f321d57b3ca363e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xab41}]}, 0x44}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m31.192464858s ago: executing program 5 (id=329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0xe0901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x88, 0x1403, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8001}, 0x44014) 2m30.430212786s ago: executing program 5 (id=337): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x14, 0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000500)={@initdev}, &(0x7f0000000540)=0x14) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) recvfrom(r1, 0x0, 0x0, 0x40000020, &(0x7f00000002c0)=@l2={0x1f, 0x7bd, @none, 0xeb6}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x98}}, 0x4008000) 2m29.707870951s ago: executing program 5 (id=347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x5) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x4}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2m29.254645203s ago: executing program 5 (id=353): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) close(0x3) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r4, &(0x7f0000000200)={@val={0xa, 0x8847}, @void, @eth={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "101b01", 0x4e, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x4e, 0x0, @opaque="715c6fd5536167bd2835968cfc5459d390a1100e5e7f05d6f78837aeb82a0892bff5e386f53be56bafb92450766efd32b1d27c9a5eaf2eb626c5b5e665d620571de75141fd1b"}}}}}}}, 0x88) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x800, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@acquire={0x128, 0x17, 0x685, 0x0, 0x0, {{@in=@loopback}, @in=@dev, {@in6=@mcast2, @in=@broadcast}, {{@in=@dev, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1a0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffff00000000}}}}, 0x128}}, 0x0) 2m28.503227927s ago: executing program 5 (id=361): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendto$inet(r2, &(0x7f0000000380)="1822616216a35b3d5410224b12cbc06cf95df9f73f41b9a6bdadb7baea588431924da538cb7b2e36271fc1109abeb89dbc77bef9aeea5a96c6556c67e92caa5398210d3a9594dd492884e001f0616d119ebc080fcffa496da584966d9b382f9a3816db8a2b7989f44fb845b31ddbf59a4c7ce0aa66b0204f608769582ce15d109baf600ec92854439ae1e5ecc8e9f0b6615404c648da2f7e4d25c5e66aa584a4556d59abfed6f942afd888b4b7f9aab63815ce33a42fe86368da3671291400ee5ea7740c5f015f051d208b62a946668896786c808b372db19ded11e8908a1f39af4751c8940e1902a98e1aa10d464a2759433a", 0xf3, 0x800, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60fa050000481101fe8000000000000000000000008324c9a7dd206bd40000aafe050000080000000000000000e3ffaa4e200e2200489078030080000200000088c73b21f267636d01dbe5712c1c941e1cdafbbb430000000038f825f2e579dd12d60db7a9223291c08931c91f41e5ff0500000000000000dfaf9a"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x51}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) 2m28.229516247s ago: executing program 5 (id=366): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000f00000100000e00"}}}]}, 0x48}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000300)={'veth1_to_bridge\x00', @multicast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r4, 0x0, 0x7}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r6, 0x1, 0x70bd26, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m13.171323613s ago: executing program 33 (id=366): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000f00000100000e00"}}}]}, 0x48}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000300)={'veth1_to_bridge\x00', @multicast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r4, 0x0, 0x7}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r6, 0x1, 0x70bd26, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m0.462135472s ago: executing program 2 (id=735): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000340)={@val={0xa, 0x1a}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x5c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_DESC={0x2c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x28b}]}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0xfe061d6ce88a6fe1, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_DELOBJ={0x8c, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x3e, 0x8, "5fe35463b2dfb3e25ce177afe88c272ab36da78ef602fafec1d771828ed21f980520d205d504f2fa0b932a4b6a51de2c627a84444edebc9b137c"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x124}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x3) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x2c, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1, 0x0, 0x0, 0x1000}, {"c798a201"}}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x2c, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1, 0x0, 0x0, 0x1000}, {"c798a201"}}}}}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0xfffffffd, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x5}]}}]}, 0x48}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r10, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000001240)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de6fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0768021fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61f48eccfcc29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a6e453a8a28cd5c4b733fc8e8f630932206960e9076c7d7fc99fce018701c50d3955541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33c0bb3c24fa67c327cde47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f120790934c3b32f2f4777c65b15748267223cbde856fa5a33f12cb1ea51da9ce96881d1aa6d096ed6b23190800000081803a2119d9efd47b1abb0700000063c1ec692da80ef66b19495b8e801d07b133f1b552ee772732a90e765b92d67f7a0cc8f15a4c6143f7cd3bda78fc55ae68381061136753296cbe5722b6bd3b0f53d7405c8cdf443024e43aa65740de97aa74910882eb3b341f1b15496573057108d4c1e36c62e09148d7cdafe2ee2cd6623d1b609dbe7f8820a9b3c79abae60f62ede7d342af3e44c5c9a3e7cc4e9f277ae824628127d686b9a369e80a8d268ed44aff30ed2ed771dc63d16088e344a8ab6edaf0875e35d0a5352269b431577f94fe2bbab1eadf9e56f74a475e9fb1289b243a33b60112bf8ee44e71a872f1324fbad31ab7a14d487c541578bd9f3bdc084a5e835e73a86c6c3d95f8ba84604d800738ca66ac677e0fc25b1060d1e6282403c785c0cf5ee984ec21ff8ceffbd37f78e373b62f4d8036e06fd193214185bd3cbf97e02eab2df28acdb8ccb23b7941880835b7747567b99ea34c3658a8f4fad52efcd873c134d01fb0535edfaaf8b67f6d9b728b4b62699cc8ab39c51c4f1ecafff6753b8e2a06999fd6702a20e52cb3869cd9f528d13088efc17142e091365785ca101e7ceb23aae9bf1316cc5b6421a963a6091736364a28c973b5889215ffe16e333700"/978, 0x3d2}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d589863d5f323f6d5c", 0x58}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) (async) sendmmsg$inet(r10, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000001240)="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"/978, 0x3d2}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d589863d5f323f6d5c", 0x58}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) 1m59.85160862s ago: executing program 2 (id=743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffff0000}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}]}}}]}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x48046}, 0x0) close(r0) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @broadcast}, 0x10, 0x0}, 0x34004811) (async) r2 = socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xfffffffffffffff8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) (async, rerun: 64) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async, rerun: 32) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4) (async, rerun: 32) sendto$inet6(r4, 0x0, 0x0, 0x800, 0x0, 0x0) (async) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x3f6, 0x4, 0x70bd2c, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0xd) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x8, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20000805) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 1m59.6595169s ago: executing program 2 (id=748): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r2 = socket(0x1, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000000c0)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x0, 0x4}, @mpls}, 0xe) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff0000000008000800830700"], 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x0) setsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, &(0x7f0000000740)=0x10, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r7}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={r7}, 0x4) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0x6, 0x1, 0x0, 0x1, [{0x8, 0x1b, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000129bd7000fedbdf250300000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="9117c1c74c1c3f3a48c9190000"], 0x4c}, 0x1, 0x0, 0x0, 0x20014010}, 0x0) 1m59.330109732s ago: executing program 2 (id=754): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000080)=0xfffefffe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0xc0b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8}]}}}]}]}], {0x14}}, 0x80}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000300012800b00010062726964676500002000028005000700080000000c002e0003000000031100000500170000000000"], 0x50}}, 0x0) 1m58.45527119s ago: executing program 2 (id=767): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000088}, 0x4000000) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040)=0xfffffffa, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r1, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x8185}], 0x1, 0x40010142, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000), 0x4) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0xa43, @none}, 0xe) 1m57.499868889s ago: executing program 2 (id=785): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x80000001, @empty, 0x80000001}, 0x1c) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x215c7e3886131954, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r7, 0x0, 0x7f}, 0x18) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r8, 0x29, 0x17, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m42.46901447s ago: executing program 34 (id=785): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x80000001, @empty, 0x80000001}, 0x1c) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x215c7e3886131954, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r7, 0x0, 0x7f}, 0x18) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r8, 0x29, 0x17, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 24.011855211s ago: executing program 1 (id=1245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000019100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf251000000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000c00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd06, 0x43}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006a0083130000000000000000000000000000000008000500d768d9f8"], 0x20}}, 0x0) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000040)=0x1) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000140)='io.latency\x00', 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x34, r7, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x34}}, 0x40000) write$tun(r4, &(0x7f00000009c0)={@val={0x0, 0x6006}, @val={0x2, 0x4, 0x0, 0x0, 0x2, 0x8f2}, @ipv4=@gre={{0x15, 0x4, 0x3, 0x33, 0x21d, 0x66, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@timestamp_addr={0x44, 0x4, 0x84, 0x1, 0x7}, @rr={0x7, 0x2b, 0xa, [@private=0xa010100, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x44}, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0xb, 0x0, [{0x5, 0x5, "fe537d"}]}, @generic={0x88, 0x3, "82"}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1c, 0x2, [], "405c907443d3a8d3a6b6f91e415384bcec89cecb454a0694c5c31ca1"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x2e35, 0x1, 0xfffd], "49249311fb6c6fd34ea598c6731eeaf6aee10163c3b98da2d487cb62a3626eac88d8b8005a5f488920f062557c7deda9adbbdb68a4dec668b8e85d5e5f261856ec7af6799d98341965f49d8b182c06ee3dfd9378"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "a6fb90d124d9d956e7782c7c84b4e63fc83a195d338350661f453be31d7731e77fa5000b544a43c3c7ba160828f962b50959774444f35a0753c916ede10af3621caeedab3432568b3e9b45e97bc030a1abdd8e1465ee155bcf6ae7d36e45e4b0ec28481d835094237c2c13eefd7e0ecaa7b8d6b8f0e87a8b3c3a997f7d834c561232"}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0x4, 0x3, 0x0, 0x1, 0x5, 0x2}, 0x1, {0xff}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x9, 0x2, 0x0, 0x0, 0x4, 0xcd}, 0x2, {0x8, 0x4, 0x1, 0x6, 0x1, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "a85bef62ad0bdb90c11c514478eb672f729ebb67ec31442a7c31ffb09fa13f0fd56df47b10c85e40e4490ce0d42308c3a3fdb99ffa7f51c48807ac5e3a4f811ba14648e30c3086194897c8867a406004c909404238cabf970295387ef1a4553b95af876acea9de90825df3b28ce1991cc4fea69cd643277754d342af27c4022e280b2454bef21c713b8faa3e28"}}}}, 0x22b) 23.906372072s ago: executing program 1 (id=1247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffd47, 0xb, 0x1800}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/5, 0xe000, 0x1000, 0x6, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'ip6gre0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4, 0x600}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000001f9b169ae7d9b03c00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008401000000000000000200000005000020000000000000000604"], 0x0, 0x3e, 0x0, 0x1}, 0x20) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) recvmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{}, {&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)=""/195, 0xc3}], 0x3, &(0x7f0000000080)=""/33, 0x21}, 0x40010122) 22.835845262s ago: executing program 1 (id=1258): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40840, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'ip6tnl0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xed2ff125863bd772, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f00000000c0)=0x100004) 21.508643227s ago: executing program 1 (id=1266): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x24, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x24}}, 0x0) 21.505426882s ago: executing program 1 (id=1269): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x94, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4d797e10}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x66a3e1cb}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x8050) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x44066fa5}]}]}], {0x14}}, 0xb8}}, 0x800) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r4, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/19, 0x13}, {&(0x7f0000005140)=""/4096, 0x721}], 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmmsg$alg(r3, &(0x7f0000005500)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x1, 0x44854) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r8, &(0x7f0000000140)=0xffffffffffffffff, 0x12) write$cgroup_subtree(r8, 0x0, 0x12) recvmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}], 0x1}, 0x3}], 0x1, 0x12001, 0x0) r9 = socket$inet_icmp(0x2, 0x2, 0x1) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xc, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000180)={0x6de, 0x9, 0x20d1, 0x8}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r9, @ANYBLOB="00000200", @ANYRES32=r11], 0x24}}, 0x0) 21.034644727s ago: executing program 1 (id=1280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630109000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10010}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r3, 0x0, 0xfb2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000000000082e0cfd32986183ebe74e5f29a7d9b11de3041f52ce7eadd6c1b30d82941a9310829bbeea964d465559e629be19f8570c15ec9a72d983223636b342cf8b27a9e64004f92a0f750150f20971f87197b6513174f307ceaa4f7ae1263461209a310df1e3fe35ac76820e3d78f6bef1ca0e05eff29586db75595bc009049f793124cce57cdc3281c17ca537c8605302acaf2a4c68f2d6141dd7a9cfa214f258a148a7552f77e76c64fd9f63ecc74d5f93187679f76b4e35ac285"], 0x14}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x640048c0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000a58000000090a010400000000000000000100000208000a400000000008000640ffffff000900010073797a3000000000080005400000001c0900020073797a320000000008000340000000880c0009800800028004000180140000001000010000000000000000000784000a"], 0x80}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) 5.934852947s ago: executing program 35 (id=1280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630109000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10010}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r3, 0x0, 0xfb2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000000000082e0cfd32986183ebe74e5f29a7d9b11de3041f52ce7eadd6c1b30d82941a9310829bbeea964d465559e629be19f8570c15ec9a72d983223636b342cf8b27a9e64004f92a0f750150f20971f87197b6513174f307ceaa4f7ae1263461209a310df1e3fe35ac76820e3d78f6bef1ca0e05eff29586db75595bc009049f793124cce57cdc3281c17ca537c8605302acaf2a4c68f2d6141dd7a9cfa214f258a148a7552f77e76c64fd9f63ecc74d5f93187679f76b4e35ac285"], 0x14}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x640048c0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000a58000000090a010400000000000000000100000208000a400000000008000640ffffff000900010073797a3000000000080005400000001c0900020073797a320000000008000340000000880c0009800800028004000180140000001000010000000000000000000784000a"], 0x80}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) 2.64165524s ago: executing program 7 (id=1484): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000080)=0x1ff, 0x4) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x90, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 2.292079313s ago: executing program 7 (id=1489): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111b70000000000851000000200000085000000ae00000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x52, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x3, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty, 0x80000}, {@multicast1}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x82, 0xfffffffffffffe73}, @noop]}}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) r0 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) r1 = socket$inet6(0xa, 0x3, 0xff) (rerun: 32) setsockopt$inet6_mreq(r1, 0x3a, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa00000000000000000800120000001500000000000000000006000000000000000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000080019"], 0xe0}}, 0x0) 1.987559571s ago: executing program 4 (id=1493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x88, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6004}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}}, 0x0) 1.98686392s ago: executing program 3 (id=1494): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020104020a0000000000000000000000030006000000000002000000ffffffff00000000000000000300050000000000020000000000000000000000000000000200130006"], 0x50}, 0x1, 0x7}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) 1.984017507s ago: executing program 7 (id=1495): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'batadv_slave_1\x00', {0x2}, 0x40}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'ip6erspan0\x00', 0x400}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x600}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)={&(0x7f00000009c0)={0x18, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x48050}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4054) 1.899446659s ago: executing program 4 (id=1497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) (async) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r6], 0x3c}}, 0x10) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xcf413bb336b9972}, 0xc, &(0x7f0000000080)={&(0x7f0000001880)={0xf90, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x5d}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xf64, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x355, 0x91, "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"}], @beacon_params, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x0, 0x5, 0x5, 0xfff5]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x3e7, 0x91, "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"}], @beacon_params=[@NL80211_ATTR_IE={0x242, 0x2a, [@chsw_timing={0x68, 0x4, {0x2, 0x3}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0x1, 0xc, 0x40}}, @ht={0x2d, 0x1a, {0x80, 0x3, 0x0, 0x0, {0x92, 0x4, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x6, 0xd}}, @dsss={0x3, 0x1, 0xb1}, @preq={0x82, 0x41, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x5, 0x4, @broadcast, 0x2, @value=@broadcast, 0x4, 0xfffffffd, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0xc}, {{}, @device_a, 0x3}, {{0x1}, @device_a, 0xfff}]}}, @perr={0x84, 0x11a, {0x6, 0x10, [{{0x0, 0x1}, @broadcast, 0x8, @value=@broadcast, 0x24}, {{}, @broadcast, 0x4, @void, 0x23}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value=@device_b, 0x38}, {{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x1f}, {{0x0, 0x1}, @device_b, 0x8, @value, 0x32}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x2f}, {{0x0, 0x1}, @device_b, 0x6d, @value, 0xc}, {{}, @broadcast, 0xff85, @void, 0x1}, {{0x0, 0x1}, @broadcast, 0x1, @value, 0x21}, {{}, @device_a, 0x8, @void, 0x39}, {{0x0, 0x1}, @broadcast, 0x23dc0, @value=@broadcast, 0x6800}, {{0x0, 0x1}, @broadcast, 0x401, @value=@device_b, 0x16}, {{}, @device_b, 0x3, @void, 0x13}, {{0x0, 0x1}, @broadcast, 0x3, @value, 0xe}, {{0x0, 0x1}, @device_b, 0x2, @value=@broadcast, 0x12}, {{0x0, 0x1}, @device_a, 0x7ff, @value=@device_b, 0x5}]}}, @preq={0x82, 0x72, {{}, 0x40, 0x97, 0x5, @device_b, 0x4, @void, 0x5, 0x8, 0x8, [{{}, @broadcast, 0xff}, {{}, @device_a, 0x7}, {{0x1}, @device_a, 0x1}, {{0x1, 0x0, 0x1}, @device_a, 0x9}, {{0x1, 0x0, 0x1}, @device_b, 0x7}, {{0x1}}, {{0x1}, @device_a, 0xff}, {{0x1, 0x0, 0x1}, @broadcast, 0x1}]}}, @gcr_ga={0xbd, 0x6, @broadcast}, @preq={0x82, 0x30, {{0x0, 0x1, 0x1}, 0x4, 0x4, 0x2, @broadcast, 0x3ff, @void, 0x1, 0x8, 0x2, [{{0x1}, @device_a, 0xffff}, {{}, @broadcast, 0x5d90}]}}, @dsss={0x3, 0x1, 0x2}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xc4, 0x7f, [@link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @challenge={0x10, 0x1, 0xfa}, @perr={0x84, 0x88, {0x1, 0x8, [{{0x0, 0x1}, @device_a, 0x85, @value=@device_b, 0x14}, {{0x0, 0x1}, @broadcast, 0x8, @value, 0x39}, {{}, @device_b, 0x6, @void, 0x2b}, {{0x0, 0x1}, @device_b, 0x4, @value, 0x7}, {{}, @device_b, 0x5, @void, 0x23}, {{}, @broadcast, 0x0, @void, 0x11}, {{0x0, 0x1}, @device_b, 0x9, @value=@device_b, 0x37}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0x40}]}}, @rann={0x7e, 0x15, {{0x1, 0x14}, 0x1, 0x0, @device_a, 0x101, 0xffff705f, 0xf}}, @mesh_chsw={0x76, 0x6, {0xf3, 0x4, 0x30, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x1c8, 0x91, "6c580a5d5ceba022c25a171bb52ba0cedc0630de1107e54b35108441fdd88525db299eaf4e04709e80848142d647a27830f330b9d274a58acd80745a6b312d3eb79c283ca29a010a007a93753cf4a71baf3936a4774d66b5e4ad5b523b99cdc93e6d433c4be29469ae33d779137889bf18eaa049ea65b833b1cae3f5fe88ac4a1316ce195a43d2429ed4707172ceb4c06207e66594f997570d760697acebf3b366136009a2e20b16a11662e0b4b8cafb1c8402fa2c4e04a37176c3d0656a7604f28cd5a383831baea9cb60052e5fb8448def4985d5b37af0099f82e491ab1e9a916d7612d58867261f87ca956e617348c6427da8842f298aea7ca48b317e8bfecc18e1c747a8d938c45764906011520064e0afe91e57a6a2b4aecd9050667aee1ad8fd2fcfbe091d5e193453e23ca99717069c262e0731d6634e3c54464c80ca65197520747e2f3cf26c9bb79897fc8ab30e2bf341e980d5c89fb8d65d867affac8c021740a4f17bc32f58446813fb063a3395560cd09f82d8f2c019527d5ac5d52f0a100aef7fd73351a3dc1f7eb824306315ce283b8d21e85f0d494cc44cc15a017c9f5879fe7b6b7c60cba5e32e16be3f61a4d7cd67abb959c61641aea538bb99cc5f"}, @NL80211_ATTR_IE_ASSOC_RESP={0x179, 0x80, [@link_id={0x65, 0x12, {@from_mac=@broadcast, @device_a, @device_b}}, @mic={0x8c, 0x18, {0x991, "e4a09ab1c97a", @long="52618e8577c0cb859a77d05a86fbec21"}}, @erp={0x2a, 0x1, {0x1}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x4, 0x60}}, @perr={0x84, 0x9c, {0x81, 0xa, [{{0x0, 0x1}, @device_b, 0x6, @value, 0x1f}, {{}, @broadcast, 0x8, @void, 0x29}, {{}, @device_b, 0x8, @void, 0x2c}, {{}, @broadcast, 0xb, @void, 0x16}, {{}, @broadcast, 0x4, @void, 0xf}, {{}, @broadcast, 0xb, @void, 0x5}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x25}, {{0x0, 0x1}, @device_a, 0x7ff, @value, 0x16}, {{}, @device_b, 0x4, @void, 0xd}, {{0x0, 0x1}, @broadcast, 0x80000001, @value=@device_b, 0xd}]}}, @fast_bss_trans={0x37, 0x8e, {0x0, 0x2, "31856a84c09a5bf5c37a5311db5d4579", "ac5ea96a885867bccc066aa23d8cbe2fa962f5cb15f1accacae3bd7aa8d74547", "e0d3dfff03c8151e3675a3252c2d4eb1797f2f04989cbda62f0e77d0fa599be8", [{0x2, 0x1c, "d757eac554b61d5f948b908fc4003121714993a88be08584c0f2fd71"}, {0x1, 0x1c, "4d3fc19b5293c68550ddccff11eb8c54d16e43ae7be3e1be5ba42e25"}]}}, @channel_switch={0x25, 0x3, {0x1, 0xb2, 0x40}}, @cf={0x4, 0x6, {0x2, 0xc, 0x7, 0xfff8}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x2, 0xa1c7, 0x6]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1ab, 0x7f, [@random={0x7, 0xd3, "9a65a049980c1f1f847e57399ca2d6b527e3de2dc3940c4b75510f4d930814b48042fffcffcd91e1ffca34235cbb2de89268f875c9a303646bb56973270677e84da42d7e1aa6450522adc85d145aa0bff015342a33346e857a88e1a3d0ec7380b3283ad211c72a3ddf7f5771b99d29121ec12914b4450c94756f0d30c6b6f35d965449c5137470f10f783733761e58d06db8be53e03162ec04385203777f9f90bfefdb897f3db06f47a8c6492f2163686da4353c9c5716a11921448bb250dbee20c759b13c69832be7166b1de33e65b173ba2f"}, @preq={0x82, 0x78, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x80, 0xf, 0x0, @broadcast, 0x10000, @value=@device_b, 0x7, 0x0, 0x8, [{{0x0, 0x0, 0x1}, @device_a, 0x3}, {{0x1}}, {{0x1}, @device_a, 0x2352}, {{}, @device_a, 0x3}, {{0x0, 0x0, 0x1}, @device_b, 0x1}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @device_b, 0xe}, {{0x0, 0x0, 0x1}, @device_a, 0x1}]}}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0x9, 0x3, @device_a, 0x4, 0x0, 0x401}}, @gcr_ga={0xbd, 0x6, @broadcast}, @supported_rates={0x1, 0x8, [{0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x30, 0x1}, {0x60, 0x1}, {0x30, 0x1}, {0x2}, {0xc}]}, @challenge={0x10, 0x1, 0xf5}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0x6, @default_ap_ssid}, @ht={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0x7, 0x3, 0x0, 0x9, 0x0, 0x0, 0x1}, 0xbe33bfbb8f87e1d8, 0xa, 0xa}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x2, 0x6a0, 0x3, 0xc337, 0xff]}]}]}, 0xf90}, 0x1, 0x0, 0x0, 0x40060}, 0x24000009) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r11], 0x20}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x16, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000064000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61147c00000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7}, 0x10}, 0x94) 1.79579584s ago: executing program 3 (id=1498): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) recvmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x25}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000004740)=""/4070, 0xfe6}, {&(0x7f0000000700)=""/99, 0x63}, {&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000001200)=""/155, 0x9b}], 0x5}, 0x8}], 0x3, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1.566997114s ago: executing program 3 (id=1501): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x14) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d0200000000000000180000000000000084"], 0x38}, 0x41) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffffffe}]}, 0x3c}}, 0x0) close(r2) 1.504440811s ago: executing program 4 (id=1502): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d660671f3e121710e8537c4c3060c6a41d106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) ioctl$FITHAW(r0, 0xc0045878) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000ebffffffffff000003548ef843fea2bfa2a86872aa161949c45c0a184c6dc0627c6d068906ce9fce1d79ab7657a97f2f8d701b97f17a433c544ef9d922"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0xed000000, 0x10, &(0x7f0000000200), 0x10}, 0x80) 1.451021945s ago: executing program 3 (id=1503): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="a3c0b74c310c2e55f4d2140d6717333b4aef02521728c2ca5655be08e79f9a682c8c357265798c5b8a3266288d2d6edb89dd", 0x32}, {&(0x7f0000000040)="d8afa0c549c3e28a00984eafd6afb8e7618d4766af3bbfc8c48c470205a7ee0559e3eb639d94a7c04dbc0e8c14b350f6bd58dc01ae129c35", 0x38}, {&(0x7f0000000080)="526754622017d1bda7aa36e9e4ba205636d2556945f8607140f8e5e04c5e127f23ff656a7c3e6fb4ab8cd1981837017453017545e1718b961dbcba656d77cc5048cb90df4b70d04893be6c4bac3f20ab3dbc926a5592f7102643c0cc34c15e43fb9383824e40a851823af6c0c67c201e9ecc0540e5541333a72096ae61fad3ff659a175d215671cba5ba2fbc1607fb951a7af3eba25fe3540f025a69b0622bffefee93abb86a1a47cdc679c4f5281909a6856eb51f2b16e09574398c83805cccad220f4fee87e77b4dc7c952d4efba0a4aedfde60883f7", 0xd7}, {&(0x7f0000000180)="99713ebcbe9188be61bc4a90ed6a8d5a9efcf113db8ac95f790cce4f140c87eb989d1ef1a323a1", 0x27}], 0x4, &(0x7f0000000200)=[@dstopts_2292={{0x118, 0x29, 0x4, {0xff, 0x20, '\x00', [@hao={0xc9, 0x10, @loopback}, @generic={0xe, 0xec, "9897e4b9656022055e9113345d14da136b75999b6d0c2f55a306e3a1ca79ef4a6b43223779dff0c50b3a8a764b582b0ab9db659a057dec1dd37700de6e766e7c14b5526853be39bc09add584c2ab43da1e516364ea42de9bcb2fe0c5aaf36a4bdf923e779830926f271fe3d6730c14e0b15c35fd88508f9894d8ca25ba60d4ecdc55f3b17aa17bd28f57294e99cb0a4bd6f746cb12a5661ef6c81e9b0e8fe8db893373ece57ee127d053826cb9dd6a2ea748f62592ac16a2d9fb92c776f00d146fe3d01b51e5fedf63ef1d3060907bc041ae1a56ec84d81dee6152400b92c979e6e23da2680614244e2579cb"}]}}}], 0x118}}, {{&(0x7f0000000340)={0xa, 0x4e22, 0x1, @remote, 0x3392}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000380)="e753a8f78891ec8c5de0a89bf061ba530e68c2ed4576685ad225d55b36d1bc9ca60c8b90d0d2d336cfe1b6de392dadd3974e3ec7411584e7ba8978373b5925f425df55418e8e4039bc60885138785a1340802aed08a3a44b5f4a494437a0f01aee2e452f2731daff8b1e0f0fb16893e37b21581c", 0x74}, {&(0x7f0000000400)="77ce18ef62f6c75ce9dca35b0405d1a43570145ffd27e19b7dcc13bbb8ee5d025bfd3b07984666c462f15ca21e5ccf912d0b6e6aacabfb01466f2088ac9e327e624e698dd4f4a7e9a23e96a92497477edf159d00d768edfa757e6a101b03f05e1550b074bf9de7041cdd50e6ebc3fde4c0b4a9b6665d2e2d2ef5abe880d1bb4b72afdf9cd276ff998407f3bf25d1e9e9cbf9875002e4661fc6bed4508e000c89", 0xa0}, {&(0x7f00000004c0)="7a1adaac204cdbccc97f37d564d2e82cc4d14c49ac47650585975e1fe7dfbdbb7954fc2bd1d175074bc68a914ad92fa272af84d4b89ac3bf2f0e7e7b26d71e75c6e9743dd6ec2675de3fc81b0f1ae5fbb855748d44f7fe90f9be1f719d1e21c298ef007673ce6ef16cb1475f367bdd681e6d4f139bd4eabb12d27381e65a87d8671e36e3ea", 0x85}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="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", 0xfc}, {&(0x7f00000006c0)="60b3bba2bb1029a09691f62bca7c3ede0ba114dc9e09a55dea67fc202387e62ec762a73a427b93b702d2fe9e428262e91261f6b2f286aee8a5c0761866c86856db9eb994e832c43f83efb849665b85f23929aac49062b40a80ea1ece2add97ba4464cd92869e4c3a314aca6ea2390e02f86961b1fdf6a966f0d2bb172bc0f401f7b1c56e6a9cec4023fb3a4779f40b38d268d69ee8c3830ee7f81479d285079b", 0xa0}, {&(0x7f0000000780)="70f1c6f1f1f913a08e7da9b289d11762e932dfd624f82c3a8c944071bb97b2a53691b1e1964f330607743efab8c4289e760933e1eb636b7b6cb11e699af91a035e0d038ca338d3788ff088227fe978d26628792d9dfdee7fbf126873433f12a475937704242d7e0fcc81e34d7b1b868bd9", 0x71}, {&(0x7f0000000800)="9edd6d7d1da0a8bc07f91abbf9d7565f1aeb2f5efbb01c4605a06481c8fdda6b932d75a06d90ae33a94848dcd41a10f3fefc409460d4789bdbd8c1f9406c5050fb236e390a9a3cc281bbb67d6925b6ac2becb2de618531722062f38839168c398b55556bf4b336cecf82db43f9fdefd40df32c94287b7ccaed851b859736833e407ba04ed9147dd0318799be31baabdda9cac4c64ff230fadb3be045a51180fc3a76f89552f0e26f9d8934abcabea528be3ed1c1515cfef0a4a1f17f414a6ae7e25a1842eaf7aa1f0479115fec3b7a32d5e3ffed1a88887bb24bb66213e9a1ce7215d0a639c0a89eee6f23cb1469d672bf538290000bfd173c", 0xf9}, {&(0x7f0000000900)="055445601864761efd38389bede6230a43a02a3844cc6e52d10603cc", 0x1c}, {&(0x7f0000000940)="fbfbb42e44864b151a6186d0e6d6f748d280a19eac88427780bd1a495cfb758e3ae129ba6aba730402489fd119fb8f9364b45196f0e78c19990387d91bcd23d0931b73cb149692e9d201e96b603a83092dcbb5a9443b5d54f3ae76151fe030788d367facd879ce6944fbf1e4d2a68c3f", 0x70}], 0xa}}, {{&(0x7f0000000a80)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9d05}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)="435dbb2e844066378bfee56707ebe5a9c1680b1891f9e9ec125000e7556660eadd37aa0bde9460bcde02e3f26c50b048b0be891acef778bfa08f24d4dfbc2654d9db93c786b55e24e373317006d10cfef340fb6aeb8d0f24417db9aeeec3b2adb635dbb04c6b7e933b32f15f15859a147782169cb048da03f06f9dc58d3bcf08fe40d17c5ac4a40aeaa850cf4ecaaefaf9ce3caa76c13693258d8c9c0d1a04ce582edf983983d0832bed4d34821a6c7d354b34ce5409373aac43e015e7dfca6b72d2e5ffc6f1e4821d2f71", 0xcb}], 0x1, &(0x7f0000000c00)=[@tclass={{0x14}}, @hoplimit_2292={{0x14}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x3b, 0x1, '\x00', [@generic={0x4}, @pad1, @pad1, @ra={0x5, 0x2, 0x1}]}}}, @hoplimit_2292={{0x14}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x87, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x87}}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x4, 0xf, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0xc, 0x6e, "5ace67434be4e3999576ff4425226569dc3e8603dbfe966d1c7826ac2c6d753aae346a8b2b826af38d6753de94476bef9a6a5fb4256137d5d61609bf1b074f065210bba4b29ccba31cfe393caddf6b2331215a9f6d05fd189e1836c98e55753d5b376a717571d58eaa57f99b9d63"}]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x2f, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @generic={0xd, 0x19, "de18d16c8e8f2c06c241903dcaaa18291f5914b947430e5780"}, @generic={0xc, 0xd, "a76e90013ca7db3d3d78b61985"}]}}}], 0x180}}, {{&(0x7f0000000d80)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}, 0x1c, &(0x7f0000002000)=[{&(0x7f0000000dc0)="b12e1ed8bcab69ea8c884f3ecc3ad1b1b00282ffc96dc55e0cc43ffd54f30e4e1ad72c8ae173348583d92e556093f7329cb84765779eab2f8e3affe0d181648f710f4568892013493b82cac5b249c89130dda85996e0a20fabb98f9ce97a16d9a8ebfa", 0x63}, {&(0x7f0000000e40)="73f6dadaaa6827f1a49590049a4a2553934decba18a68a5b5d34af348f33259af1bb231977c00057e335c3a9f6ca294b3377214da4bb21bd219418c425f1145c03f3b04001a4a24429943d943a9dac24e1d8e5fa9d910018d258ccd67a1d3b2b03be49ebb86dcbd7d58fef6993ae8debbb3bad27f0b8f2a1d58fbe0a404917aacbacdb3d43", 0x85}, {&(0x7f0000000f00)="d9bf6b33b2f5b9eb3d13a3d35433f86b7f4105fd1f401fc5e1695956b24ffb3246a5424967a1a93fd75637c10a6aab49701ce57e578b360319093f22ac1ec7bf65e0341a9e1e6f649063f6847833278b39186f0e6a4527fbfb56eff6640c2d79c8d73a45caa831a294a00ae6ea5146ce08e487150c11971bd2992bd87a67376c8057744afb6c878ba813a2270c73aab04a217fa1888a7f3fc1ee1c53fe638a6df4f3aaae79b5558b03cdfaa91c53bf96c5ffade95522389e86e2ab8cd8cf3d8cb1affb6ba2ba38804c9e5e10f52706da19ffaa475456a4fb2b34e9a09e4f2dcbbbee57061327fca74f34e0", 0xeb}, {&(0x7f0000001000)="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", 0x1000}], 0x4, &(0x7f0000002240)=ANY=[@ANYBLOB="380000000000000029000000390000004804020100000000ff020000000000000000000000000001fe8000000000000040000000000000aa962a9c59902a4d15f99a92d4d41fb13905ef811a7048"], 0x38}}], 0x4, 0x4880) r1 = socket$inet6(0xa, 0x2, 0x49a) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x40) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) recvmmsg(r2, 0x0, 0x0, 0x40010020, 0x0) write$tun(r3, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) sendto$inet6(r1, &(0x7f0000002180)="f99f2d2263ff4369af2396a6b6ca1a4583ab73c80531ca912f9c77d3174b18eee45bf232086409b70a547e3ecbac80cadb1256a1459e5a7ce530bca4d9513e461d5d7ac0440363fd556dabdfb8814a824781df43ca0d4936f2e04e8179714c6cd7507d5b845896ff380c2a8ee6ab1ab1bf1bdbfcb77b063150357c771eb6763f9bc81e90044b4b4388fa421387ea", 0x8e, 0x24040010, &(0x7f0000000580)={0xa, 0x4e21, 0xffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) 1.431347752s ago: executing program 4 (id=1504): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000500)=@routing={0x4, 0x0, 0x1, 0xb0}, 0x8) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x6, 0x0, 0xc8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x1c, r4, 0x3, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x858}, 0x2004000) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000000c0)={0x6}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x38, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0xfc, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r10}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) 1.245655949s ago: executing program 7 (id=1507): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)="27050200d40f00000600002f88a8", 0xe}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r4, 0x0, 0x80000025a5, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-ce\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000001c0)=[{&(0x7f0000000600)="a721", 0x2}, {&(0x7f0000000980)='\x00', 0x1}, {&(0x7f0000000080)="4cca", 0x2}], 0x3, 0x8) splice(r7, 0x0, r6, 0x0, 0x8000, 0x0) close(0x3) close(0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x80800) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000050001a804c000a801400"], 0x78}}, 0x0) 1.192855975s ago: executing program 4 (id=1508): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000c40)=""/69, 0x45}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000e00)=""/185, 0xb9}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001640)=""/112, 0x70}], 0x1}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001a80)=""/8, 0x8}], 0x1}}], 0x4, 0x400123a0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000180)=0x5) sendmmsg$alg(r2, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000022c0)="2c2b74fddbc858e42edcd12037e5751c680f2e3099edf8f9d5a3a3e83d9a78c4b9e8c4324c327477723fc69642803d0ed4f42e83d068a0cbe1038c574676809bcd3eb9c8abe84cf07e74bc76c679f56293ca909551c6bc396200608271a4cc09e0c90c686fe2d3b5ecbcffbcde51f51ef184793dccaa40c9a0edc00a09274506ec60853df9ca40b59166853c6019bd046e19", 0x92}, {&(0x7f0000003cc0)="d815e2824b383e261b12ce3a276e935d9986635f19c4b0948ee16149f775c7e07f69d10707f39808df56bb79714ecd16b02c599a348b6710a7ace4b076f60b38de91432fc21315ff8424db7d2154f90a5d3905406ec9917ed492ce25009fb11319a03b0ca1dbcde7b8b727d1923f8a6ebdac05c5e63f7555904e28f84a5af5a79036eb141e2cee5802fd9b6db3fd6f787832ce5d7f1763be7751c54ff6a16b25f62dfd73d961869a40ce5c4a7546917e1706ffbbca7627c5793c5a4671ff7703e3a5cd20719c366b6c940f47f8db42ee7e5330ce31bb58357fa076bc9471149ee9e293ed5336414c91d8be4c65badab4a4f7511c1f6d5155d6a40d71524441c99188b3364863f3b4279677e0bd70f6d23ab55f2383901d8fee5e7bee380c113c2a03267a953020764fe8e2cb76e2eca0e51bf8314e20f5e947e4bc47e5c1a549b55311c0bdbed1d4da4af4682373556df0e4f45e297f66e09a0e38e61b5882f225ce59d604c2dd68414eb4748d8d3cd768a0313583c65da303a15c64333a5405f629ca5b9bb6bdbfad550e5d9fde4c4bc710f1ee77eaf2273740c80ac59aa93b78c5550737186cf63ccc4f6a794e27e455829cf79ce9db4e3f0316ad3ac19c55c464a4d7a68ada9aaa0b6885ba6edb3f5bc8d3aaf191d31be189fc1e76297430e67828d3711af9f2ad445a5e80c6bd47126054d2b3ea79c289a0acb37ae88b425470d955a877b4c8d571714b2a1bf02a16810628f3be2a6caa892a427152c2bd8e74175f840501c25cf73e44fba17cf310dfefe279520f726b6dd96644b4ae97e1afbbe6f2592a1d2e4dd01dcc23bb708a6ae57746f91eea92dfb90d43d6a82e83d3663f9768a682f269486054aeb61c78892d739ab4566c49a297abe9556ebb4139a838281bce3cf9be1bceb3005004314fc3ffe703c7656c92058453aa162add0a40b3018cea774b12bee95fbfa507757d06c3d1c89741890bf250092a624185908f3ed369d0930667d5a9ecc52f5a01ca2a8b171ce06be9d204b3e0af166b7546dcf1d7e0e9d5197cf6b01ce5a2ed62b4d5a8ead5d8704373935100ececb3750fd42d343984ba90e6ea22f90c67a248532ba4cbd03c2d042fb7e34aa11ed3cfe3a177c429299600b9d1231db4414110be42481bdd3a8162d2b4d3b5104065d5a4cd4319bb9fa04a29b93f211f68538e33cbdb5443ae01c13bbe23620eec4cf83ea12ddb39ad468109c0777e39a8e2e3e2f7ead0b5f894e06d58816c66ebe01f9e03c3a4bb2aa5542b6e0e8ed6f653d73a6bf7591d041621b606018f594a0657421081bdb8d8a2b060fa28f7a817070fd1696933686c858584f8d942e2b1cad5ce530a85ae30d8903d7f7fdd4602cbe2b6c61304300dd43562cc08e341ca2583cc25c642d5db8dc0f72fa3912dfadd7c663554dcc9072015e187bc4ac6211ab2b8bc0cc157cc143d93dd0d9f27d04136120770161088c4bda79324e395622b07ed2bd22ea56be7396db5725125e0799ba28e920897440b1ffdd8474c92e527b93991b46214d0e8c5bd30359a735853c62977812e927d2841f7dc3427ad61bdc368887452080c84723387e83e523802cdff6694eb05a658cfab4b31ca41f73757fa417cefd277548c1fb25423e959fbc00f817c15b32d96132e92b2c33c6dd70293215e51843a3363f1d3d3244ac9d5713dba567adba36a81696e3dfe9fd69ada751101d2daeb5fefcee44d87f8fe29530341eebfdc1b797b28e968d54b0143058aeeee2fd36d069351307f093445fb7547cb0dc90a3a4820c67b824ea857d7e8bc1a37e0c6405333d3cbe77befcd9697b87b8dd45899551f2fe3e737026855d2c650dadae7a48f2b925080e913f064f5327942ee0e1154b93e209621689156c078946572f26c5e8715adf42def7f48dc8ee27c8a3a84145c580e30218626ce639b56abbbb24d0d0f2b1ad6408e50aa11ef0c53448f3610b42a16d28a5d2507e56e762abe159ca712a1cf69e50b8207f69a425c592a53da2641f26864634e2e9f8d529a37b45478bfcc6db4d22c90fc0ace6e75a20085fc6f221536e11097c113126a96902821247341e1ed77a782ba7dd160e1b6ca6fcbcc474f50b372d81ec856c6e6a9ea8170a5e937773fcc9ed97e7082480c34e98ebd9952c0d8543a9d3e85c889c5a1aceaa81aee732b66af67a952254ea04d4cc6d72cac0dc92cbaa365eac3013c053029939eafc02d3acd4a0c98d9540be7bbd9f1f79b34c2b43874301bf8bb18ca9cd14ce9e1b2c31c460dbdf6cc702f7a13823f0fd2f8ba4e093100989ba3d4564fc1a73965ae58f2c85de06a0c6dbb43760ab5a34ffe6ba2ba57983cc13af9af76707d6a9d67f86ad7c1aa73017fc10320bca4eae81bfbcb333b41884fa5702912189757768cdbbdb61558170f802db4dd95709c01956133e953649342c07eae84f82ff70b54881a1364c179a7569c3780f1d0bf73ab2e6eded9b4be4d4fb42d1efbea7e9c733a0c6e982d49d3dc9ad780949e379cfab4aca3a16c9fcfd3cc47674c80916d770ba12aacdaf8db4365690b2d541758ed1202018adcbb53f7288bac3b94bb793405c8550da7a7d983dd577eac527c07840b2f7ed2d5fa87082778ee4e2b2277a56807afadbbfc28c1c55312bc97c76c305a1bf42fc9d72ead3770cd47560af64de888e4a1ea7b2670fc6dac6ef08a219db1c1489b233045e6545fd2a29d052439115c07af8a117fb0490a0430ae9e00bed089c197393ed974722e61a8d152df160b7a130fca2304d9e0f53d6e71a6889813028b19b0afc2ca337ac2edc18a724224b1defa4270e6874fb4be392245c995b1ae22f9d337a4666b38de92929f2859b6b176d473f71aa7790707453ddde600d6893b0e267fe40b91ef5040610ceb6e2744a9ae6fda1471d35143d76e95c74f88a2633dbf448f6c6b878d7f6f3504d09495bd7e5b3c9c0ac298577983e40c2ca7dee61d646d8d826d5ec7249589f34650aa08fc435843933c1007ace87de34ff9a3a5ed338486ee62713ebbd7863a98960a829d81ef26cefb8336a5730317c079a22c4a8cae7d62762d963f0d9f4b4ed87e0b5434fc8451ce1039c49a393ae6ed4ad037ca83cd977be5dc50199050c3db16967e8e06af08ee86b1a0b7a44b996415ac13a866c7d8302fb6e4a8d754e08adc5f6b84bc1c7e0da98577901189dee5de09773704abe037c6243ca3bfadc100886fcc6dd5b766698cf4837d7bbb2424e9ecb75cc39d8bd18c209f9db36ac2bd8d9e9325360011bf6f85c1dd63a24da210970e41b29b9220584a72ce79e94f699b0724b7679a2ba3eb785d3ee2e1333f736f713ca98c5137e09442f71f57463915771367374a275aeef3665b3184a7f3f44b749c132c0fdaa45d873d55f5eff1244f7fe60fc7eb576e9f92d330734d9a97945e58d5e74f5aa8bfca61ec371d89cfafd3f165315ab9f5d9e9bc1524577d5651e14fbb05abc9bd5f64e711dea2ed9df88c34f34493ea8ea2731885c0abdecf456056bcb4e678bccd07abaef1332249b6968fced7c345dc9ea76fc97506a1d378839bcaa371dde04c237db44a9a3aec8d9389b6b5f4eb3cf6d3daa37e7d4ac11fa90b46492994cb34c6d65c92c69e37f9b7db619c7d800efa9246254b7dc449a64f42e800338c825c464c50a5c6fe800bda7f2839ea47de916cb7970f9afe8c94da5c5bcd0664827e0bfd673b97e4b547e369575106583f26d11fde202dcf75249e934b42db16ab2f557347a0abec9da3bb4fb08400611d7bcc1d04a47d9155610fc4767b3272e5ed0fc8d80108e35715ef9bf5dfa9e7b12143af6d19dffb6fed14417ee89fb981196f72af5c75018553953a924f42bcd16948e2cb61d846928b2b10bbe1a705284a79f9531d56b5606dc74f7c8baf6aaf61400ac36e6ad64e9342440c304df1dc1cac47ba174d84ad27ac80201b718216a5e65cb79a38e50b245816564e30dac78c10632b665a93e140aeb0ba4f37af456cec6a21f5f6db4a4ba21ea239ccad37f3a36a9b05d65a24b42b0c5f660edd12faec57d52e8aa407f843df2a0971b16c1b352c64580f226e5801b014c137935906fb87b88b5f81d16da4a607e3229379dfc3848aa1debb6e094ad4945c024a9b6c0cb9159442bc84abe56dea43a458ab904a4606540e19997a19765fa11e1eeb422cf2a90b407c52c952992846178a7bf4186206b453f57383544c8ba6438eade775a1f75750694dfaefa866a229e61958a69dd7ba52fc9612713ad7a63916a4bb1daa6da0b8ee49bfc69c37cce5572a79c22d42e0f73a862284a87667ea42cac5d8c16c1195a4d68f776885cbe42fe17b8cf83b5a88d5dd97594b5be938be7d3aa49523d64429d941966a64a1c7f47d4d179a5c55184092e1da71f5667fa94cde636cdfa1a7aad2a74ff5afd044ee2a3577a0a2706977329b81f9941ff4ada83ff6d8abe2a3d142176448f93e5602c820dc57197e2a977b894805428563318e0c25e8d008652762bd4c32d4c7e985a6e2b85c5edb93c3c85e2a0ea7d58b83ea1848e255a1529aad74d675436605a19cf640932d41f0f6c43533a9eb2f9f57b14c14f7833484c91911179f8e67bceebd035abc41a243ed0c0949a02d66044762e675ab42554ca75ea5d6e7b50a181e03b484f5ab76831004395bbb7ce1b496786d28304721dc67279a64039016206b5b3938881ee1131bf86cc90ab8c788b6982a5d575913a11a6009a7142d03ee6109f734f7b37a8ba596a09113f5140c7655bd58da09c62c67d3d426e7a242575cc5f8261d842d2654d27f27701021535a9310922f3bda55749b8ab2d747c4fabb39b8a3213f05758411f1c71e9730ee9c6eb48bfe4d105a75e21da7eb3f0f329b253176c0eea7628adb8dc9ab99e2a5fb7f93398d8be9809bbb0b3d55171886f89f1f45ad3b64c4c0f3af24eb367af95fa7987ef81f8dc2c16368db3a8d0dc2193674d19e9861eff2d264e5abfc91b1585acabc7051835fc898f17634e4d2bfb0d7ac2c7cff516ee521771b3689d42803612fa62e01ebf3d6da56d38302936b2f8a91d02fe49a1750eb7be6f0a9d3a4cd53d0da2fe06e4b6115e71430ace1aea20e3fc83412ab10372dd2437fba6619931d26a1a2986c68d5645d3dc8dfdb6b36f018eb9abb0101b289587d9d4e8c8522229eba922f19d2fce349e8ad3bf55035d52009cd8ac3af330bf4d60ec1808377f6de4ec6f8842f4fc6a75c2cc05f246be9854fe7546550ec57bd8e9d52bfb87f79889e5561955235322b83797cddd1cf31f733dbfef560b2373c05d2740cc52e3895f8f18fde3607d857f71d298d7dc17f83ef97774a253d4bac6e1ec0f03f50255c5da2a6fe8851b01e96ba73e616583b13271a4be5462726c3ff1d096f56a9c81f8e811e52ec1b59f8ec5f9c8f76c5faa1c3d46ff1e2b70b0d00beb3a2ea1c7c9e89536469633161021b755766c262d0ae8d1cd2245b576a5f884297b129108884ea0b895e536edd04baf989d3841c47a11c4d191c7c6c0ebf18b9aa9472e4a4194832bc9768284dee5b0eb36ff8e15c5a27d9734234ca68", 0xf6e}], 0x2, &(0x7f00000024c0)=ANY=[@ANYBLOB="18000000000000001701000004000000fcffffff00000000180000000000000017010000030000000100000000000000e0000000"], 0x110, 0x4000}], 0x1, 0x8081) recvmmsg(r2, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x1, 0x2001, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x6, 0x4) r3 = socket(0xa, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a0007"], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r7, 0x89e1, &(0x7f0000000080)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r8, 0x4) close(r6) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) 1.031663596s ago: executing program 3 (id=1510): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) write$cgroup_subtree(r1, &(0x7f0000001200)=ANY=[], 0xfe33) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001c40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x202, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x91}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x11c}}, 0x20004000) recvmsg$unix(r1, &(0x7f0000001ac0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001900), 0x0, &(0x7f0000001980)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}, 0x40) write$cgroup_pid(r1, &(0x7f0000000000)=r2, 0x12) 940.144249ms ago: executing program 6 (id=1511): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x7}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x7}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 927.388222ms ago: executing program 7 (id=1512): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) (async) r1 = socket(0x14, 0x2, 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40106183, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x2}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0401", @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008000100", @ANYRES32=0x0, @ANYRES32=r2], 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000010000305000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e64000000005400028008001f"], 0x84}}, 0x0) 747.41759ms ago: executing program 4 (id=1513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x5d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000100000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000e100000095000000000000001a42d4f421a7be9b3315accb3048c4aca6d08ff8060f28a9ab63efab0e68b1dab174155a4874249ec6ee0299ede615a47b6f5e6e12de1d93761314b902a35ba0ff45a45140eab714fd3c798dba30e44ef0f8369fa7ca53174073ffefad22dc7ac1feb6a2d62f635f3f45f57e8d431d1bd13b622cc5d83f7095a2f41f7115f06dc82e3937edb9fce1e5ee3e0d198cfccf754a6efbef781839e37a7d087dcfb469e403c9dde48816"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x27, &(0x7f0000000640)=""/159, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x43) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00e0fa40b6773d3368a7493d2d2f4195570eb0410d5d66e4d3aeeaed35cbac02480b8c59999422284dc82ee49fcbcd369d3ac86452510be734fb58f094fbbb4f2248e051c8", @ANYRES16=r8, @ANYBLOB="010000000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100004008000b00000000000600110000400000"], 0x4c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r9, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000326bd7000fddbdf25100000000c000380080005007f0000010c00028005000d000000000008000600050000001400028006000b00070000000100000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4040) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0xf8, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}, @IPSET_ATTR_ETHER={0xa, 0x11, @local}, @IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfff9}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}]}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8014}, 0x44000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="83000400000000004800128008000100736974003c0002800500090029000000190010"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x2a, &(0x7f0000000100)=r12, 0x4) recvmsg$unix(r10, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="08d3e5389fd5", 0x6}], 0x1}, 0x4004040) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r13, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffed0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0e24140008008200000000000000000000000000000a28000000000a01010000000000000000020000000900010073797a30000000000a0002400000000098000000030a01020000000000000000020001000900010073797a2b799dc1aa0bbca10073797a32000000006b000300d1abc14c9e359671ae867cf0e800ec93cd327327d42a6f780f6cd42e5e46d4d8d5c40bde3f2a5b3f304ae986665af92c7feb0f60f4a8d172b2a8bcbaf7588d", @ANYBLOB="3baa7d57c5e2dc1040d8e43006bc76c2efa17e7c33073ba660775f37a2d892f43b7701ba97f1aca7afe1d9a6c593b8e098f331d6"], 0xfc}}, 0x4) 484.39909ms ago: executing program 6 (id=1514): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000bc0)=0xc) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r2}]}, 0x1c}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv4_delrule={0x40, 0x21, 0x400, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0x18, 0x3}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r2, r3}}]}, 0x40}}, 0x0) 331.011865ms ago: executing program 6 (id=1515): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x14, 0x4, 0x6, 0x201}, 0x14}}, 0x0) sendto(r3, &(0x7f0000000000)="4b81b513f0", 0x5, 0x4040000, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @random="57b39fe47c49", 'erspan0\x00'}}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 219.885352ms ago: executing program 6 (id=1516): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)='k\v', 0x2}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838d2399ad5bd35f21907c7988d1300"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) shutdown(r0, 0x0) 189.905259ms ago: executing program 6 (id=1517): getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000140)=0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000000000000000001000006040000000100000000000000005f5fa0000000"], &(0x7f0000000200)=""/146, 0x31, 0x92, 0x1}, 0x20) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040000001c00018006000600800a0000100004"], 0x34}}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000180)={0x1, 0x8, 0x0, 0x2, @vifc_lcl_ifindex, @multicast1}, 0x10) socket(0x27, 0x80000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x20, &(0x7f0000000040)={&(0x7f0000000300)=""/4096, 0x1000, 0x0, &(0x7f0000000000)=""/10, 0xa}}, 0x10) 126.921205ms ago: executing program 3 (id=1518): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x2000003, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x4002, 0x4000}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x4008845}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x48, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xfffffffffffffed9) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@ipv4_getrule={0x1c, 0x22, 0x8, 0x70bd2c, 0x25dfdbfc, {0x2, 0x20, 0x80, 0x1, 0xfc, 0x0, 0x0, 0x4, 0x1}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xa, 0x2, 0x3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r6}, 0x38) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000020605000000000000000000000049001400078008000800000000000800064000000000050001001b00000005000500020000000500040000000000090002009c5b7a310000000015000300686173683a6970"], 0x64}}, 0x0) 7.61484ms ago: executing program 7 (id=1519): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000580)=0x108e75, 0x4) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffd, 0x8000000, @loopback, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/49, 0x31}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000300)=""/195, 0xc3}, {&(0x7f0000000240)=""/62, 0x3e}], 0x4, &(0x7f0000000500)=""/4096, 0x1000}, 0x1c3) listen(r0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket(0x2d, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001700)={0x0, @loopback, @remote}, &(0x7f0000001740)=0xc) sendto$packet(r5, &(0x7f0000001680)="4196bc2c1b00ed323dfe51c4e14095691f743d05eda36d8aebe88453c457a82e8363ba5ebffed93c394c70eef2c747214227cbcb7c4c0888df414d28cefb4ea245c6999410f2c5b3d976d5cd1de5a774a27729f7cf5344cad2041e7d20bd0a2e9d01bbaafc350d03597e14679f032d0d", 0x70, 0x10, &(0x7f0000001780)={0x11, 0xf5, r6, 0x1, 0x7f, 0x6, @remote}, 0x14) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000001500)="5f63325a7f09a377f2458bb0ad00d8992f0a9f19935720659e48811f96e44c48cde153da72351f0d8b8a60", 0x2b}], 0x1) shutdown(r4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r8, r7, 0x0, 0xfffbffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000015c0)={{r9, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)='%ps \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r10, &(0x7f0000001600)="3a3379e02f150f4d33bbcb254a0cba1af66ab9f1f7c0690d5a6b6497b44b29363651e0be93bb0aa7f6062f079dd63d5330bab4a879bfbff48a2385f2d99ec8cdb5313b92e77dd4a55d067894dc4a166f348d39cc147b4726e3a5a136e42fc264e7b5e24b8fb2b4de7c6a385840eecb0265ea174473ee", &(0x7f0000000140), 0x4}, 0x20) socket(0x2a, 0x4, 0xffff) 0s ago: executing program 6 (id=1520): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000983cd52d7000100180001801400020073797a5f74756e00"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8cc}, @IFLA_GRE_IKEY={0x8, 0x4, 0x400}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): d blocking state [ 90.685304][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.692747][ T5857] bridge_slave_0: entered allmulticast mode [ 90.700721][ T5857] bridge_slave_0: entered promiscuous mode [ 90.749384][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.757478][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.767162][ T5857] bridge_slave_1: entered allmulticast mode [ 90.774514][ T5857] bridge_slave_1: entered promiscuous mode [ 90.845969][ T5839] hsr_slave_0: entered promiscuous mode [ 90.853076][ T5839] hsr_slave_1: entered promiscuous mode [ 90.859369][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 90.865626][ T5839] Cannot create hsr debugfs directory [ 90.916982][ T51] Bluetooth: hci4: command tx timeout [ 90.916988][ T5843] Bluetooth: hci3: command tx timeout [ 90.938891][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.968839][ T5842] hsr_slave_0: entered promiscuous mode [ 90.976153][ T5842] hsr_slave_1: entered promiscuous mode [ 90.982764][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 90.988905][ T5842] Cannot create hsr debugfs directory [ 91.011360][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.033160][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.040924][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.048168][ T5859] bridge_slave_0: entered allmulticast mode [ 91.055306][ T5859] bridge_slave_0: entered promiscuous mode [ 91.117892][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.125613][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.133518][ T5859] bridge_slave_1: entered allmulticast mode [ 91.140993][ T5859] bridge_slave_1: entered promiscuous mode [ 91.174567][ T5857] team0: Port device team_slave_0 added [ 91.231490][ T5857] team0: Port device team_slave_1 added [ 91.257450][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.312816][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.391593][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.399447][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.426126][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.466417][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.473574][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.500028][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.519565][ T5859] team0: Port device team_slave_0 added [ 91.529548][ T5859] team0: Port device team_slave_1 added [ 91.625952][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.632976][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.659874][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.702618][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.709709][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.736910][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.777356][ T5857] hsr_slave_0: entered promiscuous mode [ 91.784300][ T5857] hsr_slave_1: entered promiscuous mode [ 91.791379][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 91.797450][ T5857] Cannot create hsr debugfs directory [ 91.873755][ T5859] hsr_slave_0: entered promiscuous mode [ 91.881329][ T5859] hsr_slave_1: entered promiscuous mode [ 91.887916][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 91.893661][ T5859] Cannot create hsr debugfs directory [ 91.914426][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.955676][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.003302][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.032477][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.042111][ T980] cfg80211: failed to load regulatory.db [ 92.135500][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.177575][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.208949][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.267986][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.345297][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.356020][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.369761][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.387455][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.437126][ T51] Bluetooth: hci2: command tx timeout [ 92.437455][ T5843] Bluetooth: hci1: command tx timeout [ 92.443857][ T5849] Bluetooth: hci0: command tx timeout [ 92.516411][ T5857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.531133][ T5857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.543405][ T5857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.556405][ T5857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.672181][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.712489][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.724761][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.736020][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.747897][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.763865][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.789783][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.797059][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.823387][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.830595][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.853486][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.920023][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.961209][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.968606][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.999374][ T51] Bluetooth: hci4: command tx timeout [ 93.005363][ T51] Bluetooth: hci3: command tx timeout [ 93.011193][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.023056][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.030349][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.141148][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.190554][ T3151] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.197919][ T3151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.225988][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.250672][ T3151] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.258088][ T3151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.281978][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.335856][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.360634][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.367948][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.391672][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.442016][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.449276][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.461321][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.468684][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.494739][ T3151] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.502419][ T3151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.592374][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.673299][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.752019][ T5846] veth0_vlan: entered promiscuous mode [ 93.821544][ T5846] veth1_vlan: entered promiscuous mode [ 93.944889][ T5842] veth0_vlan: entered promiscuous mode [ 93.963625][ T5846] veth0_macvtap: entered promiscuous mode [ 93.993843][ T5846] veth1_macvtap: entered promiscuous mode [ 94.031846][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.049270][ T5842] veth1_vlan: entered promiscuous mode [ 94.099993][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.151307][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.184365][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.204154][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.229404][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.239007][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.274997][ T5842] veth0_macvtap: entered promiscuous mode [ 94.309747][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.320272][ T5842] veth1_macvtap: entered promiscuous mode [ 94.352209][ T5839] veth0_vlan: entered promiscuous mode [ 94.368706][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.399475][ T5839] veth1_vlan: entered promiscuous mode [ 94.444901][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.485079][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.509177][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.512365][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.518633][ T51] Bluetooth: hci2: command tx timeout [ 94.529550][ T5849] Bluetooth: hci0: command tx timeout [ 94.534659][ T5843] Bluetooth: hci1: command tx timeout [ 94.554869][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.565128][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.613136][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.649199][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.673684][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.677220][ T5859] veth0_vlan: entered promiscuous mode [ 94.698722][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.703257][ T5839] veth0_macvtap: entered promiscuous mode [ 94.751008][ T5859] veth1_vlan: entered promiscuous mode [ 94.774487][ T5839] veth1_macvtap: entered promiscuous mode [ 94.860875][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.912086][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.921325][ T5857] veth0_vlan: entered promiscuous mode [ 94.929220][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.942637][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.013135][ T5859] veth0_macvtap: entered promiscuous mode [ 95.036080][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.052070][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.059937][ T5857] veth1_vlan: entered promiscuous mode [ 95.067481][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.077646][ T5843] Bluetooth: hci3: command tx timeout [ 95.078038][ T51] Bluetooth: hci4: command tx timeout [ 95.104524][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.113899][ T5859] veth1_macvtap: entered promiscuous mode [ 95.147504][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.158897][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.189856][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.252814][ T5857] veth0_macvtap: entered promiscuous mode [ 95.272301][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.341476][ T5857] veth1_macvtap: entered promiscuous mode [ 95.380139][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.402456][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.449085][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.524284][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.540264][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.582235][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.655710][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.668938][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 95.694563][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.716413][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.758646][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.773369][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.816352][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.831836][ T5981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.863001][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.960248][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.981903][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.020853][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.055340][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.090405][ T5990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14'. [ 96.143063][ T5987] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13'. [ 96.170895][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.194121][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.309064][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.328150][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.427718][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.441774][ T3151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.460493][ T3151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.488330][ T6000] netlink: 72 bytes leftover after parsing attributes in process `syz.0.16'. [ 96.598251][ T5843] Bluetooth: hci2: command tx timeout [ 96.598262][ T5849] Bluetooth: hci0: command tx timeout [ 96.609178][ T51] Bluetooth: hci1: command tx timeout [ 96.623863][ T6000] bond1 (unregistering): Released all slaves [ 96.726378][ T6010] trusted_key: syz.1.18 sent an empty control message without MSG_MORE. [ 96.786547][ T6011] tipc: Enabling of bearer rejected, failed to enable media [ 96.810743][ T6012] tipc: Enabling of bearer rejected, failed to enable media [ 96.833881][ T6010] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.885812][ T6015] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5'. [ 96.950323][ T5933] hid-generic 0005:04F3:0009.0001: unknown main item tag 0x0 [ 96.960271][ T6015] ip6gretap0: entered promiscuous mode [ 96.966065][ T6014] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5'. [ 96.989630][ T5933] hid-generic 0005:04F3:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 97.015588][ T6014] erspan0: entered allmulticast mode [ 97.026551][ T6015] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5'. [ 97.121354][ T6031] netlink: 5 bytes leftover after parsing attributes in process `syz.3.22'. [ 97.141279][ T6031] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 97.158241][ T51] Bluetooth: hci4: command tx timeout [ 97.171368][ T51] Bluetooth: hci3: command tx timeout [ 97.218982][ T6031] 0ªî{X¹¦: entered allmulticast mode [ 97.273410][ T6031] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 97.292209][ T6036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.24'. [ 97.610275][ T6050] netlink: 'syz.2.28': attribute type 1 has an invalid length. [ 97.647918][ T6050] netlink: 'syz.2.28': attribute type 2 has an invalid length. [ 97.831988][ T6059] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.958090][ T6068] netlink: 'syz.2.33': attribute type 10 has an invalid length. [ 98.210429][ T6068] veth1_macvtap: left promiscuous mode [ 98.704072][ T6100] netlink: 'syz.2.43': attribute type 10 has an invalid length. [ 98.739032][ T6100] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 98.790321][ T6100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.812961][ T6099] Zero length message leads to an empty skb [ 98.845302][ T6108] netlink: 'syz.2.43': attribute type 1 has an invalid length. [ 99.204411][ T6124] netlink: 'syz.4.48': attribute type 21 has an invalid length. [ 99.371913][ T6138] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 99.767576][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.776398][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.961041][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.978548][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.612263][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.654948][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.712622][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.717221][ T6205] __nla_validate_parse: 7 callbacks suppressed [ 100.717245][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.62'. [ 100.745974][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.808184][ T6209] warning: `syz.4.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.842792][ T6209] Bluetooth: MGMT ver 1.23 [ 101.544752][ T6249] netlink: 'syz.4.76': attribute type 1 has an invalid length. [ 101.657106][ T6252] netlink: 'syz.1.79': attribute type 5 has an invalid length. [ 101.731235][ T6249] bond1 (unregistering): Released all slaves [ 102.024748][ T6267] team_slave_0: entered promiscuous mode [ 102.030672][ T6267] team_slave_1: entered promiscuous mode [ 102.051496][ T6267] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.295916][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.86'. [ 102.562666][ T6304] netlink: 'syz.0.89': attribute type 11 has an invalid length. [ 102.568018][ T6307] netlink: 'syz.1.90': attribute type 21 has an invalid length. [ 102.572997][ T6304] netlink: 224 bytes leftover after parsing attributes in process `syz.0.89'. [ 102.601597][ T6307] netlink: 156 bytes leftover after parsing attributes in process `syz.1.90'. [ 102.794228][ T6312] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.93'. [ 102.824815][ T6312] netlink: zone id is out of range [ 102.830161][ T6312] netlink: zone id is out of range [ 102.836381][ T6312] netlink: zone id is out of range [ 102.846924][ T6312] netlink: get zone limit has 8 unknown bytes [ 102.884650][ T6312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.097102][ T6332] delete_channel: no stack [ 103.106930][ T6331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.98'. [ 103.319208][ T6341] bond0: entered promiscuous mode [ 103.328459][ T6341] bond_slave_0: entered promiscuous mode [ 103.334344][ T6341] bond_slave_1: entered promiscuous mode [ 103.458302][ T6349] : renamed from bridge_slave_0 [ 103.636134][ T6359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.107'. [ 104.263684][ T6388] netlink: 7 bytes leftover after parsing attributes in process `syz.1.115'. [ 104.273296][ T6381] nbd0: detected capacity change from 0 to 127 [ 104.285034][ T51] block nbd0: Receive control failed (result -32) [ 104.308182][ T5848] block nbd0: Dead connection, failed to find a fallback [ 104.318029][ T5848] block nbd0: shutting down sockets [ 104.324073][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.334582][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read [ 104.343583][ T5848] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.353932][ T5848] Buffer I/O error on dev nbd0, logical block 1, async page read [ 104.363646][ T5848] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.373147][ T5848] Buffer I/O error on dev nbd0, logical block 2, async page read [ 104.386887][ T5848] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.396133][ T5848] Buffer I/O error on dev nbd0, logical block 3, async page read [ 104.427225][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.436492][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read [ 104.450331][ T6392] netlink: 92 bytes leftover after parsing attributes in process `syz.0.116'. [ 104.463054][ T5848] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.486940][ T5848] Buffer I/O error on dev nbd0, logical block 1, async page read [ 104.495116][ T5848] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.514828][ T5848] Buffer I/O error on dev nbd0, logical block 2, async page read [ 104.529624][ T5848] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.540639][ T5848] Buffer I/O error on dev nbd0, logical block 3, async page read [ 104.551041][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.565354][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read [ 104.574139][ T5848] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.588701][ T5848] Buffer I/O error on dev nbd0, logical block 1, async page read [ 104.600999][ T5848] ldm_validate_partition_table(): Disk read failed. [ 104.629504][ T5848] Dev nbd0: unable to read RDB block 0 [ 104.647325][ T5848] nbd0: unable to read partition table [ 104.686337][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 104.721230][ T5848] ldm_validate_partition_table(): Disk read failed. [ 104.749663][ T5848] Dev nbd0: unable to read RDB block 0 [ 104.765754][ T5848] nbd0: unable to read partition table [ 104.926241][ T6400] vlan2: entered allmulticast mode [ 104.964745][ T6400] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 105.034037][ T6406] syzkaller0: entered promiscuous mode [ 105.039975][ T6406] syzkaller0: entered allmulticast mode [ 105.091710][ T6413] netlink: 'syz.4.121': attribute type 1 has an invalid length. [ 105.094480][ T6391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.318486][ T6430] __nla_validate_parse: 1 callbacks suppressed [ 106.318505][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 106.360655][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 106.384685][ T6434] veth1_macvtap: left promiscuous mode [ 106.402431][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 106.424429][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 106.638495][ T6444] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 106.684015][ T6444] bond1: entered promiscuous mode [ 106.701241][ T6444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.853069][ T6457] can: request_module (can-proto-0) failed. [ 107.050276][ T6476] netlink: 132 bytes leftover after parsing attributes in process `syz.4.139'. [ 107.310715][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 107.325011][ T6483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.141'. [ 107.878975][ T6514] netlink: 'syz.2.152': attribute type 1 has an invalid length. [ 107.904532][ T6514] netlink: 'syz.2.152': attribute type 1 has an invalid length. [ 107.983482][ T6514] bridge_slave_0: left allmulticast mode [ 107.993513][ T6520] syz.3.154 uses obsolete (PF_INET,SOCK_PACKET) [ 108.013564][ T6514] bridge_slave_0: left promiscuous mode [ 108.032919][ T6514] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.065713][ T6514] bridge_slave_1: left allmulticast mode [ 108.091846][ T6514] bridge_slave_1: left promiscuous mode [ 108.104473][ T6514] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.122928][ T6514] bond0: (slave bond_slave_0): Releasing backup interface [ 108.131855][ T6514] bond_slave_0: left promiscuous mode [ 108.154661][ T6514] bond0: (slave bond_slave_1): Releasing backup interface [ 108.164742][ T6514] bond_slave_1: left promiscuous mode [ 108.213437][ T6514] team0: Port device team_slave_0 removed [ 108.234950][ T6514] team0: Port device team_slave_1 removed [ 108.242548][ T6514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.250569][ T6514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.255114][ T6528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.158'. [ 108.269965][ T6514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.278908][ T6514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.289014][ T6514] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.595580][ T6546] bond2: option min_links: invalid value (18446744073709551614) [ 108.611383][ T6546] bond2: option min_links: allowed values 0 - 2147483647 [ 108.639383][ T6546] bond2 (unregistering): Released all slaves [ 108.721227][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 108.775269][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 108.884678][ T43] hid-generic 0005:0B57:0009.0002: unknown main item tag 0x0 [ 108.911018][ T43] hid-generic 0005:0B57:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 108.969594][ T6554] bond1: entered promiscuous mode [ 108.975471][ T6554] bond1: entered allmulticast mode [ 108.982371][ T6554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.043752][ T6574] sctp: [Deprecated]: syz.2.169 (pid 6574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.043752][ T6574] Use struct sctp_sack_info instead [ 109.292784][ T6588] team0: Device geneve2 is up. Set it down before adding it as a team port [ 109.363241][ T6587] tls_set_device_offload: netdev not found [ 109.661086][ T6611] bond1: entered promiscuous mode [ 109.666254][ T6611] bond1: entered allmulticast mode [ 109.672349][ T6611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.837883][ T6621] tipc: Started in network mode [ 109.842810][ T6621] tipc: Node identity da626eb4ca0c, cluster identity 4711 [ 109.854466][ T6621] tipc: Enabled bearer , priority 0 [ 109.872468][ T6620] syzkaller0: entered promiscuous mode [ 109.882631][ T6620] syzkaller0: entered allmulticast mode [ 109.981242][ T6619] tipc: Resetting bearer [ 110.011429][ T6619] tipc: Disabling bearer [ 110.715681][ T6657] bond0: left promiscuous mode [ 111.390055][ T6657] bond1: left promiscuous mode [ 111.409147][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.457934][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.489174][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.535041][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.999664][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.535331][ T6730] netlink: 'syz.1.207': attribute type 1 has an invalid length. [ 164.560101][ T6732] __nla_validate_parse: 8 callbacks suppressed [ 164.560118][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 164.593074][ T6732] vlan2: entered allmulticast mode [ 164.642218][ T6732] bridge0: entered allmulticast mode [ 164.802240][ T6743] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 164.870458][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 164.880287][ T6743] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 164.894607][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 164.895396][ T6756] netlink: 'syz.2.212': attribute type 10 has an invalid length. [ 164.947376][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 164.968302][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 164.979370][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 165.032675][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.211'. [ 165.055873][ T6756] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.080890][ T6751] syzkaller1: entered promiscuous mode [ 165.086540][ T6751] syzkaller1: entered allmulticast mode [ 165.451827][ T6778] netlink: 68 bytes leftover after parsing attributes in process `syz.2.218'. [ 165.531114][ T6789] syzkaller0: entered promiscuous mode [ 165.537141][ T6789] syzkaller0: entered allmulticast mode [ 165.547408][ T6789] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 165.921152][ T6753] chnl_net:caif_netlink_parms(): no params data found [ 166.302585][ T6753] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.320554][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.337592][ T6753] bridge_slave_0: entered allmulticast mode [ 166.349901][ T6753] bridge_slave_0: entered promiscuous mode [ 166.364241][ T6753] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.382319][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.406824][ T6753] bridge_slave_1: entered allmulticast mode [ 166.435055][ T6753] bridge_slave_1: entered promiscuous mode [ 166.601064][ T6753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.664083][ T6753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.664219][ T6850] netlink: 68 bytes leftover after parsing attributes in process `syz.1.232'. [ 166.810284][ T6753] team0: Port device team_slave_0 added [ 166.829971][ T6753] team0: Port device team_slave_1 added [ 166.844486][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.051639][ T6862] netlink: 168 bytes leftover after parsing attributes in process `syz.3.235'. [ 167.076855][ T51] Bluetooth: hci5: command tx timeout [ 167.104804][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.116925][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.143227][ T6753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.156122][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.163766][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.223267][ T6753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.398631][ T6753] hsr_slave_0: entered promiscuous mode [ 167.413598][ T6753] hsr_slave_1: entered promiscuous mode [ 167.429230][ T6753] debugfs: 'hsr0' already exists in 'hsr' [ 167.438356][ T6753] Cannot create hsr debugfs directory [ 167.723920][ T6902] netlink: 36 bytes leftover after parsing attributes in process `syz.2.248'. [ 167.813114][ T6906] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 167.837952][ T6906] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 167.925269][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.251'. [ 167.969686][ T6912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.078385][ T6913] hsr_slave_1 (unregistering): left promiscuous mode [ 168.184114][ T6925] netlink: 'syz.2.255': attribute type 1 has an invalid length. [ 168.202439][ T6925] netlink: 224 bytes leftover after parsing attributes in process `syz.2.255'. [ 168.217502][ T6927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.256'. [ 168.321577][ T6934] netlink: 'syz.2.255': attribute type 1 has an invalid length. [ 168.326048][ T6932] netlink: 'syz.4.258': attribute type 1 has an invalid length. [ 168.339236][ T6934] netlink: 224 bytes leftover after parsing attributes in process `syz.2.255'. [ 168.402903][ T6753] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.525708][ T6941] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 168.538291][ T6941] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 168.553917][ T6753] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.563765][ T6753] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.579232][ T6932] gretap1: entered promiscuous mode [ 168.589022][ T6932] bond3: (slave gretap1): making interface the new active one [ 168.598762][ T6932] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 168.613715][ T6947] macvlan3: entered promiscuous mode [ 168.619368][ T6947] macvlan3: entered allmulticast mode [ 168.626349][ T6947] bond3: entered promiscuous mode [ 168.632651][ T6947] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 168.642842][ T6947] bond3: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 168.655225][ T6947] bond3: left promiscuous mode [ 168.746945][ T6753] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 169.158395][ T51] Bluetooth: hci5: command tx timeout [ 169.360552][ T6753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.382295][ T6981] netlink: 'syz.4.266': attribute type 1 has an invalid length. [ 169.405885][ T6753] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.433422][ T3151] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.440634][ T3151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.484189][ T3151] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.491511][ T3151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.588226][ T6985] syzkaller1: entered promiscuous mode [ 169.593743][ T6985] syzkaller1: entered allmulticast mode [ 169.595415][ T6991] Bluetooth: MGMT ver 1.23 [ 170.168669][ T6753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.288634][ T7011] __nla_validate_parse: 1 callbacks suppressed [ 170.288651][ T7011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.274'. [ 170.500964][ T7016] netlink: 'syz.3.275': attribute type 4 has an invalid length. [ 170.659606][ T7028] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 170.670055][ T7028] team0: Device macvtap1 is already an upper device of the team interface [ 170.861019][ T7038] netlink: 'syz.2.280': attribute type 1 has an invalid length. [ 170.912305][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.281'. [ 170.930487][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 170.939911][ T7044] netlink: 'syz.4.281': attribute type 12 has an invalid length. [ 170.948991][ T7044] netlink: 'syz.4.281': attribute type 11 has an invalid length. [ 170.965574][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 170.980603][ T7038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.988233][ T7046] netlink: 9 bytes leftover after parsing attributes in process `syz.4.281'. [ 171.010952][ T7048] netlink: 5380 bytes leftover after parsing attributes in process `syz.3.282'. [ 171.020435][ T7048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.020833][ T7046] gretap0: entered promiscuous mode [ 171.042419][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 171.061105][ T7038] netlink: 'syz.2.280': attribute type 1 has an invalid length. [ 171.165201][ T6753] veth0_vlan: entered promiscuous mode [ 171.210657][ T6753] veth1_vlan: entered promiscuous mode [ 171.236844][ T51] Bluetooth: hci5: command tx timeout [ 171.338654][ T6753] veth0_macvtap: entered promiscuous mode [ 171.364205][ T6753] veth1_macvtap: entered promiscuous mode [ 171.404534][ T6753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.429186][ T6753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.457694][ T1027] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.474151][ T1027] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.505476][ T1027] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.529423][ T1027] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.554947][ T7067] raw_sendmsg: syz.1.289 forgot to set AF_INET. Fix it! [ 171.569626][ T7067] netlink: 128 bytes leftover after parsing attributes in process `syz.1.289'. [ 171.581187][ T7067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.289'. [ 171.679473][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.690317][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.729998][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.291'. [ 171.733356][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.747457][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.789645][ T7071] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 172.569139][ T7121] netlink: 'syz.3.307': attribute type 1 has an invalid length. [ 172.579039][ T7121] netlink: 'syz.3.307': attribute type 2 has an invalid length. [ 173.048384][ T7149] nbd1: detected capacity change from 0 to 127 [ 173.056376][ T7153] netlink: 'syz.2.314': attribute type 13 has an invalid length. [ 173.079366][ T7153] netlink: 'syz.2.314': attribute type 13 has an invalid length. [ 173.087299][ T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.096370][ T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.143798][ T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.191378][ T59] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.281314][ T51] block nbd1: Receive control failed (result -104) [ 173.317516][ T51] Bluetooth: hci5: command tx timeout [ 173.899689][ T7201] tipc: Enabling of bearer rejected, failed to enable media [ 174.079152][ T7210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.116133][ T7210] hsr0 speed is unknown, defaulting to 1000 [ 174.160664][ T7210] hsr0 speed is unknown, defaulting to 1000 [ 174.169108][ T7220] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 174.183234][ T7210] hsr0 speed is unknown, defaulting to 1000 [ 174.199213][ T7210] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 174.222447][ T7210] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 174.329036][ T7222] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 174.405374][ T7223] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 174.415575][ T7210] hsr0 speed is unknown, defaulting to 1000 [ 174.442057][ T7210] hsr0 speed is unknown, defaulting to 1000 [ 174.451947][ T7210] hsr0 speed is unknown, defaulting to 1000 [ 174.462310][ T7210] hsr0 speed is unknown, defaulting to 1000 [ 174.470362][ T7210] hsr0 speed is unknown, defaulting to 1000 [ 174.478453][ T7210] hsr0 speed is unknown, defaulting to 1000 [ 174.718910][ T7246] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 174.795221][ T7250] netlink: 'syz.3.340': attribute type 2 has an invalid length. [ 175.311769][ T7273] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 175.348317][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 175.367456][ T7275] __nla_validate_parse: 15 callbacks suppressed [ 175.367474][ T7275] netlink: 40 bytes leftover after parsing attributes in process `syz.4.346'. [ 175.405447][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 175.420002][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 175.444755][ T7275] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 175.452680][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 176.037404][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 176.263805][ T7302] tipc: Enabled bearer , priority 10 [ 176.302515][ T7302] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 176.331550][ T7302] tipc: Enabled bearer , priority 10 [ 176.361596][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 176.582335][ T7319] netlink: 52 bytes leftover after parsing attributes in process `syz.4.358'. [ 176.698905][ T7321] Driver unsupported XDP return value 0 on prog (id 86) dev N/A, expect packet loss! [ 176.717187][ T7325] validate_nla: 3 callbacks suppressed [ 176.717207][ T7325] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 176.738903][ T7321] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 176.867010][ T7332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.363'. [ 176.942300][ T7337] netlink: 'syz.1.365': attribute type 1 has an invalid length. [ 176.965502][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.364'. [ 177.104241][ T7337] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.388499][ T980] tipc: Node number set to 275672756 [ 177.496057][ T7364] hsr0 speed is unknown, defaulting to 1000 [ 177.513107][ T7363] hsr0 speed is unknown, defaulting to 1000 [ 177.966494][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 178.050257][ T7396] hsr_slave_0 (unregistering): left promiscuous mode [ 178.066398][ T7378] hsr0 speed is unknown, defaulting to 1000 [ 178.488448][ T7423] netlink: 'syz.2.385': attribute type 1 has an invalid length. [ 178.511482][ T7423] netlink: 'syz.2.385': attribute type 2 has an invalid length. [ 178.527047][ T7423] netlink: 'syz.2.385': attribute type 1 has an invalid length. [ 178.776811][ T7435] netlink: 'syz.1.389': attribute type 4 has an invalid length. [ 178.784495][ T7435] netlink: 17 bytes leftover after parsing attributes in process `syz.1.389'. [ 178.931351][ T7442] netlink: 'syz.1.392': attribute type 1 has an invalid length. [ 178.939615][ T7442] netlink: 784 bytes leftover after parsing attributes in process `syz.1.392'. [ 178.956943][ T7440] syzkaller0: entered promiscuous mode [ 178.962675][ T7440] syzkaller0: entered allmulticast mode [ 178.970233][ T7443] netlink: 340 bytes leftover after parsing attributes in process `syz.4.393'. [ 178.993893][ T7442] sctp: [Deprecated]: syz.1.392 (pid 7442) Use of int in maxseg socket option. [ 178.993893][ T7442] Use struct sctp_assoc_value instead [ 179.665316][ T7470] netlink: 'syz.3.398': attribute type 2 has an invalid length. [ 180.418237][ T7472] netlink: 'syz.1.399': attribute type 10 has an invalid length. [ 180.435908][ T6691] IPVS: starting estimator thread 0... [ 180.550663][ T7477] IPVS: using max 29 ests per chain, 69600 per kthread [ 180.574561][ T7479] netlink: 'syz.1.402': attribute type 2 has an invalid length. [ 180.582423][ T7479] __nla_validate_parse: 1 callbacks suppressed [ 180.582438][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.402'. [ 180.588201][ T7483] netlink: 224 bytes leftover after parsing attributes in process `syz.4.405'. [ 181.675740][ T7544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'. [ 181.700206][ T7542] tipc: Started in network mode [ 181.705122][ T7542] tipc: Node identity daa4cbbce306, cluster identity 4711 [ 181.713303][ T7542] tipc: Enabled bearer , priority 0 [ 181.723337][ T7542] erspan0: entered promiscuous mode [ 181.757362][ T7548] netlink: 512 bytes leftover after parsing attributes in process `syz.1.420'. [ 181.929878][ T7541] tipc: Disabling bearer [ 182.201263][ T7569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.427'. [ 182.241902][ T7561] validate_nla: 4 callbacks suppressed [ 182.241930][ T7561] netlink: 'syz.3.425': attribute type 2 has an invalid length. [ 182.349587][ T7574] netlink: 164 bytes leftover after parsing attributes in process `syz.1.430'. [ 182.386892][ T7580] netlink: 'syz.4.428': attribute type 4 has an invalid length. [ 182.447835][ T7582] netlink: 120 bytes leftover after parsing attributes in process `syz.2.429'. [ 182.476043][ T7582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.505347][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 182.515865][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 182.630436][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 182.791233][ T7602] netlink: 'syz.2.436': attribute type 11 has an invalid length. [ 183.178338][ T7626] hsr0 speed is unknown, defaulting to 1000 [ 183.453401][ T7643] netlink: 'syz.4.447': attribute type 21 has an invalid length. [ 183.493840][ T7639] bond5: entered promiscuous mode [ 183.502982][ T7639] bond5: entered allmulticast mode [ 183.509864][ T7639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.518956][ T7647] netlink: 'syz.4.447': attribute type 21 has an invalid length. [ 183.526881][ T7643] netlink: 'syz.4.447': attribute type 1 has an invalid length. [ 183.556427][ T7647] netlink: 'syz.4.447': attribute type 1 has an invalid length. [ 183.600794][ T7650] netlink: 'syz.3.448': attribute type 1 has an invalid length. [ 183.775679][ T7650] bond6: (slave bridge2): making interface the new active one [ 183.812919][ T7650] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 183.940903][ T7663] 8021q: VLANs not supported on caif0 [ 184.169584][ T7678] netlink: 'syz.3.459': attribute type 1 has an invalid length. [ 184.225162][ T7678] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 184.289723][ T7686] netlink: 'syz.4.461': attribute type 1 has an invalid length. [ 184.366413][ T7693] tipc: Enabled bearer , priority 0 [ 184.409874][ T7690] syzkaller0: entered promiscuous mode [ 184.415381][ T7690] syzkaller0: entered allmulticast mode [ 184.532300][ T7693] tipc: Resetting bearer [ 184.592035][ T7693] tipc: Disabling bearer [ 184.703772][ T7706] netlink: 'syz.3.467': attribute type 2 has an invalid length. [ 184.715367][ T7707] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 184.980405][ T7727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.266465][ T7751] nbd: couldn't find a device at index -373156329 [ 185.310575][ T7754] Unknown options in mask b7f2 [ 185.361901][ T7755] nbd: must specify a size in bytes for the device [ 185.460623][ T7762] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 185.708654][ T7773] __nla_validate_parse: 17 callbacks suppressed [ 185.708673][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.488'. [ 185.741103][ T7777] netlink: 92 bytes leftover after parsing attributes in process `syz.1.491'. [ 186.005225][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'. [ 186.160188][ T7802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.499'. [ 186.295626][ T7804] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.306152][ T7804] netlink: 36 bytes leftover after parsing attributes in process `syz.4.500'. [ 186.339738][ T7804] bond4: (slave gretap2): making interface the new active one [ 186.350248][ T7804] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 186.458012][ T7815] netlink: 112 bytes leftover after parsing attributes in process `syz.2.503'. [ 186.840227][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 186.896525][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'. [ 186.957501][ T7837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.512'. [ 186.964063][ T7850] netlink: 188 bytes leftover after parsing attributes in process `syz.1.516'. [ 187.380058][ T7872] syzkaller1: entered promiscuous mode [ 187.385905][ T7872] syzkaller1: entered allmulticast mode [ 187.983389][ T7895] team0: Device wireguard0 is of different type [ 188.203305][ T7909] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.270941][ T7909] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 188.708803][ T7942] validate_nla: 5 callbacks suppressed [ 188.708822][ T7942] netlink: 'syz.2.538': attribute type 1 has an invalid length. [ 188.827824][ T7949] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 188.838922][ T7950] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 188.959871][ T7950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.978795][ T7950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.994136][ T7950] bond0 (unregistering): Released all slaves [ 189.014314][ T7955] tipc: Enabling of bearer rejected, failed to enable media [ 189.174211][ T7963] erspan0: entered promiscuous mode [ 189.287535][ T7969] lo: entered allmulticast mode [ 189.345805][ T7974] lo: left allmulticast mode [ 189.768179][ T7984] netlink: 'syz.3.549': attribute type 7 has an invalid length. [ 189.768729][ T7978] syzkaller0: entered promiscuous mode [ 189.812496][ T7984] netlink: 'syz.3.549': attribute type 8 has an invalid length. [ 189.822881][ T7978] syzkaller0: entered allmulticast mode [ 189.950829][ T7984] syz_tun: entered promiscuous mode [ 189.968457][ T7984] batadv_slave_1: entered promiscuous mode [ 190.009971][ T7984] batadv_slave_1: left promiscuous mode [ 190.044153][ T7984] syz_tun: left promiscuous mode [ 190.555050][ T8011] netlink: 'syz.4.553': attribute type 1 has an invalid length. [ 191.743194][ T8011] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 191.774350][ T8015] veth5: entered promiscuous mode [ 191.928961][ T8029] __nla_validate_parse: 15 callbacks suppressed [ 191.928982][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 192.223758][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 192.493807][ T8056] netlink: 'syz.3.568': attribute type 29 has an invalid length. [ 192.645602][ T8059] netlink: 'syz.4.570': attribute type 7 has an invalid length. [ 192.656790][ T8059] netlink: 'syz.4.570': attribute type 8 has an invalid length. [ 192.800315][ T8067] netlink: 'syz.4.574': attribute type 30 has an invalid length. [ 192.838191][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 192.849473][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 192.858810][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 192.867566][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 192.877634][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.921548][ T8075] netlink: 'syz.1.575': attribute type 1 has an invalid length. [ 192.930425][ T8075] netlink: 388 bytes leftover after parsing attributes in process `syz.1.575'. [ 192.981843][ T8069] hsr0 speed is unknown, defaulting to 1000 [ 193.129174][ T8084] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 193.221766][ T8084] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 193.293752][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 193.315694][ T8094] lo speed is unknown, defaulting to 1000 [ 193.351045][ T8084] veth3: entered promiscuous mode [ 193.359942][ T8084] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 193.379246][ T8094] lo speed is unknown, defaulting to 1000 [ 193.393987][ T8098] chnl_net:caif_netlink_parms(): no params data found [ 193.451825][ T8094] lo speed is unknown, defaulting to 1000 [ 193.506077][ C1] Unknown status report in ack skb [ 193.529091][ T8094] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 193.565610][ T8112] ipvlan2: entered promiscuous mode [ 193.574515][ T8094] lo speed is unknown, defaulting to 1000 [ 193.669502][ T8094] lo speed is unknown, defaulting to 1000 [ 193.689852][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.587'. [ 193.772135][ T8094] lo speed is unknown, defaulting to 1000 [ 193.955572][ T8119] hsr_slave_0 (unregistering): left promiscuous mode [ 193.991763][ T8094] lo speed is unknown, defaulting to 1000 [ 194.000743][ T8094] lo speed is unknown, defaulting to 1000 [ 194.057915][ T8094] lo speed is unknown, defaulting to 1000 [ 194.065823][ T8094] lo speed is unknown, defaulting to 1000 [ 194.072297][ T8069] chnl_net:caif_netlink_parms(): no params data found [ 194.416166][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.427447][ T8069] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.434734][ T8069] bridge_slave_0: entered allmulticast mode [ 194.454990][ T8069] bridge_slave_0: entered promiscuous mode [ 194.499822][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.550935][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.586366][ T8069] bridge_slave_1: entered allmulticast mode [ 194.608613][ T8069] bridge_slave_1: entered promiscuous mode [ 194.703484][ T8069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.716055][ T8166] tipc: Started in network mode [ 194.725115][ T8166] tipc: Node identity b2c79b91b8e6, cluster identity 4711 [ 194.734372][ T8166] tipc: Enabled bearer , priority 0 [ 194.748051][ T8069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.832051][ T8166] syzkaller0: entered promiscuous mode [ 194.840811][ T8166] syzkaller0: entered allmulticast mode [ 194.856174][ T8069] team0: Port device team_slave_0 added [ 194.879986][ T8069] team0: Port device team_slave_1 added [ 194.904231][ T8166] tipc: Resetting bearer [ 194.917001][ T5843] Bluetooth: hci6: command tx timeout [ 194.974168][ T8212] netlink: 300 bytes leftover after parsing attributes in process `syz.1.607'. [ 195.076514][ T8163] tipc: Resetting bearer [ 195.111896][ T8163] tipc: Disabling bearer [ 195.127582][ T8212] netlink: 64 bytes leftover after parsing attributes in process `syz.1.607'. [ 195.128505][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.156446][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.186230][ T8069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.211382][ T8219] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 195.227508][ T8220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.278544][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.285528][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.312745][ T8069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.392665][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 195.481751][ T8229] netlink: 'syz.4.613': attribute type 30 has an invalid length. [ 195.588079][ T8069] hsr_slave_0: entered promiscuous mode [ 195.595017][ T8069] hsr_slave_1: entered promiscuous mode [ 195.614241][ T8069] debugfs: 'hsr0' already exists in 'hsr' [ 195.620663][ T8069] Cannot create hsr debugfs directory [ 195.641268][ T8239] sctp: [Deprecated]: syz.3.616 (pid 8239) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.641268][ T8239] Use struct sctp_sack_info instead [ 195.659796][ T8229] bond6: option arp_missed_max: invalid value (0) [ 195.666473][ T8229] bond6: option arp_missed_max: allowed values 1 - 255 [ 195.692984][ T8229] bond6 (unregistering): Released all slaves [ 195.972801][ T8250] syzkaller0: entered promiscuous mode [ 195.979413][ T8250] syzkaller0: entered allmulticast mode [ 196.029970][ T8263] netlink: 'syz.3.622': attribute type 6 has an invalid length. [ 196.032585][ T8268] netlink: 'syz.3.622': attribute type 6 has an invalid length. [ 196.054014][ T8269] netlink: 'syz.4.621': attribute type 1 has an invalid length. [ 196.066991][ T8269] netlink: 220 bytes leftover after parsing attributes in process `syz.4.621'. [ 196.309744][ T8280] Bluetooth: MGMT ver 1.23 [ 196.420488][ T8069] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.460720][ T8069] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.482025][ T8069] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 196.499489][ T8069] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 196.685371][ T8298] netlink: 'syz.4.629': attribute type 1 has an invalid length. [ 196.699750][ T8290] netlink: 44 bytes leftover after parsing attributes in process `syz.3.628'. [ 196.709279][ T8290] netlink: 'syz.3.628': attribute type 5 has an invalid length. [ 196.725983][ T8303] tipc: Enabled bearer , priority 0 [ 196.765383][ T8298] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.823152][ T8305] bond6: (slave veth5): Enslaving as an active interface with a down link [ 196.902924][ T8312] syz.3.632 uses old SIOCAX25GETINFO [ 196.904964][ T8302] tipc: Disabling bearer [ 196.998036][ T5843] Bluetooth: hci6: command tx timeout [ 197.016511][ T8069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.048065][ T8069] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.090419][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.097636][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.130666][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.137944][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.243946][ T8069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.520033][ T8337] __nla_validate_parse: 2 callbacks suppressed [ 197.520051][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.638'. [ 197.551803][ T8338] syzkaller0: entered promiscuous mode [ 197.557507][ T8338] syzkaller0: entered allmulticast mode [ 197.582255][ T8337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.638'. [ 197.630808][ T8340] tipc: Started in network mode [ 197.646912][ T8340] tipc: Node identity e284f311424b, cluster identity 4711 [ 197.659084][ T8340] tipc: Enabled bearer , priority 0 [ 197.683361][ T8340] syzkaller0: entered promiscuous mode [ 197.713967][ T8340] syzkaller0: entered allmulticast mode [ 197.785930][ T8340] tipc: Resetting bearer [ 197.796988][ C0] syzkaller0: tun_net_xmit 90 [ 197.802020][ C0] syzkaller0: tun_net_xmit 90 [ 197.807057][ T8340] syzkaller0: tun_net_xmit 90 [ 197.812073][ T8340] syzkaller0: tun_net_xmit 90 [ 197.835892][ T8069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.851509][ T8339] tipc: Resetting bearer [ 197.910518][ T8339] tipc: Disabling bearer [ 197.952249][ T8353] netlink: 764 bytes leftover after parsing attributes in process `syz.4.643'. [ 198.184463][ T8365] netlink: 'syz.1.648': attribute type 1 has an invalid length. [ 198.192670][ T8365] netlink: 784 bytes leftover after parsing attributes in process `syz.1.648'. [ 198.390058][ T8376] netlink: 56 bytes leftover after parsing attributes in process `syz.2.650'. [ 198.399012][ T8370] bond3 (unregistering): Released all slaves [ 198.405261][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'. [ 198.414389][ T8376] netlink: 31 bytes leftover after parsing attributes in process `syz.2.650'. [ 198.425494][ T8376] netlink: 'syz.2.650': attribute type 3 has an invalid length. [ 198.433551][ T8376] netlink: 'syz.2.650': attribute type 2 has an invalid length. [ 198.442986][ T8376] netlink: 31 bytes leftover after parsing attributes in process `syz.2.650'. [ 198.663246][ T8069] veth0_vlan: entered promiscuous mode [ 198.711435][ T8069] veth1_vlan: entered promiscuous mode [ 198.792009][ T8069] veth0_macvtap: entered promiscuous mode [ 198.819821][ T8069] veth1_macvtap: entered promiscuous mode [ 198.879950][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.897593][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 198.925086][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.961596][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.076785][ T5843] Bluetooth: hci6: command tx timeout [ 199.084561][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.097318][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.116271][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.167946][ T8402] openvswitch: netlink: Key type 48 is out of range max 32 [ 199.274513][ T8174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.292037][ T8174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.308570][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 199.382004][ T3151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.398889][ T3151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.689291][ T8423] netlink: 'syz.4.662': attribute type 32 has an invalid length. [ 199.764325][ T8423] bond7: option coupled_control: invalid value (52) [ 199.775604][ T8423] bond7 (unregistering): Released all slaves [ 199.986881][ T3538] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.024546][ T3538] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.051027][ T3538] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.483876][ T8458] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 200.512672][ T8458] bond3 (unregistering): Released all slaves [ 200.624535][ T8480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.887132][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.157428][ T5843] Bluetooth: hci6: command tx timeout [ 201.163522][ T8505] netlink: 'syz.1.684': attribute type 10 has an invalid length. [ 201.220509][ T8508] unsupported nla_type 52263 [ 201.519885][ T8529] netlink: 'syz.2.691': attribute type 1 has an invalid length. [ 201.785497][ T8544] netlink: 'syz.1.696': attribute type 1 has an invalid length. [ 201.793841][ T8542] netlink: 'syz.1.696': attribute type 1 has an invalid length. [ 201.852606][ T8544] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 201.854374][ T8542] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 202.085819][ T8564] veth0_to_team: entered promiscuous mode [ 202.099269][ T8564] veth0_to_team: entered allmulticast mode [ 202.432211][ T8588] netlink: 'syz.1.707': attribute type 10 has an invalid length. [ 202.465133][ T8588] dummy0: entered promiscuous mode [ 202.485135][ T8588] bridge0: port 3(dummy0) entered blocking state [ 202.533114][ T8588] bridge0: port 3(dummy0) entered disabled state [ 202.546302][ T8588] dummy0: entered allmulticast mode [ 202.576972][ T8588] bridge0: port 3(dummy0) entered blocking state [ 202.583479][ T8588] bridge0: port 3(dummy0) entered forwarding state [ 202.630598][ T8589] __nla_validate_parse: 14 callbacks suppressed [ 202.630623][ T8589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.706'. [ 202.751466][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 202.767126][ T8603] team0: No ports can be present during mode change [ 202.805475][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 202.831849][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.710'. [ 203.098226][ T30] audit: type=1107 audit(1759660899.996:2): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='âRÇ sø¶G&ï«>¾Á)ļRDR*`h €$´÷dÙi8HÇ—]·•6MUÙ=>ˆd,Ù ,õöÈëÎ.Ës  ª9ò§ß²æn&¼Ëâ¹¹ýŽ*@ß[vJ…ÄtgÛ“&t2Ö‘ Ä5/7¡Ø‘·ên¿r™Zúb€þ¥ohù~¤”yAk' [ 203.110255][ T8621] netlink: 'syz.6.713': attribute type 11 has an invalid length. [ 203.146160][ T30] audit: type=1107 audit(1759660900.036:3): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='âRÇ sø¶G&ï«>¾Á)ļRDR*`h €$´÷dÙi8HÇ—]·•6MUÙ=>ˆd,Ù ,õöÈëÎ.Ës  ª9ò§ß²æn&¼Ëâ¹¹ýŽ*@ß[vJ…ÄtgÛ“&t2Ö‘ Ä5/7¡Ø‘·ên¿r™Zúb€þ¥ohù~¤”yAk' [ 203.301240][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.715'. [ 203.399516][ T55] block nbd1: Possible stuck request ffff8880252f5080: control (read@0,1024B). Runtime 30 seconds [ 203.412424][ T55] block nbd1: Possible stuck request ffff8880252f5240: control (read@1024,1024B). Runtime 30 seconds [ 203.423743][ T55] block nbd1: Possible stuck request ffff8880252f5400: control (read@2048,1024B). Runtime 30 seconds [ 203.434891][ T55] block nbd1: Possible stuck request ffff8880252f55c0: control (read@3072,1024B). Runtime 30 seconds [ 203.558879][ T8649] netlink: 'syz.1.719': attribute type 33 has an invalid length. [ 203.590026][ T8649] netlink: 152 bytes leftover after parsing attributes in process `syz.1.719'. [ 203.595778][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 203.615234][ T8651] bridge_slave_1: default FDB implementation only supports local addresses [ 203.667598][ T8653] netlink: 24 bytes leftover after parsing attributes in process `syz.4.720'. [ 203.687948][ T8658] netlink: 56 bytes leftover after parsing attributes in process `syz.3.718'. [ 203.698182][ T8657] openvswitch: netlink: Unknown nsh attribute 0 [ 203.704488][ T8657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.885021][ T8635] netlink: 'syz.6.713': attribute type 1 has an invalid length. [ 204.118240][ T8666] netlink: 40 bytes leftover after parsing attributes in process `syz.6.724'. [ 204.248649][ T36] bridge0: port 3(dummy0) entered disabled state [ 204.674646][ T8700] syzkaller1: entered promiscuous mode [ 204.707755][ T8700] syzkaller1: entered allmulticast mode [ 205.153144][ T8721] tipc: Enabling of bearer rejected, already enabled [ 205.183897][ T8725] netlink: 'syz.4.741': attribute type 1 has an invalid length. [ 205.461061][ T8740] netlink: 'syz.6.746': attribute type 3 has an invalid length. [ 205.508085][ T8738] veth0: entered promiscuous mode [ 205.513608][ T8738] veth0: left promiscuous mode [ 205.834448][ T8753] bond1: entered promiscuous mode [ 205.839742][ T8753] bond1: entered allmulticast mode [ 205.845536][ T8753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.926947][ T8762] sctp: [Deprecated]: syz.4.753 (pid 8762) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.926947][ T8762] Use struct sctp_sack_info instead [ 206.011560][ T8769] sctp: [Deprecated]: syz.4.753 (pid 8769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.011560][ T8769] Use struct sctp_sack_info instead [ 206.792485][ T8819] xt_socket: unknown flags 0xd0 [ 207.019125][ T5972] IPVS: starting estimator thread 0... [ 207.027561][ T8836] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 207.049661][ T8839] lo: entered promiscuous mode [ 207.065539][ T8839] validate_nla: 2 callbacks suppressed [ 207.076167][ T8839] netlink: 'syz.4.774': attribute type 2 has an invalid length. [ 207.087720][ T8839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.146740][ T8840] IPVS: using max 30 ests per chain, 72000 per kthread [ 207.210853][ T8846] netlink: 'syz.3.777': attribute type 1 has an invalid length. [ 207.248545][ T8846] netlink: 'syz.3.777': attribute type 1 has an invalid length. [ 207.282980][ T8848] bond7: entered promiscuous mode [ 207.312856][ T8848] bond7: entered allmulticast mode [ 207.325819][ T8848] 8021q: adding VLAN 0 to HW filter on device bond7 [ 207.676285][ T8864] syzkaller0: entered promiscuous mode [ 207.682024][ T8864] syzkaller0: entered allmulticast mode [ 207.954215][ T8886] __nla_validate_parse: 9 callbacks suppressed [ 207.954234][ T8886] netlink: 48 bytes leftover after parsing attributes in process `syz.1.789'. [ 208.119974][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.791'. [ 209.511536][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 209.592525][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 209.637959][ T8930] netem: incorrect ge model size [ 209.657605][ T8930] netem: change failed [ 209.872995][ T8938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.805'. [ 209.902535][ T8940] sctp: [Deprecated]: syz.3.807 (pid 8940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.902535][ T8940] Use struct sctp_sack_info instead [ 210.238027][ T8956] vlan3: entered allmulticast mode [ 210.243295][ T8956] hsr0: entered allmulticast mode [ 210.271729][ T8956] hsr_slave_1: entered allmulticast mode [ 210.328321][ T8960] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 210.475312][ T8963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.814'. [ 210.733992][ T5936] IPVS: starting estimator thread 0... [ 210.743753][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'. [ 210.847918][ T8984] IPVS: using max 27 ests per chain, 64800 per kthread [ 211.011496][ T9000] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 211.107107][ T5936] IPVS: starting estimator thread 0... [ 211.206926][ T9008] IPVS: using max 32 ests per chain, 76800 per kthread [ 211.358692][ T9021] netlink: 24 bytes leftover after parsing attributes in process `syz.6.832'. [ 211.369000][ T9023] netlink: 68 bytes leftover after parsing attributes in process `syz.3.833'. [ 211.392332][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.833'. [ 211.599684][ T9033] netlink: 'syz.4.835': attribute type 5 has an invalid length. [ 211.644087][ T9033] geneve2: entered promiscuous mode [ 211.656685][ T9033] geneve2: entered allmulticast mode [ 211.667863][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 211.722445][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 211.744524][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 211.794425][ T9042] netlink: 'syz.6.839': attribute type 1 has an invalid length. [ 211.881310][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 211.887824][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 211.887836][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 211.996616][ T9044] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 212.008194][ T9044] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 212.030773][ T9059] delete_channel: no stack [ 212.082309][ T9016] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.090196][ T9016] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 212.180632][ T9016] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 212.190346][ T9016] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 212.233870][ T9016] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.249256][ T9016] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 212.273480][ T9016] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 212.299437][ T9016] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 212.571745][ T9077] bond1: left promiscuous mode [ 212.814425][ T9016] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 212.835854][ T9016] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 212.872249][ T9093] tipc: Enabled bearer , priority 0 [ 212.894699][ T9093] syzkaller0: entered promiscuous mode [ 212.904902][ T9093] syzkaller0: entered allmulticast mode [ 213.003228][ T9093] tipc: Resetting bearer [ 213.104503][ T9090] tipc: Resetting bearer [ 213.149611][ T9090] tipc: Disabling bearer [ 213.193808][ T9016] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 213.220884][ T9016] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 213.425151][ T9115] netlink: 'syz.4.853': attribute type 1 has an invalid length. [ 213.447334][ T9115] netlink: 'syz.4.853': attribute type 3 has an invalid length. [ 213.506532][ T9115] __nla_validate_parse: 5 callbacks suppressed [ 213.539368][ T9115] netlink: 224 bytes leftover after parsing attributes in process `syz.4.853'. [ 213.562774][ T9122] dvmrp0: entered allmulticast mode [ 213.568216][ T9115] NCSI netlink: No device for ifindex 0 [ 213.574371][ T9126] dvmrp0: left allmulticast mode [ 213.735421][ T9133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.857'. [ 213.863919][ T9133] netlink: 48 bytes leftover after parsing attributes in process `syz.4.857'. [ 214.061843][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.861'. [ 214.152965][ T9162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'. [ 214.240614][ T9162] batadv_slave_0: entered allmulticast mode [ 214.453091][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.864'. [ 214.746045][ T9194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.869'. [ 214.788751][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.869'. [ 215.150639][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.874'. [ 215.352185][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.877'. [ 215.442852][ T9233] netlink: 'syz.4.878': attribute type 2 has an invalid length. [ 215.491710][ T9236] ksmbd: Unknown IPC event: 1, ignore. [ 216.304413][ T9273] "syz.3.889" (9273) uses obsolete ecb(arc4) skcipher [ 216.317810][ T9282] openvswitch: netlink: Missing key (keys=40, expected=80) [ 216.475649][ T9290] bridge0: port 3(dummy0) entered disabled state [ 216.549204][ T9290] dummy0 (unregistering): left allmulticast mode [ 216.557098][ T9290] bridge0: port 3(dummy0) entered disabled state [ 216.871566][ T9312] netlink: 'syz.1.899': attribute type 10 has an invalid length. [ 216.899700][ T9312] veth0_virt_wifi: entered allmulticast mode [ 216.944166][ T9312] team0: Port device veth0_virt_wifi added [ 217.428388][ T9344] bond3 (unregistering): Released all slaves [ 217.453386][ T9349] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 217.702734][ T9357] netlink: 'syz.6.909': attribute type 10 has an invalid length. [ 217.716184][ T9357] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.723985][ T9357] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.802670][ T9357] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.809952][ T9357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.817549][ T9357] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.824747][ T9357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.846349][ T9357] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 218.068193][ T9377] netlink: 'syz.1.914': attribute type 2 has an invalid length. [ 218.091867][ T9377] nbd: must specify a device to reconfigure [ 218.154813][ T9377] netlink: 'syz.1.914': attribute type 1 has an invalid length. [ 218.162696][ T9377] netlink: 'syz.1.914': attribute type 10 has an invalid length. [ 218.173466][ T9377] netlink: 'syz.1.914': attribute type 4 has an invalid length. [ 218.603991][ T9406] __nla_validate_parse: 11 callbacks suppressed [ 218.604010][ T9406] netlink: 260 bytes leftover after parsing attributes in process `syz.3.920'. [ 219.150180][ T9438] sctp: [Deprecated]: syz.6.927 (pid 9438) Use of int in max_burst socket option. [ 219.150180][ T9438] Use struct sctp_assoc_value instead [ 219.187296][ T9438] netlink: 52 bytes leftover after parsing attributes in process `syz.6.927'. [ 219.626513][ T9469] tipc: Enabled bearer , priority 0 [ 219.652442][ T9469] syzkaller0: entered promiscuous mode [ 219.674476][ T9469] syzkaller0: entered allmulticast mode [ 219.765340][ T9475] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 219.829972][ T9479] netlink: 'syz.3.935': attribute type 5 has an invalid length. [ 219.856298][ T9469] tipc: Resetting bearer [ 219.905655][ T9467] tipc: Resetting bearer [ 219.959080][ T9467] tipc: Disabling bearer [ 219.983385][ T9487] netlink: 'syz.3.938': attribute type 2 has an invalid length. [ 219.991665][ T9487] netlink: 84 bytes leftover after parsing attributes in process `syz.3.938'. [ 220.406952][ T9506] bond4: option min_links: invalid value (18446744073709551614) [ 220.414775][ T9506] bond4: option min_links: allowed values 0 - 2147483647 [ 220.423677][ T9509] netlink: 24 bytes leftover after parsing attributes in process `syz.6.944'. [ 220.466017][ T9506] bond4 (unregistering): Released all slaves [ 220.549994][ T9509] bond3 (unregistering): Released all slaves [ 220.879278][ T9536] tipc: Enabled bearer , priority 10 [ 221.142312][ T9550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.950'. [ 221.320678][ T9563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.440831][ T9567] netlink: 'syz.6.958': attribute type 1 has an invalid length. [ 221.474494][ T9567] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 221.485523][ T9567] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 221.522428][ T9570] vlan2: entered allmulticast mode [ 221.528016][ T9570] bridge0: entered allmulticast mode [ 221.533957][ T9570] bridge0: entered promiscuous mode [ 221.540323][ T9570] bridge0: left promiscuous mode [ 221.548721][ T9570] bond3: (slave vlan2): making interface the new active one [ 221.556765][ T9570] bridge0: entered promiscuous mode [ 221.563198][ T9570] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 221.643598][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 221.759034][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.963'. [ 221.791516][ T9577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.962'. [ 221.807797][ T9576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.962'. [ 221.840527][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 221.868491][ T9586] netlink: 'syz.6.964': attribute type 3 has an invalid length. [ 221.997197][ T5972] tipc: Node number set to 169974673 [ 222.123404][ T9601] netlink: 'syz.4.969': attribute type 13 has an invalid length. [ 222.155931][ T9603] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜z [ 222.637197][ T9629] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 222.677538][ T9629] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 222.685255][ T9629] netlink: 'syz.4.979': attribute type 4 has an invalid length. [ 223.048990][ T9648] delete_channel: no stack [ 223.318718][ T9664] IPv6: sit2: Disabled Multicast RS [ 223.340537][ T9664] sit2: entered allmulticast mode [ 223.651024][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 223.666133][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 223.680973][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 223.690972][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 223.700345][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 223.726966][ T5157] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 223.740225][ T5157] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 223.749006][ T5157] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 223.759739][ T5157] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 223.768779][ T5157] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 223.859872][ T9675] hsr0 speed is unknown, defaulting to 1000 [ 223.915574][ T9675] lo speed is unknown, defaulting to 1000 [ 223.919366][ T9689] __nla_validate_parse: 8 callbacks suppressed [ 223.919385][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.991'. [ 223.939285][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 224.061546][ T9694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.157650][ T9694] netlink: 'syz.1.994': attribute type 1 has an invalid length. [ 224.247893][ T9694] team0: Device wireguard0 is of different type [ 224.455473][ T9715] netlink: 32 bytes leftover after parsing attributes in process `syz.3.999'. [ 224.670701][ T9720] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 224.887300][ T9675] chnl_net:caif_netlink_parms(): no params data found [ 224.929260][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1002'. [ 225.080900][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1005'. [ 225.121610][ T9735] tipc: Enabled bearer , priority 0 [ 225.130013][ T9744] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1005'. [ 225.326372][ T9750] syzkaller0: entered promiscuous mode [ 225.332031][ T9750] syzkaller0: entered allmulticast mode [ 225.342371][ T9735] tipc: Resetting bearer [ 225.424409][ T9758] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1007'. [ 225.450228][ T9734] tipc: Resetting bearer [ 225.476048][ T9766] openvswitch: netlink: Key type 48 is out of range max 32 [ 225.799679][ T51] Bluetooth: hci7: command tx timeout [ 226.853474][ T9734] tipc: Disabling bearer [ 226.886850][ T9769] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1010'. [ 226.919738][ T9779] macvlan2: entered promiscuous mode [ 226.939944][ T9779] team_slave_0: entered promiscuous mode [ 226.945666][ T9779] team_slave_1: entered promiscuous mode [ 226.951454][ T9779] veth0_virt_wifi: entered promiscuous mode [ 226.962484][ T9779] team0: entered promiscuous mode [ 226.973316][ T9779] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 226.991368][ T9779] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 227.031474][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 227.157759][ T9675] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.176867][ T9675] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.185351][ T9675] bridge_slave_0: entered allmulticast mode [ 227.205771][ T9675] bridge_slave_0: entered promiscuous mode [ 227.231364][ T9675] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.364504][ T9675] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.372831][ T9675] bridge_slave_1: entered allmulticast mode [ 227.381935][ T9675] bridge_slave_1: entered promiscuous mode [ 227.509817][ T9675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.528777][ T9675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.541498][ T9817] netlink: 'syz.6.1025': attribute type 39 has an invalid length. [ 227.674360][ T9675] team0: Port device team_slave_0 added [ 227.683386][ T9675] team0: Port device team_slave_1 added [ 227.779574][ T9675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.786647][ T9675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.813204][ T9675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.833121][ T9675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.844495][ T9675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.870631][ T9675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.887345][ T51] Bluetooth: hci7: command 0x041b tx timeout [ 227.948059][ T9675] hsr_slave_0: entered promiscuous mode [ 227.954638][ T9675] hsr_slave_1: entered promiscuous mode [ 227.961724][ T9675] debugfs: 'hsr0' already exists in 'hsr' [ 227.967648][ T9675] Cannot create hsr debugfs directory [ 228.113086][ T9840] netlink: 'syz.1.1030': attribute type 12 has an invalid length. [ 228.274373][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1031'. [ 228.479075][ T9675] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 228.495590][ T9675] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 228.523297][ T9675] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 228.543283][ T9675] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 228.761157][ T9675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.062918][ T9675] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.101981][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.109283][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.163764][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.171015][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.292669][ T9899] syzkaller0: create flow: hash 4243273794 index 1 [ 229.339588][ T9902] netlink: 'syz.4.1046': attribute type 21 has an invalid length. [ 229.516921][ T9892] syzkaller0: delete flow: hash 4243273794 index 1 [ 229.585634][ T5972] hid-generic 0005:16C0:0009.0003: unknown main item tag 0x0 [ 229.621665][ T5972] hid-generic 0005:16C0:0009.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 229.748747][ T9929] __nla_validate_parse: 1 callbacks suppressed [ 229.748767][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1052'. [ 229.962746][ T51] Bluetooth: hci7: command 0x041b tx timeout [ 231.379512][ T9960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1061'. [ 231.415209][ T9962] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1062'. [ 231.438419][ T9962] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1062'. [ 231.775179][ T9973] bond4: entered promiscuous mode [ 231.780756][ T9973] bond4: entered allmulticast mode [ 231.787721][ T9973] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.869813][ T9979] bond5: entered promiscuous mode [ 231.886810][ T9979] bond5: entered allmulticast mode [ 231.893782][ T9979] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.916499][ T9981] team_slave_0: entered promiscuous mode [ 231.922294][ T9981] team_slave_1: entered promiscuous mode [ 231.943848][ T9981] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 231.966335][ T9981] team0: Device macvtap1 is already an upper device of the team interface [ 231.995673][ T9981] team_slave_0: left promiscuous mode [ 232.001280][ T9981] team_slave_1: left promiscuous mode [ 232.039820][ T51] Bluetooth: hci7: command 0x041b tx timeout [ 232.065135][T10001] netlink: 'syz.6.1074': attribute type 10 has an invalid length. [ 232.073846][T10001] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1074'. [ 232.094851][T10001] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 232.137166][T10001] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 232.174177][T10001] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 232.248937][T10013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1077'. [ 232.263590][ T9675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.275764][T10015] syzkaller0: entered promiscuous mode [ 232.326143][T10015] syzkaller0: entered allmulticast mode [ 232.370382][T10014] tipc: Enabled bearer , priority 0 [ 232.435451][T10022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1078'. [ 232.447984][T10014] tipc: Resetting bearer [ 232.455859][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1078'. [ 232.511206][T10014] tipc: Disabling bearer [ 232.554878][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 232.673900][T10030] tipc: Enabled bearer , priority 0 [ 232.685695][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1082'. [ 232.711217][T10030] syzkaller0: entered promiscuous mode [ 232.720191][T10030] syzkaller0: entered allmulticast mode [ 232.732480][T10030] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 232.778415][T10030] tipc: Resetting bearer [ 232.809497][T10029] tipc: Resetting bearer [ 232.869637][T10029] tipc: Disabling bearer [ 233.065919][ T9675] veth0_vlan: entered promiscuous mode [ 233.133411][ T9675] veth1_vlan: entered promiscuous mode [ 233.177906][T10059] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 233.208388][T10067] netlink: 'syz.1.1090': attribute type 1 has an invalid length. [ 233.236959][T10067] netlink: 'syz.1.1090': attribute type 1 has an invalid length. [ 233.247428][ T9675] veth0_macvtap: entered promiscuous mode [ 233.275332][ T9675] veth1_macvtap: entered promiscuous mode [ 233.345156][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.386433][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.440947][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.464078][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.477990][ T55] block nbd1: Possible stuck request ffff8880252f5080: control (read@0,1024B). Runtime 60 seconds [ 233.488894][ T55] block nbd1: Possible stuck request ffff8880252f5240: control (read@1024,1024B). Runtime 60 seconds [ 233.500199][ T55] block nbd1: Possible stuck request ffff8880252f5400: control (read@2048,1024B). Runtime 60 seconds [ 233.508606][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.515916][ T55] block nbd1: Possible stuck request ffff8880252f55c0: control (read@3072,1024B). Runtime 60 seconds [ 233.555886][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.570961][T10074] netlink: 'syz.1.1092': attribute type 2 has an invalid length. [ 233.731987][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.760529][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.792257][T10093] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 233.846253][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.864721][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.117584][ T51] Bluetooth: hci7: command 0x041b tx timeout [ 234.378513][T10117] hsr0 speed is unknown, defaulting to 1000 [ 234.387243][T10117] lo speed is unknown, defaulting to 1000 [ 234.950585][T10148] __nla_validate_parse: 7 callbacks suppressed [ 234.950605][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 235.183354][T10158] tipc: Started in network mode [ 235.204941][T10158] tipc: Node identity 96612c8b2007, cluster identity 4711 [ 235.213091][T10158] tipc: Enabled bearer , priority 0 [ 235.231484][T10158] syzkaller0: entered promiscuous mode [ 235.242027][T10158] syzkaller0: entered allmulticast mode [ 235.317958][T10158] tipc: Resetting bearer [ 235.344604][T10152] tipc: Resetting bearer [ 235.351100][T10170] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1116'. [ 235.377729][T10152] tipc: Disabling bearer [ 235.504624][T10170] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1116'. [ 235.533568][T10176] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1118'. [ 235.619639][T10181] netlink: 'syz.6.1120': attribute type 1 has an invalid length. [ 235.643526][T10182] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 235.656239][T10182] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:0 [ 235.689130][T10178] tipc: Enabled bearer , priority 0 [ 235.704141][T10187] macvlan2: entered promiscuous mode [ 235.716395][T10187] macvlan2: entered allmulticast mode [ 235.723724][T10187] bond6: entered promiscuous mode [ 235.735349][T10187] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 235.750539][T10187] bond6: left promiscuous mode [ 235.836443][T10178] syzkaller0: entered promiscuous mode [ 235.842172][T10178] syzkaller0: entered allmulticast mode [ 235.864272][T10192] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 235.985842][T10188] tipc: Resetting bearer [ 236.011280][T10177] tipc: Resetting bearer [ 236.019694][T10204] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1126'. [ 236.098913][T10177] tipc: Disabling bearer [ 236.113180][ T5908] IPVS: starting estimator thread 0... [ 236.118265][T10208] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1129'. [ 236.211150][T10210] IPVS: using max 31 ests per chain, 74400 per kthread [ 236.334330][T10219] macvlan0: entered promiscuous mode [ 236.344455][T10219] batadv0: entered promiscuous mode [ 236.353765][T10219] debugfs: 'hsr0' already exists in 'hsr' [ 236.362900][T10219] Cannot create hsr debugfs directory [ 236.392535][T10219] macvlan0: left promiscuous mode [ 236.431929][T10219] batadv0: left promiscuous mode [ 236.499292][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1133'. [ 236.530027][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1133'. [ 236.556817][T10231] netlink: 'syz.7.1133': attribute type 14 has an invalid length. [ 236.572722][T10231] netlink: 'syz.7.1133': attribute type 13 has an invalid length. [ 236.752291][T10245] tipc: Enabled bearer , priority 13 [ 236.824212][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1139'. [ 236.876161][T10249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1139'. [ 236.914754][T10247] xfrm1: entered promiscuous mode [ 236.932361][T10247] xfrm1: entered allmulticast mode [ 237.116512][T10267] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 237.876866][ T5908] tipc: Node number set to 966970300 [ 238.161877][T10310] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 238.217240][T10314] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 244.563246][ T5207] udevd[5207]: worker [6939] /devices/virtual/block/nbd1 is taking a long time [ 263.559453][ T55] block nbd1: Possible stuck request ffff8880252f5080: control (read@0,1024B). Runtime 90 seconds [ 263.570557][ T55] block nbd1: Possible stuck request ffff8880252f5240: control (read@1024,1024B). Runtime 90 seconds [ 263.581614][ T55] block nbd1: Possible stuck request ffff8880252f5400: control (read@2048,1024B). Runtime 90 seconds [ 263.592834][ T55] block nbd1: Possible stuck request ffff8880252f55c0: control (read@3072,1024B). Runtime 90 seconds [ 293.637511][ T55] block nbd1: Possible stuck request ffff8880252f5080: control (read@0,1024B). Runtime 120 seconds [ 293.648718][ T55] block nbd1: Possible stuck request ffff8880252f5240: control (read@1024,1024B). Runtime 120 seconds [ 293.660299][ T55] block nbd1: Possible stuck request ffff8880252f5400: control (read@2048,1024B). Runtime 120 seconds [ 293.671437][ T55] block nbd1: Possible stuck request ffff8880252f55c0: control (read@3072,1024B). Runtime 120 seconds [ 296.471064][T10380] bond7: option all_slaves_active: invalid value (222) [ 296.518947][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1171'. [ 296.683308][T10380] bond7 (unregistering): Released all slaves [ 297.062806][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 297.072768][T10405] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1177'. [ 297.097967][T10408] netlink: 'syz.7.1178': attribute type 178 has an invalid length. [ 297.184992][T10412] netlink: 'syz.1.1177': attribute type 2 has an invalid length. [ 297.389239][T10426] netlink: 'syz.4.1184': attribute type 6 has an invalid length. [ 297.486488][T10431] tipc: Enabled bearer , priority 12 [ 297.737808][T10449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1190'. [ 297.958446][T10468] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1190'. [ 298.118385][T10481] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1196'. [ 298.157732][T10468] 8021q: adding VLAN 0 to HW filter on device bond9 [ 298.165180][T10477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1195'. [ 298.193944][T10482] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 298.211401][T10469] hsr0 speed is unknown, defaulting to 1000 [ 298.230916][T10469] lo speed is unknown, defaulting to 1000 [ 298.523010][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1200'. [ 298.551383][T10502] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1200'. [ 298.685832][T10514] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1202'. [ 298.798644][T10519] netlink: 'syz.4.1203': attribute type 10 has an invalid length. [ 298.875982][T10523] netlink: 'syz.4.1203': attribute type 10 has an invalid length. [ 298.918895][T10519] batadv0: entered promiscuous mode [ 298.939073][T10519] batadv0: entered allmulticast mode [ 298.949034][T10519] bridge0: port 3(batadv0) entered blocking state [ 298.955769][T10519] bridge0: port 3(batadv0) entered disabled state [ 298.971194][T10519] bridge0: port 3(batadv0) entered blocking state [ 298.977968][T10519] bridge0: port 3(batadv0) entered forwarding state [ 299.248806][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 299.258398][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 299.514509][T10555] netlink: 'syz.4.1215': attribute type 10 has an invalid length. [ 299.526547][T10555] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 299.561157][T10555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.978529][T10583] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 300.015616][ T5908] lo speed is unknown, defaulting to 1000 [ 300.196300][T10595] sit0: entered promiscuous mode [ 300.224695][T10595] netlink: 'syz.1.1229': attribute type 1 has an invalid length. [ 300.457905][T10611] syz_tun: entered allmulticast mode [ 300.465334][T10613] netlink: 'syz.4.1234': attribute type 1 has an invalid length. [ 300.556126][T10613] bond10: entered promiscuous mode [ 300.562556][T10613] 8021q: adding VLAN 0 to HW filter on device bond10 [ 300.585216][T10610] syz_tun: left allmulticast mode [ 301.132509][T10645] tipc: Enabled bearer , priority 0 [ 301.187700][T10650] syzkaller0: entered promiscuous mode [ 301.193219][T10650] syzkaller0: entered allmulticast mode [ 301.298506][T10650] tipc: Resetting bearer [ 301.524583][T10674] tipc: Enabling of bearer rejected, failed to enable media [ 301.719843][T10685] __nla_validate_parse: 13 callbacks suppressed [ 301.719862][T10685] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1252'. [ 301.783565][T10688] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1252'. [ 301.823899][T10644] tipc: Resetting bearer [ 301.885226][T10644] tipc: Disabling bearer [ 302.068206][T10696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1254'. [ 302.166780][T10702] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 302.520436][T10710] syzkaller0: entered promiscuous mode [ 302.525969][T10710] syzkaller0: entered allmulticast mode [ 302.688094][T10727] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1264'. [ 302.756674][T10727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.798893][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'. [ 303.954760][T10766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1274'. [ 304.151256][T10768] syzkaller1: entered promiscuous mode [ 304.166436][T10768] syzkaller1: entered allmulticast mode [ 304.193112][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1279'. [ 304.236379][T10782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1279'. [ 304.389468][T10792] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1284'. [ 304.393191][T10790] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1283'. [ 304.437574][T10790] openvswitch: netlink: Missing key (keys=40, expected=80) [ 304.717962][T10807] IPVS: set_ctl: invalid protocol: 2 172.20.20.20:20004 [ 304.856145][T10815] netlink: 'syz.7.1291': attribute type 25 has an invalid length. [ 305.253618][T10832] bond11: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 305.276712][T10832] bond11 (unregistering): Released all slaves [ 306.597333][ T51] Bluetooth: hci7: link tx timeout [ 306.602901][ T51] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 306.744982][ T5157] Bluetooth: hci7: link tx timeout [ 306.745275][T10919] __nla_validate_parse: 14 callbacks suppressed [ 306.745289][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1322'. [ 306.751398][ T5157] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 306.762838][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1322'. [ 306.785093][ T5157] Bluetooth: hci7: link tx timeout [ 306.790721][ T5157] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 306.886375][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1322'. [ 306.906130][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1322'. [ 307.109709][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1328'. [ 307.348341][ T5157] Bluetooth: hci7: link tx timeout [ 307.353574][ T5157] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 307.371865][T10949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1331'. [ 307.420629][T10949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1331'. [ 307.441219][T10956] netlink: 'syz.3.1332': attribute type 1 has an invalid length. [ 307.521161][T10961] syz.7.1334: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 307.537786][T10961] CPU: 0 UID: 0 PID: 10961 Comm: syz.7.1334 Not tainted syzkaller #0 PREEMPT(full) [ 307.537812][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.537832][T10961] Call Trace: [ 307.537839][T10961] [ 307.537847][T10961] dump_stack_lvl+0x189/0x250 [ 307.537892][T10961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.537925][T10961] ? __pfx__printk+0x10/0x10 [ 307.537955][T10961] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 307.537981][T10961] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 307.538008][T10961] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 307.538036][T10961] warn_alloc+0x214/0x310 [ 307.538065][T10961] ? stack_depot_save_flags+0x40/0x860 [ 307.538096][T10961] ? __pfx_warn_alloc+0x10/0x10 [ 307.538125][T10961] ? kasan_save_track+0x4f/0x80 [ 307.538147][T10961] ? xskq_create+0x56/0x170 [ 307.538175][T10961] ? xsk_init_queue+0xb0/0x110 [ 307.538201][T10961] ? xsk_setsockopt+0x4dc/0x8d0 [ 307.538226][T10961] ? do_sock_setsockopt+0x17c/0x1b0 [ 307.538246][T10961] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 307.538271][T10961] ? do_syscall_64+0xfa/0x3b0 [ 307.538296][T10961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.538327][T10961] __vmalloc_node_range_noprof+0x125/0x12f0 [ 307.538386][T10961] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 307.538423][T10961] ? __kasan_kmalloc+0x93/0xb0 [ 307.538450][T10961] vmalloc_user_noprof+0xad/0xf0 [ 307.538478][T10961] ? xskq_create+0xbf/0x170 [ 307.538508][T10961] xskq_create+0xbf/0x170 [ 307.538540][T10961] xsk_init_queue+0xb0/0x110 [ 307.538569][T10961] xsk_setsockopt+0x4dc/0x8d0 [ 307.538597][T10961] ? __pfx_xsk_setsockopt+0x10/0x10 [ 307.538623][T10961] ? __pfx_aa_sk_perm+0x10/0x10 [ 307.538654][T10961] ? aa_sock_opt_perm+0xff/0x1b0 [ 307.538689][T10961] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 307.538717][T10961] ? __pfx_xsk_setsockopt+0x10/0x10 [ 307.538747][T10961] do_sock_setsockopt+0x17c/0x1b0 [ 307.538775][T10961] __x64_sys_setsockopt+0x13f/0x1b0 [ 307.538803][T10961] do_syscall_64+0xfa/0x3b0 [ 307.538822][T10961] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.538851][T10961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.538870][T10961] ? clear_bhb_loop+0x60/0xb0 [ 307.538894][T10961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.538913][T10961] RIP: 0033:0x7f385af8eec9 [ 307.538938][T10961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.538958][T10961] RSP: 002b:00007f385beac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 307.538980][T10961] RAX: ffffffffffffffda RBX: 00007f385b1e5fa0 RCX: 00007f385af8eec9 [ 307.538999][T10961] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 307.539010][T10961] RBP: 00007f385b011f91 R08: 0000000000000004 R09: 0000000000000000 [ 307.539023][T10961] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.539035][T10961] R13: 00007f385b1e6038 R14: 00007f385b1e5fa0 R15: 00007ffe77b35f68 [ 307.539066][T10961] [ 307.539079][T10961] Mem-Info: [ 307.794756][T10956] bond7: entered promiscuous mode [ 307.805813][ T5157] Bluetooth: hci7: link tx timeout [ 307.819161][T10961] active_anon:7076 inactive_anon:0 isolated_anon:0 [ 307.819161][T10961] active_file:2766 inactive_file:39962 isolated_file:0 [ 307.819161][T10961] unevictable:768 dirty:69 writeback:0 [ 307.819161][T10961] slab_reclaimable:12025 slab_unreclaimable:114512 [ 307.819161][T10961] mapped:47724 shmem:1365 pagetables:1544 [ 307.819161][T10961] sec_pagetables:0 bounce:0 [ 307.819161][T10961] kernel_misc_reclaimable:0 [ 307.819161][T10961] free:1273056 free_pcp:13478 free_cma:0 [ 307.824736][ T5157] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 307.903167][T10956] 8021q: adding VLAN 0 to HW filter on device bond7 [ 307.911412][T10961] Node 0 active_anon:28304kB inactive_anon:0kB active_file:11064kB inactive_file:159644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:190896kB dirty:276kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16100kB pagetables:5820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 307.944203][T10961] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 307.974988][T10961] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 307.984992][T10959] 8021q: adding VLAN 0 to HW filter on device bond7 [ 308.004912][T10961] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 308.017921][T10961] Node 0 DMA32 free:1186468kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28564kB inactive_anon:0kB active_file:11064kB inactive_file:159320kB unevictable:1536kB writepending:276kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:35392kB local_pcp:18564kB free_cma:0kB [ 308.060957][T10959] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 308.072256][T10959] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 308.087457][T10961] lowmem_reserve[]: 0 0 0 0 0 [ 308.103558][T10959] bond7: (slave wireguard0): making interface the new active one [ 308.106471][T10961] Node 0 [ 308.111620][T10959] wireguard0: entered promiscuous mode [ 308.113769][T10959] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 308.131566][T10961] Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.161157][T10961] lowmem_reserve[]: 0 0 0 0 0 [ 308.168030][T10961] Node 1 Normal free:3890228kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18956kB local_pcp:11244kB free_cma:0kB [ 308.202077][T10961] lowmem_reserve[]: 0 0 0 0 0 [ 308.207127][T10961] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 308.220306][T10961] Node 0 DMA32: 1251*4kB (UME) [ 308.263377][T10975] syzkaller1: entered promiscuous mode [ 308.274111][T10975] syzkaller1: entered allmulticast mode [ 308.284821][T10961] 565*8kB (UME) 127*16kB (UM) 344*32kB (UME) 50*64kB (UM) 24*128kB (UME) 8*256kB (UM) 3*512kB (UM) 7*1024kB (ME) 4*2048kB (ME) 278*4096kB (M) = 1186468kB [ 308.347038][T10961] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 308.396404][T10961] Node 1 [ 308.396443][ T5157] Bluetooth: hci7: link tx timeout [ 308.407633][ T5157] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 308.417638][T10961] Normal: 179*4kB (UE) 49*8kB (UME) 40*16kB (UME) 83*32kB (UME) 28*64kB (UME) 10*128kB (UME) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3890228kB [ 308.427907][T10989] netlink: 'syz.4.1338': attribute type 1 has an invalid length. [ 308.435513][T10961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.455943][T10961] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.465800][T10961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.475622][T10961] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.485193][T10961] 44089 total pagecache pages [ 308.490102][T10961] 0 pages in swap cache [ 308.494321][T10961] Free swap = 124996kB [ 308.498688][T10961] Total swap = 124996kB [ 308.502851][T10961] 2097051 pages RAM [ 308.506847][T10961] 0 pages HighMem/MovableOnly [ 308.511730][T10961] 423781 pages reserved [ 308.515888][T10961] 0 pages cma reserved [ 308.574718][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1339'. [ 308.679687][ T5157] Bluetooth: hci7: command 0x041b tx timeout [ 308.775668][T11007] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1342'. [ 308.790526][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1342'. [ 309.326363][T11038] unsupported nlmsg_type 40 [ 309.767809][T11056] hsr0 speed is unknown, defaulting to 1000 [ 309.807711][T11056] lo speed is unknown, defaulting to 1000 [ 309.985301][T11067] tipc: Started in network mode [ 309.998373][T11067] tipc: Node identity 52fd41fb860a, cluster identity 4711 [ 310.036452][T11067] tipc: Enabled bearer , priority 0 [ 310.052871][T11083] syzkaller0: entered promiscuous mode [ 310.075510][T11083] syzkaller0: entered allmulticast mode [ 310.163556][T11067] tipc: Resetting bearer [ 310.210561][T11065] tipc: Resetting bearer [ 310.270581][T11065] tipc: Disabling bearer [ 310.427835][T11094] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 310.570967][T11107] bond2: option mode: invalid value (133) [ 310.588260][T11107] bond2 (unregistering): Released all slaves [ 310.881956][T11133] netlink: 'syz.3.1372': attribute type 4 has an invalid length. [ 311.243824][T11154] netlink: 'syz.4.1377': attribute type 11 has an invalid length. [ 311.980669][T11163] __nla_validate_parse: 9 callbacks suppressed [ 311.980689][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1379'. [ 312.637063][T11172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1381'. [ 312.673136][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1383'. [ 312.685956][T11176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.717949][T11176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.745611][T11180] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1384'. [ 313.140934][T11205] hsr0 speed is unknown, defaulting to 1000 [ 313.185849][T11205] lo speed is unknown, defaulting to 1000 [ 313.411005][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1394'. [ 313.857253][T11244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1399'. [ 314.268277][T11261] netlink: 'syz.4.1405': attribute type 1 has an invalid length. [ 314.319891][T11263] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1405'. [ 315.453024][T11261] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 315.467003][T11264] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 315.483230][T11264] syzkaller0: Linktype set failed because interface is up [ 315.552618][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1406'. [ 317.029172][T11290] netlink: 'syz.7.1411': attribute type 1 has an invalid length. [ 317.083732][T11290] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1411'. [ 317.097799][T11296] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1413'. [ 317.107535][T11295] netlink: 'syz.4.1415': attribute type 4 has an invalid length. [ 317.116687][T11296] netlink: 212288 bytes leftover after parsing attributes in process `syz.3.1413'. [ 317.137678][T11296] netlink: zone id is out of range [ 317.361478][T11310] tipc: Enabled bearer , priority 0 [ 317.405162][T11312] lo: entered allmulticast mode [ 317.505354][T11317] pimreg3: entered allmulticast mode [ 317.576206][T11304] tipc: Disabling bearer [ 317.737102][T11327] tipc: Enabling of bearer rejected, failed to enable media [ 317.834827][T11333] netlink: 'syz.6.1423': attribute type 1 has an invalid length. [ 318.000463][T11340] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1424'. [ 318.215739][T11351] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1429'. [ 318.233871][T11347] batadv2: entered allmulticast mode [ 318.240078][T11349] netlink: 'syz.3.1426': attribute type 10 has an invalid length. [ 318.256296][T11351] netlink: 'syz.7.1429': attribute type 10 has an invalid length. [ 318.322661][T11351] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 318.558141][T11370] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1432'. [ 318.629465][T11372] netlink: 'syz.4.1433': attribute type 1 has an invalid length. [ 318.736153][T11375] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 318.750948][T11375] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 318.818741][T11383] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1436'. [ 318.828131][T11383] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1436'. [ 318.839788][T11380] sctp: [Deprecated]: syz.7.1434 (pid 11380) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.839788][T11380] Use struct sctp_sack_info instead [ 318.868301][T11380] sctp: [Deprecated]: syz.7.1434 (pid 11380) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.868301][T11380] Use struct sctp_sack_info instead [ 318.931725][T11386] netlink: 'syz.3.1437': attribute type 1 has an invalid length. [ 318.939816][T11386] netlink: 'syz.3.1437': attribute type 3 has an invalid length. [ 318.950128][T11386] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1437'. [ 318.987452][T11386] NCSI netlink: No device for ifindex 813332851 [ 319.205874][T11403] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1438'. [ 319.396645][ T5157] Bluetooth: hci7: command 0x041b tx timeout [ 320.134531][T11444] netlink: 'syz.4.1451': attribute type 1 has an invalid length. [ 320.202309][ T5157] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 320.213160][ T5157] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 320.222038][ T5157] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 320.233745][ T5157] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 320.242774][ T5157] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 320.453612][T11446] hsr0 speed is unknown, defaulting to 1000 [ 320.484242][T11446] lo speed is unknown, defaulting to 1000 [ 320.507163][T11463] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 320.821410][T11477] bridge3: entered promiscuous mode [ 320.828300][T11477] bridge3: entered allmulticast mode [ 321.046961][T11488] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 321.242684][T11505] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:28196 [ 321.452956][T11517] tipc: Enabled bearer , priority 10 [ 321.595658][T11520] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 321.635569][T11520] bond13 (unregistering): Released all slaves [ 321.678461][T11446] chnl_net:caif_netlink_parms(): no params data found [ 321.705654][T11530] netlink: 'syz.7.1473': attribute type 14 has an invalid length. [ 322.008478][T11446] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.017392][T11446] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.025103][T11446] bridge_slave_0: entered allmulticast mode [ 322.038683][T11446] bridge_slave_0: entered promiscuous mode [ 322.047815][T11446] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.055294][T11446] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.063161][T11446] bridge_slave_1: entered allmulticast mode [ 322.072054][T11446] bridge_slave_1: entered promiscuous mode [ 322.119289][T11446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.132833][T11446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.188727][T11446] team0: Port device team_slave_0 added [ 322.199316][T11446] team0: Port device team_slave_1 added [ 322.266059][T11446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.276187][T11446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.277286][ T51] Bluetooth: hci8: command tx timeout [ 322.307771][T11446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.386454][T11562] hsr0 speed is unknown, defaulting to 1000 [ 322.412075][T11562] lo speed is unknown, defaulting to 1000 [ 322.414604][T11446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.457848][T11446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.527692][T11446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.576671][ T5972] tipc: Node number set to 3060149387 [ 322.628784][T11570] __nla_validate_parse: 12 callbacks suppressed [ 322.628805][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1485'. [ 322.679860][T11569] vlan2: entered promiscuous mode [ 322.684948][T11569] bridge0: entered promiscuous mode [ 322.799542][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 322.935859][T11589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1490'. [ 323.129439][T11446] hsr_slave_0: entered promiscuous mode [ 323.141473][T11446] hsr_slave_1: entered promiscuous mode [ 323.167527][T11446] debugfs: 'hsr0' already exists in 'hsr' [ 323.173307][T11446] Cannot create hsr debugfs directory [ 323.671621][T11603] team0: Device vti2 is of different type [ 323.718857][ T55] block nbd1: Possible stuck request ffff8880252f5080: control (read@0,1024B). Runtime 150 seconds [ 323.729707][ T55] block nbd1: Possible stuck request ffff8880252f5240: control (read@1024,1024B). Runtime 150 seconds [ 323.741914][ T55] block nbd1: Possible stuck request ffff8880252f5400: control (read@2048,1024B). Runtime 150 seconds [ 323.753560][ T55] block nbd1: Possible stuck request ffff8880252f55c0: control (read@3072,1024B). Runtime 150 seconds [ 324.061837][T11446] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 324.076460][T11446] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 324.114944][T11446] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 324.143499][T11446] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 324.143807][T11647] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1508'. [ 324.320787][T11446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.341902][T11667] validate_nla: 1 callbacks suppressed [ 324.341917][T11667] netlink: 'syz.6.1511': attribute type 30 has an invalid length. [ 324.360402][ T51] Bluetooth: hci8: command tx timeout [ 324.382823][T11446] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.477109][T11675] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1513'. [ 324.492872][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.499073][T11675] netlink: 'syz.4.1513': attribute type 16 has an invalid length. [ 324.500104][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.523734][T11675] netlink: 'syz.4.1513': attribute type 3 has an invalid length. [ 324.524399][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.533833][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1513'. [ 324.538716][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.577934][T11446] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.589047][T11446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.928759][T11446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.198268][T11694] [ 325.200643][T11694] ====================================================== [ 325.207671][T11694] WARNING: possible circular locking dependency detected [ 325.214724][T11694] syzkaller #0 Not tainted [ 325.219144][T11694] ------------------------------------------------------ [ 325.226167][T11694] syz.3.1518/11694 is trying to acquire lock: [ 325.232238][T11694] ffffffff8de20648 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720 [ 325.241841][T11694] [ 325.241841][T11694] but task is already holding lock: [ 325.249192][T11694] ffff8880247f1e18 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 325.259467][T11694] [ 325.259467][T11694] which lock already depends on the new lock. [ 325.259467][T11694] [ 325.270212][T11694] [ 325.270212][T11694] the existing dependency chain (in reverse order) is: [ 325.279221][T11694] [ 325.279221][T11694] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 325.287825][T11694] lock_acquire+0x120/0x360 [ 325.292843][T11694] blk_alloc_queue+0x538/0x620 [ 325.298122][T11694] __blk_mq_alloc_disk+0x15c/0x340 [ 325.303761][T11694] nbd_dev_add+0x46c/0xae0 [ 325.308700][T11694] nbd_init+0x168/0x1f0 [ 325.313375][T11694] do_one_initcall+0x233/0x820 [ 325.318738][T11694] do_initcall_level+0x104/0x190 [ 325.324192][T11694] do_initcalls+0x59/0xa0 [ 325.329047][T11694] kernel_init_freeable+0x334/0x4b0 [ 325.334762][T11694] kernel_init+0x1d/0x1d0 [ 325.339615][T11694] ret_from_fork+0x436/0x7d0 [ 325.344713][T11694] ret_from_fork_asm+0x1a/0x30 [ 325.350428][T11694] [ 325.350428][T11694] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 325.357637][T11694] lock_acquire+0x120/0x360 [ 325.362668][T11694] fs_reclaim_acquire+0x72/0x100 [ 325.368136][T11694] prepare_alloc_pages+0x153/0x610 [ 325.373763][T11694] __alloc_frozen_pages_noprof+0x123/0x370 [ 325.380135][T11694] __alloc_pages_noprof+0xa/0x30 [ 325.385592][T11694] pcpu_populate_chunk+0x182/0xb30 [ 325.391221][T11694] pcpu_alloc_noprof+0xcbf/0x1720 [ 325.396758][T11694] bpf_map_alloc_percpu+0xbc/0x1b0 [ 325.402465][T11694] prealloc_init+0x225/0x630 [ 325.407568][T11694] htab_map_alloc+0x6ce/0xc70 [ 325.412752][T11694] map_create+0xaa6/0x1640 [ 325.417685][T11694] __sys_bpf+0x5f0/0x860 [ 325.422450][T11694] __x64_sys_bpf+0x7c/0x90 [ 325.427381][T11694] do_syscall_64+0xfa/0x3b0 [ 325.432423][T11694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.438825][T11694] [ 325.438825][T11694] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 325.446547][T11694] validate_chain+0xb9b/0x2140 [ 325.451823][T11694] __lock_acquire+0xab9/0xd20 [ 325.457008][T11694] lock_acquire+0x120/0x360 [ 325.462024][T11694] __mutex_lock+0x187/0x1350 [ 325.467123][T11694] pcpu_alloc_noprof+0x286/0x1720 [ 325.472747][T11694] sbitmap_init_node+0x1e1/0x630 [ 325.478198][T11694] sbitmap_queue_init_node+0x3e/0x4d0 [ 325.484078][T11694] blk_mq_init_tags+0x15c/0x2d0 [ 325.489511][T11694] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 325.495504][T11694] blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 325.501822][T11694] nbd_start_device+0x17f/0xb10 [ 325.507197][T11694] nbd_genl_connect+0x135b/0x18f0 [ 325.512733][T11694] genl_family_rcv_msg_doit+0x212/0x300 [ 325.518799][T11694] genl_rcv_msg+0x60e/0x790 [ 325.523814][T11694] netlink_rcv_skb+0x205/0x470 [ 325.529086][T11694] genl_rcv+0x28/0x40 [ 325.533577][T11694] netlink_unicast+0x82c/0x9e0 [ 325.538858][T11694] netlink_sendmsg+0x805/0xb30 [ 325.544219][T11694] __sock_sendmsg+0x219/0x270 [ 325.549454][T11694] ____sys_sendmsg+0x505/0x830 [ 325.554728][T11694] ___sys_sendmsg+0x21f/0x2a0 [ 325.559912][T11694] __x64_sys_sendmsg+0x19b/0x260 [ 325.565398][T11694] do_syscall_64+0xfa/0x3b0 [ 325.570413][T11694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.576822][T11694] [ 325.576822][T11694] other info that might help us debug this: [ 325.576822][T11694] [ 325.587037][T11694] Chain exists of: [ 325.587037][T11694] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 325.587037][T11694] [ 325.600681][T11694] Possible unsafe locking scenario: [ 325.600681][T11694] [ 325.608117][T11694] CPU0 CPU1 [ 325.613575][T11694] ---- ---- [ 325.618937][T11694] lock(&q->q_usage_counter(io)#51); [ 325.624314][T11694] lock(fs_reclaim); [ 325.630805][T11694] lock(&q->q_usage_counter(io)#51); [ 325.638696][T11694] lock(pcpu_alloc_mutex); [ 325.643190][T11694] [ 325.643190][T11694] *** DEADLOCK *** [ 325.643190][T11694] [ 325.651328][T11694] 6 locks held by syz.3.1518/11694: [ 325.656525][T11694] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 325.664721][T11694] #1: ffffffff8f12a3e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 325.673692][T11694] #2: ffff8880247e41c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0 [ 325.685098][T11694] #3: ffff8880247e40d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0 [ 325.696060][T11694] #4: ffff8880247f1e18 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 325.706866][T11694] #5: ffff8880247f1e50 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 325.717865][T11694] [ 325.717865][T11694] stack backtrace: [ 325.723753][T11694] CPU: 0 UID: 0 PID: 11694 Comm: syz.3.1518 Not tainted syzkaller #0 PREEMPT(full) [ 325.723772][T11694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 325.723783][T11694] Call Trace: [ 325.723792][T11694] [ 325.723800][T11694] dump_stack_lvl+0x189/0x250 [ 325.723825][T11694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.723844][T11694] ? __pfx__printk+0x10/0x10 [ 325.723869][T11694] ? print_lock_name+0xde/0x100 [ 325.723893][T11694] print_circular_bug+0x2ee/0x310 [ 325.723915][T11694] check_noncircular+0x134/0x160 [ 325.723936][T11694] validate_chain+0xb9b/0x2140 [ 325.723963][T11694] __lock_acquire+0xab9/0xd20 [ 325.723985][T11694] ? pcpu_alloc_noprof+0x286/0x1720 [ 325.724006][T11694] lock_acquire+0x120/0x360 [ 325.724019][T11694] ? pcpu_alloc_noprof+0x286/0x1720 [ 325.724046][T11694] __mutex_lock+0x187/0x1350 [ 325.724062][T11694] ? pcpu_alloc_noprof+0x286/0x1720 [ 325.724080][T11694] ? stack_depot_save_flags+0x41b/0x860 [ 325.724106][T11694] ? kasan_save_track+0x4f/0x80 [ 325.724123][T11694] ? __kasan_kmalloc+0x93/0xb0 [ 325.724140][T11694] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 325.724159][T11694] ? blk_mq_init_tags+0x83/0x2d0 [ 325.724177][T11694] ? pcpu_alloc_noprof+0x286/0x1720 [ 325.724196][T11694] ? blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 325.724211][T11694] ? nbd_start_device+0x17f/0xb10 [ 325.724229][T11694] ? nbd_genl_connect+0x135b/0x18f0 [ 325.724248][T11694] ? __pfx___mutex_lock+0x10/0x10 [ 325.724262][T11694] ? netlink_sendmsg+0x805/0xb30 [ 325.724280][T11694] ? ___sys_sendmsg+0x21f/0x2a0 [ 325.724297][T11694] ? __x64_sys_sendmsg+0x19b/0x260 [ 325.724321][T11694] pcpu_alloc_noprof+0x286/0x1720 [ 325.724348][T11694] sbitmap_init_node+0x1e1/0x630 [ 325.724365][T11694] ? __kasan_kmalloc+0x93/0xb0 [ 325.724385][T11694] sbitmap_queue_init_node+0x3e/0x4d0 [ 325.724403][T11694] blk_mq_init_tags+0x15c/0x2d0 [ 325.724423][T11694] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 325.724448][T11694] ? blk_mq_update_nr_hw_queues+0x928/0x1ab0 [ 325.724464][T11694] ? kfree+0x18e/0x440 [ 325.724482][T11694] blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 325.724505][T11694] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 325.724528][T11694] ? sysfs_add_file_mode_ns+0x259/0x300 [ 325.724554][T11694] nbd_start_device+0x17f/0xb10 [ 325.724575][T11694] ? device_create_file+0xf4/0x1c0 [ 325.724596][T11694] nbd_genl_connect+0x135b/0x18f0 [ 325.724619][T11694] ? __pfx_nbd_genl_connect+0x10/0x10 [ 325.724641][T11694] ? __nla_parse+0x40/0x60 [ 325.724657][T11694] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 325.724682][T11694] genl_family_rcv_msg_doit+0x212/0x300 [ 325.724707][T11694] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 325.724739][T11694] ? stack_trace_save+0x9c/0xe0 [ 325.724761][T11694] genl_rcv_msg+0x60e/0x790 [ 325.724783][T11694] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.724803][T11694] ? __pfx_nbd_genl_connect+0x10/0x10 [ 325.724827][T11694] netlink_rcv_skb+0x205/0x470 [ 325.724841][T11694] ? __lock_acquire+0xab9/0xd20 [ 325.724856][T11694] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.724877][T11694] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 325.724899][T11694] ? down_read+0x1ad/0x2e0 [ 325.724916][T11694] genl_rcv+0x28/0x40 [ 325.724935][T11694] netlink_unicast+0x82c/0x9e0 [ 325.724962][T11694] ? __pfx_netlink_unicast+0x10/0x10 [ 325.724986][T11694] ? netlink_sendmsg+0x642/0xb30 [ 325.725001][T11694] ? skb_put+0x11b/0x210 [ 325.725019][T11694] netlink_sendmsg+0x805/0xb30 [ 325.725040][T11694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.725057][T11694] ? aa_sock_msg_perm+0xf1/0x1d0 [ 325.725079][T11694] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 325.725103][T11694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.725119][T11694] __sock_sendmsg+0x219/0x270 [ 325.725143][T11694] ____sys_sendmsg+0x505/0x830 [ 325.725164][T11694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.725185][T11694] ? import_iovec+0x74/0xa0 [ 325.725205][T11694] ___sys_sendmsg+0x21f/0x2a0 [ 325.725224][T11694] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.725256][T11694] ? __fget_files+0x2a/0x420 [ 325.725277][T11694] ? __fget_files+0x3a0/0x420 [ 325.725302][T11694] __x64_sys_sendmsg+0x19b/0x260 [ 325.725321][T11694] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 325.725344][T11694] ? rcu_is_watching+0x15/0xb0 [ 325.725363][T11694] ? do_syscall_64+0xbe/0x3b0 [ 325.725381][T11694] do_syscall_64+0xfa/0x3b0 [ 325.725396][T11694] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.725420][T11694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.725435][T11694] ? clear_bhb_loop+0x60/0xb0 [ 325.725453][T11694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.725469][T11694] RIP: 0033:0x7fac3b58eec9 [ 325.725484][T11694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.725499][T11694] RSP: 002b:00007fac397f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.725516][T11694] RAX: ffffffffffffffda RBX: 00007fac3b7e5fa0 RCX: 00007fac3b58eec9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 325.725528][T11694] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 325.725539][T11694] RBP: 00007fac3b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 325.725549][T11694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.725559][T11694] R13: 00007fac3b7e6038 R14: 00007fac3b7e5fa0 R15: 00007fff3c795608 [ 325.725577][T11694] [ 326.362827][T11446] veth0_vlan: entered promiscuous mode [ 326.374103][T11446] veth1_vlan: entered promiscuous mode [ 326.387222][ T51] block nbd2: Receive control failed (result -32) [ 326.393873][ T51] block nbd2: Receive control failed (result -32) [ 326.393980][T11446] veth0_macvtap: entered promiscuous mode [ 326.412868][T11446] veth1_macvtap: entered promiscuous mode [ 326.427234][T11446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.436739][ T5157] Bluetooth: hci8: command tx timeout [ 326.448094][T11694] nbd2: detected capacity change from 0 to 127 [ 326.463351][T11446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.481638][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.718031][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.748327][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.782159][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.169131][ T36] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.242706][ T36] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.323521][ T36] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.380275][ T36] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.484083][ T36] bridge_slave_1: left allmulticast mode [ 327.489890][ T36] bridge_slave_1: left promiscuous mode [ 327.495610][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.505878][ T36] bridge_slave_0: left allmulticast mode [ 327.512111][ T36] bridge_slave_0: left promiscuous mode [ 327.518541][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.893198][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.908660][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.920174][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 327.932186][ T36] bond0 (unregistering): Released all slaves [ 327.943533][ T36] bond1 (unregistering): Released all slaves [ 328.002501][ T36] tipc: Left network mode [ 328.250904][ T36] hsr_slave_0: left promiscuous mode [ 328.257575][ T36] hsr_slave_1: left promiscuous mode [ 328.263719][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.273485][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.289741][ T36] veth1_macvtap: left promiscuous mode [ 328.295299][ T36] veth0_macvtap: left promiscuous mode [ 328.301387][ T36] veth1_vlan: left promiscuous mode [ 328.307283][ T36] veth0_vlan: left promiscuous mode [ 328.520028][ T36] team0 (unregistering): Port device team_slave_1 removed [ 328.552240][ T36] team0 (unregistering): Port device team_slave_0 removed [ 328.837039][ T31] INFO: task syz.5.366:7346 blocked for more than 143 seconds. [ 328.844626][ T31] Not tainted syzkaller #0 [ 328.849939][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.858879][ T31] task:syz.5.366 state:D stack:25992 pid:7346 tgid:7339 ppid:6753 task_flags:0x400140 flags:0x00080002 [ 328.871137][ T31] Call Trace: [ 328.874429][ T31] [ 328.877446][ T31] __schedule+0x1798/0x4cc0 [ 328.881973][ T31] ? __lock_acquire+0xab9/0xd20 [ 328.886945][ T31] ? __lock_acquire+0xab9/0xd20 [ 328.891798][ T31] ? __pfx___schedule+0x10/0x10 [ 328.896755][ T31] ? schedule+0x91/0x360 [ 328.901007][ T31] schedule+0x165/0x360 [ 328.905149][ T31] schedule_preempt_disabled+0x13/0x30 [ 328.910764][ T31] __mutex_lock+0x7e6/0x1350 [ 328.915379][ T31] ? __mutex_lock+0x5bb/0x1350 [ 328.920391][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 328.926311][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 328.931863][ T31] ? __asan_memset+0x22/0x50 [ 328.936540][ T31] ? ____sys_sendmsg+0x505/0x830 [ 328.941489][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 328.946326][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 328.951758][ T31] nfsd_nl_listener_set_doit+0x137/0x1690 [ 328.957755][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 328.963498][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 328.969854][ T31] ? __nla_parse+0x40/0x60 [ 328.974282][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 328.980667][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 328.986251][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 328.992655][ T31] ? bpf_lsm_capable+0x9/0x20 [ 328.998069][ T31] ? security_capable+0x7e/0x2e0 [ 329.003033][ T31] genl_rcv_msg+0x60e/0x790 [ 329.007674][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.012716][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 329.019118][ T31] netlink_rcv_skb+0x205/0x470 [ 329.023897][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.028784][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.033833][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.039197][ T31] ? down_read+0x1ad/0x2e0 [ 329.043619][ T31] genl_rcv+0x28/0x40 [ 329.047890][ T31] netlink_unicast+0x82c/0x9e0 [ 329.052672][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 329.058173][ T31] ? netlink_sendmsg+0x642/0xb30 [ 329.063128][ T31] ? skb_put+0x11b/0x210 [ 329.067417][ T31] netlink_sendmsg+0x805/0xb30 [ 329.072187][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.077765][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 329.082753][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.088114][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.093410][ T31] __sock_sendmsg+0x219/0x270 [ 329.098131][ T31] ____sys_sendmsg+0x505/0x830 [ 329.102899][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.108488][ T31] ? import_iovec+0x74/0xa0 [ 329.113020][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 329.117755][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.122966][ T31] ? __fget_files+0x2a/0x420 [ 329.127630][ T31] ? __fget_files+0x3a0/0x420 [ 329.132340][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 329.137525][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.142977][ T31] ? rcu_is_watching+0x15/0xb0 [ 329.147769][ T31] ? do_syscall_64+0xbe/0x3b0 [ 329.152469][ T31] do_syscall_64+0xfa/0x3b0 [ 329.157117][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.162354][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.168730][ T31] ? clear_bhb_loop+0x60/0xb0 [ 329.173407][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.179328][ T31] RIP: 0033:0x7f6df178eec9 [ 329.183832][ T31] RSP: 002b:00007f6df2657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.192408][ T31] RAX: ffffffffffffffda RBX: 00007f6df19e6090 RCX: 00007f6df178eec9 [ 329.200582][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 329.208706][ T31] RBP: 00007f6df1811f91 R08: 0000000000000000 R09: 0000000000000000 [ 329.216868][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.224852][ T31] R13: 00007f6df19e6128 R14: 00007f6df19e6090 R15: 00007ffc9ed9e658 [ 329.233087][ T31] [ 329.236182][ T31] INFO: lockdep is turned off. [ 329.241454][ T31] NMI backtrace for cpu 0 [ 329.241471][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 329.241492][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 329.241503][ T31] Call Trace: [ 329.241509][ T31] [ 329.241516][ T31] dump_stack_lvl+0x189/0x250 [ 329.241544][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.241565][ T31] ? __pfx__printk+0x10/0x10 [ 329.241595][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 329.241621][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 329.241646][ T31] ? __pfx__printk+0x10/0x10 [ 329.241673][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 329.241690][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 329.241715][ T31] watchdog+0xf93/0xfe0 [ 329.241732][ T31] ? watchdog+0x1de/0xfe0 [ 329.241748][ T31] kthread+0x711/0x8a0 [ 329.241773][ T31] ? __pfx_watchdog+0x10/0x10 [ 329.241789][ T31] ? __pfx_kthread+0x10/0x10 [ 329.241814][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.241842][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.241870][ T31] ? __pfx_kthread+0x10/0x10 [ 329.241894][ T31] ret_from_fork+0x436/0x7d0 [ 329.241914][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 329.241934][ T31] ? __switch_to_asm+0x39/0x70 [ 329.241958][ T31] ? __switch_to_asm+0x33/0x70 [ 329.241981][ T31] ? __pfx_kthread+0x10/0x10 [ 329.242004][ T31] ret_from_fork_asm+0x1a/0x30 [ 329.242035][ T31] [ 329.242042][ T31] Sending NMI from CPU 0 to CPUs 1: [ 329.390237][ C1] NMI backtrace for cpu 1 [ 329.390257][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 329.390277][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 329.390288][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 329.390322][ C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 c9 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 329.390338][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 329.390355][ C1] RAX: 9cbd6090d5de7800 RBX: ffffffff81953917 RCX: 9cbd6090d5de7800 [ 329.390376][ C1] RDX: 0000000000000001 RSI: ffffffff8b9ec4c0 RDI: ffffffff81953917 [ 329.390389][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 329.390402][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f5b8630 [ 329.390416][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d7b58 [ 329.390429][ C1] FS: 0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000 [ 329.390443][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.390456][ C1] CR2: 0000558ffe7ce660 CR3: 000000000db36000 CR4: 00000000003526f0 [ 329.390472][ C1] Call Trace: [ 329.390480][ C1] [ 329.390487][ C1] default_idle+0x13/0x20 [ 329.390507][ C1] default_idle_call+0x73/0xb0 [ 329.390527][ C1] do_idle+0x1e7/0x510 [ 329.390549][ C1] ? __pfx_do_idle+0x10/0x10 [ 329.390575][ C1] cpu_startup_entry+0x44/0x60 [ 329.390593][ C1] start_secondary+0x101/0x110 [ 329.390609][ C1] common_startup_64+0x13e/0x147 [ 329.390640][ C1] [ 329.391819][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 329.563374][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 329.573174][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 329.583921][ T31] Call Trace: [ 329.587317][ T31] [ 329.590263][ T31] dump_stack_lvl+0x99/0x250 [ 329.594863][ T31] ? __asan_memcpy+0x40/0x70 [ 329.599639][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.604848][ T31] ? __pfx__printk+0x10/0x10 [ 329.609451][ T31] vpanic+0x281/0x750 [ 329.613434][ T31] ? __pfx_vpanic+0x10/0x10 [ 329.617928][ T31] ? rcu_is_watching+0x15/0xb0 [ 329.622681][ T31] ? preempt_schedule+0xae/0xc0 [ 329.627529][ T31] ? preempt_schedule_common+0x83/0xd0 [ 329.632991][ T31] panic+0xb9/0xc0 [ 329.636704][ T31] ? __pfx_panic+0x10/0x10 [ 329.641119][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 329.646482][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 329.652633][ T31] watchdog+0xfd2/0xfe0 [ 329.656781][ T31] ? watchdog+0x1de/0xfe0 [ 329.661100][ T31] kthread+0x711/0x8a0 [ 329.665168][ T31] ? __pfx_watchdog+0x10/0x10 [ 329.670185][ T31] ? __pfx_kthread+0x10/0x10 [ 329.674771][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.679967][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.685169][ T31] ? __pfx_kthread+0x10/0x10 [ 329.689755][ T31] ret_from_fork+0x436/0x7d0 [ 329.694342][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 329.699450][ T31] ? __switch_to_asm+0x39/0x70 [ 329.704222][ T31] ? __switch_to_asm+0x33/0x70 [ 329.709000][ T31] ? __pfx_kthread+0x10/0x10 [ 329.713603][ T31] ret_from_fork_asm+0x1a/0x30 [ 329.718373][ T31] [ 329.721821][ T31] Kernel Offset: disabled [ 329.726135][ T31] Rebooting in 86400 seconds..