last executing test programs: 45.251740409s ago: executing program 3 (id=1134): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="02070009022d0000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 44.99307908s ago: executing program 3 (id=1139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@bridge_getneigh={0x9c, 0x1e, 0x2, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x22}, [@IFLA_OPERSTATE={0x5, 0x10, 0x40}, @IFLA_PORT_SELF={0x60, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, 'gtp\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_PROFILE={0x8, 0x2, '*-\'\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ab1112ad92b27ba718db4ce3760fb942"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3895a9d3bd06b68cd268bb454c71b1ef"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2f911136ab135ab55dc3329932eaf970"}]}, @IFLA_MASTER={0x8}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x9c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f00000032c0)={0x20, r6, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) 44.885495344s ago: executing program 3 (id=1142): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000b91b7100000000000000009500000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x47, 0x6, 0x4) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r5, &(0x7f00000002c0)=ANY=[@ANYRES32=r4], 0xa) 44.756683945s ago: executing program 3 (id=1147): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xe000}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x92}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008861}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x1e}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x400401c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r2) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c51) sendmmsg(r4, &(0x7f00000041c0)=[{{&(0x7f00000005c0)=@ll={0x11, 0x1, 0x0, 0x1, 0x1}, 0x80, &(0x7f0000002980)=[{&(0x7f0000000640)="a848e352d5728053e4bb710a950bfe6de905a07ac9e40c580b07682556582583a016e613eb86f94d9773c5d68c59d8c05a13beaf8e4ee1da6f93c466c64021b1806669e0660c2ce67c20b085fdbb04abc495c8ed5aa42e4d5918288b3928720c101f14bb17f21092c41987", 0x6b}, {&(0x7f00000006c0)="11045513817c8c6a0fab4d9607383abc22ea6a3aa0ae37945817e19bc3bcfe66881762ee3a1a837d0a497958d3d6ccafdbd676437597a24fe8766b4bb06f7a52859b47ec628a6f54273fb09e2d19565b0a03f8d6de0c62e2aa921203c7864a4b8a4b7b4cb8ab15cb00a04e83fa434c4081053b53e2a0f52e82e54567b1847f79720ddd666b", 0x85}, {&(0x7f0000000780)="de6cdf7a71ff712c687d366bbfb26e99e479c2c2b7ca20d056601a1c815906ffb0924c6a419b0d4d59033ee7e117f2b86b05637aba3973c842b47bb960048b9fdcca22d9271b23ab3c12ce009e7e6ee805869400250783dc2a1d1db12a658f0fb7b6bebcc0d70ac8ca1113db387fdb86d3cf8c2cbf2ad4320a5eb38042b4d6ba60ae44476db580850f8eeece517085eae553b512c37e94e528cd5ae0d8538f67979c92e3ef314bc98f57364fba7d8ef6b2fb61689d4ed11615639ae4744fad47e7d82883a49441baab682d0b99220c37073fd5a36517d02819cb7e5897f3f79670ac7a9ce2454cf6b50777ecb810b9d8ae1d816a22f488c9b5bdfb3ab12350de07c4f44fe3763842b91c8d745632f21f9823f14290f2f60a5506dfdd89a4419130b0f345811957cd998ee50f1060675c93c88a142460fea9e303440997a5a375bb49d077df60256eef701a2189e1d6e3cd2a09e3a39c862e1f62f657b7f5d92070f67f19dab98ef847d266000300d80f629b7230c655e20936b417b4560263e7dfdfd7f5521683fab6ab7599932d3acf08f7210a1dfa0f584669a2ac7ddfbe66c554e77a788abeb597a834c3c13e60bc4e13bd4268eded507454edff3d1522bd440c1489f3d77643232583ae9f8c42bdd9acf1afbb4f1a52be007caf88268d1be354d6dcdca0d3f31283061e07cf8850ad52483e58e0acd50e18f5b1073c8dc32228755441eea3639f2b0070d2537338547310a5bf5dc8bddd0108efffc587195e48c21f5ce64d000d4dddbeeaeb86eb2442b4bacccb65e11914db9dba262c68fde14b845870a080ae1e5627a98dd3265b00b081fb5eda987bcdd6868457b6b44faca57ae314c8efab55ceb60a268fbd9933b937e3fb8ae45862eee7590a0088a1ae06b3ccd4a33c0c749cf9cb48bacfed425a912ec6dfc6ae3164d59e1fcd17992ad1482540a54b6a1469402becc8c4ec59550d81fc66e8d3b45a5f29504e17720dcf7e1a73b6b762872f257e189bf68dd039d3b4c80a81a2d7a5c5627647a26b1ef35e653cd529e1adcfcd1f0d11726f9967995a7185fbc06c64de7297361fed3f35376fa4a93b2c4467b02f963240bf839013a21205b9c7390f75c07f9b5a107cf6b53a001873260b0da2120cfd8e5833ec27362d0f66cc8ca674b2e281f6989edf960019c11ae9910194ae73feda867e4c6e78e03a553da959084af96bdbeb4f4f93f733a094b408412cb877764fd840ef366cd91f1df68b33575a4bb7bf6e8c793a503ac824733e71ff48c16693512bc32a13ca7d873f517d349e6fbe7518bdb939f25434ce36c952edb774029a42a20e74e5ab6ec4ad616b2036040c39bb6b7230c610f4aebb3ab55e5f015fb0b3e53e96d3fc7cec6c793b8627e2007ad564c68bea37c2c02c187039f29d454f9a8d28105874941b92835a4dadde73d6c65613e02419271ca4f530251dd2538533aa829e255cf41d8f1944a5c55254764dd30d83ea195629de4ae8af02033d7506012cb2045452d674a2ba95c99f27e0e32e10c8c7092021ead2aaad433b322f49e1dc3877aceecf33de4309d03c372102fcd28d5d1c43da813e1a2c5cbd32c04efbf50ff1c0f17e96bcf841f24090d4989b5f4b1cbada2c6bd34a1d43e037db0223474505b61ce2384edc2c25742a63759db01b9bb34a2ca5967827c171951976c93eb597cdecb09c0c4fd7446e295146e71df188ae9b1a1a7c177646c5c2a66c75a3562b51f54d10a9210f68608a015fb9980a6b77398860097207cfe2b1edbd2ff6f552c9fd71f190ee0e58c0b5de7a6bd64e51fdbfff2ffbc4853975a25f301b6395dc8b02fbd1fe555a756be9c69203289c11db1456a4bf3fc2bd6148e14786a7c14cf49af900840f4b2549a5a993f96091eeda7d33844370d9a3da1197794ac86b394d05e18e4eb11d457a5a1f6e7e194cdc20e71a149b8f72a0027df6a5930f75a062d50a1491b4dbacf717423d45b0300f0933178aa35f0b4defcee90884c295792b21a7b91148fc00c5d7cf7ae2ba475ec7d105733ae28a9f244fb0e2c10b28fcd60988d6ff9ec3202d4d8069c65d36e93862a0b9de39084ebabe0291351d8acba7cc91a54ed471c2fd853033e5aff391f475688c82a86ad1cff4db2d22e4abd4e9fe78dade3d10778d57caab7768e9498798333b447da5835b5af78188dfbbfac0c26d619b1bfa8946ae5ecba34b2aa5d139bd35865db55cd51b9dabd09afc998dc781d0e04567a4bddc1d460d1191f90fb5c61171be02e96b994036bc0ab80583f50fb7de911db717b1d8ed8d2bed84606aaad7bf73ceef98ff8ecaf01c3ea9d13e7734584054c4f479cacab216fa8ef68cb454fd41b6dee96c1e4469f7b58462e0a7ba443928aa75d0b218184d899f994d0b7963bf8c3732f420b1571a31f44c9604e4b644b3c7d74552adb44e68453fb08bc6f02bfa8053ee9b7c5fd54ff6dbb7f95db11f2b48df8f569df1813a44a5d43764ef6c1752f9d988547a2bb5aaaed6aeb769aecedefb336979dd3e805f1e15a40e5305ff820ca7ce94ea2d00b7363734408a1bc214adaca1de9f7a686a95dadde9781262c04bec1bd36efa767c9a1f4a665795c615e6d77b5743da0574d216278a43e7144956ab9a4d3d02645bf681a757007f16c29e4a13ab0c0b5bb6c583250b7b63cb925a77e1f351220878865b3ba92c19e939d95f9291f28d2e19be27e336731bfdb60dd6c050717463ef29f08c38644866ff84920017a5fae68f019665eb2a1edd03bc0c4afde18387d7a57adc5a2b8004069252639fcaa4f651dc67ab9f7329e4b644ceeae5bd2aeecb1b4ac41c7accd7f298962be02d8fe45929f2419cbcbd6d1a17c898db6087fa66654d8d49acec6cdd29c9546a0ec2897c7bb449e99af44ef22eac152a84063a5669a6eca3ad16262dcf8d1094f12017381ad7f01279936a7dd2b03ed7fc2945103626802bbdead460457c1f0183628b6af103abcc0fc1669509c2049d3cefafef724af005c8535ea2a1205611b5274cebf32abcebd5a503711d95cb9c8bc8051c7832e4c12775ed1141b843853f7bc7d9b24391c206e175be55760a632bef26bbe03ff8c37cdbc0bb922b1dce62036d72a4f002fdf66632d298c4c9bd225d006a85114d437d47d6f4b494fad728ce08e7414f519bcef9709d06201c54bb084dc890539b04dfc8eed92f0e989dfcb7b9e557cf9ec15d30aac15fb7db94d8e313473ad1ad86d6e567e2ebc9e1b028ea2694b471c6f10838239ed14a7aab843fb6d6137f98002d4dbb25378059ca79ed4c7907f46ddccfa897791b6b0a70694116f2f01334a232a4db490d284e2f58366debe56d8b6f97d53dce3acdd0992c380c3a41a0bb157adda062c8733ce2dcbc4fce051759440bc7d66b496fb4403fb6de8222286b470797bab11ebe746a16f4329af6551b5dd3893539fd5d8cb17fb6f762f9fcaae857ccf65c95d0cd4e3e3163f9d208ca3baa902416662c785ad0c65e63f34b47027d0d29d01cac70d6c87e14c5edaa1cc9a748da306b96884bf930478e437df87db5b73249fc99b10fe1ea210bef738a0f1fdd7efbaff05e0a115fa6e2d5e407030ac4302f545fce808fbf7215dd9fbdd7a4b3e824ee35c6c334afc1cc0e90cbf2720d3fb5f134e9444f7b91923dbf1f0c291103fff4226516f468b867c4cc11e8a8a79b300f464c37ff4e9a40e531b0f15f9fbff212a504aeb6539dd33873b6375b03b266978e38df5cb6b588ee8a895609c9cfce0ede9ec0e91613b875f1ba075a31f4a6f85903a66156eff85a133be5da71158c615d9570945c0568c17681d947a7ea7bb51c5e0f140b21e966a5c8b9a9be62001f9a6e0a3dee21d644c30d928f0933c537bd3e2e821db1528eb0371ca8817f4666e848fc9ece9a8cf8d26b433f94591ce9ae1bc7c7c10af9d2d43fff5f2b7688c006fdddff08a5014be83606eadf991127cdbec00e7ed24ad3d8e2fe693c96c8f31d1df1de8f29f8262be23b1f7aa89cb8e90dee913c97031b602c9aebe3ab46d60e89a54d9d4321e5d9c3ffd518ea330e8dbf62ceae4d1036628d6e185368fae7eada251a1396d41292b886d6c781abbcf3562c98dde75144ff65bf707fa284b1123abc1f128cc907878bb6a3c4ef074e68a817ae35901bade2ce8ab0f2ab0f1202ca6de77848df0b8eb56d89b6ba22b5af8ceda70148ead64ce618ae8475244986b68a472146628a21ba439749212a735b7c4ac68cbc26ed9d07195a66747c34ecfe7de460a0d47bf9f73eb462329e04da535ff1d16891e2142f3ecd74cd577975609b7ebf2303f57cbd97cc56880b588e543b0f620177091523e1970ef6003d9f288f876de2c6961ada5f0c930db27464f3e56ff25517a243f48983f9aa13334134061ed8cbdb8014dee2511e2ca7df881e6a8f6ea933946fe8e2dd53149a236c97d1c1749023f43e6698334982bc5ab66b6ae48d287373d0695c3abfeb70e082b68adc59a9f6e210f1d7cdaf3594b99a578a38b0a4ca882794b4c8a7c4e32ab47e9d80669d54e7beca76314b22ba565e3ac9bb82b92d11bb7f150c49a9ccc8b95d434144d4805d8d84421b61eb0db281661241fdaa34ed1377c30c66172f09121c6661da453118a7a5614a4e0c6dd638935fd4d359fae7b6dfd2b0caef93fb994ae7bcf63a2a0863ed76e6b7f08374d88475a79fa889a8be3666562e56a8a6c69892293038453b17a8b2eacad42ebd7ccdaaac38c07176ce3783e18bd9739abd6192b4097f4ee90e87331edd1694c24f08fbc829d29eb0bf143d0ec8a6edaedc651d733470f41bcb76d2c276653b67e12da64f94bf63fbd73dcfd4c91176da77a749fa0d854f9f560c88d6e25ba459ee7048c7735dc5570faadcba78f60ca2423fa4277cd28aa34b2669cdb3dbd270ea164c4bcd77d3b7742de3ca9a4509a5318355dc5256ccbfc94256dc8ef565c01ee6f52129951980c24df4c2bee59c1fed3e8525cdc6b1bb78ca1b88fb6e6697b129ca9cf1f5f214e6325553f55e1e70a0a57ad71cb365899d2369886aeda4428887f1e804e01176ee7c9cfb5cdb39092b63cc97ed0233ab6301cdb07759ca0323115f1fe65625e3423002185f47091abbf9b20a4d0d3b6b6d0cece5132ade4ded1c52631c9b6162184c54a8ec358f0a22eb87bbec2cc71b6d56e09496d3ff7b0318747f75ac7a0a3fac0ee1b976a2da9071b413325a567ed6374963e27c86dacd5d163b4f24289394e0908281f68fe58ef48f21934fddda36f1fbfbe720d594c0adce13d1af67fa8b2e03bde14efe3f08bbd8c1dcf16c121d0d602c4c57a0bf109b67e205c5ca9c29257d15c8fed6e777a9c24fca207829719a1aa4f7529e3677777636c9974fd9502d92c34cdf981a164fa9313946ddb0df5d63a076b0b47dab6961fd904ac42109b230b23137b55ea0cbc936bd843e9efa3198fde6698ebb6f3ea4c94122ef4623260e34c8a662dc2089723964176ecd88a47b5125cd1d41ad1bce866447f4f24a3fbdb6d4a6257898d5d9489e47a3c5508e330c996fa9678e9792266475d58552d4ac0eeb3e79c6139641a5b7bbe792b3f297d8b5e7341ea83a1dedd3a3d024b65918d53c5517443b5f1120ba9e0e361ac8fe6d9815b8deee8abcb8f332ff9dee74ffc3a1d4ceb1f9dd200383c5cb33705df17a221cb6e06dae0b6c8040ed434fede22a3ec231176759957567546520a9b2fc5f716d58c458bf7136ac907787d34e55939a03f4e0751b9ff208543a9affb9fa469e1f4f823163", 0x1000}, {&(0x7f0000001780)="0dfe51dec227fde68055e5010046b3535d0a8e635f8fbea897f7d44496edf2cbd60400eceff356e383897bf9f5637190f3de67103eaf0aa22e3e1406ea25642f562c55ffdef871af443ebee728f3ea39c9d09215b3c827a479e9adff89bddd28afbd9142ec898fe7d279d4cb5b2e8028972138871f842468b6429cd772b527fbdd9e2ac3b50bf620be02f0185b456bfa0e0e3e31a23f2bff1ba305618dc32ebb1c0026836f70eaa3", 0xa8}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="2c6d297d82bba2d6523c6bd6df8485edb6f861692f30290f643fb20ffbdd163dcce56e146b33ee65dd3a142dbf82f7bf87e91f82b9ee4b6bdaac32fb82", 0x3d}, {&(0x7f0000002880)="6dd854ea87a5ff820ee2667bc5e3e5d771ad3bdc5f8fb5cd6ce33dcdf8c751a638974aa754d9794f033bfe24cf4c2e74e7fbcd98422df409dcd18155f8af7d3b421db092366f1ee8d7b18087b3e73d2a260f9982984901696a6722676d4f5c047e972633a731d93055aaa597f68e2c34c25f0edaafe63d05439e096dd9920da8832121b7a14400b8cd71fe4a8701b1e041714fc1e4b192f43146b5e6ef3ce623fdbf2d73b6cd6b389d9b706f742b270e4c1c0c9d1bb3575aaf7531275ef7ec96e7bf667f7d608ec9e55362ba56ea57a56986a31f", 0xd4}], 0x7, &(0x7f0000002a00)=[{0x1010, 0x104, 0x8, "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"}, {0x68, 0x84, 0x6, "56ebffdddce4d5191a1f325f56f52b06e50f06e490bfc7680440ea35cc7b87959a35390d780395d238f4c781e4513d1e3ce93d038e27a7e9ea524d225ab2edc268682301349f08b10365275ab91633d4e9e35eea7472c5"}, {0x88, 0x117, 0x80000000, "fc1906da1de9d2dbb609ab5b4af35bfc2cbaee91b690c1c3298c73ecb211a97f26cb05551d96a54d634a7ada98291c1e40ac21283a7e2a8eb17e8a03c2965c904029bfcfc7b724f0ae6178fde5ebc23eb1e9da12b88b87314fd070498c666f5bc83819838c9029e71059661e069488b673f5a219af0787"}, {0x110, 0x107, 0x2, "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"}, {0xb0, 0x10d, 0x5, "2129ab3879b36a3bd6264874aae8d2d94b344b5cde95578954357e8416c1e58519b357830e21ae143f89f4591823ba574554d9f26fa88b0996caa304b5cdf3d4e2c8d81c9b222ff4e8fbb13e04ca5fb8e16020fc6180bf9f885752376df9e6de24c77118792f7b4fd4d0f9d1915cb3520a15a5f0619341462ceb2cc3e12063d43d8df2e1e1e9faf2d29d267b5cd57628bc7ed2b2e3d0199d50"}], 0x12c0}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003cc0)="e4be6d0fe852bd43ad632fa80b4c357d5b2afab23cd2ea8ee7d57a2ae6bfefe54636f0ab8c05b4b65c2ed8655df32f0c8087e4bcb19eccca2420c847035fad", 0x3f}, {&(0x7f0000003d00)="893d7307a48e4970c3874372fc48f5bdd8d230c837bfe017a5fbb48bb4c45222c78084f9f2da7e1c54b0ec5a7f04e2c4afdb29c27d7601986667713379af89fd3ce3add4db7b424b92e6675e287a710d4a0227f358ae14849b512d739bb04b802c6533588eaf1f924d3e98a7cf7dfb5c8f7c6f24650f1aa4a5f601cdb4d413b66e0377221aabf842b8b8a812440070def80cec239cfffdb9c89542bb53edd01c9c17af7be0df7191dbee43d7e96ca5337e708add40386f9ad0597a18577f482035a0bdba33ba67d3ff6e71f7d890cb48f3d59ae053f8d9259e826bf8a7f7627b24fd9026c22b7a36bc7775307a0d40", 0xef}, {&(0x7f0000003e00)="688011784d9e1974736b17aaa01d6d4d0636a0e62b4cfc7f3c700a776cf6f389bd98781e80eeeee716d7e3d5f5859ef8cffd47a41608c9c6e2e8ce848ea3f5b601656c3d53fa06d519d42c2d196015a0b21cedf5c64c82be3a19b2955d1067982cf12af1419dd41751f8c3248e1ab19f4d34c2c5d3e96c20b1d330182a67bbab7d75ad8ee48fd18694620b699e2507c7f6238fa0e541ec19a0e9a08d204802cae20c79a3ff2dc03dce69f8ca1923357c1a0ed2b03f86ae22ae6575aa3325f68f875807ea763c35e0a410cbbd4f6e0b9b0cad0c35216b4b0e5d44780f61", 0xdd}, {&(0x7f0000003f00)="023e79d243be2537db6adeb7b593b90b4fc95ba3ccaa1f6f13c8abfa017821155e236708586662805895934f4bcdcca1bf51", 0x32}, {&(0x7f0000003f40)="ebc595d049e23f661eef1f31d6503e36c581513ac7afef36d906dbdc7adb2681af97fa334c553f00ef37dbcbba8c2f7a9133af85d1cd14ba7f4f82bbb61cc96c2b5f64c949e1acb5fe1d", 0x4a}, {&(0x7f0000003fc0)="e711158f94861ee8e01b85e64ddba0d07f7362042517894e41b9e166ede26784f3a2dc79e420ab6597823bf2e83fa56f4f2cab3840bde01366ed2d4e003189749990394ba85d4c19992a8a5c2baf9ebe87bcef9213279bf7e369d764265d7072bce634dad8db964a16c02b5f8b29e71507277cc37ace88748dc619deeb7b", 0x7e}], 0x6, &(0x7f00000040c0)=[{0xc8, 0x112, 0xaa8, "541de97214fb77cd491f6b4f95ae9fa62febc9595d953f612a66b57c169e90d0903f03d99a3455a55741023883ca3e567eff8ae99d1b4440ad28c92a609bbeadda6491b7113633f24913587b3729afa0bb2f72b54c203103f2da43b8bb25ecc7018ee507653608a8df00df0eed7b5cb702cd2f6968859fd3d0e0f381ca234b23fddf65135d120ed1f729604c1278700a7419efff6250eb3cee6d24363e805fbddfaf290aaba53fc6087aea252630a8eaa412aca227b10e5a"}], 0xc8}}], 0x2, 0x1) socket$qrtr(0x2a, 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004280), r1) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000004600)={&(0x7f0000004240), 0xc, &(0x7f00000045c0)={&(0x7f00000042c0)={0x300, r6, 0x305, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8de}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6a5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x81}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "fcd43d1aabc1e899289a2c71e8d0e2b9e64d38dd613d492d36152c31bfa63c919e9c6e44"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0xa, 0x3, "b49db1fffa7f"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x702370fd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9a9c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd13e}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd5c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdf5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000004640), 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000004680)={0x0, r7}, 0x8) r8 = socket(0x3, 0x6, 0x4) accept$phonet_pipe(r8, 0x0, &(0x7f00000046c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000004800)={'syztnl1\x00', &(0x7f0000004740)={'sit0\x00', 0x0, 0x7800, 0x7, 0x10000, 0xedd6, {{0x1a, 0x4, 0x0, 0x2a, 0x68, 0x68, 0x0, 0xa, 0x29, 0x0, @multicast2, @private=0xa010100, {[@rr={0x7, 0x7, 0xc1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp={0x44, 0x10, 0x34, 0x0, 0xf, [0xa, 0x2, 0x2]}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@loopback, 0x6}]}, @lsrr={0x83, 0x13, 0x52, [@multicast1, @multicast1, @loopback, @remote]}, @rr={0x7, 0x1b, 0x6f, [@broadcast, @rand_addr=0x64010102, @empty, @broadcast, @remote, @loopback]}]}}}}}) sendmsg$nl_route(r8, &(0x7f00000049c0)={&(0x7f0000004700), 0xc, &(0x7f0000004980)={&(0x7f0000004840)=@ipv6_newnexthop={0x11c, 0x68, 0x200, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x3}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x54, 0x2, [{0x0, 0xb}, {0x2, 0x4}, {0x2, 0x8}, {0x0, 0x7}, {0x1, 0x7}, {0x2, 0x6}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x6}, {0x1}]}, @NHA_GROUP={0x44, 0x2, [{0x0, 0x5}, {0x2}, {0x1}, {0x2, 0x3b}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x3}, {0x0, 0x9b}]}, @NHA_OIF={0x8, 0x5, r9}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x70}}, @NHA_GROUP={0x34, 0x2, [{0x1, 0x9}, {0x1, 0xb}, {0x1}, {0x0, 0xe}, {0x0, 0x2}, {0x2, 0x7}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}]}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x10008811) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r10 = accept(r4, 0x0, &(0x7f0000004a00)) recvmsg$unix(r10, &(0x7f0000004d40)={&(0x7f0000004a40)=@abs, 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000004ac0)=""/204, 0xcc}, {&(0x7f0000004bc0)=""/250, 0xfa}], 0x2, &(0x7f0000004d00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x2100) r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000004e40)={'\x00', &(0x7f0000004d80)=@ethtool_flash={0x33, 0x9, './file0\x00'}}) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004ec0), r11) sendmsg$TIPC_NL_BEARER_DISABLE(r12, &(0x7f0000005040)={&(0x7f0000004e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005000)={&(0x7f0000004f00)={0xc4, r14, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xad0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8602}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x39}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xca}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000005140)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005100)={&(0x7f00000050c0)={0x34, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 44.530089957s ago: executing program 3 (id=1148): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) 44.161080321s ago: executing program 3 (id=1153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820f0000f4ff0e0000000000a059bfda8fec4fbb", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x1, 0x40800) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1}, 0x40) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r5, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x54, r5, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3059}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f00000000c0)=0x1, 0x12) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="3c002d800a"], 0x5c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x28, r12, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x24008004) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0300000800"/18, @ANYRES32=r13, @ANYBLOB="0c009900f50000002a000000080005000a00000008001780040003001c00e700629928afd0c0b5e38724adc35b1d8ddc51b4ac1cfdcbfd3b1c00e7002c76a089185604fa5a33468a16596725d2682d70b523b0570a00e8000802110000010000"], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x4040000) r14 = syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711067000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0706000000000000000000000000080005000000000008000400ac14140008000100", @ANYRES32=0x0, @ANYBLOB="0c0003000000000000000000080002000002"], 0x40}}, 0x0) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000ec0)={0x2e0, r15, 0x8, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xe}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x16, 0x80}, {0x5}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x80000000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x7}}, {{@pci, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x40}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xa}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8000}, {0x8, 0xb, 0x5f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x54f033a8}, {0x6, 0x16, 0x2f}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfff}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x17f9}, {0x5}, {0x6, 0x11, 0xfffb}, {0x66, 0xb, 0xfffffffd}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x516d}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0xc}, {0x8, 0xb, 0xfffff7a4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80000}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x3}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) 29.156211584s ago: executing program 32 (id=1153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820f0000f4ff0e0000000000a059bfda8fec4fbb", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x1, 0x40800) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1}, 0x40) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r5, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x54, r5, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3059}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f00000000c0)=0x1, 0x12) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="3c002d800a"], 0x5c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x28, r12, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x24008004) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0300000800"/18, @ANYRES32=r13, @ANYBLOB="0c009900f50000002a000000080005000a00000008001780040003001c00e700629928afd0c0b5e38724adc35b1d8ddc51b4ac1cfdcbfd3b1c00e7002c76a089185604fa5a33468a16596725d2682d70b523b0570a00e8000802110000010000"], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x4040000) r14 = syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711067000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0706000000000000000000000000080005000000000008000400ac14140008000100", @ANYRES32=0x0, @ANYBLOB="0c0003000000000000000000080002000002"], 0x40}}, 0x0) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000ec0)={0x2e0, r15, 0x8, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xe}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x16, 0x80}, {0x5}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x80000000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x7}}, {{@pci, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x40}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xa}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8000}, {0x8, 0xb, 0x5f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x54f033a8}, {0x6, 0x16, 0x2f}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfff}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x17f9}, {0x5}, {0x6, 0x11, 0xfffb}, {0x66, 0xb, 0xfffffffd}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x516d}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0xc}, {0x8, 0xb, 0xfffff7a4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80000}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x3}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) 4.537292659s ago: executing program 4 (id=1632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x34, r1, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x2a}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4a9159ba}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x7a576142a49c96b3}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 4.201449901s ago: executing program 4 (id=1636): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r2, 0x8910, &(0x7f00000003c0)) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[], 0xfe33) 3.916166391s ago: executing program 4 (id=1641): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0008000103"], 0x42) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) r1 = socket(0x2d, 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x41, 0x0) (async) sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c99b01ab51f7506f1852108d46a3f5a031420c054a990047f3ebef87b78206b0a2494e7635c3b1feee9eebe9cb227f26a99a4e88fc31a16f1a8d5c3b31eedbcfb0a63e59bda5e2dabbf4134aa479b91ae761a0aed3ede5dd1521f00162042691ab376765913b8e0acff2693637", 0x6d}, {&(0x7f00000002c0)="f14cfc6c5f68f9d2c0da822cd4d7a99d691af0b555eb995cbe766f9715bb3052d154fb35886e52d4e55ee1cd784278c159747274b00bb06560378618d167254314e336ce53148da64ac0acd17a806ab934afb7db293f9dcd1b67c9182040fe468951fe687be49a0f979536bb0d9510ae2798a07d08416c79afc346af16b646d7d48669983383cba5d31bfc092862236f959a0971db2dabe09554799c2314a8cc650fe4ffb9170d5d328314d6db643a5b5ac4cab6182ae7a5880abfd88d7ab86e83379a507a6f502196", 0xc9}, {&(0x7f00000003c0)="8e5b1fcd8ef0409c29a8c6456840072200a876a7968a9d1424428ea496e48cf18306de2e786e28358306b9467b242cfe3042bc826c527103de5ec5a1ef2380a2def3111f30743c9e0e8a83a37f8afe1fe689991a18e4ea2aae8ada3b0ada3b7c718d5f4cbcd93640c6c2777e7e3b72a59577a9899d07b5f3b0a9580b90", 0x7d}], 0x3, &(0x7f0000000500)="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", 0x1000, 0x40000c0}, 0x0) unshare(0x6a040000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x407f}]}, 0x28}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r3) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf251b00000008001500020000000400190008000100", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60865160af36514000cc008002c0004000200060019c00600bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x9b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 3.658694352s ago: executing program 5 (id=1646): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x400}, @TCA_PIE_LIMIT={0x8, 0x2, 0xad3}, @TCA_PIE_BETA={0x8, 0x5, 0x19}]}}]}, 0x48}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x36, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x181}, 0x14}}, 0x0) 2.625340562s ago: executing program 5 (id=1655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r3, 0x4}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 1.920802325s ago: executing program 1 (id=1667): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="280000000b14010000e0ffffffffffff070001"], 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x20, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x1}, 0xe) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="280000000b14010000e0ffffffffffff070001"], 0x28}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x20, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) (async) pipe(&(0x7f0000000000)) (async) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x1}, 0xe) (async) 1.84754191s ago: executing program 1 (id=1668): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "000000001000000000040200050000ff"}}}]}, 0x48}}, 0x0) 1.799706725s ago: executing program 4 (id=1669): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0xa4, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdc01, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x88, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "dfeedc2634e7d49420f73e16e79faba0"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "182b048009ac43d69ae0c665b3224b62"}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x800}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) close(r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x44, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="80000000", @ANYRESHEX=0x0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES64=r6, @ANYBLOB="09000e0080000000ffffffffffff08021100001008021102000000000000000000953ec5f2b75c000000080001080100250300680200180026006c09000100000ce16300000028000d2e000000000a003000020202020202000008003500070000000500d3ebfe59660ab35d61a454e1c237204d91fee65f32e898de95284ab8e6936d7fbdfd1d6d5456dc4af3882c3ba524f4809388b99cd9589484b6373c2ffb4dee", @ANYRES64=r3, @ANYRES32=0x0], 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x48) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000007010000f6ffefcc545800000069a61ad0fda57b8a0000aa000000"], 0x2c}}, 0x0) sendmsg$key(r0, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100020e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) 1.717029492s ago: executing program 2 (id=1670): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) (async) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x110, 0xd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80}}], 0x30}, 0x0) 1.716550678s ago: executing program 1 (id=1671): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000057c0)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x509, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8f}, 0x1c, 0x0}}], 0x1, 0x20004808) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050001400000fedbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="050034008b00000008004b"], 0x2c}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x200) write(r4, &(0x7f0000000000)="14000000140005b7ffccca38b9000000060860eb", 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 1.658015182s ago: executing program 5 (id=1672): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x3e, &(0x7f00000003c0), &(0x7f0000000140)=0x32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x80000000, 0x1}}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x20, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0xfffffffe, 0x8}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x6, 0x0, r3, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) r4 = accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000100)=0x10, 0x80800) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f00000001c0)={{r2}, 0x3, &(0x7f0000000180)=[0x7, 0x101, 0x7], 0xaf4f}) 1.491710883s ago: executing program 2 (id=1673): r0 = socket$alg(0x26, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="620ac4ff0000000071104d000000000095427da7eb17d6e3dd062c5a3403268673f7af9268f1c65fe034fcb9cae113494b1484daadeaff"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000007c0)={&(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x1, 0x2, 0x2, 0xff, "d084ec49114bb8ec11fe38296223eb44df9008b2fb1d5b924e5ed448873ccbad6b6609f2c284224a5e40dd9b9586439b94a3f12a52f4fa7a6c989b7e086f6c", 0x18}, 0x80, 0x0}, 0x9cdc2384056b48b8) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x6, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280060006000000000005000700000000000800040000000000"], 0x4c}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee1}, 0x94) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, @in=@multicast2, 0x4e20, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0x8000000000000001}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb0, 0x5}}]}, 0x128}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0xb400, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES16=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000340)={@empty, @local, 0x0}, &(0x7f0000000780)=0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb01f71700bfe5935650a7b6da0e38e40e0000000000000c0000000c000000030000000c000000000e001010000000003e00"], &(0x7f0000000800)=""/54, 0x27, 0x36, 0x0, 0x7, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x1f, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x27fdb0e2, 0x0, 0x0, 0x0, 0x41}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @ldst={0x0, 0x0, 0x4, 0xb, 0xb, 0x50}, @generic={0xfc, 0x8, 0x9, 0x7f, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc27}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x6, 0x85, &(0x7f0000000400)=""/133, 0x41000, 0x40, '\x00', r9, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x0, 0x2, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000008c0)=[0xffffffffffffffff, r3], &(0x7f0000000900)=[{0x3, 0x2, 0x0, 0x1}, {0x4, 0x4, 0x6, 0x6}, {0x3, 0x5, 0x10, 0x9}, {0x1, 0x4, 0x6, 0x5}, {0x4, 0x1, 0x7, 0x6}, {0x2, 0x4, 0xa}, {0x2, 0x1, 0x5, 0xc}], 0x10, 0xa4e}, 0x94) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000020300000000002003033ff2d31cd6aebdd222000900000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r8) 1.425262845s ago: executing program 1 (id=1675): r0 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25d7dbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff3}, {0x4, 0xf}, {0xe, 0xa}}}, 0x24}}, 0x4000000) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/15, 0xf}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/113, 0x71}], 0x1}, 0x5}], 0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 1.373478757s ago: executing program 5 (id=1676): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x38bdd26a04bce190) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d4000000240001002abd7000fedbdf2544000000bd000e80ff"], 0xd4}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x40, 0x10, 0x668, 0x80000000, {{0x22, 0x4, 0x1, 0x4, 0x88, 0x64, 0x0, 0xc, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x4e, 0x3, [{0x5, 0x5, "189265"}, {0x1, 0x10, "66600b055cb318293c1c6b691226"}, {0x7, 0x2}, {0x7, 0x7, "2db44a7a78"}, {0x6, 0xc, "fffbe5bfe5015b1e1e75"}, {0x7, 0xf, "2ab26823086c76809ff10f2af5"}, {0x2, 0xf, "b80267962c814e6e16935caf55"}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @end, @generic={0x44, 0xc, "bacc63cab47f145ba2df"}, @timestamp_prespec={0x44, 0xc, 0x6e, 0x3, 0x9, [{@broadcast, 0x7}]}]}}}}}) sendmsg$kcm(r1, &(0x7f0000000640)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0xa}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="59b97630920ebc", 0x7}], 0x1, &(0x7f0000000600)=[{0x38, 0x11, 0xfffffffe, "8555fd47caa4418cb3562b2fcb01fff5f06933338088ed75d3d931e789e2a454b9ec22f73054"}], 0x38}, 0x811) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00'}) close(0x3) 1.3128162s ago: executing program 2 (id=1677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x0, 0x0, 0x6}, 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='objagg_obj_get\x00', r2, 0x0, 0x3e8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r6, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb0}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x40040d4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r7, &(0x7f00000001c0), 0x0}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', r7}, 0x18) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="81000007", @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x44800}, 0x4008014) 1.145152642s ago: executing program 4 (id=1679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x4a24, @multicast2}, {0x2, 0x4e21, @empty}, 0x40, 0x0, 0x0, 0x0, 0x2009, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x48}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) write$nci(r7, &(0x7f0000000600)=ANY=[@ANYBLOB="c976aa15a46aded5c632a9f2c1259063799d5a030b3bda2dfae21a0829e775508ca5d36035465e5c54ee7d000000000000000a9ced85a860179efc4825c1e7b2dc4cc2d5d41bc1f54c"], 0x4) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000440)=ANY=[@ANYBLOB="4dd54cb9d7fbf707a35d9be35c31c98ad6ba465d08ab67dc73173db580bba523ec7b2f116307969226cda078b1a637fdc20336287021ef14ce35b51ecf6073e0446ddaf5ea88dceb04c0026bc8f4321dbc49983a50ac"]) close(r11) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r12) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYBLOB="a10e496a6888e1a65909bf88a1ad1d928c2ee5324c40f7533af39eaf54c79580e79192ce7e85d0f52da6f5facf9e3e3e10a0b5b527e45cb0158aa86f754bbfb16faa0c5414b8116ea8765d4bd28a31029a69e9"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1.144655373s ago: executing program 2 (id=1680): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@noop, @lsrr={0x83, 0x3, 0x77}]}}, @address_request={0x11, 0x0, 0x0, 0x576}}}}}, 0x0) r3 = getpid() write$cgroup_pid(r2, &(0x7f0000000080)=r3, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000280), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r7, &(0x7f00000002c0)={'veth0_to_bridge', 0x32, 0x34}, 0x12) r8 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) sendfile(r8, r2, 0x0, 0x9) 991.903233ms ago: executing program 2 (id=1681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r4 = accept(r1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x40000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff9d, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 708.577624ms ago: executing program 0 (id=1683): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x53, &(0x7f0000000000)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x14, 0x8, 0x6, 0x801}, 0x14}}, 0x0) (async) close(r1) 641.228757ms ago: executing program 0 (id=1684): socket$packet(0x11, 0x2, 0x300) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x8bcd0000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 553.381489ms ago: executing program 0 (id=1685): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000400)}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, 0x0}, 0x108) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x8081) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) 457.04841ms ago: executing program 0 (id=1686): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x23}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x104}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000884) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000008710000003000000180000000000000000000000000000009400000000000000750a00000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_NAT_DST={0xa4, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x840) 446.791139ms ago: executing program 1 (id=1687): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xd, 0x3}, {0xf, 0x4}, {0x6, 0x4}]}]}, {0x0, [0x6b121cd38562c97f, 0x61, 0x5f, 0x61]}}, &(0x7f0000000540)=""/149, 0x42, 0x95, 0x0, 0x1000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) (async) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r3) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000640), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000228bd93000edcdf25010000000800020001000000080001000200000008000100ffffffff0c0004800500030007000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r4, @ANYRES16=r8, @ANYBLOB="01000000000000000000f3ffffff1700018014000200776c616e31000000000000000000000008000700008000006193cbb9049f2d21cfdf33259012c1bbe654551f1e5ae1"], 0x34}, 0x1, 0x0, 0x0, 0x20060881}, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200), 0xffffffc1) (async) r10 = socket(0x10, 0x803, 0x0) sendfile(r10, r9, &(0x7f0000000000)=0x10, 0x1000) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x20, 0x1, 0xa, 0x3, {{0x6, 0x4, 0x2, 0x16, 0x18, 0x66, 0x0, 0x0, 0x29, 0x0, @broadcast, @rand_addr=0x64010100, {[@end]}}}}}) (async) unshare(0x20000400) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r11, 0x6, 0x21, &(0x7f0000000380)="4000000000220006908a00000400", 0x10) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r11, 0x6, 0x21, &(0x7f0000000140)="5f96565e14027386aa93a303c44b5b3b", 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x3, 0x2, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7, 0x8000, 0x9, 0x9}}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@dev}, &(0x7f0000000500)=0xffffffffffffffea) 353.291967ms ago: executing program 5 (id=1688): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r1, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) 210.996378ms ago: executing program 1 (id=1689): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 188.736273ms ago: executing program 5 (id=1690): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async, rerun: 32) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="44000000090601026000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f0000014aee386bae78619e23b7b62d4e7dced229187ebbc4059da7886c556e4f4cced984d3de2f055bc609d3975ce6b4a4aba55eb0c299f72a866c6795383faf92e9dc7ecb001d69456e9ebd015578eb9a5c5d9cc2b258f6788f963a8d354883d759d3c425ca3068d64e5cf172e365cfc7d1ca103a5dd3c1c89a9affd8a22508a572e2cb608ef6"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x87, @empty, 0x4e20, 0x4, 'rr\x00', 0x8, 0x2, 0x1d}, 0x2c) (async, rerun: 64) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x48d1}, 0x40080f1) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES8=r1], 0xc4}, 0x1, 0x0, 0x0, 0x44000}, 0x10) (async, rerun: 32) connect$bt_l2cap(r0, 0x0, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000040)=0x401, 0x4) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000001100010000000000000000000400000008"], 0x30}], 0x1}, 0x0) (async, rerun: 64) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) (rerun: 64) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) (async, rerun: 64) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}}, [0x9, 0x5, 0x7, 0x1, 0x4, 0x6, 0x6, 0x4, 0xc35, 0x5, 0x2, 0x0, 0xe, 0x6, 0xcec3]}, &(0x7f0000000140)=0x100) sendmmsg$inet6(r6, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x4e24, 0x8, @remote}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000440)="447333088a909e11603695644e0aa895de19b40489f752ff2069a210424ad2a11bc536e87c19cc25a9a80db2a4d87481018907154c17b991de799abf3854d53a423e74ca5e0fd6c40eb5508a7165cfb66d85fadde5abb8efd40d60cb07c868084a905652064f0a0cc45eeb1e3982e1e4125a2baf44d39e573cebf327345b83e8ed", 0x81}, {&(0x7f0000000700)="d25ef488966a90fe93c896373adf49020c7e574918a3d36092bfc8e2f635c50edbca5e861dcb575032c66e64cd59598b63f1e4650ac7d09f69c6e88d2b0983c94ea31aa100dd1d78838968b158b2696dd297507cbbfa01a20847c816b904d60edb60d6c189dadbea03cae93384cc4fce472cead91210abaff57799e41ccdaeeb1878e9a37d6203ecbf78c68dc329070b62cd88d0ab455949b9dbbd3bd4bd8b123af40b8adf7e71d0f772a23b2722f8519f7a8faa6be9a15ea9666cb6ce9d2beb9dc1cf3f59ba85c5767578aefb923e827f619c2e2a4bfacacdb871fee035c6bd645cbbaa4b31f0ee7a5819ecb810431df3d6052c", 0xf4}], 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000014000000000000002900000043000000030000000000000078000000000000002900000039000000040c00a900000000ff020000000000000000000000000001ff020020000000000000000000000001fe80000000000000000000000000001bfc02000000000000000001ea02000000000000000000000000000100000000000000000000ffff64010100"], 0x158}}], 0x1, 0x840) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0x83, 0x0, &(0x7f0000000080)=0xb0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r10) socket$nl_netfilter(0x10, 0x3, 0xc) 133.37202ms ago: executing program 0 (id=1691): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x100, 0x5, 0x2}) getsockname$qrtr(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x8001, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4}}}, &(0x7f0000000240)=0x90) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x800, 0x2, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) (async) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r6 = accept4(r2, 0x0, 0x0, 0x0) (async) sendfile(r4, r0, &(0x7f0000000200)=0xf52, 0x4) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) recvmmsg$unix(r2, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1}}], 0x1, 0x2, 0x0) r7 = socket(0x1e, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2d, &(0x7f0000000180), 0x4) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x1c, 0x29, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1716c2e9"]}]}, 0x1c}}, 0x0) (async) pipe(&(0x7f00000000c0)) 132.467129ms ago: executing program 4 (id=1692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, 0x0, 0x0, 0x8080, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)='$', 0x1}], 0x1}}], 0x1, 0x4004804) (async) sendmmsg$inet(r3, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000bc0)='9', 0x1}], 0x1}}], 0x1, 0xc8c0) sendmmsg$inet(r4, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="f8ba", 0x2}], 0x1}}], 0x1, 0x4020) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x50, r9, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="418cb04d5101"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r10 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r10, &(0x7f0000000080)="800037bbfa9ba189", 0x8, 0xfa068fc268af028d, 0x0, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 54.47689ms ago: executing program 0 (id=1693): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) close(r1) (async, rerun: 32) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) (rerun: 32) 0s ago: executing program 2 (id=1694): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) shutdown(r0, 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x18, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="1803d58463ba57a20000006a0001000000000000000000", @ANYRES16=r1, @ANYRESOCT=r0], 0x18}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. [ 88.399974][ T5852] cgroup: Unknown subsys name 'net' [ 88.549431][ T5852] cgroup: Unknown subsys name 'cpuset' [ 88.559134][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.313107][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.078831][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.096370][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.115205][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.126263][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.129416][ T5883] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.142637][ T5883] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.143258][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.152191][ T5883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.163932][ T5882] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.165225][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.179910][ T5884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.182810][ T5883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.188186][ T5884] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.195672][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.202795][ T5884] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.211751][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.217274][ T5884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.223329][ T5882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.231727][ T5884] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.237676][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.244441][ T5884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.251629][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.265842][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.272834][ T5884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.281045][ T5884] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.091563][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 94.134954][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 94.240532][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 94.433117][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.440770][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.449414][ T5866] bridge_slave_0: entered allmulticast mode [ 94.457058][ T5866] bridge_slave_0: entered promiscuous mode [ 94.481157][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 94.499797][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.507336][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.514517][ T5866] bridge_slave_1: entered allmulticast mode [ 94.523182][ T5866] bridge_slave_1: entered promiscuous mode [ 94.530974][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 94.631053][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.638757][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.646070][ T5863] bridge_slave_0: entered allmulticast mode [ 94.653557][ T5863] bridge_slave_0: entered promiscuous mode [ 94.674896][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.682137][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.690170][ T5862] bridge_slave_0: entered allmulticast mode [ 94.697650][ T5862] bridge_slave_0: entered promiscuous mode [ 94.707036][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.714217][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.721604][ T5862] bridge_slave_1: entered allmulticast mode [ 94.729875][ T5862] bridge_slave_1: entered promiscuous mode [ 94.774332][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.781701][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.790018][ T5863] bridge_slave_1: entered allmulticast mode [ 94.797719][ T5863] bridge_slave_1: entered promiscuous mode [ 94.845223][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.860081][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.927990][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.961922][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.975573][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.993804][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.008686][ T5866] team0: Port device team_slave_0 added [ 95.018117][ T5866] team0: Port device team_slave_1 added [ 95.168837][ T5863] team0: Port device team_slave_0 added [ 95.177504][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.186647][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.193917][ T5864] bridge_slave_0: entered allmulticast mode [ 95.203390][ T5864] bridge_slave_0: entered promiscuous mode [ 95.214161][ T5862] team0: Port device team_slave_0 added [ 95.223976][ T5862] team0: Port device team_slave_1 added [ 95.232846][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.240616][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.268068][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.279868][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.287545][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.294867][ T5865] bridge_slave_0: entered allmulticast mode [ 95.302206][ T5865] bridge_slave_0: entered promiscuous mode [ 95.313124][ T5863] team0: Port device team_slave_1 added [ 95.334478][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.342141][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.350287][ T5884] Bluetooth: hci2: command tx timeout [ 95.350325][ T5882] Bluetooth: hci0: command tx timeout [ 95.356404][ T5878] Bluetooth: hci4: command tx timeout [ 95.361635][ T5882] Bluetooth: hci3: command tx timeout [ 95.367799][ T5878] Bluetooth: hci1: command tx timeout [ 95.379319][ T5864] bridge_slave_1: entered allmulticast mode [ 95.387787][ T5864] bridge_slave_1: entered promiscuous mode [ 95.430015][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.437529][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.464391][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.475679][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.482820][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.490420][ T5865] bridge_slave_1: entered allmulticast mode [ 95.497815][ T5865] bridge_slave_1: entered promiscuous mode [ 95.587171][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.594252][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.620758][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.636802][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.646989][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.653977][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.681141][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.720150][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.727371][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.754488][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.775893][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.785882][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.793040][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.819536][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.838486][ T5866] hsr_slave_0: entered promiscuous mode [ 95.845159][ T5866] hsr_slave_1: entered promiscuous mode [ 95.856146][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.909365][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.982205][ T5864] team0: Port device team_slave_0 added [ 95.992446][ T5864] team0: Port device team_slave_1 added [ 96.089468][ T5862] hsr_slave_0: entered promiscuous mode [ 96.096536][ T5862] hsr_slave_1: entered promiscuous mode [ 96.102987][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 96.108955][ T5862] Cannot create hsr debugfs directory [ 96.146892][ T5865] team0: Port device team_slave_0 added [ 96.172387][ T5863] hsr_slave_0: entered promiscuous mode [ 96.180144][ T5863] hsr_slave_1: entered promiscuous mode [ 96.186794][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 96.192644][ T5863] Cannot create hsr debugfs directory [ 96.234099][ T5865] team0: Port device team_slave_1 added [ 96.274111][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.281599][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.310137][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.358543][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.365598][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.392440][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.410920][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.418237][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.463812][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.477614][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.489902][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.521106][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.751986][ T5865] hsr_slave_0: entered promiscuous mode [ 96.758980][ T5865] hsr_slave_1: entered promiscuous mode [ 96.765751][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 96.771606][ T5865] Cannot create hsr debugfs directory [ 96.860534][ T5864] hsr_slave_0: entered promiscuous mode [ 96.867486][ T5864] hsr_slave_1: entered promiscuous mode [ 96.873626][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 96.879537][ T5864] Cannot create hsr debugfs directory [ 97.066671][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.113919][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.149497][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.183796][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.293553][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.306367][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.318865][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.373320][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.425502][ T5884] Bluetooth: hci2: command tx timeout [ 97.425511][ T5878] Bluetooth: hci1: command tx timeout [ 97.436839][ T5871] Bluetooth: hci4: command tx timeout [ 97.436888][ T5871] Bluetooth: hci0: command tx timeout [ 97.437016][ T5878] Bluetooth: hci3: command tx timeout [ 97.513976][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.541456][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.552139][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.566073][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.664182][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.704232][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.718237][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.756318][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.766231][ T10] cfg80211: failed to load regulatory.db [ 97.881574][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.901148][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.926900][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.941197][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.952177][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.965168][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.002113][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.048040][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.055477][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.081060][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.152180][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.159436][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.169806][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.177051][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.219068][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.226255][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.330590][ T5866] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.341273][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.443611][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.461550][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.549213][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.570224][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.610995][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.618352][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.668289][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.676172][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.707823][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.715038][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.731936][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.772547][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.779812][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.900521][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.918767][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.966714][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.978928][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.986139][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.001044][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.008308][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.069903][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.274296][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.314310][ T5866] veth0_vlan: entered promiscuous mode [ 99.373358][ T5866] veth1_vlan: entered promiscuous mode [ 99.396426][ T5863] veth0_vlan: entered promiscuous mode [ 99.479218][ T5863] veth1_vlan: entered promiscuous mode [ 99.505676][ T5878] Bluetooth: hci3: command tx timeout [ 99.508309][ T5882] Bluetooth: hci4: command tx timeout [ 99.511194][ T5871] Bluetooth: hci1: command tx timeout [ 99.517388][ T5881] Bluetooth: hci2: command tx timeout [ 99.527858][ T5884] Bluetooth: hci0: command tx timeout [ 99.589775][ T5866] veth0_macvtap: entered promiscuous mode [ 99.684297][ T5866] veth1_macvtap: entered promiscuous mode [ 99.733431][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.748134][ T5863] veth0_macvtap: entered promiscuous mode [ 99.783196][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.823795][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.834210][ T5863] veth1_macvtap: entered promiscuous mode [ 99.881241][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.932851][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.953253][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.988269][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.023059][ T3000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.033400][ T3000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.073722][ T3000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.120969][ T3000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.132956][ T3000] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.168508][ T3000] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.178607][ T3000] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.217954][ T3000] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.233827][ T5865] veth0_vlan: entered promiscuous mode [ 100.270721][ T5864] veth0_vlan: entered promiscuous mode [ 100.299771][ T5865] veth1_vlan: entered promiscuous mode [ 100.349246][ T5864] veth1_vlan: entered promiscuous mode [ 100.409798][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.428143][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.430393][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.451047][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.504305][ T5864] veth0_macvtap: entered promiscuous mode [ 100.554474][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.565768][ T5865] veth0_macvtap: entered promiscuous mode [ 100.572065][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.573721][ T5862] veth0_vlan: entered promiscuous mode [ 100.602753][ T5864] veth1_macvtap: entered promiscuous mode [ 100.626174][ T5865] veth1_macvtap: entered promiscuous mode [ 100.634254][ T3031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.638742][ T5862] veth1_vlan: entered promiscuous mode [ 100.672530][ T3031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.692109][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.741174][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.759870][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.787526][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.804279][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.879562][ T3000] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.891137][ T3000] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.960419][ T3000] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.975617][ T3000] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.019555][ T5862] veth0_macvtap: entered promiscuous mode [ 101.029712][ T3000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.040656][ T3000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.080361][ T5992] Zero length message leads to an empty skb [ 101.089362][ T5862] veth1_macvtap: entered promiscuous mode [ 101.125700][ T3000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.143118][ T3000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.290829][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.359228][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.454216][ T78] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.515894][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 101.539524][ T3031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.561169][ T78] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.571789][ T3031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.578914][ T78] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.588885][ T5881] Bluetooth: hci1: command tx timeout [ 101.588933][ T5881] Bluetooth: hci3: command tx timeout [ 101.595816][ T5884] Bluetooth: hci2: command tx timeout [ 101.606389][ T5881] Bluetooth: hci0: command tx timeout [ 101.611815][ T5881] Bluetooth: hci4: command tx timeout [ 101.640826][ T78] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.658765][ T3031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.670330][ T3031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.773962][ T6008] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 101.791695][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.799813][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.955029][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.967022][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.978786][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.987425][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.138673][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.167773][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.557834][ T6029] netlink: 81 bytes leftover after parsing attributes in process `syz.0.14'. [ 102.624211][ T6029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.647950][ T6031] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 102.770721][ T6031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 102.784100][ T6038] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 103.077017][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'. [ 103.168769][ T5884] block nbd0: Receive control failed (result -32) [ 103.272003][ T6045] netlink: 'syz.4.21': attribute type 1 has an invalid length. [ 103.311990][ T6045] netlink: 228 bytes leftover after parsing attributes in process `syz.4.21'. [ 103.338721][ T6051] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.392735][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 103.445178][ T6053] ip6erspan0: entered promiscuous mode [ 103.464114][ T6053] ip6erspan0: entered allmulticast mode [ 103.479357][ T6056] sock: sock_timestamping_bind_phc: sock not bind to device [ 103.493718][ T6046] bridge_slave_1: left allmulticast mode [ 103.527813][ T6046] bridge_slave_1: left promiscuous mode [ 103.558715][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.588926][ T6046] bridge_slave_0: left allmulticast mode [ 103.598424][ T6046] bridge_slave_0: left promiscuous mode [ 103.605157][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.752007][ T6058] netlink: 168 bytes leftover after parsing attributes in process `syz.4.24'. [ 103.766929][ T6061] netlink: 512 bytes leftover after parsing attributes in process `syz.2.23'. [ 104.026607][ T6069] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 104.123898][ T6078] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.477714][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'. [ 104.557162][ T6093] netlink: 208 bytes leftover after parsing attributes in process `syz.3.32'. [ 104.612782][ T6089] team_slave_0: entered promiscuous mode [ 104.619415][ T6089] team_slave_1: entered promiscuous mode [ 105.055317][ T6120] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.289292][ T6129] xfrm1: entered promiscuous mode [ 105.297545][ T6129] xfrm1: entered allmulticast mode [ 105.624035][ T6139] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.156918][ T6146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.164617][ T6146] IPv6: NLM_F_CREATE should be set when creating new route [ 106.757437][ T6177] __nla_validate_parse: 14 callbacks suppressed [ 106.757460][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 106.912371][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 107.282967][ T6196] syzkaller1: entered promiscuous mode [ 107.298562][ T6196] syzkaller1: entered allmulticast mode [ 108.276151][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.82'. [ 108.329016][ T6241] bridge_slave_1: left allmulticast mode [ 108.356711][ T6241] bridge_slave_1: left promiscuous mode [ 108.422563][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.510610][ T6241] bridge_slave_0: left allmulticast mode [ 108.523692][ T6261] netlink: 48 bytes leftover after parsing attributes in process `syz.0.89'. [ 108.537181][ T6241] bridge_slave_0: left promiscuous mode [ 108.550366][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.552821][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'. [ 108.959976][ T6278] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 109.333953][ T6292] tipc: Enabling of bearer rejected, media not registered [ 109.901886][ T6316] netlink: 'syz.1.103': attribute type 2 has an invalid length. [ 111.366021][ T6382] Bluetooth: MGMT ver 1.23 [ 111.473836][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 111.599959][ T6397] veth1_to_bond: entered allmulticast mode [ 111.923746][ T6387] veth1_to_bond: left allmulticast mode [ 112.076205][ T6409] tipc: Started in network mode [ 112.085553][ T6409] tipc: Node identity 22913c161fef, cluster identity 4711 [ 112.099325][ T6409] tipc: Enabled bearer , priority 0 [ 112.131262][ T6414] syzkaller0: entered promiscuous mode [ 112.161800][ T6414] syzkaller0: entered allmulticast mode [ 112.281237][ T6409] tipc: Resetting bearer [ 112.382226][ T6419] netlink: 'syz.4.138': attribute type 83 has an invalid length. [ 112.484952][ T6408] tipc: Resetting bearer [ 112.549676][ T6408] tipc: Disabling bearer [ 112.632047][ T6430] netlink: 'syz.0.140': attribute type 3 has an invalid length. [ 112.974366][ T6445] syzkaller1: entered promiscuous mode [ 112.984018][ T6445] syzkaller1: entered allmulticast mode [ 113.562394][ T6461] netlink: 32 bytes leftover after parsing attributes in process `syz.1.148'. [ 113.610958][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 113.639481][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 113.749830][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 113.928668][ T6477] syzkaller1: entered promiscuous mode [ 113.942185][ T6477] syzkaller1: entered allmulticast mode [ 114.453227][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.162'. [ 114.467032][ T6503] tc_dump_action: action bad kind [ 114.473007][ T6503] netlink: 'syz.1.162': attribute type 1 has an invalid length. [ 114.500828][ T6502] dvmrp0: entered allmulticast mode [ 114.538602][ T6503] bond1: entered promiscuous mode [ 114.544243][ T6503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.562533][ T6499] dvmrp0: left allmulticast mode [ 114.650436][ T6506] netlink: 5 bytes leftover after parsing attributes in process `syz.4.163'. [ 114.688347][ T6502] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 115.046444][ T6530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.169'. [ 115.375289][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 115.631989][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 115.658788][ T6553] nbd: must specify at least one socket [ 115.667867][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.697817][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.698582][ T6551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.178'. [ 115.730499][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.746176][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.343603][ T6573] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 117.776393][ T6646] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 117.829118][ T6650] netlink: 'syz.1.203': attribute type 1 has an invalid length. [ 117.848228][ T6646] tipc: Started in network mode [ 117.869226][ T6646] tipc: Node identity 1614024eee5a, cluster identity 4711 [ 117.887957][ T6646] tipc: Enabled bearer , priority 0 [ 117.931863][ T6646] syzkaller0: entered promiscuous mode [ 117.968513][ T6646] syzkaller0: entered allmulticast mode [ 118.009686][ T6646] tipc: Resetting bearer [ 118.053045][ T6658] netlink: 'syz.1.206': attribute type 1 has an invalid length. [ 118.061804][ T6657] netlink: 'syz.0.201': attribute type 1 has an invalid length. [ 118.139711][ T6644] tipc: Resetting bearer [ 118.176334][ T6644] tipc: Disabling bearer [ 118.208530][ T6664] netlink: 'syz.2.208': attribute type 2 has an invalid length. [ 118.234709][ T6664] netlink: 'syz.2.208': attribute type 1 has an invalid length. [ 118.434490][ T6671] netlink: 'syz.2.212': attribute type 3 has an invalid length. [ 118.681141][ T6679] trusted_key: syz.1.214 sent an empty control message without MSG_MORE. [ 118.700995][ T6682] tipc: Trying to set illegal importance in message [ 118.722062][ T6679] netlink: 'syz.1.214': attribute type 7 has an invalid length. [ 118.731962][ T6685] __nla_validate_parse: 10 callbacks suppressed [ 118.731981][ T6685] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.215'. [ 119.219356][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 119.491082][ T6712] bridge_slave_0: entered promiscuous mode [ 119.611787][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 119.635775][ T6722] tipc: Started in network mode [ 119.640711][ T6722] tipc: Node identity aa9938594536, cluster identity 4711 [ 119.676714][ T6722] tipc: Enabled bearer , priority 0 [ 119.738167][ T6722] netlink: 68 bytes leftover after parsing attributes in process `syz.2.228'. [ 119.823867][ T6719] syzkaller0: entered promiscuous mode [ 119.835262][ T6719] syzkaller0: entered allmulticast mode [ 119.842342][ T6719] tipc: Resetting bearer [ 119.879134][ T6725] kthread_run failed with err -4 [ 119.914101][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'. [ 119.934930][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.947406][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.967810][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.991872][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.133632][ T6727] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 120.173400][ T6718] tipc: Resetting bearer [ 120.390686][ T6757] netlink: 80 bytes leftover after parsing attributes in process `syz.0.238'. [ 120.571117][ T6764] netlink: 'syz.0.240': attribute type 1 has an invalid length. [ 120.580041][ T6764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.240'. [ 120.758930][ T5935] tipc: Node number set to 4021237849 [ 121.572273][ T6718] tipc: Disabling bearer [ 121.582192][ T6745] veth0_to_bridge: entered promiscuous mode [ 121.609701][ T6745] veth0_to_bridge: left promiscuous mode [ 121.830926][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 122.057243][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 122.382407][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 122.661648][ T6777] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 122.926240][ T6810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.432440][ T6839] netlink: 'syz.2.266': attribute type 1 has an invalid length. [ 123.465525][ T6839] netlink: 'syz.2.266': attribute type 1 has an invalid length. [ 123.584345][ T6843] sctp: [Deprecated]: syz.1.267 (pid 6843) Use of int in maxseg socket option. [ 123.584345][ T6843] Use struct sctp_assoc_value instead [ 123.703612][ T6853] netlink: 'syz.3.270': attribute type 21 has an invalid length. [ 123.711765][ T6853] netlink: 'syz.3.270': attribute type 22 has an invalid length. [ 123.720012][ T6853] netlink: 'syz.3.270': attribute type 23 has an invalid length. [ 123.737019][ T6853] netlink: 'syz.3.270': attribute type 25 has an invalid length. [ 123.745785][ T6853] __nla_validate_parse: 6 callbacks suppressed [ 123.746279][ T6853] netlink: 96 bytes leftover after parsing attributes in process `syz.3.270'. [ 123.779466][ T6855] netlink: 'syz.1.271': attribute type 1 has an invalid length. [ 123.822427][ T6855] gretap1: entered promiscuous mode [ 123.832971][ T6855] bond2: (slave gretap1): making interface the new active one [ 123.844274][ T6855] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 123.862400][ T6855] macvlan2: entered promiscuous mode [ 123.870553][ T6855] macvlan2: entered allmulticast mode [ 123.877679][ T6855] bond2: entered promiscuous mode [ 123.884817][ T6855] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.892654][ T6855] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 123.913449][ T6855] bond2: left promiscuous mode [ 123.985823][ T5884] Bluetooth: hci0: command 0x080f tx timeout [ 124.106770][ T6869] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.366813][ T6880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.279'. [ 124.565169][ T6891] netlink: 416 bytes leftover after parsing attributes in process `syz.3.282'. [ 124.580933][ T6892] netlink: 416 bytes leftover after parsing attributes in process `syz.3.282'. [ 124.736680][ T6899] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.025134][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 125.056198][ T6910] bridge1: entered allmulticast mode [ 125.062795][ T6909] bridge_slave_1: left allmulticast mode [ 125.093150][ T6909] bridge_slave_1: left promiscuous mode [ 125.123584][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.163519][ T6909] bridge_slave_0: left allmulticast mode [ 125.191478][ T6909] bridge_slave_0: left promiscuous mode [ 125.203332][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.530349][ T6937] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.294'. [ 126.307009][ T6958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.301'. [ 126.548455][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 126.563146][ T6963] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 126.660907][ T6977] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 126.828786][ T7000] netlink: 48 bytes leftover after parsing attributes in process `syz.4.310'. [ 126.840753][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.309'. [ 127.231420][ T7017] netlink: 'syz.4.316': attribute type 1 has an invalid length. [ 127.459555][ T7017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.636043][ T7021] veth3: entered promiscuous mode [ 127.650665][ T7021] bond1: (slave veth3): Enslaving as an active interface with a down link [ 127.683766][ T7043] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 127.723610][ T7047] syz_tun: entered allmulticast mode [ 127.832989][ T7047] macvtap1: entered allmulticast mode [ 127.844103][ T7047] veth0_macvtap: entered allmulticast mode [ 127.886412][ T7046] syz_tun: left allmulticast mode [ 127.937492][ T7052] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 128.080843][ T7065] netlink: 'syz.1.328': attribute type 24 has an invalid length. [ 129.274124][ T7114] nbd: socks must be embedded in a SOCK_ITEM attr [ 129.374403][ T7123] __nla_validate_parse: 8 callbacks suppressed [ 129.374423][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 129.425789][ T7123] bond0: entered promiscuous mode [ 129.431094][ T7123] bond_slave_0: entered promiscuous mode [ 129.443544][ T7123] bond_slave_1: entered promiscuous mode [ 129.453347][ T7123] bond0: left promiscuous mode [ 129.462640][ T7123] bond_slave_0: left promiscuous mode [ 129.470328][ T7123] bond_slave_1: left promiscuous mode [ 129.812817][ T7137] netlink: 'syz.1.347': attribute type 26 has an invalid length. [ 130.105574][ T7150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.176028][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 130.272406][ T981] IPVS: starting estimator thread 0... [ 130.272589][ T7161] warning: `syz.3.354' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 130.284778][ T7152] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 130.317150][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 130.409017][ T7162] IPVS: using max 28 ests per chain, 67200 per kthread [ 130.784761][ T5884] Bluetooth: hci3: command tx timeout [ 130.908715][ T7195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.361'. [ 130.946880][ T7195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.361'. [ 131.256253][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.364'. [ 131.846286][ T7228] netlink: 48 bytes leftover after parsing attributes in process `syz.3.369'. [ 132.213935][ T7243] C: renamed from lo (while UP) [ 132.271491][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.375'. [ 132.787758][ T7259] netlink: 288 bytes leftover after parsing attributes in process `syz.1.381'. [ 132.796961][ T7260] syz_tun: entered allmulticast mode [ 132.817643][ T7257] syz_tun: left allmulticast mode [ 132.864478][ T7262] netlink: 'syz.2.382': attribute type 1 has an invalid length. [ 132.991109][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 133.037017][ T7245] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 133.048539][ T7245] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 133.237364][ T7262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.559729][ T7293] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 133.607079][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.613498][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.696638][ T7295] netlink: 'syz.4.389': attribute type 3 has an invalid length. [ 133.761136][ T7295] netlink: 'syz.4.389': attribute type 2 has an invalid length. [ 134.121072][ T7319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.438456][ T7331] __nla_validate_parse: 9 callbacks suppressed [ 134.438478][ T7331] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.400'. [ 134.556389][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 134.575125][ T7335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.699181][ T7335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.847261][ T7350] netlink: 'syz.0.407': attribute type 4 has an invalid length. [ 134.855375][ T7350] netlink: 152 bytes leftover after parsing attributes in process `syz.0.407'. [ 134.878032][ T7350] `: renamed from bond0 (while UP) [ 135.072625][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 135.792437][ T7390] lo speed is unknown, defaulting to 1000 [ 135.836927][ T7390] lo speed is unknown, defaulting to 1000 [ 135.855245][ T7390] lo speed is unknown, defaulting to 1000 [ 135.885287][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 135.932486][ T7403] syz.4.425 uses old SIOCAX25GETINFO [ 136.051382][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 136.109413][ T7404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.424'. [ 136.406897][ T7417] netlink: 96 bytes leftover after parsing attributes in process `syz.4.430'. [ 136.440172][ T7421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.431'. [ 136.691023][ T7431] netlink: 'syz.3.432': attribute type 1 has an invalid length. [ 136.816815][ T7390] infiniband syz0: set active [ 136.821954][ T7390] infiniband syz0: added lo [ 136.830112][ T7390] syz0: rxe_create_cq: returned err = -12 [ 136.833309][ T7431] bond1 (unregistering): Released all slaves [ 136.837381][ T7390] infiniband syz0: Couldn't create ib_mad CQ [ 136.850030][ T7390] infiniband syz0: Couldn't open port 1 [ 136.918770][ T7436] ip6tnl1: entered promiscuous mode [ 136.931942][ T7390] RDS/IB: syz0: added [ 136.946098][ T7390] smc: adding ib device syz0 with port count 1 [ 136.954162][ T7436] ip6tnl1: entered allmulticast mode [ 136.961080][ T7390] smc: ib device syz0 port 1 has pnetid [ 137.005619][ T981] lo speed is unknown, defaulting to 1000 [ 137.017174][ T7390] lo speed is unknown, defaulting to 1000 [ 137.037463][ T5868] lo speed is unknown, defaulting to 1000 [ 137.365045][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 137.437816][ T7448] team_slave_0: left promiscuous mode [ 137.453941][ T7448] team_slave_1: left promiscuous mode [ 137.640307][ T7448] team0 (unregistering): Port device team_slave_0 removed [ 137.658914][ T7448] team0 (unregistering): Port device team_slave_1 removed [ 137.740984][ T7453] hsr_slave_1 (unregistering): left promiscuous mode [ 137.908585][ T7390] lo speed is unknown, defaulting to 1000 [ 138.351508][ T7482] netlink: 'syz.3.447': attribute type 4 has an invalid length. [ 138.419328][ T7483] netlink: 'syz.3.447': attribute type 4 has an invalid length. [ 138.848251][ T7390] lo speed is unknown, defaulting to 1000 [ 138.972374][ T7495] openvswitch: netlink: IP tunnel dst address not specified [ 139.166403][ T7501] FAULT_INJECTION: forcing a failure. [ 139.166403][ T7501] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.198498][ T7501] CPU: 0 UID: 0 PID: 7501 Comm: syz.0.455 Not tainted syzkaller #0 PREEMPT(full) [ 139.198527][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.198538][ T7501] Call Trace: [ 139.198546][ T7501] [ 139.198555][ T7501] dump_stack_lvl+0x189/0x250 [ 139.198585][ T7501] ? __pfx____ratelimit+0x10/0x10 [ 139.198611][ T7501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.198635][ T7501] ? __pfx__printk+0x10/0x10 [ 139.198676][ T7501] should_fail_ex+0x414/0x560 [ 139.198710][ T7501] _copy_to_user+0x31/0xb0 [ 139.198736][ T7501] simple_read_from_buffer+0xe1/0x170 [ 139.198771][ T7501] proc_fail_nth_read+0x1b3/0x220 [ 139.198798][ T7501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.198825][ T7501] ? rw_verify_area+0x2a6/0x4d0 [ 139.198848][ T7501] ? __lock_acquire+0xab9/0xd20 [ 139.198875][ T7501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.198899][ T7501] vfs_read+0x200/0xa30 [ 139.198922][ T7501] ? fdget_pos+0x247/0x320 [ 139.198945][ T7501] ? __pfx___mutex_lock+0x10/0x10 [ 139.198975][ T7501] ? __pfx_vfs_read+0x10/0x10 [ 139.199003][ T7501] ? __fget_files+0x2a/0x420 [ 139.199037][ T7501] ? __fget_files+0x3a0/0x420 [ 139.199064][ T7501] ? __fget_files+0x2a/0x420 [ 139.199104][ T7501] ksys_read+0x145/0x250 [ 139.199127][ T7501] ? __fget_files+0x3a0/0x420 [ 139.199155][ T7501] ? __pfx_ksys_read+0x10/0x10 [ 139.199187][ T7501] ? do_syscall_64+0xbe/0x3b0 [ 139.199220][ T7501] do_syscall_64+0xfa/0x3b0 [ 139.199244][ T7501] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.199270][ T7501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.199289][ T7501] ? clear_bhb_loop+0x60/0xb0 [ 139.199314][ T7501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.199333][ T7501] RIP: 0033:0x7f7a4758d5fc [ 139.199351][ T7501] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 139.199368][ T7501] RSP: 002b:00007f7a457f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.199390][ T7501] RAX: ffffffffffffffda RBX: 00007f7a477b5fa0 RCX: 00007f7a4758d5fc [ 139.199413][ T7501] RDX: 000000000000000f RSI: 00007f7a457f60a0 RDI: 0000000000000006 [ 139.199425][ T7501] RBP: 00007f7a457f6090 R08: 0000000000000000 R09: 0000000000000000 [ 139.199437][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.199448][ T7501] R13: 00007f7a477b6038 R14: 00007f7a477b5fa0 R15: 00007fff76adc778 [ 139.199482][ T7501] [ 139.486317][ T7502] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 139.671744][ T7390] lo speed is unknown, defaulting to 1000 [ 139.860831][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.888546][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.946092][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.980087][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.134776][ T7527] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 140.180732][ T7526] __nla_validate_parse: 2 callbacks suppressed [ 140.180752][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 140.198954][ T7521] netlink: 36 bytes leftover after parsing attributes in process `syz.0.462'. [ 140.231586][ T7526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'. [ 140.504013][ T7543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.466'. [ 140.534691][ T7390] lo speed is unknown, defaulting to 1000 [ 140.696310][ T7550] netlink: 'syz.4.471': attribute type 21 has an invalid length. [ 140.755756][ T7550] delete_channel: no stack [ 140.790939][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.471'. [ 141.087880][ T7562] netlink: 44 bytes leftover after parsing attributes in process `syz.0.472'. [ 141.100900][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'. [ 141.355026][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'. [ 141.747433][ T7588] netlink: 'syz.0.482': attribute type 2 has an invalid length. [ 141.767384][ T7589] netlink: 36 bytes leftover after parsing attributes in process `syz.0.482'. [ 141.839043][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'. [ 141.930240][ T7596] netlink: 'syz.1.485': attribute type 17 has an invalid length. [ 142.207189][ T7609] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 142.246021][ T7597] delete_channel: no stack [ 142.965946][ T7632] team0: Device gtp0 is of different type [ 143.341658][ T7648] lo speed is unknown, defaulting to 1000 [ 143.363778][ T7648] lo speed is unknown, defaulting to 1000 [ 143.389977][ T7648] lo speed is unknown, defaulting to 1000 [ 143.433266][ T7648] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 143.508067][ T7648] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 143.636101][ T7648] lo speed is unknown, defaulting to 1000 [ 143.669825][ T7648] lo speed is unknown, defaulting to 1000 [ 143.704870][ T7648] lo speed is unknown, defaulting to 1000 [ 143.792148][ T7648] lo speed is unknown, defaulting to 1000 [ 143.866141][ T7648] lo speed is unknown, defaulting to 1000 [ 145.402535][ T7736] __nla_validate_parse: 8 callbacks suppressed [ 145.402557][ T7736] netlink: 224 bytes leftover after parsing attributes in process `syz.0.532'. [ 145.419220][ T7723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.450676][ T7723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.512640][ T7740] netlink: 36 bytes leftover after parsing attributes in process `syz.0.533'. [ 145.614012][ T5868] lo speed is unknown, defaulting to 1000 [ 145.614060][ T7728] netlink: 'syz.3.530': attribute type 12 has an invalid length. [ 145.614083][ T7728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.530'. [ 145.623406][ T5868] syz2: Port: 1 Link DOWN [ 145.686580][ T2981] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.697311][ T2981] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.710023][ T2981] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.744875][ T2981] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.874964][ T2981] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.923147][ T2981] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.968887][ T2981] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.001587][ T2981] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.417411][ T7772] netlink: 'syz.2.544': attribute type 9 has an invalid length. [ 146.477609][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 146.488208][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 146.589843][ T7779] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.615162][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 164.081153][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'. [ 164.298772][ T7798] "syz.2.548" (7798) uses obsolete ecb(arc4) skcipher [ 164.468404][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 164.480136][ T7824] netlink: 'syz.4.553': attribute type 83 has an invalid length. [ 164.501993][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 164.505796][ T7824] Bluetooth: MGMT ver 1.23 [ 165.104772][ T7860] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 165.501298][ T7879] sctp: [Deprecated]: syz.2.569 (pid 7879) Use of int in maxseg socket option. [ 165.501298][ T7879] Use struct sctp_assoc_value instead [ 165.889972][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 165.983447][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 166.000188][ T7905] openvswitch: netlink: Key type 2054 is out of range max 32 [ 166.117482][ T7911] team0: Device wireguard0 is of different type [ 166.351136][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.584'. [ 166.413800][ T7933] xt_limit: Overflow, try lower: 604147548/4200216962 [ 166.608225][ T7938] netlink: 45 bytes leftover after parsing attributes in process `syz.2.588'. [ 166.735211][ T7944] netlink: 'syz.0.590': attribute type 24 has an invalid length. [ 166.845866][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.591'. [ 166.965976][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'. [ 167.085431][ T7962] netlink: 186448 bytes leftover after parsing attributes in process `syz.4.594'. [ 167.168421][ T7967] netlink: 'syz.2.596': attribute type 1 has an invalid length. [ 167.338607][ T7967] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.462784][ T7968] bond3: (slave veth5): Enslaving as an active interface with a down link [ 167.546487][ T7975] bond3: (slave veth7): Enslaving as an active interface with a down link [ 167.781606][ T8006] ip6erspan0: left allmulticast mode [ 167.897887][ T8002] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 167.924773][ T8002] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 168.180556][ T8025] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 168.209416][ T8025] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.313551][ T8034] openvswitch: netlink: Missing key (keys=40, expected=100) [ 168.337446][ T8034] netlink: 'syz.2.613': attribute type 29 has an invalid length. [ 168.355961][ T8034] netlink: 'syz.2.613': attribute type 29 has an invalid length. [ 168.662060][ T8058] netlink: 'syz.2.621': attribute type 1 has an invalid length. [ 168.690447][ T8054] netlink: 'syz.0.619': attribute type 4 has an invalid length. [ 168.754993][ T8058] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.840761][ T8060] bond4: (slave gretap1): making interface the new active one [ 168.850007][ T8060] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 169.309846][ T8087] __nla_validate_parse: 7 callbacks suppressed [ 169.309868][ T8087] netlink: 40 bytes leftover after parsing attributes in process `syz.2.629'. [ 169.522103][ T8099] bridge2: entered promiscuous mode [ 169.558645][ T8099] bridge2: entered allmulticast mode [ 169.832693][ T8119] netlink: 576 bytes leftover after parsing attributes in process `syz.0.639'. [ 170.045619][ T8134] team0: Device ip6gre1 is of different type [ 170.111302][ T8131] netlink: 76 bytes leftover after parsing attributes in process `syz.0.646'. [ 170.202039][ T8146] netlink: 'syz.3.648': attribute type 10 has an invalid length. [ 170.277843][ T8148] netlink: 32 bytes leftover after parsing attributes in process `syz.3.648'. [ 170.367020][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.649'. [ 170.498567][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.649'. [ 170.763622][ T49] nci: nci_rx_work: unknown MT 0x6 [ 171.113474][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.660'. [ 171.228792][ T8201] syzkaller0: entered promiscuous mode [ 171.237640][ T8201] syzkaller0: entered allmulticast mode [ 171.256356][ T8207] veth0: entered promiscuous mode [ 171.262158][ T8207] veth0: left promiscuous mode [ 171.663418][ T8210] netlink: 88 bytes leftover after parsing attributes in process `syz.0.663'. [ 171.689429][ T8217] netlink: 88 bytes leftover after parsing attributes in process `syz.0.663'. [ 171.734226][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.664'. [ 173.888048][ T8261] net veth1_virt_wifi .: renamed from virt_wifi0 [ 174.187144][ T8269] veth3: entered allmulticast mode [ 174.422864][ T8288] __nla_validate_parse: 3 callbacks suppressed [ 174.422885][ T8288] netlink: 48 bytes leftover after parsing attributes in process `syz.0.680'. [ 174.656506][ T8300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.688'. [ 174.849788][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 175.020003][ T8324] netlink: 'syz.4.696': attribute type 33 has an invalid length. [ 175.043663][ T8319] lo speed is unknown, defaulting to 1000 [ 175.129824][ T8327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.698'. [ 175.316084][ T8319] lo speed is unknown, defaulting to 1000 [ 175.507935][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 175.906874][ T8346] netlink: 388 bytes leftover after parsing attributes in process `syz.4.703'. [ 176.023815][ T8355] netlink: 'syz.2.707': attribute type 1 has an invalid length. [ 176.028518][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'. [ 176.184001][ T6970] tipc: Subscription rejected, illegal request [ 176.210166][ T8369] veth0_to_bridge: entered promiscuous mode [ 176.228829][ T8369] veth0_to_bridge: left promiscuous mode [ 176.417465][ T8374] netlink: 40 bytes leftover after parsing attributes in process `syz.4.713'. [ 176.488887][ T8379] netlink: 'syz.2.715': attribute type 12 has an invalid length. [ 176.598284][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'. [ 176.662062][ T8392] netlink: 72 bytes leftover after parsing attributes in process `syz.4.718'. [ 176.988641][ T153] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 176.990651][ T8407] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 176.998398][ T8400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.077694][ T8414] vlan2: entered promiscuous mode [ 177.120799][ T8414] vlan2: entered allmulticast mode [ 177.147281][ T8414] hsr_slave_1: entered allmulticast mode [ 177.272060][ T8421] dvmrp1: entered allmulticast mode [ 177.359245][ T8418] dvmrp1: left allmulticast mode [ 178.184038][ T8473] lo: entered promiscuous mode [ 178.201984][ T8473] netlink: 'syz.3.742': attribute type 2 has an invalid length. [ 178.222371][ T8473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.042910][ T8499] bridge_slave_0: left allmulticast mode [ 179.067867][ T8499] bridge_slave_0: left promiscuous mode [ 179.074627][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.107850][ T8499] bridge_slave_1: left allmulticast mode [ 179.113651][ T8499] bridge_slave_1: left promiscuous mode [ 179.120752][ T8505] netlink: 'syz.4.751': attribute type 4 has an invalid length. [ 179.123505][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.151352][ T8499] `: (slave bond_slave_0): Releasing backup interface [ 179.177969][ T8499] `: (slave bond_slave_1): Releasing backup interface [ 179.210408][ T8499] team0: Port device team_slave_0 removed [ 179.245038][ T8499] team0: Port device team_slave_1 removed [ 179.543897][ T8525] __nla_validate_parse: 4 callbacks suppressed [ 179.543920][ T8525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'. [ 179.604321][ T8526] unknown channel width for channel at 909000KHz? [ 179.633556][ T8528] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 179.669729][ T8529] veth1_to_bond: entered allmulticast mode [ 179.677305][ T8530] veth1_to_bond: left allmulticast mode [ 179.847452][ T8542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.759'. [ 179.861708][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'. [ 180.210215][ T8557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 180.233390][ T8556] netlink: 'syz.0.765': attribute type 2 has an invalid length. [ 180.233489][ T2981] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.247110][ T8556] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.765'. [ 180.257775][ T8557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 180.260677][ T8556] nbd: must specify at least one socket [ 180.275353][ T2981] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.298954][ T2981] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.315026][ T2981] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.340266][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.765'. [ 180.363370][ T8560] netlink: 48 bytes leftover after parsing attributes in process `syz.1.767'. [ 180.373153][ T8560] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 180.663889][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 180.783467][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.776'. [ 181.352013][ T8624] bridge0: port 1(veth0_to_bridge) entered blocking state [ 181.376509][ T8624] bridge0: port 1(veth0_to_bridge) entered disabled state [ 181.397485][ T8624] veth0_to_bridge: entered allmulticast mode [ 181.435970][ T8624] veth0_to_bridge: entered promiscuous mode [ 181.860765][ T8644] : entered promiscuous mode [ 182.517722][ T8680] netlink: 'syz.4.801': attribute type 1 has an invalid length. [ 182.561178][ T8680] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.574264][ T153] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.584284][ T153] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.640052][ T8680] bond3: (slave geneve2): making interface the new active one [ 182.670655][ T8680] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 182.731491][ T153] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.762747][ T153] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.673409][ T8765] __nla_validate_parse: 18 callbacks suppressed [ 184.673430][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 184.841673][ T8772] netlink: 44 bytes leftover after parsing attributes in process `syz.0.828'. [ 184.927602][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 185.040874][ T8775] netlink: 28 bytes leftover after parsing attributes in process `syz.4.829'. [ 185.072071][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 185.192227][ T8784] netlink: 'syz.2.831': attribute type 1 has an invalid length. [ 185.271433][ T8784] netlink: 244 bytes leftover after parsing attributes in process `syz.2.831'. [ 185.319615][ T8794] netlink: 'syz.3.832': attribute type 1 has an invalid length. [ 185.334870][ T8794] netlink: 'syz.3.832': attribute type 1 has an invalid length. [ 185.404314][ T8796] syzkaller1: mtu less than device minimum [ 185.809628][ T8821] netlink: 'syz.3.840': attribute type 16 has an invalid length. [ 185.839703][ T8821] netlink: 'syz.3.840': attribute type 17 has an invalid length. [ 185.861466][ T8823] netlink: 'syz.4.841': attribute type 11 has an invalid length. [ 185.902109][ T8823] netlink: 244 bytes leftover after parsing attributes in process `syz.4.841'. [ 186.022022][ T8830] tipc: Enabling of bearer rejected, failed to enable media [ 186.633645][ T8871] tipc: Enabling of bearer rejected, failed to enable media [ 186.776724][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 186.891524][ T8883] team0: Device vti1 is of different type [ 186.951684][ T8889] netlink: 116 bytes leftover after parsing attributes in process `syz.4.862'. [ 187.070118][ T8896] openvswitch: netlink: Missing key (keys=40, expected=80) [ 187.323820][ T8902] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967272. macoff=96 [ 188.086424][ T8966] bridge4: entered promiscuous mode [ 188.091867][ T8966] bridge4: entered allmulticast mode [ 188.236202][ T8978] netlink: 14 bytes leftover after parsing attributes in process `syz.0.880'. [ 188.284873][ T8978] hsr_slave_0: left promiscuous mode [ 189.008633][ T9031] ip6gre1: entered allmulticast mode [ 189.277525][ T9046] netlink: 'syz.4.902': attribute type 1 has an invalid length. [ 189.447997][ T9049] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.459773][ T9049] bond4: (slave bond5): making interface the new active one [ 189.470748][ T9049] bond4: (slave bond5): Enslaving as an active interface with an up link [ 189.574940][ T9074] netlink: 'syz.1.904': attribute type 6 has an invalid length. [ 189.579832][ T9046] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 189.633460][ T9049] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.731219][ T9087] !: renamed from dummy0 (while UP) [ 190.394802][ T9124] __nla_validate_parse: 7 callbacks suppressed [ 190.394824][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 190.430086][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 190.629733][ T9136] netlink: del zone limit has 4 unknown bytes [ 190.702485][ T9136] netlink: zone id is out of range [ 190.729952][ T9136] netlink: zone id is out of range [ 190.747925][ T9136] netlink: del zone limit has 4 unknown bytes [ 190.849788][ T9146] netlink: 'syz.0.922': attribute type 1 has an invalid length. [ 190.908435][ T9146] netlink: 224 bytes leftover after parsing attributes in process `syz.0.922'. [ 191.340140][ T9172] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 191.361047][ T9172] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 191.406193][ T9175] bond6: entered promiscuous mode [ 191.411273][ T9175] bond6: entered allmulticast mode [ 191.418150][ T9175] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.426563][ T9174] netlink: 92 bytes leftover after parsing attributes in process `syz.1.929'. [ 191.826591][ T9198] syz.2.936 (9198) used obsolete PPPIOCDETACH ioctl [ 191.903417][ T5868] lo speed is unknown, defaulting to 1000 [ 191.929054][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.652841][ T9262] netlink: 'syz.2.948': attribute type 4 has an invalid length. [ 192.820338][ T9270] netlink: 24 bytes leftover after parsing attributes in process `syz.0.953'. [ 192.945820][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.981691][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.955'. [ 193.543597][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.964'. [ 193.643811][ T9324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.967'. [ 193.747090][ T9327] tipc: Started in network mode [ 193.752457][ T9327] tipc: Node identity b2c922389fe2, cluster identity 4711 [ 193.760307][ T9327] tipc: Enabled bearer , priority 0 [ 193.768531][ T9327] syzkaller0: entered promiscuous mode [ 193.774378][ T9327] syzkaller0: entered allmulticast mode [ 193.796076][ T9327] tipc: Resetting bearer [ 193.809127][ T9326] tipc: Resetting bearer [ 193.827055][ T9326] tipc: Disabling bearer [ 194.031048][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 194.127074][ T9340] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 194.440337][ T9346] netlink: 'syz.2.974': attribute type 83 has an invalid length. [ 194.455145][ T9354] pimreg: entered allmulticast mode [ 194.461832][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.974'. [ 194.490213][ T9353] nbd: illegal input index -1509949440 [ 194.699217][ T9359] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.748667][ T9367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.758599][ T9367] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 194.772316][ T9367] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 194.854897][ T9374] netlink: 'syz.4.982': attribute type 1 has an invalid length. [ 194.894870][ T9374] netlink: 'syz.4.982': attribute type 1 has an invalid length. [ 194.907171][ T9372] netlink: 'syz.0.983': attribute type 21 has an invalid length. [ 194.934338][ T9372] netlink: 'syz.0.983': attribute type 22 has an invalid length. [ 194.972044][ T9372] netlink: 'syz.0.983': attribute type 23 has an invalid length. [ 195.016235][ T9372] netlink: 'syz.0.983': attribute type 25 has an invalid length. [ 195.046275][ T9372] netlink: 'syz.0.983': attribute type 26 has an invalid length. [ 195.292881][ T9397] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 195.419306][ T9405] __nla_validate_parse: 4 callbacks suppressed [ 195.419329][ T9405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.990'. [ 195.610754][ T9412] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 195.704876][ T9421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.995'. [ 195.879439][ T9431] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.1000'. [ 195.914314][ T9425] netlink: 'syz.1.998': attribute type 21 has an invalid length. [ 195.923458][ T9425] netlink: 132 bytes leftover after parsing attributes in process `syz.1.998'. [ 195.940587][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1000'. [ 196.068676][ T9444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1004'. [ 196.294723][ T9452] netlink: 'syz.1.1005': attribute type 1 has an invalid length. [ 196.348052][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1005'. [ 196.450441][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 196.600687][ T9452] 8021q: adding VLAN 0 to HW filter on device bond4 [ 196.674130][ T9462] bond4: (slave geneve2): making interface the new active one [ 196.722562][ T9462] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 196.835485][ T9489] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1014'. [ 197.453089][ T9521] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1021'. [ 197.463943][ T9523] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 197.800613][ T9547] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 197.821009][ T9534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.850956][ T9547] bond0: entered promiscuous mode [ 197.856884][ T9547] bond0: entered allmulticast mode [ 197.862635][ T9547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.693226][ T9593] team0: Device hsr_slave_0 failed to register rx_handler [ 198.735784][ T9596] lo: left promiscuous mode [ 198.740644][ T9596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.584816][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 217.597153][ T5881] Bluetooth: hci1: command 0x0406 tx timeout [ 219.603073][ T9624] syzkaller0: entered promiscuous mode [ 219.624858][ T9624] syzkaller0: entered allmulticast mode [ 219.655359][ T9618] tipc: Started in network mode [ 219.689130][ T9618] tipc: Node identity 9e3d968b08c2, cluster identity 4711 [ 219.715733][ T9618] tipc: Enabled bearer , priority 0 [ 219.828150][ T9626] tipc: Resetting bearer [ 219.874130][ T9643] __nla_validate_parse: 9 callbacks suppressed [ 219.874152][ T9643] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1054'. [ 219.893555][ T9626] tipc: Disabling bearer [ 219.957395][ T9647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1056'. [ 220.247262][ T9662] nftables ruleset with unbound set [ 220.349272][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 220.411759][ T9672] validate_nla: 4 callbacks suppressed [ 220.411780][ T9672] netlink: 'syz.2.1067': attribute type 1 has an invalid length. [ 220.524601][ T9672] 8021q: adding VLAN 0 to HW filter on device bond6 [ 220.635527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.653901][ T9684] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1069'. [ 220.868061][ T9696] delete_channel: no stack [ 220.926136][ T9702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1073'. [ 220.947212][ T9702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1073'. [ 220.966168][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'. [ 221.206405][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 221.258646][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1079'. [ 221.389775][ T9713] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.440413][ T9717] vlan0: entered allmulticast mode [ 221.450322][ T9717] bond5: entered allmulticast mode [ 222.146833][ T9752] netlink: 'syz.4.1089': attribute type 10 has an invalid length. [ 222.261223][ T9757] tipc: Enabling of bearer rejected, failed to enable media [ 222.299411][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1091'. [ 222.459843][ T9757] netlink: 'syz.0.1091': attribute type 1 has an invalid length. [ 222.607945][ T9776] netlink: 'syz.2.1098': attribute type 10 has an invalid length. [ 222.645092][ T9776] team0: Port device dummy0 added [ 222.669236][ T9780] netlink: 'syz.2.1098': attribute type 10 has an invalid length. [ 222.763128][ T9780] team0: Port device dummy0 removed [ 223.053678][ T9798] gretap0: entered promiscuous mode [ 223.134276][ T9803] 0{X功: renamed from gretap0 [ 223.160946][ T9803] 0{X功: left promiscuous mode [ 223.176472][ T9803] 0{X功: entered allmulticast mode [ 223.199013][ T9803] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 223.295092][ T9806] nbd1: detected capacity change from 0 to 549764202496 [ 223.305132][ T5882] block nbd1: Receive control failed (result -32) [ 223.650398][ T9841] netlink: 'syz.1.1113': attribute type 7 has an invalid length. [ 223.822982][ T9848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.099344][ T9863] tipc: Enabled bearer , priority 0 [ 224.126532][ T9863] syzkaller0: entered promiscuous mode [ 224.132067][ T9863] syzkaller0: entered allmulticast mode [ 224.240868][ T9863] tipc: Resetting bearer [ 224.281300][ T9862] tipc: Resetting bearer [ 224.329072][ T9862] tipc: Disabling bearer [ 224.393390][ T9882] raw_sendmsg: syz.1.1126 forgot to set AF_INET. Fix it! [ 224.554199][ T9891] sctp: [Deprecated]: syz.1.1128 (pid 9891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.554199][ T9891] Use struct sctp_sack_info instead [ 224.585459][ T43] IPVS: starting estimator thread 0... [ 224.590403][ T9887] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 224.715137][ T9896] IPVS: using max 22 ests per chain, 52800 per kthread [ 224.771467][ T9905] netlink: 'syz.0.1132': attribute type 4 has an invalid length. [ 224.833013][ T9908] macsec1: entered promiscuous mode [ 224.849994][ T9908] macsec1: entered allmulticast mode [ 225.344749][ T9943] __nla_validate_parse: 12 callbacks suppressed [ 225.344773][ T9943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1143'. [ 225.452314][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'. [ 225.488003][ T9958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1146'. [ 225.645364][ T9961] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1149'. [ 225.852380][ T9976] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1151'. [ 226.119398][ T9993] sctp: [Deprecated]: syz.1.1157 (pid 9993) Use of int in max_burst socket option. [ 226.119398][ T9993] Use struct sctp_assoc_value instead [ 226.138523][ T9993] tipc: Enabling of bearer rejected, failed to enable media [ 226.254767][ T9998] syz_tun: entered promiscuous mode [ 226.260665][ T9998] vlan0: entered promiscuous mode [ 226.412686][T10006] netlink: 'syz.1.1162': attribute type 6 has an invalid length. [ 226.464322][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'. [ 226.483708][T10009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1163'. [ 226.737769][T10026] tipc: Enabled bearer , priority 0 [ 226.746357][T10026] syzkaller0: entered promiscuous mode [ 226.753252][T10026] syzkaller0: entered allmulticast mode [ 226.763151][T10026] openvswitch: netlink: Multiple metadata blocks provided [ 226.793655][T10026] tipc: Resetting bearer [ 226.811404][T10025] tipc: Resetting bearer [ 226.832617][T10025] tipc: Disabling bearer [ 227.248123][T10059] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1176'. [ 227.856439][T10091] dvmrp0: entered allmulticast mode [ 227.863973][T10092] netlink: 'syz.2.1184': attribute type 21 has an invalid length. [ 227.866787][T10091] dvmrp0: left allmulticast mode [ 227.894982][T10092] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1184'. [ 227.920243][T10092] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1184'. [ 228.325678][T10119] netlink: 'syz.2.1194': attribute type 1 has an invalid length. [ 228.542673][T10136] netlink: 'syz.2.1198': attribute type 1 has an invalid length. [ 228.559857][T10135] netlink: 'syz.2.1198': attribute type 1 has an invalid length. [ 229.151311][T10170] netlink: 'syz.1.1209': attribute type 33 has an invalid length. [ 229.541728][T10191] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 229.599245][T10195] netlink: 'syz.1.1214': attribute type 1 has an invalid length. [ 229.828013][T10210] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 230.398823][T10246] __nla_validate_parse: 16 callbacks suppressed [ 230.398848][T10246] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1234'. [ 230.437161][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'. [ 230.524871][T10254] netlink: 'syz.4.1236': attribute type 1 has an invalid length. [ 230.587952][T10260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1236'. [ 230.651851][T10254] 8021q: adding VLAN 0 to HW filter on device bond7 [ 230.844903][T10271] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1239'. [ 231.052755][T10281] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1241'. [ 231.065461][T10281] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1241'. [ 231.080706][T10281] 0{X功: entered promiscuous mode [ 231.093785][T10281] 0{X功: left allmulticast mode [ 231.151755][T10291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1246'. [ 231.161188][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1246'. [ 231.170274][T10291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1246'. [ 231.180159][T10281] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1241'. [ 231.231742][T10281] 1{X功: renamed from 30{X功 [ 231.250596][T10281] 1{X功: left promiscuous mode [ 231.262807][T10281] 1{X功: entered allmulticast mode [ 231.273904][T10281] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 233.153428][T10376] netlink: 'syz.0.1275': attribute type 7 has an invalid length. [ 233.188551][T10379] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 233.344473][T10384] tipc: Enabled bearer , priority 0 [ 233.353140][T10384] syzkaller0: entered promiscuous mode [ 233.359544][T10384] syzkaller0: entered allmulticast mode [ 233.377220][T10384] tipc: Resetting bearer [ 233.388743][T10383] tipc: Resetting bearer [ 233.428205][T10383] tipc: Disabling bearer [ 233.503761][T10390] netlink: 'syz.0.1280': attribute type 10 has an invalid length. [ 233.516396][T10390] veth1_macvtap: left promiscuous mode [ 233.560516][T10392] netlink: 'syz.1.1281': attribute type 6 has an invalid length. [ 233.568695][T10392] netlink: 'syz.1.1281': attribute type 5 has an invalid length. [ 233.593695][T10393] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 234.426957][T10438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.458370][T10437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.503696][T10444] netlink: 'syz.2.1294': attribute type 1 has an invalid length. [ 234.913813][T10470] netlink: 'syz.2.1298': attribute type 1 has an invalid length. [ 234.949297][T10470] netlink: 'syz.2.1298': attribute type 10 has an invalid length. [ 235.598403][T10505] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 235.824266][T10523] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 236.200730][T10536] __nla_validate_parse: 18 callbacks suppressed [ 236.200754][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 236.220908][T10537] xt_HMARK: proto mask must be zero with L3 mode [ 236.268474][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 236.292309][T10537] netlink: 'syz.4.1315': attribute type 10 has an invalid length. [ 236.310726][T10537] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1315'. [ 236.369731][T10537] team0: Port device geneve0 added [ 236.553083][T10542] netlink: 'syz.2.1317': attribute type 13 has an invalid length. [ 236.567227][T10542] macvtap0: entered allmulticast mode [ 236.574270][T10542] macvtap0: refused to change device tx_queue_len [ 236.586082][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1318'. [ 236.820261][T10553] netlink: 'syz.2.1320': attribute type 11 has an invalid length. [ 237.112592][T10563] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1322'. [ 237.131447][T10558] syzkaller0: entered promiscuous mode [ 237.142628][T10558] syzkaller0: entered allmulticast mode [ 237.148862][T10563] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1322'. [ 238.961045][T10581] netlink: 'syz.1.1328': attribute type 11 has an invalid length. [ 239.141851][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'. [ 239.166098][T10593] openvswitch: netlink: Unknown nsh attribute 0 [ 239.182973][T10593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.567407][T10614] netlink: 'syz.2.1338': attribute type 10 has an invalid length. [ 239.613781][T10620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1340'. [ 239.777659][T10632] netlink: 'syz.0.1339': attribute type 10 has an invalid length. [ 239.787080][T10632] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 239.795239][T10632] wlan1: mtu less than device minimum [ 239.800985][T10632] `: (slave wlan1): Error -22 calling dev_set_mtu [ 239.822483][T10631] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1343'. [ 239.862155][T10637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1344'. [ 240.036857][T10648] sctp: [Deprecated]: syz.2.1348 (pid 10648) Use of int in max_burst socket option. [ 240.036857][T10648] Use struct sctp_assoc_value instead [ 240.220281][T10660] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 240.340957][T10665] team_slave_0: entered allmulticast mode [ 240.889582][T10689] netlink: 'syz.2.1359': attribute type 1 has an invalid length. [ 240.970123][T10695] IPVS: length: 166 != 24 [ 241.592042][T10707] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 241.663565][T10706] lo speed is unknown, defaulting to 1000 [ 241.753372][ T5881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.763712][ T5881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.774399][ T5881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.805158][ T5881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.814289][ T5881] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.209191][T10737] netlink: 'syz.2.1369': attribute type 2 has an invalid length. [ 242.441009][T10745] netlink: 'syz.4.1370': attribute type 10 has an invalid length. [ 242.769672][T10745] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 242.810763][T10749] bond0: (slave bond_slave_0): Releasing backup interface [ 242.851981][T10749] bond0: (slave bond_slave_1): Releasing backup interface [ 242.891224][T10749] team0: Port device team_slave_0 removed [ 242.915575][T10749] team0: Port device team_slave_1 removed [ 242.975696][T10749] team0: Port device geneve0 removed [ 243.004280][T10749] bond1: (slave veth3): Releasing active interface [ 243.044414][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.070450][T10749] bond3: (slave geneve2): Releasing active interface [ 243.089669][T10749] bond4: (slave bond5): Releasing backup interface [ 243.098243][T10749] bond4: (slave bond5): the permanent HWaddr of slave - a2:4b:f5:b2:d8:ef - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 243.117313][T10749] bond4: (slave gretap1): making interface the new active one [ 243.132267][T10749] bond4: (slave gretap1): Releasing backup interface [ 243.155051][T10706] lo speed is unknown, defaulting to 1000 [ 243.156154][T10719] lo speed is unknown, defaulting to 1000 [ 243.285213][T10749] syz.4.1370 (10749) used greatest stack depth: 17448 bytes left [ 243.339228][T10767] __nla_validate_parse: 3 callbacks suppressed [ 243.339260][T10767] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1373'. [ 243.379666][T10771] netlink: 'syz.4.1375': attribute type 10 has an invalid length. [ 243.399461][T10771] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1375'. [ 243.441606][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1375'. [ 243.551166][T10773] netlink: 'syz.1.1376': attribute type 21 has an invalid length. [ 243.580101][T10773] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1376'. [ 243.711961][T10780] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 243.741836][T10719] lo speed is unknown, defaulting to 1000 [ 243.907067][ T5882] Bluetooth: hci5: command tx timeout [ 243.992172][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.337492][T10719] chnl_net:caif_netlink_parms(): no params data found [ 244.604041][T10814] netlink: 'syz.1.1384': attribute type 1 has an invalid length. [ 244.635046][T10818] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1385'. [ 244.691012][T10814] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.699537][T10719] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.725137][T10719] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.745129][T10719] bridge_slave_0: entered allmulticast mode [ 244.754235][T10719] bridge_slave_0: entered promiscuous mode [ 244.771221][T10719] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.781608][T10719] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.820568][T10828] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.1388'. [ 244.820615][T10719] bridge_slave_1: entered allmulticast mode [ 244.870324][T10719] bridge_slave_1: entered promiscuous mode [ 245.231340][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1391'. [ 245.263751][T10719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.312561][T10719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.324016][T10838] netlink: 'syz.4.1391': attribute type 9 has an invalid length. [ 245.516831][T10855] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1397'. [ 245.516938][T10719] team0: Port device team_slave_0 added [ 245.557168][T10719] team0: Port device team_slave_1 added [ 245.679671][T10865] netlink: 'syz.1.1399': attribute type 21 has an invalid length. [ 245.692510][T10865] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1399'. [ 245.733983][T10868] netlink: 'syz.2.1400': attribute type 1 has an invalid length. [ 245.744649][T10868] netlink: 'syz.2.1400': attribute type 11 has an invalid length. [ 245.752249][T10866] netlink: 'syz.1.1399': attribute type 21 has an invalid length. [ 245.752677][T10868] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1400'. [ 245.793636][T10865] netlink: 'syz.1.1399': attribute type 4 has an invalid length. [ 245.803611][T10865] netlink: 'syz.1.1399': attribute type 5 has an invalid length. [ 245.827085][T10719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.847928][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.885712][T10719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.898980][T10866] netlink: 'syz.1.1399': attribute type 4 has an invalid length. [ 245.907338][T10866] netlink: 'syz.1.1399': attribute type 5 has an invalid length. [ 245.918577][T10719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.925925][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.992762][T10719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.992769][ T5882] Bluetooth: hci5: command tx timeout [ 246.127875][T10719] hsr_slave_0: entered promiscuous mode [ 246.135104][T10719] hsr_slave_1: entered promiscuous mode [ 246.142612][T10719] debugfs: 'hsr0' already exists in 'hsr' [ 246.152515][T10719] Cannot create hsr debugfs directory [ 246.943193][T10719] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 247.007661][T10719] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.022820][T10918] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 247.059520][T10719] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 247.102728][T10719] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.236965][T10923] tipc: Enabling of bearer rejected, failed to enable media [ 247.262823][T10923] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 247.646920][T10719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.708595][T10719] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.748648][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.755918][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.840564][ T6980] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.847773][ T6980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.048447][T10719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.064863][ T5882] Bluetooth: hci5: command tx timeout [ 248.499803][T10984] __nla_validate_parse: 10 callbacks suppressed [ 248.499824][T10984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1433'. [ 248.572829][T10984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1433'. [ 248.607567][T10994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1436'. [ 248.630882][T10984] gretap0: entered promiscuous mode [ 248.662863][T10984] gretap0: left promiscuous mode [ 248.747146][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1437'. [ 248.860676][T10719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.913057][T11002] gre2: entered promiscuous mode [ 248.922823][T11002] gre2: entered allmulticast mode [ 249.292322][T11020] bond8: entered promiscuous mode [ 249.298936][T11020] bond8: entered allmulticast mode [ 249.310833][T11020] 8021q: adding VLAN 0 to HW filter on device bond8 [ 249.781155][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1452'. [ 249.804014][T11051] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1451'. [ 249.815832][T10719] veth0_vlan: entered promiscuous mode [ 249.831711][T10719] veth1_vlan: entered promiscuous mode [ 249.924466][T10719] veth0_macvtap: entered promiscuous mode [ 249.951007][T10719] veth1_macvtap: entered promiscuous mode [ 250.017929][T10719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.053030][T10719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.093508][ T6970] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.124011][ T6970] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.144614][ T5882] Bluetooth: hci5: command tx timeout [ 250.162137][ T6970] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.170905][T11056] validate_nla: 4 callbacks suppressed [ 250.170924][T11056] netlink: 'syz.2.1454': attribute type 6 has an invalid length. [ 250.185260][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.452857][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'. [ 250.486322][T11068] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1458'. [ 250.496031][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'. [ 250.517915][T11068] netlink: 'syz.1.1458': attribute type 1 has an invalid length. [ 250.656223][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.664133][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.717557][T11073] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 250.743765][T11073] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 250.884174][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.917602][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.260086][T11114] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 251.285499][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1468'. [ 251.319625][T11118] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 251.478772][T11125] netlink: 'syz.2.1473': attribute type 7 has an invalid length. [ 251.491418][T11126] netlink: 'syz.0.1472': attribute type 18 has an invalid length. [ 252.506200][T11192] netlink: 'syz.0.1489': attribute type 18 has an invalid length. [ 252.712370][T11199] lo speed is unknown, defaulting to 1000 [ 252.888099][T11206] openvswitch: netlink: Actions may not be safe on all matching packets [ 253.135364][T11199] lo speed is unknown, defaulting to 1000 [ 253.213864][T11213] sock: sock_timestamping_bind_phc: sock not bind to device [ 253.224983][T11210] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 253.371566][T11231] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 254.113238][T11263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.169821][T11267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.471009][T11274] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !瀵$蘒L賤y岗丌匘ｘUD寃榼漽 [ 254.733376][T11289] team_slave_0: entered allmulticast mode [ 254.948820][T11306] netlink: 'syz.4.1519': attribute type 10 has an invalid length. [ 255.009371][T11306] __nla_validate_parse: 6 callbacks suppressed [ 255.009395][T11306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 255.301253][T11306] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 255.325031][T11306] netlink: 'syz.4.1519': attribute type 2 has an invalid length. [ 255.374577][T11306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1519'. [ 256.162260][T11306] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 256.190871][T11306] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1519'. [ 256.216349][T11306] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 256.273036][T11330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1525'. [ 256.519215][T11342] batadv_slave_1: entered promiscuous mode [ 256.578789][T11341] batadv_slave_1: left promiscuous mode [ 256.752769][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1533'. [ 256.762173][T11355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1533'. [ 256.777789][T11355] netlink: 'syz.4.1533': attribute type 6 has an invalid length. [ 256.996916][T11370] netlink: 'syz.4.1538': attribute type 1 has an invalid length. [ 257.025078][T11370] netlink: 'syz.4.1538': attribute type 4 has an invalid length. [ 257.051937][T11370] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1538'. [ 257.126133][T11378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1539'. [ 257.171155][T11378] openvswitch: netlink: IP tunnel dst address not specified [ 257.423471][T11394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1544'. [ 257.453234][T11394] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1544'. [ 257.913576][T11414] netlink: 'syz.1.1550': attribute type 1 has an invalid length. [ 258.926361][T11457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.032417][T11452] syzkaller0: entered promiscuous mode [ 259.065204][T11452] syzkaller0: entered allmulticast mode [ 259.455574][T11474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.334339][T11492] netlink: 'syz.5.1571': attribute type 2 has an invalid length. [ 261.576411][T11503] netlink: 'syz.0.1576': attribute type 32 has an invalid length. [ 261.584364][T11503] __nla_validate_parse: 6 callbacks suppressed [ 261.584385][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 261.639173][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1580'. [ 261.653566][T11503] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 261.693870][T11515] netlink: 'syz.1.1581': attribute type 1 has an invalid length. [ 261.758389][T11517] netlink: 'syz.2.1582': attribute type 16 has an invalid length. [ 261.769323][T11517] netlink: 'syz.2.1582': attribute type 17 has an invalid length. [ 261.823741][T11521] openvswitch: netlink: Flow key attr not present in new flow. [ 261.863270][T11517] 1{X功: left allmulticast mode [ 261.916962][T11525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1582'. [ 262.015598][T11517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.045582][T11517] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.090312][T11517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.138189][T11537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1587'. [ 262.162873][ T5943] lo speed is unknown, defaulting to 1000 [ 262.179470][ T5943] syz2: Port: 1 Link ACTIVE [ 262.223073][T11539] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1585'. [ 262.259826][T11544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1588'. [ 263.523600][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1602'. [ 263.555865][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1602'. [ 263.642684][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'. [ 263.736498][T11620] netlink: 'syz.2.1604': attribute type 1 has an invalid length. [ 263.890687][T11624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.931279][T11625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.029038][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1608'. [ 264.068953][T11627] tc_dump_action: action bad kind [ 265.405237][T11694] tipc: Enabling of bearer rejected, failed to enable media [ 265.617595][T11703] netlink: 'syz.4.1632': attribute type 8 has an invalid length. [ 265.926750][T11713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 265.936868][T11713] bond2: entered promiscuous mode [ 265.943520][T11713] bond2: entered allmulticast mode [ 265.949320][T11720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.951959][T11718] netlink: 'syz.2.1635': attribute type 6 has an invalid length. [ 265.960030][T11713] bond0: (slave bond2): Enslaving as a backup interface with an up link [ 266.160357][T11728] netlink: 'syz.5.1638': attribute type 4 has an invalid length. [ 266.340997][T11734] lo speed is unknown, defaulting to 1000 [ 266.646576][T11760] nbd: must specify a device to reconfigure [ 267.103461][T11775] __nla_validate_parse: 3 callbacks suppressed [ 267.103484][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1653'. [ 267.235328][T11734] lo speed is unknown, defaulting to 1000 [ 267.730491][ T78] tipc: Subscription rejected, illegal request [ 267.752453][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'. [ 267.950154][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1663'. [ 268.012218][T11802] 8021q: adding VLAN 0 to HW filter on device bond10 [ 268.092178][T11808] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1665'. [ 268.147502][T11811] netlink: 'syz.1.1667': attribute type 1 has an invalid length. [ 268.162573][T11811] netlink: 'syz.1.1667': attribute type 1 has an invalid length. [ 268.327526][T11822] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1666'. [ 268.426600][T11831] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.1671'. [ 268.541417][T11836] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 268.588350][T11834] netlink: 'syz.4.1669': attribute type 1 has an invalid length. [ 268.625444][T11834] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1669'. [ 268.678014][T11834] netlink: 'syz.4.1669': attribute type 1 has an invalid length. [ 268.719358][T11834] netlink: 'syz.4.1669': attribute type 2 has an invalid length. [ 268.836094][T11853] "syz.1.1675" (11853) uses obsolete ecb(arc4) skcipher [ 268.921969][T11859] syzkaller1: entered promiscuous mode [ 268.928047][T11859] syzkaller1: entered allmulticast mode [ 269.175165][T11875] netlink: 'syz.0.1682': attribute type 21 has an invalid length. [ 269.183008][T11875] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1682'. [ 269.985585][T11916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'. [ 270.062032][T11916] [ 270.064417][T11916] ====================================================== [ 270.071551][T11916] WARNING: possible circular locking dependency detected [ 270.078607][T11916] syzkaller #0 Not tainted [ 270.083044][T11916] ------------------------------------------------------ [ 270.090080][T11916] syz.1.1689/11916 is trying to acquire lock: [ 270.096157][T11916] ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 270.105752][T11916] [ 270.105752][T11916] but task is already holding lock: [ 270.113111][T11916] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 270.122781][T11916] [ 270.122781][T11916] which lock already depends on the new lock. [ 270.122781][T11916] [ 270.133618][T11916] [ 270.133618][T11916] the existing dependency chain (in reverse order) is: [ 270.142631][T11916] [ 270.142631][T11916] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 270.150542][T11916] lock_acquire+0x120/0x360 [ 270.155596][T11916] _raw_spin_lock_bh+0x36/0x50 [ 270.160897][T11916] nr_rt_ioctl+0x390/0xd50 [ 270.165875][T11916] sock_do_ioctl+0xdc/0x300 [ 270.171278][T11916] sock_ioctl+0x576/0x790 [ 270.176143][T11916] __se_sys_ioctl+0xfc/0x170 [ 270.181360][T11916] do_syscall_64+0xfa/0x3b0 [ 270.186419][T11916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.192940][T11916] [ 270.192940][T11916] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 270.201053][T11916] lock_acquire+0x120/0x360 [ 270.206096][T11916] _raw_spin_lock_bh+0x36/0x50 [ 270.211392][T11916] nr_rt_ioctl+0x193/0xd50 [ 270.216356][T11916] sock_do_ioctl+0xdc/0x300 [ 270.221388][T11916] sock_ioctl+0x576/0x790 [ 270.226237][T11916] __se_sys_ioctl+0xfc/0x170 [ 270.231455][T11916] do_syscall_64+0xfa/0x3b0 [ 270.236492][T11916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.242928][T11916] [ 270.242928][T11916] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 270.250821][T11916] validate_chain+0xb9b/0x2140 [ 270.256111][T11916] __lock_acquire+0xab9/0xd20 [ 270.261420][T11916] lock_acquire+0x120/0x360 [ 270.266713][T11916] _raw_spin_lock_bh+0x36/0x50 [ 270.272001][T11916] nr_rt_device_down+0xa9/0x720 [ 270.277373][T11916] nr_device_event+0x137/0x150 [ 270.282746][T11916] notifier_call_chain+0x1b3/0x3e0 [ 270.288398][T11916] netif_close_many+0x29c/0x410 [ 270.293928][T11916] netif_close+0x158/0x210 [ 270.298985][T11916] dev_close+0x10a/0x220 [ 270.303776][T11916] bpq_device_event+0x377/0x6a0 [ 270.309164][T11916] notifier_call_chain+0x1b3/0x3e0 [ 270.314803][T11916] netif_close_many+0x29c/0x410 [ 270.320290][T11916] netif_close+0x158/0x210 [ 270.325406][T11916] dev_close+0x10a/0x220 [ 270.330194][T11916] bond_setup_by_slave+0x5f/0x3f0 [ 270.335746][T11916] bond_enslave+0x7a0/0x3a20 [ 270.340861][T11916] bond_do_ioctl+0x635/0x9b0 [ 270.345989][T11916] bond_siocdevprivate+0x17e/0x350 [ 270.351691][T11916] dev_ifsioc+0xb54/0xf00 [ 270.356551][T11916] dev_ioctl+0x84c/0x1150 [ 270.361411][T11916] sock_ioctl+0x719/0x790 [ 270.366350][T11916] __se_sys_ioctl+0xfc/0x170 [ 270.371518][T11916] do_syscall_64+0xfa/0x3b0 [ 270.376637][T11916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.383141][T11916] [ 270.383141][T11916] other info that might help us debug this: [ 270.383141][T11916] [ 270.393375][T11916] Chain exists of: [ 270.393375][T11916] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 270.393375][T11916] [ 270.407299][T11916] Possible unsafe locking scenario: [ 270.407299][T11916] [ 270.414858][T11916] CPU0 CPU1 [ 270.420253][T11916] ---- ---- [ 270.425635][T11916] lock(nr_neigh_list_lock); [ 270.430322][T11916] lock(&nr_node->node_lock); [ 270.437611][T11916] lock(nr_neigh_list_lock); [ 270.444828][T11916] lock(nr_node_list_lock); [ 270.449424][T11916] [ 270.449424][T11916] *** DEADLOCK *** [ 270.449424][T11916] [ 270.457824][T11916] 2 locks held by syz.1.1689/11916: [ 270.463016][T11916] #0: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 270.471999][T11916] #1: ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 270.482026][T11916] [ 270.482026][T11916] stack backtrace: [ 270.487916][T11916] CPU: 0 UID: 0 PID: 11916 Comm: syz.1.1689 Not tainted syzkaller #0 PREEMPT(full) [ 270.487937][T11916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.487948][T11916] Call Trace: [ 270.487955][T11916] [ 270.487962][T11916] dump_stack_lvl+0x189/0x250 [ 270.487987][T11916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.488005][T11916] ? __pfx__printk+0x10/0x10 [ 270.488028][T11916] ? print_lock_name+0xde/0x100 [ 270.488050][T11916] print_circular_bug+0x2ee/0x310 [ 270.488069][T11916] check_noncircular+0x134/0x160 [ 270.488091][T11916] validate_chain+0xb9b/0x2140 [ 270.488109][T11916] ? rt6_disable_ip+0x6b3/0x720 [ 270.488133][T11916] ? __lock_acquire+0xab9/0xd20 [ 270.488156][T11916] __lock_acquire+0xab9/0xd20 [ 270.488181][T11916] ? nr_rt_device_down+0xa9/0x720 [ 270.488198][T11916] lock_acquire+0x120/0x360 [ 270.488220][T11916] ? nr_rt_device_down+0xa9/0x720 [ 270.488242][T11916] ? nr_rt_device_down+0xa9/0x720 [ 270.488259][T11916] _raw_spin_lock_bh+0x36/0x50 [ 270.488278][T11916] ? nr_rt_device_down+0xa9/0x720 [ 270.488294][T11916] nr_rt_device_down+0xa9/0x720 [ 270.488312][T11916] ? do_raw_spin_unlock+0x122/0x240 [ 270.488333][T11916] nr_device_event+0x137/0x150 [ 270.488350][T11916] notifier_call_chain+0x1b3/0x3e0 [ 270.488369][T11916] netif_close_many+0x29c/0x410 [ 270.488393][T11916] ? __pfx_netif_close_many+0x10/0x10 [ 270.488416][T11916] ? bond_netdev_event+0x227/0xe80 [ 270.488433][T11916] netif_close+0x158/0x210 [ 270.488454][T11916] ? __pfx_netif_close+0x10/0x10 [ 270.488473][T11916] ? tun_device_event+0x77/0x1020 [ 270.488497][T11916] ? __pfx___neigh_ifdown+0x10/0x10 [ 270.488515][T11916] ? macsec_notify+0x104/0x660 [ 270.488533][T11916] dev_close+0x10a/0x220 [ 270.488558][T11916] bpq_device_event+0x377/0x6a0 [ 270.488581][T11916] notifier_call_chain+0x1b3/0x3e0 [ 270.488600][T11916] netif_close_many+0x29c/0x410 [ 270.488622][T11916] ? __pfx_netif_close_many+0x10/0x10 [ 270.488647][T11916] netif_close+0x158/0x210 [ 270.488667][T11916] ? __pfx_netif_close+0x10/0x10 [ 270.488694][T11916] ? do_raw_spin_lock+0x121/0x290 [ 270.488713][T11916] ? __local_bh_enable_ip+0x12d/0x1c0 [ 270.488729][T11916] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.488751][T11916] dev_close+0x10a/0x220 [ 270.488775][T11916] bond_setup_by_slave+0x5f/0x3f0 [ 270.488796][T11916] bond_enslave+0x7a0/0x3a20 [ 270.488815][T11916] ? unwind_get_return_address+0x4d/0x90 [ 270.488840][T11916] ? __pfx_stack_trace_save+0x10/0x10 [ 270.488860][T11916] ? __pfx_bond_enslave+0x10/0x10 [ 270.488882][T11916] ? apparmor_capable+0x137/0x1b0 [ 270.488901][T11916] ? full_name_hash+0x92/0xe0 [ 270.488919][T11916] ? netdev_name_node_lookup+0xdf/0x120 [ 270.488939][T11916] bond_do_ioctl+0x635/0x9b0 [ 270.488966][T11916] ? __pfx_bond_do_ioctl+0x10/0x10 [ 270.488996][T11916] ? rcu_is_watching+0x15/0xb0 [ 270.489013][T11916] bond_siocdevprivate+0x17e/0x350 [ 270.489038][T11916] ? __pfx_bond_siocdevprivate+0x10/0x10 [ 270.489061][T11916] ? __lock_acquire+0xab9/0xd20 [ 270.489085][T11916] ? full_name_hash+0x92/0xe0 [ 270.489102][T11916] ? netdev_name_node_lookup+0xdf/0x120 [ 270.489120][T11916] dev_ifsioc+0xb54/0xf00 [ 270.489145][T11916] dev_ioctl+0x84c/0x1150 [ 270.489168][T11916] sock_ioctl+0x719/0x790 [ 270.489187][T11916] ? __pfx_sock_ioctl+0x10/0x10 [ 270.489205][T11916] ? __fget_files+0x3a0/0x420 [ 270.489228][T11916] ? __fget_files+0x2a/0x420 [ 270.489253][T11916] ? bpf_lsm_file_ioctl+0x9/0x20 [ 270.489272][T11916] ? __pfx_sock_ioctl+0x10/0x10 [ 270.489290][T11916] __se_sys_ioctl+0xfc/0x170 [ 270.489309][T11916] do_syscall_64+0xfa/0x3b0 [ 270.489331][T11916] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.489352][T11916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.489367][T11916] ? clear_bhb_loop+0x60/0xb0 [ 270.489384][T11916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.489399][T11916] RIP: 0033:0x7f46f418ebe9 [ 270.489414][T11916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.489427][T11916] RSP: 002b:00007f46f4fdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.489445][T11916] RAX: ffffffffffffffda RBX: 00007f46f43b5fa0 RCX: 00007f46f418ebe9 [ 270.489457][T11916] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000006 [ 270.489467][T11916] RBP: 00007f46f4211e19 R08: 0000000000000000 R09: 0000000000000000 [ 270.489477][T11916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.489486][T11916] R13: 00007f46f43b6038 R14: 00007f46f43b5fa0 R15: 00007ffc778017d8 [ 270.489504][T11916] [ 270.939223][T11916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.952423][T11916] bond0: (slave rose0): Enslaving as an active interface with an up link