last executing test programs: 2m18.130143968s ago: executing program 2 (id=1902): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000100000200012800b0001006272696467650000100002800c002e000300000003000000"], 0x40}}, 0x0) socket(0x40000000015, 0x5, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0xf, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@noop, @timestamp_addr={0x44, 0x24, 0x18, 0x1, 0x3, [{@rand_addr=0x64010100, 0x3}, {@private=0xa010101, 0x7640}, {@empty, 0xffff}, {@local, 0x1}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0xf, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@noop, @timestamp_addr={0x44, 0x24, 0x18, 0x1, 0x3, [{@rand_addr=0x64010100, 0x3}, {@private=0xa010101, 0x7640}, {@empty, 0xffff}, {@local, 0x1}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r3, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r3, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000070000006916300000000000bf07000000000000260507000fff0720670600001f000000470600000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) 2m17.710443167s ago: executing program 2 (id=1906): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000e2b1860e2aa"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000140), 0x7fffffff, r1}, 0x38) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400000000165e"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r3, 0x4) (async) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000280)) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000500c00ecffffff07000000850000000400000018000000a900000003000000000000001811000000000000000000007e0ecb01fa4f084cb4ce70ef22939da7f651337a8d35f23ffb49d07e7a7c2ae6c89850f86b393fa31ca5d6b779186f8635bf3fd7065398b1939a3009cc941ba5cd27816d2e76606dbc832245fff2d945303f7cea0e5efbe738b69332", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000008500000091000000050e0d0a0200000018170000", @ANYRES32=r1, @ANYBLOB="0000000000000000184a000007000000000000000000000007d5030003000000183400000300000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000200)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, r3, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2m6.621798846s ago: executing program 4 (id=2013): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='&\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="074dd09413fe194a205550450a83db7e5651c9806d20afbfb674989bc5280341d998ed5e53c88a6d48115bf4ccfa94873515bae788ab797bdce376d59d1c6527d07f09561d602701e853e01a83f39fbcdd7f93b3190d57fdc411e44aada042d7fe1c99e9", @ANYRES64=0x0], 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) (async) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000150001"], 0xe8}}, 0x0) (async) sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000150001"], 0xe8}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000010101020000000000000000020000000c00198008000200020c000095f3022d300002802c00012f7a000300fc02000000000000000000000000000114000400fc0100"/84], 0x50}}, 0x0) 2m6.585018746s ago: executing program 0 (id=2014): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x7, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x1, 0x0, 0x3, 0x84ba, 0x8}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000700000008000200020000002c0004800500030002000000050003000000000005000300000000000500030001e0ff000500030002"], 0x50}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r3) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r6, 0xb15}, 0x14}}, 0x80) socket$packet(0x11, 0xa, 0x300) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="0400000000000000000012000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r7) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000800)=ANY=[@ANYRES8=r1, @ANYRES16=r10, @ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYRES32, @ANYRES32=r11, @ANYRESOCT=r2], 0x3c}}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r10, 0x230, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x25}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffff7cec}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000005}, 0x11) sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030f000000000000000008000000150001000000005d"], 0x2c}}, 0x20000084) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x2c, r8, 0x100, 0x70bd27, 0x25dfdbfa, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x2ad96fa91c8b53c6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) close(r12) sendmsg$kcm(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)="9b08c7eb27f5cc22f1e61a076a49ef9d36f147946f61ea0ada9ee87c049eef0eab5ad33592a70f52a7f6bf04865f59495fd85b9a7844638dc1cc8f41863db1c8d0f744f78172ac9f6ff4a2807cf0110295feec238de169120a1ebbb30eb94baef13ab9e2894ba799ade629cc1a113b7da64ade3b1eed8548180490d9e3e27e56edab1f27fdbfac27025fad56e629704d5cd0f7d6e0d38db889593d235267af8c893acfc1c72dde009a339c983a0fdb515bde610b9db6aa934e98cd0aa085f823fdfc49bd37114309b4aedf8cf16f9d55c57de9c9", 0xd4}], 0x1}, 0x5fca9457a9b5faa) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xff, '\x00', @empty}}}}}}, 0x0) 2m6.400680894s ago: executing program 4 (id=2017): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x0, 0xf0}, 0x1fe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (fail_nth: 4) 2m6.349657077s ago: executing program 0 (id=2018): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f000000a080)) (async, rerun: 32) r1 = socket(0x29, 0x5, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x4}]}, 0x1c}}, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x98, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_MAP={0x24, 0xe, {0x8000000000000000, 0x5, 0x1, 0xfff, 0x4, 0x6}}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x428, 0x1}}}}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@ipv4_newnexthop={0xac, 0x68, 0x8, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x4, 0x0, 0x1}, [@NHA_GROUP={0x2c, 0x2, [{0x1, 0x47}, {0x1}, {0x1, 0x95}, {0x0, 0x5}, {0x1, 0x9}]}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ENCAP={0x24, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x20, 0x1, [{0xaf, 0x0, 0x1}, {0x51, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x6e4, 0x0, 0x1}, {0x101}, {0x401, 0x0, 0x1}]}}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x2400}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xd2ba}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xfffe}]}, @NHA_ID={0x8}, @NHA_GROUP_TYPE={0x6}]}, 0xac}, 0x1, 0x0, 0x0, 0x200548c1}, 0x20000850) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000e00)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @initial, {0x0, 0x400}}, @measure_req={0x0, 0x0, {0x3}}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x60, r7, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x101, 0x5e}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="52d276c004b9"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9da}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000084) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0xf2]}}) 2m6.319806159s ago: executing program 1 (id=2019): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000005c0)=@buf={0x42, &(0x7f0000000540)="e6c58b01be3d12b284f79917bcac35ea70893f16bc241782f41bea504e73d85033800e78fe4e2e14e46fd24dc37d980c1a3ca9b1fbedb13ae531e46dba12f9830e5e"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x20040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x3416ca9048720db4}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_FIRMWARE_NAME={0xf, 0x14, 'NLBL_UNLBL\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048004}, 0x40001) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:unconfined_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x80}}, 0x4000006) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 2m6.309072828s ago: executing program 3 (id=2020): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x50}}]}, 0x30}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1411, 0x100, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4015}, 0x1) 2m6.155774927s ago: executing program 3 (id=2021): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x1405, 0x100, 0x70bd26, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x1405, 0x100, 0x70bd26, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x10) (async) 2m5.856904811s ago: executing program 0 (id=2022): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x264}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x1010, r1, 0xe6f9b000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x4) 2m5.856164221s ago: executing program 1 (id=2023): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r0], 0x50}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000240)={0x1, 0x1, [@broadcast]}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'veth0\x00', @local}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601801e", @ANYRES16=r1], 0x26c0}}, 0x4010) 2m5.855029543s ago: executing program 4 (id=2024): r0 = socket$kcm(0xa, 0x3, 0x73) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r3 = socket(0x200000000000011, 0x2, 0x1) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) (async) getsockopt$bt_hci(r1, 0x84, 0x85, 0x0, &(0x7f00000004c0)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000010c0), 0x6e, &(0x7f0000001140)=[{&(0x7f00000011c0)=""/107, 0x6b}, {&(0x7f0000001300)=""/130, 0x82}, {&(0x7f00000013c0)=""/201, 0xc9}, {&(0x7f00000014c0)=""/128, 0x80}], 0x4, &(0x7f0000001240)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x10002) (async, rerun: 64) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @local}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001580)=ANY=[@ANYBLOB="1400000000000000290000000200000080000000000000004800000000000000080000000700000000863600000000020f989aff0f062c3aad451a64d0a70502050bc85480f281a4ece3b40509469f6eab39b11b000b2602d50f0bd59c1505001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0000008ccd7e37c9e619c39a"], 0x80}, 0x0) (rerun: 64) 2m5.721104653s ago: executing program 4 (id=2025): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x10, 0x8000, 0x2, 0xbe, {{0x30, 0x4, 0x1, 0x5, 0xc0, 0x65, 0x0, 0x9, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x28}, {[@timestamp={0x44, 0x18, 0x59, 0x0, 0x0, [0x1, 0x8001, 0xb55, 0x12e, 0x30000]}, @timestamp_addr={0x44, 0x34, 0x51, 0x1, 0x8, [{@rand_addr=0x64010100, 0xfffffffb}, {@empty, 0xa7aa}, {@multicast2, 0x8001}, {@rand_addr=0x64010100, 0x10000}, {@remote, 0x2}, {@rand_addr=0x64010101, 0x81}]}, @lsrr={0x83, 0x1f, 0xd3, [@remote, @private=0xa010102, @empty, @loopback, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @lsrr={0x83, 0x17, 0x2d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010101, @loopback, @broadcast]}, @timestamp={0x44, 0x28, 0x91, 0x0, 0xd, [0x3, 0x4, 0x98, 0xd665, 0x7fff, 0x7, 0x401, 0x4, 0x3]}]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x89, r1}, {0xb6e7, 0xf3c, 0x2, 0xe, 0x0, 0x100005, 0x0, 0x10000000000000}, {0x0, 0x0, 0x2000000000000, 0x4000000000001}, 0x0, 0x6e6bb3, 0x3, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x41}, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}}, 0xe8) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x6, 0x7, 0x1ff, "fac16a590b17"}}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, @TCA_TBF_PTAB={0x4}, @TCA_TBF_RATE64={0xc}]}}]}, 0x468}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x23d7, 0x7f}}]}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x10, 0x8000, 0x2, 0xbe, {{0x30, 0x4, 0x1, 0x5, 0xc0, 0x65, 0x0, 0x9, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x28}, {[@timestamp={0x44, 0x18, 0x59, 0x0, 0x0, [0x1, 0x8001, 0xb55, 0x12e, 0x30000]}, @timestamp_addr={0x44, 0x34, 0x51, 0x1, 0x8, [{@rand_addr=0x64010100, 0xfffffffb}, {@empty, 0xa7aa}, {@multicast2, 0x8001}, {@rand_addr=0x64010100, 0x10000}, {@remote, 0x2}, {@rand_addr=0x64010101, 0x81}]}, @lsrr={0x83, 0x1f, 0xd3, [@remote, @private=0xa010102, @empty, @loopback, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @lsrr={0x83, 0x17, 0x2d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010101, @loopback, @broadcast]}, @timestamp={0x44, 0x28, 0x91, 0x0, 0xd, [0x3, 0x4, 0x98, 0xd665, 0x7fff, 0x7, 0x401, 0x4, 0x3]}]}}}}}) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x89, r1}, {0xb6e7, 0xf3c, 0x2, 0xe, 0x0, 0x100005, 0x0, 0x10000000000000}, {0x0, 0x0, 0x2000000000000, 0x4000000000001}, 0x0, 0x6e6bb3, 0x3, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x41}, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}}, 0xe8) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x6, 0x7, 0x1ff, "fac16a590b17"}}) (async) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, @TCA_TBF_PTAB={0x4}, @TCA_TBF_RATE64={0xc}]}}]}, 0x468}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1\x00'}) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x23d7, 0x7f}}]}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) 2m5.438187223s ago: executing program 2 (id=2026): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) (async) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x4, 0x5, 0x7fffffff, 0x7, 0x8d}) (async) r2 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/92, 0x5c}, {&(0x7f0000000140)=""/68, 0x44}, {&(0x7f00000001c0)=""/196, 0xc4}, {&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000340)=""/201, 0xc9}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/141, 0x8d}, {&(0x7f0000000580)=""/162, 0xa2}, {&(0x7f0000000640)=""/48, 0x30}], 0x9}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)=""/151, 0x97}, {&(0x7f0000000800)=""/126, 0x7e}], 0x2}}, {{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000940)=""/72, 0x48}], 0x1, &(0x7f0000000a00)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000000a80)=@abs, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000b00)=""/220, 0xdc}, {&(0x7f0000000c00)=""/71, 0x47}, {&(0x7f0000000c80)=""/137, 0x89}, {&(0x7f0000000d40)=""/9, 0x9}, {&(0x7f0000000d80)=""/190, 0xbe}], 0x5, &(0x7f0000000ec0)}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000f00)=""/123, 0x7b}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/85, 0x55}, {&(0x7f0000002000)=""/64, 0x40}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x5, &(0x7f00000030c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x158}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f00000033c0)=[{&(0x7f00000032c0)=""/116, 0x74}, {&(0x7f0000003340)=""/94, 0x5e}], 0x2, &(0x7f0000003400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x6, 0x100, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x7f) (async) r12 = socket$key(0xf, 0x3, 0x2) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000003680), r11) sendmsg$DEVLINK_CMD_TRAP_SET(r10, &(0x7f0000003900)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000038c0)={&(0x7f00000036c0)={0x1e8, r13, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000003940)={0x0, 0x2, 0xfc5, 0x1}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000003d40)={r14, 0xf, 0x101, 0x1}) socket$kcm(0x29, 0x5, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000004200)={&(0x7f0000004140), 0xc, &(0x7f00000041c0)={&(0x7f0000004180)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40c0}, 0x80000) (async) clock_gettime(0x5, &(0x7f0000004240)) (async) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f00000042c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000004300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000043c0)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x28, r15, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x28}}, 0x800) (async) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004440), r10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000004480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000004540)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004500)={&(0x7f00000044c0)={0x1c, r17, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r18}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r12, 0x942e, 0x0) (async) nanosleep(&(0x7f0000004580)={0x0, 0x989680}, &(0x7f00000045c0)) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r19 = accept4$unix(r7, 0x0, &(0x7f0000004600), 0x80000) recvfrom$unix(r19, &(0x7f0000004640)=""/180, 0xb4, 0x2, 0x0, 0x0) (async) r20 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004740), r10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000004900)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004780)={0x134, r20, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0x108, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa8, 0x5, "88539d5ec70380352e617420f6f474ee54c65e0c97452ef005f2b50e5bdb13dcdd38ec136557ebcbfc406659f4d1933bd604e541e4c2c35706e72147c103d964bdcc4dc526303347372dc943ef0ec53c2cd3f607811359e947852a873116cdea61dd28517759e3f63faea0a2b4195bee94c264320e2dd84e4701d1954a7381b275bd21d36ee070dcc71de8f5bf2ce515c17d1048e196c6e6841d359b0012475871b65f95"}, @ETHTOOL_A_BITSET_MASK={0x3a, 0x5, "97547e18ffa36397d13eed6dd7d019df1c6dff9279964174fbe68ec77add0a3220fa4f9ce4b512f5e7d91ead9560175102a1dae59f2e"}, @ETHTOOL_A_BITSET_VALUE={0x13, 0x4, "937abe451f0c2f4f8c1e81988ececa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x48}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x6}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xc}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000004a00)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000049c0)={&(0x7f0000004980)={0x20, r17, 0xdf8771e6ba129de0, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x8001) 2m5.43747238s ago: executing program 3 (id=2027): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)}, 0x6c884) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x0, 0xf0}, 0x1fe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 2m5.435323156s ago: executing program 1 (id=2028): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@empty, @dev, 0x0}, &(0x7f0000000140)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x7800, 0x1, 0x3, 0x0, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x65, 0x0, 0x4, 0x2f, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0x86, 0x1, 0xc, [{@multicast2, 0x4}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x6401246b}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=r10, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r10, @ANYBLOB="d020eb072e1bfa78447ee5fd5c1a26bbdf743b2ddb40"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) (async) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r12, r14, 0x25, 0x2}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000d00)={r12, 0x4, 0xdd6, 0x1}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000d00)={r12, 0x4, 0xdd6, 0x1}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000400)={0x830, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x19, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800000}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x6, 0x4, 0x4}, {0x1, 0x9, 0x7, 0x4}, {0x7, 0x12, 0x9, 0x3b}, {0x9783, 0x6, 0x3, 0x9}]}}}]}}, {{0xffffffffffffff60, 0x1, r7}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x47e8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x372}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x7f, 0x8, 0x7}, {0x9, 0x9, 0x3, 0xe061}, {0x4, 0x6, 0x8, 0x4}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x1, 0xa, 0x1}]}}}]}}, {{0x8, 0x1, r14}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r15}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}]}}]}, 0x830}, 0x1, 0x0, 0x0, 0x20000800}, 0x8001) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x23c}, 0x1, 0x0, 0x0, 0x880}, 0x404e006) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x23c}, 0x1, 0x0, 0x0, 0x880}, 0x404e006) 2m5.37921058s ago: executing program 0 (id=2029): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_stats={0x1d, 0xa, [0x0, 0x4ab3, 0xb, 0x4, 0x8000000000000000, 0x9, 0x0, 0x9, 0xc0, 0x5f16]}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa}]}]}]}}]}, 0x9c}}, 0x0) 2m5.292568909s ago: executing program 2 (id=2030): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x7, 0x5, 0x9, 0x100, r1, 0xff, '\x00', 0x0, r2, 0x1, 0x3, 0x2, 0xa}, 0x50) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m5.226660324s ago: executing program 1 (id=2031): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00120010008305000000000f000000000000009c1cf7d1dd7183c2857f78d791c6958ee7b3c6f958fb8ffcee0abbd63618f59884752c4e8f95a53f48410f3c1cc2b62c9419a5b29ca3419d473ad9b685b4be396d173a18e9b7191dc13c916d6df333aa9a1d445f41e752f8a68a894cd940378c90c5c4929db4ae6f4ccc6ba41cd645ed1770202758fb331efea97c20090099b438443e532cb03f812cf73641fcd0eca26eb550f5a994b3ede0d6a1f583c02b2f77d087984a16ae55f6bbb12ba4a8757fec1257163f00"/213, @ANYBLOB="b791cc71e0335d4ec5861207ef0231e88fb662b15af30bdd4b7ac12bb76f71945d16c6088eb4a97bc9ae2ef33df1ed29e8c94d318d5f44", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0xd4}, 0x0) 2m5.226132408s ago: executing program 4 (id=2032): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x2a5d, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) (async) sendto$inet(r0, &(0x7f00000003c0)="403e75fe34978725b300c4dc040000000000000031011b1754782a092ab7", 0x1e, 0xe044, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async, rerun: 32) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async, rerun: 32) openat$cgroup_type(0xffffffffffffffff, 0xfffffffffffffffc, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @broadcast}}}}}, 0x0) (async, rerun: 64) socket(0xb, 0xa, 0x3f0b8395) (async, rerun: 64) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYRESHEX=r1], 0x1c}], 0x1}, 0x0) 2m5.112979119s ago: executing program 0 (id=2033): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x80000001, 0x3, 0x5, 0xd430, 0x7, 0x4, 0x768b, {0x0, @in6={{0xa, 0x4e20, 0xfffffffe, @remote, 0x4}}, 0x8, 0x8, 0x51, 0x7, 0x1ff}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000400)={r2, 0x95, "40444964427df8b9dbf7aa4e97da750f855a52c5a5f58525fdbf50e4e1935656153513fd7f3eb0c194f66a63f4c87e6b044d9cd7cde605a3b0abdc671904fac338a5a6bcc2b478a9125417b291c284348e53439e81a15a383fae82726a5194b862ab583bae5af00686795166e37f905d5a5a7cb648852414684a5244243656e2fa20edf2af81c9557937e405fc2f6c6f7a5a67f0a6"}, &(0x7f0000000280)=0x9d) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x2}, 0x48) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000ffdbdf255f"], 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x50, r3, 0xe096044a3fc9e6f1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xffffffff, 0x401}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040000}, 0x8050) 2m5.102370311s ago: executing program 1 (id=2034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) close(r1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x600}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x53b, 0x1, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_simple={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xa7, 0x1, 0x0, 0xd, 0xf}}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x800, 0x70bd2c, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x20000020) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x0, 0xe6, 0x1, 0x9, 0x2b, @empty, @empty, 0x7, 0x40, 0x3, 0x94}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x10, 0x10, 0x6234, 0x5, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x67, 0x0, 0x3, 0x29, 0x0, @loopback, @local, {[@ssrr={0x89, 0x1b, 0x3a, [@loopback, @multicast2, @private=0xa010101, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x1a}]}, @lsrr={0x83, 0x1b, 0xad, [@broadcast, @private=0xa010100, @rand_addr=0x64010102, @remote, @broadcast, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) r12 = socket$packet(0x11, 0x2, 0x300) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$F2FS_IOC_DECOMPRESS_FILE(r13, 0xf517, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f00000016c0)={0xb40, r15, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x368}, @val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xb1c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x14, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x8}}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x8, 0x12, 0x0, 0x1, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x14, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x9}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xad0, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x3d8, 0x84, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x10}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x200}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, @random="d86043c58410c4cd78b8e3dbf7a69a6b10cb5722708c811c865419d2f4"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x45}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3ff}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffff8}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xe3}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xc9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="710dc027589a"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @random="d02a917d6ae3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="8b629f6b060e"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x23, 0x1, @random="20c0e2d369d5f9e3165634baeab123b73599f8d276190b896731d6ae92e4cb"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x64c}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x9, 0x1, @random="53ba842255"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x15, 0x1, @random="9cabc5e23d8aff35beacc14aa7a6120f38"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9fb}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xe9}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x24, 0x1, @random="e2a672c6cce6da3ea65d34af014d019d25342be220060414cc9f70da9be17ce3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="45387b297aa4"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0xfffff35c}]}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9004}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x81}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7f}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x400}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffffe}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xb}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xccd6}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1f, 0x1, @random="31d4b1a28a0783291a534fe4ceef234d597032b3e5cf2b82893283"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xf}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8001}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6c600000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x25}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="82712cec8624"}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x128, 0x84, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="f02af061ca7a"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x5}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x10000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xe}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_6GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x60}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x38000000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xb707}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x200}]}]}, {0x4}]}, @NL80211_ATTR_IE={0x156, 0x2a, [@fast_bss_trans={0x37, 0xa9, {0x2, 0x3, "7bcc6561165cca70296a0325363c6fe0", "9814593bd646d100e4a08148d04b7a5abc3a1fb6075b3012afbf5689a59a597b", "ce91567d9bd9bccecd94ad060101068f28836cfb5f57baee9c526872521f6243", [{0x4, 0x1f, "58d411da50d109a054378e6fc174c345ebfd6932606ca6930c3e99991fabd0"}, {0x2, 0x22, "04c7439543e79648d9ed4e27f9cbc682e1e27957ea2acaf30ab8c0ca5e2f08c11c72"}, {0x4, 0x10, "5ef2ba956ab44b88354e968358f50369"}]}}, @gcr_ga={0xbd, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0xb6}}, @supported_rates={0x1, 0x6, [{0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0xb, 0x1}, {0x60}]}, @challenge={0x10, 0x1, 0xfd}, @tim={0x5, 0x8c, {0xb, 0x2, 0x7, "d1c4669eb9c3a0c691bd942c2afd8a20c2cf929ab05567e21efe754744effceecd01f0da8658e00e78f71f3c061aa9ffa3f0cfd383308ad1e14935dc5503ef327d97cc490fad97452920c7d62ba9c676c706f82e3d8197b5eba1ce092902de5fe1a7ac517c9fb61c3852ba2d0b4aba04390cbcdfb81857cddd65a3ce42ee3795657b66dabb79602140"}}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x460, 0x84, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7ff}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x525}, @NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xd}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, @random="0be3608c1497b274f89112f2031df7bd2e9f8dd3a3eba562bd401e3655"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="3b5fcaca5241"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ba427e5b0ad5"}]}, {0xe0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="d56f54cc01d5"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffff7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffff9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xb}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x33b}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x67}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="1173eeaf45a2"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4d812557}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x72ec}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x401}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x57}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xe875}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x17, 0x1, @random="34ba64bbe6aee5439511ff2eac1cc7f4abd4a9"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x401}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xc}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}]}]}, {0xa8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffff}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x7fffffff}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="237271337bf8"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="dde7974a89ed"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x401}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1b, 0x1, @random="bfabce465f7fd95a8795037dc1486ff9e98f2d00d682d0"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x15, 0x1, @random="e9d71e1514a1e19127ebd7bd82b4ef788f"}]}, {0x8c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7fffffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xb}, @NL80211_BAND_LC={0x8, 0x5, 0x7ff}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x800}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xf}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x906}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x91}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xaa6e}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x21f}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}]}]}]}]}, 0xb40}}, 0x810) sendto$packet(r12, &(0x7f00000000c0)="00008828", 0x1e, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r14, 0x1, 0x8, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1040020}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xcc, r3, 0x2, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004010}, 0x40014) 2m5.046558557s ago: executing program 4 (id=2035): socket$inet6(0xa, 0x3, 0x3c) (async) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40020000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x48880) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001000010000000000000000000300000a80000000090a010400000000000000000200000360001280100001800b0001006578746864720000280001800ded000073796e70726f78790000000014000280050002f9070000000600014005520000140001800e000100627974656f72646572000000100001800a00010072656469720000000c001040000000000000000214000000be8d49403ed62a7ff761551cf3f81100"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5aa}], 0x1) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5aa}], 0x1) socket$igmp6(0xa, 0x3, 0x2) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001200970c25bd70000200000007000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000040034"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2m5.044574573s ago: executing program 2 (id=2036): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = accept(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@can_delroute={0x40, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x6}, [@CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "6698c13a70ca67e7"}, 0x2}}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x1}, {0x2, 0x0, 0x0, 0x1}}}, @CGW_CS_XOR={0x8, 0x5, {0x4, 0xfffffffffffffffa, 0xfffffffffffffff8, 0xc}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010068c8c8a7d7e8dc2206000000"], 0x14}, 0x1, 0x0, 0x0, 0x4020040}, 0x80) getpid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002120000000090a030b0000000000000000050000070900010073797a3100000000540400000b0a05000000000000000000070000093400098008000140000000080800014000000009200002801c0001800800014000000600080001400000407708000140fffffff8080007400000001608030980e40002804400018008000140000000000800014000000007080001400000000108000140000006c40800014000007dfb08000140000001010800014000000001080001400000cb6e340001800800014000000002080001400000000208000140fffffc000800014000000800080001400000000408000140000000052c000180080001400000000808000140ffffffff08001840000000ff080001400000001008000140000000093c000180080001400c0000000800014000000002080001400000000408000140000004130800014000000009080001400000000c08000140000000013c0102801c000180080001400000057c080001400000000208000140800000000c00018008000140000000030c000180080001400000000344000180080001400000010d080001400000000008000140000000090800014000000fff080001400000000008100140000000060800014000007fff0800014000000006240001800800014000004ca708000140000061a908000140000000050800014000000a781400018008000140ffffffff0800014000000006440001800800014000010001080001400000000408000140800000010800014000000ac5080001400000000008000140fffff0000800014000000c3108000140000000804400018008000140000000030800014000003b4b08000140000000040800014000000005080001400000040008000140000000080800014000000005080001400000000908000140000000c5b400028014000180080001400021c20008000140000000054400018008000140ffffffff0800014003a66d57080001400000000508000140000008000800014000000006080001400000000308000140ffffff0b080001400100000034000180080001400000000408000140ffffffff0800014000000006080001400000000608000140000000010800014000000ea12400018008000140000001000800014000000009080001400c000000080001400000000808000140000005f00800014000000002100002800c0001800800014000000008080001400000ffff08000f4000000005080006400000000008000440000000030900010073797a3000000000090002"], 0x944}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read(r10, &(0x7f0000000140)=""/127, 0x7f) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="0a00180083030303030300c1d2b89ec23386b393a547afa6"], 0x34}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x188, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x61}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x11}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xe2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x225}, @NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "6fe12c3a94fc737d8f990f8332c951766052ea1f011a8eb09cc706388ce6d556f9e76f86f10a148b82bfaec6fb20b72db42598b6df39b12f13787a86220c74b84dbda622891591ff664e4f3eabd6e606050fc4e5df2da74cf04950"}, @NL80211_ATTR_VENDOR_DATA={0xe5, 0xc5, "014b44b0866c89cc27eecaf65c22b1dfacfaf5257fb9b4e509b28327a0dafc2d68e44eaa91cf6a63c1249329e2f3d5d6f2881065eedbcb309678e9fa92fbc9af651278dd9187cae6974e4bdf3f66002cb604e52dbb1fe621795d997968daecfacdd33ff3c355b6985bad0238ae812912cbdd73259cb3c7e47b3f13f52d3b0f2077764eb8d1141768785a34bbde99ed0c4a8b014bc4e9b3f19103f648c00873240a6cc246ef394086af328b8e66650c86195479ed4eed59b9dab4950b60213003fad6237026c7ca803a72f93c666aa4834eb8f6ea53cdd32a228cc175e172fbb0e6"}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r11, 0x0) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042aae7000fddbdf251f0000000a0001007770616e30000000c7e459fa733ac521919a99a6882101763838c6f74f231713fb4c66db1cb31276754c84ee29a950e35f575db1336e73beaa42f858c1081c9f9cda9d73219aa4fe0536b1b741c871856e4e72a806fae775fc2c3971c7e8a404f721d359cb656f157dc492211800f75d19d77e01b73bd22ce28581fba8e5f3175050ea6ddc184a093315e18d3e90c5d1429d3d2b20788d6f705ea7"], 0x20}, 0x1, 0x0, 0x0, 0x40845}, 0x2400c84c) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44804}, 0x810) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r12, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x80, 0x10, 0x36, 0x9, {{0x36, 0x4, 0x2, 0x3d, 0xd8, 0x64, 0x0, 0xc, 0x2f, 0x0, @private=0xa010102, @loopback, {[@noop, @rr={0x7, 0x13, 0x69, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, @remote, @empty]}, @timestamp_addr={0x44, 0x1c, 0x56, 0x1, 0x7, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x8}]}, @lsrr={0x83, 0x13, 0x27, [@rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x24}, @local]}, @cipso={0x86, 0xd, 0xffffffffffffffff, [{0x0, 0x7, "3213a3dd91"}]}, @cipso={0x86, 0x2f, 0x3, [{0x1, 0xa, "44c8f2e6af27d7e8"}, {0x2, 0xf, "45ce0614a630f0693ac202d504"}, {0x2, 0xe, "6b47f4a4adfa970b1892727e"}, {0x0, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x4b, 0x1, 0x8, [{@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x22}}, {@broadcast, 0x2}, {@local, 0x1}, {@private=0xa010102, 0x7}, {@dev={0xac, 0x14, 0x14, 0x35}, 0xfffff800}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xa4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r14, 0x58021, 0x40101}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x30f55}]}, 0x28}, 0x1, 0x0, 0x0, 0x44002}, 0x0) 2m5.023395846s ago: executing program 3 (id=2037): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0x4, 0xb, 0xfffffffa, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r3, 0x4d, 0x100, 0x7, 0x3, 0x5}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x4}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000280)={r5, 0xda, "b16b7495fa6084fe80f485016174a52f218bd8054ccb7521bb7607ae5dd7547080e6426060900d1ca5963332b716171a1fc1d4407ea9ae9fb398bb352a4f2ab130ccb13c6f641c1a4f4aeb89b170e8632a65a63c24ff4cf0cb18cbfd05a1619355886ecd7ccbfe07173eeecbeb072e6eca81cf462fae1adfc01074c4bc89d47d586d8a2169d38a7413768bcbeafedb12c0fe7324211ef02ae386fdb0d739cc9dde9c9c6d53aa5c906525e45ef8064451180665a721685abe657bf356339583d91eaa909842205020e383cf2e6fe711e0b50d43d253b824f3b081"}, &(0x7f0000000380)=0xe2) socket$kcm(0x29, 0x0, 0x0) (async) r6 = socket$kcm(0x29, 0x0, 0x0) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffd}, 0x1c) (async) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffd}, 0x1c) getpeername$inet(r1, &(0x7f0000000400)={0x2, 0x0, @initdev}, &(0x7f0000000440)=0x10) (async) getpeername$inet(r1, &(0x7f0000000400)={0x2, 0x0, @initdev}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000480)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, @in6={0xa, 0x4e24, 0x6, @mcast1, 0x4}, @in6={0xa, 0x4e22, 0xe58, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}, @in6={0xa, 0x4e23, 0x9eb, @loopback, 0x5}], 0x64) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000480)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, @in6={0xa, 0x4e24, 0x6, @mcast1, 0x4}, @in6={0xa, 0x4e22, 0xe58, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}, @in6={0xa, 0x4e23, 0x9eb, @loopback, 0x5}], 0x64) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x204000, 0x0) recvmmsg(r6, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000540)=""/240, 0xf0}, {&(0x7f0000000640)=""/228, 0xe4}, {&(0x7f0000000740)=""/189, 0xbd}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/176, 0xb0}, {&(0x7f00000018c0)=""/108, 0x6c}, {&(0x7f0000001940)=""/158, 0x9e}, {&(0x7f0000001a00)=""/140, 0x8c}], 0x8, &(0x7f0000001b40)=""/59, 0x3b}, 0x5}], 0x1, 0x1a0, &(0x7f0000001bc0)={0x0, 0x989680}) (async) recvmmsg(r6, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000540)=""/240, 0xf0}, {&(0x7f0000000640)=""/228, 0xe4}, {&(0x7f0000000740)=""/189, 0xbd}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/176, 0xb0}, {&(0x7f00000018c0)=""/108, 0x6c}, {&(0x7f0000001940)=""/158, 0x9e}, {&(0x7f0000001a00)=""/140, 0x8c}], 0x8, &(0x7f0000001b40)=""/59, 0x3b}, 0x5}], 0x1, 0x1a0, &(0x7f0000001bc0)={0x0, 0x989680}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000001c00)={r5, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000001c00)={r5, 0x7}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001cc0)={0xa4, r9, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb, 0x3b}}}}, [@NL80211_ATTR_CQM={0x84, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x4b3dec06, 0x6, 0x3ff, 0x3, 0x0, 0x7, 0x9, 0x8]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xf}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x348}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x2, 0xdf, 0x6, 0x0, 0x6, 0xa, 0x5, 0x7fffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffff3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x32}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001e00), 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000001e40)={r3, 0x7}, &(0x7f0000001e80)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000001ec0)=@assoc_id=r10, &(0x7f0000001f00)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001f80), r8) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r8, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r11, 0x828, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r8, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r11, 0x828, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000002080)={r10, 0x40}, &(0x7f00000020c0)=0x8) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000002080)={r10, 0x40}, &(0x7f00000020c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x1, r4}, &(0x7f0000002140)=0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000002180)={{0x2, 0x4e24, @multicast2}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x8, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 'netdevsim0\x00'}) 2m4.674983962s ago: executing program 3 (id=2038): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = gettid() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = getpid() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r1, 0x114, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0xff, 0x44}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x0, 0x0) sendto$rxrpc(r7, &(0x7f0000000240)="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", 0xfd, 0x2000c096, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x24) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0xe}}, @volatile={0x8, 0x0, 0x0, 0x9, 0x5}, @union={0xf, 0x2, 0x0, 0x5, 0x1, 0x5, [{0x10, 0x2, 0x3}, {0xa, 0x3, 0x8}]}, @func={0x7, 0x0, 0x0, 0xc, 0x5}, @float={0xf, 0x0, 0x0, 0x10, 0x8}, @ptr={0x7, 0x0, 0x0, 0x2, 0x2}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}, @restrict={0x10, 0x0, 0x0, 0xb, 0x1}, @float={0xd, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x1e, 0x5f, 0x61, 0x0, 0x0, 0x5f, 0x0]}}, &(0x7f0000000440)=""/63, 0xbd, 0x3f, 0x0, 0x1ff, 0x10000, @value=r7}, 0x28) getsockopt$bt_sco_SCO_CONNINFO(r7, 0x11, 0x2, &(0x7f00000004c0)=""/68, &(0x7f0000000540)=0x44) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r7, r7, 0x41e27fa9c7102f4a, 0x0, @val=@netfilter={0x5, 0x1, 0x2, 0x1}}, 0x20) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r8, 0xf505, 0x0) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f00000005c0)=0x1) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, r1, 0x800, 0x70bd27, 0x0, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x70}}, 0x20004801) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r9, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000940)=@buf={0x34, &(0x7f0000000900)="2a7b47ee738c9989527b1e18ef93c118327e6c775b0644f2b667920f8ed0326871cc799f08552e493bac095d29cceda63552c2b4"}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f0000000980)) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x359b, 0x54}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "b14f6738ef2dea5e5c6510fbe917e2f7"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4c}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x43}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x20000004) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r1, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000c00)=0x40, 0x4) ioctl$SIOCX25CALLACCPTAPPRV(r7, 0x89e8) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x194, r11, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd88c}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffff28}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x194}, 0x1, 0x0, 0x0, 0x8001}, 0x40015) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000fc0)) 2m4.551623258s ago: executing program 1 (id=2039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xa}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x0, 0xfd, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffd, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000ff0000010000000008000500ac1414"], 0x24}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r8, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x4000005}, 0x80) bind$bt_l2cap(r6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r10, 0x29, 0x21, 0x0, &(0x7f0000000080)) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r12, 0x5421, &(0x7f0000001100)=0x9) connect$bt_sco(r12, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r12) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r9, @ANYBLOB], 0x28}}, 0x0) 2m4.543206707s ago: executing program 0 (id=2040): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1}, &(0x7f0000000140), 0x0}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x3f, 0x0, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x20, &(0x7f0000000c40)={&(0x7f0000000a40)=""/203, 0xcb, 0x0, &(0x7f0000000b40)=""/212, 0xd4}}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 2m4.540554607s ago: executing program 2 (id=2041): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x718, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xe) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000280), 0x4) 2m4.445747304s ago: executing program 3 (id=2042): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@mark={{0x14, 0x1, 0x3d, 0xe2d}}], 0x18}}], 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001200010a667202d00000cf21a333"], 0x26}}, 0x0) getpeername(r0, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000010003b0c00e2ffffffffffffff000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1082101}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xfffffff4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1e0}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x8000}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x8}]}, 0x3c}}, 0x8080) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @local, @void, {@canfd={0xd, {{0x0, 0x0, 0x0, 0x1}, 0xc, 0x2, 0x0, 0x0, "21b29749b7c3eab85008b115b7b7695abf42e6af0b24972361b993275b3ea66abc166f15bc40e1dc0ac2a4e6c7818656ebe3a73ae90e8de7a84fa79e957943bb"}}}}, 0x0) 1m43.380880102s ago: executing program 32 (id=2040): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1}, &(0x7f0000000140), 0x0}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x3f, 0x0, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x20, &(0x7f0000000c40)={&(0x7f0000000a40)=""/203, 0xcb, 0x0, &(0x7f0000000b40)=""/212, 0xd4}}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 1m43.315883731s ago: executing program 33 (id=2039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xa}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x0, 0xfd, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffd, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000ff0000010000000008000500ac1414"], 0x24}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r8, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x4000005}, 0x80) bind$bt_l2cap(r6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r10, 0x29, 0x21, 0x0, &(0x7f0000000080)) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r12, 0x5421, &(0x7f0000001100)=0x9) connect$bt_sco(r12, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r12) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r9, @ANYBLOB], 0x28}}, 0x0) 1m43.255928841s ago: executing program 34 (id=2041): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x718, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xe) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000280), 0x4) 1m43.159317461s ago: executing program 35 (id=2042): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@mark={{0x14, 0x1, 0x3d, 0xe2d}}], 0x18}}], 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001200010a667202d00000cf21a333"], 0x26}}, 0x0) getpeername(r0, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000010003b0c00e2ffffffffffffff000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1082101}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xfffffff4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1e0}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x8000}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x8}]}, 0x3c}}, 0x8080) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @local, @void, {@canfd={0xd, {{0x0, 0x0, 0x0, 0x1}, 0xc, 0x2, 0x0, 0x0, "21b29749b7c3eab85008b115b7b7695abf42e6af0b24972361b993275b3ea66abc166f15bc40e1dc0ac2a4e6c7818656ebe3a73ae90e8de7a84fa79e957943bb"}}}}, 0x0) 1m43.029488668s ago: executing program 36 (id=2035): socket$inet6(0xa, 0x3, 0x3c) (async) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40020000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x48880) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001000010000000000000000000300000a80000000090a010400000000000000000200000360001280100001800b0001006578746864720000280001800ded000073796e70726f78790000000014000280050002f9070000000600014005520000140001800e000100627974656f72646572000000100001800a00010072656469720000000c001040000000000000000214000000be8d49403ed62a7ff761551cf3f81100"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5aa}], 0x1) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5aa}], 0x1) socket$igmp6(0xa, 0x3, 0x2) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001200970c25bd70000200000007000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000040034"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.64299555s ago: executing program 7 (id=3067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0xe, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0x2}, @window={0x3, 0x3, 0x9}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0xa, 0x7, 0xe3}, @sack={0x5, 0x22, [0x91, 0x4, 0x2, 0x0, 0x31f3, 0x2a66645e, 0x9, 0x4]}, @timestamp={0x8, 0xa, 0x8, 0xffffffff}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) close(0xffffffffffffffff) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x0, 0x40006, 0x64, 0x1, 0x11c, 0xff, 0x2}, 0x1c) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000340)={'macvlan0\x00', 0x400}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 1.487955576s ago: executing program 6 (id=3070): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x81}]}}}]}, 0x44}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x25dfdbfd, {0x1, 0x0, 0x41}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x25}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x3c}}, 0x0) 1.314466815s ago: executing program 6 (id=3073): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}]}, 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2, 0x9, 0x6, 0x8f3d, 0x6, 0x4}, 0x14) 1.312455089s ago: executing program 9 (id=3074): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="a7a0fa3cbb8dbc51f7f5b7dc95e12bd2e80ca8"], 0x1c0}, 0x1, 0x0, 0x0, 0x1010}, 0x2000c090) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x801, 0x70bd28, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0x2d, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}]}, 0x38}}, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x40}, {r3, 0x10}, {r2, 0x6011}, {r1, 0x80}], 0x4, &(0x7f00000000c0), &(0x7f0000000100)={[0x2]}, 0x8) 1.312173205s ago: executing program 8 (id=3075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1.18084562s ago: executing program 6 (id=3076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x113, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x4000) (async) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000002040)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002000)={&(0x7f0000001cc0)={0x328, 0x1, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CT={0xc4, 0xb, 0x0, 0x1, [@CTA_TUPLE_REPLY={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_EXP={0x50, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, @NFQA_PAYLOAD={0xff, 0xa, "d111b5acf1fb390ef618ebac193dfc7bc057f0067193d2646575b7f8b2246c0d031132fc2d72a08abec3950bc5c7a3385d572e850b961b6d697c0c53d3a1a82d87f0b394bae6897e3ec232a201a06deb8e869cd2ee10f25434cf73601ff96adc49aa2dca3e37cbeb54945f99a8dd8dd1add2c9d03509525b0647d3cd9f15ca390c7d45a36ad607d2452536e9bd55dda8644b5e9385be4c4a586975575c42a35b00f49b21d99cc9486c4675047d70d918fc405052a1c389930bb4eb10ef053a4ad98f94208ebf811b96d29dc4db60bab38d94cfcb3f4fb882dbf8bb562883a022da6a203b51dfc705211732cc1e734c8d8bd9ea32699c8ae62f0fd7"}, @NFQA_CT={0x1c, 0xb, 0x0, 0x1, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_ID={0x8}]}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}]}, @NFQA_PAYLOAD={0xcd, 0xa, "588cd12aa4f0eb1f260eb771bea971874f97cb1a93d7c5610e3824a876d783bc092b0875dd491437e66fddc2058e70973bf1ef4cf01db07f9fec5624bd9abd0abdd1509ef83e7e9144db8c4715692b2eea8d3925c1eaf2464c71fb188aebbccbbd3866928ddb9709d5c6ffccd01609ccf142ed02c99b139dc8c5e9442b162245579b97e8e8533fad5c7ede8850b6178445062ae448adcd1f927d4535df4a00e0794afc05fabd6c65d3b199f1f7d254bba081919743aa5c28601f3092442f134d9d2bd4a6d7357c2114"}]}, 0x328}, 0x1, 0x0, 0x0, 0x8008004}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000001c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001c00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x1614, 0xc, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x15e4, 0x3, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x98, 0x6, 0x1, 0x0, "cd61ceec10c0c63431a75073ef213bbe4f7118af07bbd32706aacf4989dcf784fefe6adcdd69252964979d1661f6c689f08f6294092cf8fe77e5a817e7ea9473edae0f79a69db1d64c6808ea3528c84b0e73f349cef6ee8676e84c1a0b8e3a69359f6b4fda96bffbc2eb4da52656e45e81c11cd42146db7f1aeb940f05ff00b567fd34bb3ee304c285df7deee94bfaaca7a693be"}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4c}]}}}]}, {0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xeb30d23ca1562ab1}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x43}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}, {0xd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xc746e6513e867adc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x1394, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x124c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdf, 0x1, "b3ca430c2e23d04d117fe899603d29a236a57e9cb9085dd563a1f83e77ca3f488badf4af7f4d175a78a202c2913ef1bc7606199c659ffd42f43d9f4203b2897049a8477a578205d84c4fe944f02ba5e4cf2c620663bf118625120145255d8bbd1aee6e32ce340019f83a86d86522612f767ce068e00ea63bb2917c8dd3d360be19cb15569540a59c0567055508aa00925586e77e8f870a720e348994462494e39a22af4bc5a1b3cef0d44bcbc68ef17fded614669bc735fada0d87daf9068913a93ea0f84d0c81f6407ec649d9a1ba7b540bfbd06cc39c2029c813"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xa1, 0x1, "6daf478be8b32ea6df71fe30bce2e0bd387019a00f360022b2c2dc92a29dbaf36665a91d7ef14a59a5457686c331feab99ce2ef5e11a4d237d074fe0b72ef2779965f184dc7bc36e4169947bfd51fb9a2d43aa47a228910968e657de16ba27a564659b439571abce406c050bf7218144e64b535773858b213cd535bc72d1ef98ab63fc73445645af4724195f7d61c093cc8cad35f318a407adbf4f25ac"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "7a34456ca511446d5c3c54b5df41ee7b959b87a2a28a6ab2b3"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0xcc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x94, 0x1, "b81465629c2a522c205ea11e084bcd5cd1baec4dcf940c7c1f7d2a298903173d97362509799314a5e136c0526a2509838079999114467667dfafa8a06720ab50d7115cc4769144e2746f5e016df37d06a7b516bfd54789c4a54b6ce1b13307f974327bd3a00f57f7080e9ded7ec08edbf19a4e9250a85351864728ec5fa5709c2e1a9f4404e11c16563d63f6ea7ed934"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}, @NFTA_SET_ELEM_DATA={0x54, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x100, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xb9, 0x6, "3bc3ab26ddfe2c58dbe813adf015a57317cdd21cf8a718ce04c96e96ab34372a664ff63f6079bb498cdf0a559391fa11b068b907fe0780d502709c0fbc5c3da46c7c057535e8623e0a22b9a735e82a8c79156082f5d63ddc962d08765a2e976f2fde3123285f64d43c8d041b3fd11fc87ccc4d31797f6d1b3fea8bba3dc663b1c5443a12fa64b9bfa94fd6876e66948854fef62a407510d470b56acc53b24c188a10a8f3f755172416d108e07431c947a7f3aca13b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0xfc, 0x8, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_USERDATA={0xe7, 0x7, 0x1, 0x0, "7d2d1ede932e006a78923b54a9e513e719db331dc073d8987c458856af093b0472d8c6fa9439c2075f7ecf73880dffd826c67bd970bf23c449c0bf3d3564780c03d0e2377e94d26bfa25280fb5b47f0486370ae38d300ec7c5ab5d357f1c94114f479fdf11789a957be4a65c6226824628edf59e064a2ed9a5ead262479c08d6dc5127bc466b6781bf0b9d6778c8211575d79447e2fea6ed99e2d971fcf10526c1f0fec8041a8ec51347f928a7bb86f28db7de89a54a0d0c103096ff74ce0c04258218956e45562cebc6f2cec33e31254cbe11a8ddec44b5738604d1a0897afe550f32"}]}, @NFT_MSG_DELSET={0x350, 0xb, 0xa, 0xdbab3634c38b253f, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_DESC={0x2cc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x9c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5e7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4f}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x43532df5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0xa4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x72e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9c40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x82}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb87}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}]}, @NFTA_SET_DESC_CONCAT={0x108, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a5f}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x978}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x63}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10}]}, @NFTA_SET_ID={0x8}, @NFTA_SET_USERDATA={0x35, 0xd, 0x1, 0x0, "36a94efa0b01028135bba4196301316de56abb4c5dd2abb070386d1f576189c68fe2389b76112c8a53bd26c3ae3efcb0e7"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1b88}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000) 1.123695237s ago: executing program 7 (id=3077): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = socket(0x1, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000540)=0xb5, 0x4) (async) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0xfd45}}, 0x0) (async) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="4001040102aaec"], 0x7) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="ffffa86400000000000000"], 0x3c}}, 0x0) (async) sendmmsg$inet(r5, &(0x7f0000005d40)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="34000000000000000000000007000000442420f9"], 0x38}}], 0x1, 0x0) 1.05835475s ago: executing program 8 (id=3078): r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) accept4$nfc_llcp(r2, &(0x7f00000002c0), &(0x7f0000000340)=0x60, 0x800) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x224, 0x0, 0x3}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r3, 0x5}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x364}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4050000000000006110a0000000000063013800000000009500090000000000644d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x305) 1.057264636s ago: executing program 9 (id=3079): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000002f00)=0x2) ioctl$PPPIOCSMAXCID(r2, 0x4004743c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073016200000000009500000000000000a6692aae1a43fa0bf68bbf0c19b1e9020b3ed65b5d9fdfc2ca5fe8966d8b6e8212a5c72a2c32d3e821d446355e043be398137c9733d3925e4280e1224bd05ba6f04f93f5ac29bc54caed1fc7f417b74304197b062f10950ce043bf3bddf4d824304dbe407b281b030f592f85bc23d29dd493b9003386"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"]) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_void(r4, 0x29, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r6, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="30000000000000008400000001000000ff03040004020000090000004c000000f9ffffff00800000c00e0000", @ANYRES32=r7, @ANYBLOB="18"], 0x48, 0x4c004}], 0x1, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000200)={r7, 0x8}, &(0x7f00000008c0)=0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="ec15f6428d08f67aa46db6f8de56c4e2a375789dabb94aadaf69228ed6bc7d931e1d99c599c3d8a98923e7ef8cbf619c1b40756c2cddac3c36df5f527fd88b3d07c5c352decc77825ee4dd4dd50910cf61aed82af9976eb081e69d39e74c602a4067d726b3e30cebab1600c17a4b5e580164fa25efe3ffc40a8a305ea9834354c9453a8f55555ec1549e36369efbf01fd2f34adc69a016b8f03ab7e6bad8483bca89050723f59d5f3055e73059b9d91c830104b0dd7a91e614f46386029a937b44377cbc199e6819bf8f04fbd3df10dc2563621170da79e0ca108b993c5419a63c6b00ddf3dab2c6c129f7675820a4691c0e4acd9c12a8a2ce8e2b2492", @ANYRES16=0x0, @ANYBLOB="0100000000000000000007000000"], 0x14}}, 0x2) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r11, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) recvmmsg(r11, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="010a05000101040008001b", @ANYRESDEC], 0x28}}, 0x0) 913.428506ms ago: executing program 6 (id=3081): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x28) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x218, 0x14, 0x1, 0x70bd2d, 0x0, "", [@nested={0x207, 0x0, 0x0, 0x1, [@generic="77273e417b3009a815e9152ce966702165ea3196bcec6ba4b0abf0018731d3d736", @generic="03b2b242f8c762d187a6852402a2c22160fd08cf61bc87c3158ca503f693d5fda534b375397d94e7a5", @generic="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", @generic="c6f7c5b183f7d0af47c5916b9f7e9017db195533c508ee7ad2c777e1eaf08d4b92281ead73ccbf53c3d41fb4d13dfa94f7c6ff516316f6170e9739a40ec3ac4b628c875b5b611834dad89811b2b747c3d36c2a0a3a30d908bd13fdd53ed8869babfb5cb1d290684d2cec34c5e7d358893ab00aa53800f024a51999d48f1f7c01b9d46406b900a0037a91a2393784ff82194712f19dd145bce5a08a827ecdca9eccc2d28f9f8f3976d16bd15cea091f358d2f63bededc8669c5d3f2df1b"]}]}, 0x218}], 0x1}, 0x0) 912.995269ms ago: executing program 7 (id=3082): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0xe4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000005e8004c36c5f3a52", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000200000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0908000000000a35090100000000009500000000070000b708000000000000639a04fe000000006609000000000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff570000000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b7000000000000009500006000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async, rerun: 32) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 818.322557ms ago: executing program 5 (id=3083): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x50, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x9}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x2}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x80000001}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x8}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x41}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x6}]}}]}, 0x80}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0xb}]}}]}, 0x44}}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x12, 0x12b, 0x0, 0x0, @binary="461dc071caf2d43500d1f6c8a6ef"}]}, 0x24}], 0x1}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) bind$xdp(r1, &(0x7f00000000c0)={0x2c, 0x7, r2, 0x27, r1}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) bind$netrom(r6, &(0x7f0000000040)={{0x3, @default, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 774.221124ms ago: executing program 7 (id=3084): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111c300000000008510000002000000850000000000000095000000000000009500b0059d350000f8eb70c3d9330b16491e095815635bf7490c180e3be703966bd8fdc277008531ccb9d9ae8dc9e78d9dc5311486fd1d2bfab99b08b4d46852f103d4ed539d04b034d645e2ea69674b1749efdc6a03ab8d5c3d2a2ed722271db8f4b166d4a579abbfc27974"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x40}}, 0x0) 736.885934ms ago: executing program 8 (id=3085): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x328c0000}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x3, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @random="6076b5cad4f6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2b, 0x0, @mcast1, @remote, [], "6be2"}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=0x64010101, 0x1e, 0x15}}) 686.27911ms ago: executing program 6 (id=3086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc25c0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004"], 0x250}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0xfffffffffffffefb, r4, 0x200, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x0, 0x100}}}}, 0x30}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/109, 0x6d}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendto$isdn(r7, &(0x7f0000000380)={0x5a, 0x5, "38fbcb656f1ef3906bb866e5c1740db43604e0a37ee04adae86de681b85447d1d65ff1899e0edeae3d55e66677aac9580f70941314ac2f23fb350678d72c6f31b681145d25a1f79b"}, 0x50, 0x400c000, &(0x7f0000000140)={0x22, 0x9, 0x80, 0x9}, 0x6) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000440)={'veth1\x00', 0x600}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000040)=@ethtool_ringparam={0xf, 0xac4, 0x2, 0x37d7, 0x9, 0x3, 0x7d, 0x1, 0x10}}) 685.075145ms ago: executing program 5 (id=3087): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) connect$phonet_pipe(r0, &(0x7f00000000c0)={0x23, 0x6, 0x2d, 0xff}, 0x10) 623.087462ms ago: executing program 9 (id=3088): r0 = socket(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0x1d, 0x0, 0x20) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) (async) socket$rds(0x15, 0x5, 0x0) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0x1d, 0x0, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) (async) 612.97187ms ago: executing program 8 (id=3089): r0 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0xc800) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0xc210031) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, &(0x7f0000000800)=0x36) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="40000000100039042abd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006002000128008000100736974001400028008000100", @ANYRES32=r5, @ANYBLOB="00000300ac2114bb"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x34, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) 538.423655ms ago: executing program 7 (id=3090): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet_int(r2, 0x0, 0xe, 0x0, &(0x7f0000000040)) connect$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) 495.651807ms ago: executing program 5 (id=3091): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x1d) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r3, 0xfffffffc}, &(0x7f0000000180)=0x8) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) (async) shutdown(r0, 0x1) 486.632011ms ago: executing program 9 (id=3092): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000000)=@framed={{}, [@tail_call={{}, {}, {}, {0x4}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@typedef={0x0, 0x0, 0x0, 0x10, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x2}, 0x20) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newchain={0x2d0, 0x64, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa, 0x1}, {0xfff1, 0x9}, {0x0, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc, 0xfe}}, @filter_kind_options=@f_matchall={{0xd}, {0x274, 0x2, [@TCA_MATCHALL_ACT={0x260, 0x2, [@m_gact={0xdc, 0x5, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x800, 0x7fffffff, 0xffffffffffffffff, 0x8, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x10000000, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1684, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x48e9075ea57a2959, 0x24ae, 0x3}}]}, {0x65, 0x6, "40586cb800d8f6c82a8b9800c686d6fac1b20f1d538f62681f874966995ce20e2ef14f17be6a2beec7a81278e4637107748cece9845d2e40b4f4aadd68c5b8ed923344662f5ba2c62a1ff0f67815572f5a8dc24b3afa71642856d5d8282cd52609"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_ctinfo={0x100, 0xf, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xfff9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7487, 0x9, 0x5, 0x8, 0x200}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x7fc6, 0x4, 0x3, 0x9}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf49}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x341}]}, {0x7a, 0x6, "77cd685bb1f17485e154263b387fbf1ff7e7763a3c8e023f60ee0f10c4b6d38b92686b3ce68e30cda7dee0b8ea8c4b51415dcdcb592116ce51f7e251233d88ab9e32b05bfc585ccc82871fc20a390a579663ea66d10f8b3bcaf5385c6ae93b7d0229f3082e0f057b3b9cded7c65e2180317b5781afec"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x80, 0x1c, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xc}]}, {0xd, 0x6, "7c364e9855b6b8ceb3"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x7}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @rand_addr=0x64010101}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xe}}]}, 0x2d0}}, 0x20008000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000014000000020a01010000000000000000000000061400000a07ae7f63bccf3130d7f5a3283bc1243cb21f95c2b59d0802dd26f04307b88fdfd7392c530fc6b7cd1d40c91d42653ad814d523dd561f"], 0x88}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000000)=@framed={{}, [@tail_call={{}, {}, {}, {0x4}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@typedef={0x0, 0x0, 0x0, 0x10, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x2}, 0x20) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newchain={0x2d0, 0x64, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa, 0x1}, {0xfff1, 0x9}, {0x0, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc, 0xfe}}, @filter_kind_options=@f_matchall={{0xd}, {0x274, 0x2, [@TCA_MATCHALL_ACT={0x260, 0x2, [@m_gact={0xdc, 0x5, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x800, 0x7fffffff, 0xffffffffffffffff, 0x8, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x10000000, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1684, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x48e9075ea57a2959, 0x24ae, 0x3}}]}, {0x65, 0x6, "40586cb800d8f6c82a8b9800c686d6fac1b20f1d538f62681f874966995ce20e2ef14f17be6a2beec7a81278e4637107748cece9845d2e40b4f4aadd68c5b8ed923344662f5ba2c62a1ff0f67815572f5a8dc24b3afa71642856d5d8282cd52609"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_ctinfo={0x100, 0xf, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xfff9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7487, 0x9, 0x5, 0x8, 0x200}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x7fc6, 0x4, 0x3, 0x9}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf49}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x341}]}, {0x7a, 0x6, "77cd685bb1f17485e154263b387fbf1ff7e7763a3c8e023f60ee0f10c4b6d38b92686b3ce68e30cda7dee0b8ea8c4b51415dcdcb592116ce51f7e251233d88ab9e32b05bfc585ccc82871fc20a390a579663ea66d10f8b3bcaf5385c6ae93b7d0229f3082e0f057b3b9cded7c65e2180317b5781afec"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x80, 0x1c, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xc}]}, {0xd, 0x6, "7c364e9855b6b8ceb3"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x7}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @rand_addr=0x64010101}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xe}}]}, 0x2d0}}, 0x20008000) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000014000000020a01010000000000000000000000061400000a07ae7f63bccf3130d7f5a3283bc1243cb21f95c2b59d0802dd26f04307b88fdfd7392c530fc6b7cd1d40c91d42653ad814d523dd561f"], 0x88}}, 0x0) (async) 360.601057ms ago: executing program 7 (id=3093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000340)={0x2, 0xfffd, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000081}, 0x40000) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006000600843b0000100002800c0008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r2, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4080000000000006110800000000000a60000000000000095000000000000002708bf5d6df57e4036e97f802a67fdc2ee21b92ca9f507707dd754479a8dcf28b7ce595ab47e7a5396f780ee222b42395b5664f0c435febc86e01cd2cf1190b290320885b36f24493454294552dfaa3a17a7462612e5f8980fd439b09ee96e4c0ca8581e36cc8acfdfdd08b7856e8cf498d2d7ff6abd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 313.005703ms ago: executing program 5 (id=3094): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) sendto$inet6(r1, &(0x7f0000000080)="745d7acf4b4fcd0bd39377fda5e4d1677a9a44eaef3d41cdc4d54ad0de5c255d4401b87674e3d7a5dec7baedb2320b6679517be221c580ac1a23167f78f02d32d309ad64246a5c193a239b15", 0x4c, 0x8080, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001740)=""/4098, 0xe9c}, {&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f00000013c0)=""/96, 0x60}, {&(0x7f00000001c0)=""/149, 0x95}], 0x4}, 0x5}], 0x1, 0x100, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x705, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4) 265.335175ms ago: executing program 8 (id=3095): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r3) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000780)={0x450, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8d39}]}, @TIPC_NLA_LINK={0x130, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3597}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ad}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x636f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe7a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x473}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffffc, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x95}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @remote, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x450}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000feffffff06006e000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b005809000006001600940700000500120000000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x24008004) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) close(0x4) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) connect$can_bcm(r0, &(0x7f0000000380)={0x1d, r11}, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r10) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x54, r12, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000885) 198.536326ms ago: executing program 6 (id=3096): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c, 0x800) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_deladdrlabel={0xb, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) (async) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r3]) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) (async) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240), 0x8}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 197.461296ms ago: executing program 9 (id=3097): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x458082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x1) 196.647055ms ago: executing program 5 (id=3098): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x66, 0x0, &(0x7f0000000b80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="100008008204ebff230012f4d6bc6f7400f4dd85445477800b0001006272696467650000140002800a00027fffffff000840038a60e28983cb7fb35c7b303fea2119001d0020"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 66.486317ms ago: executing program 8 (id=3099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000002ffebdf2530000000", @ANYRES32=r3, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b10021b0600"], 0x30}}, 0x0) 50.799278ms ago: executing program 9 (id=3100): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r1, 0x0, 0x1}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r1, 0x0, 0x1}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) 0s ago: executing program 5 (id=3101): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rthdr={{0x18, 0x29, 0x5, {0x0, 0x0, 0x2}}}], 0x18}}], 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'geneve0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffff3, 0x0, 0x6, 0x4, 0x3]}}) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0x890b, &(0x7f0000001480)={{0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xf00, 0x0, 0x3, 0x0, 0x0, 0x6, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={r4, 0x4}, &(0x7f0000000700)=0x8) 0s ago: executing program 6 (id=3102): r0 = socket$caif_stream(0x25, 0x1, 0x8003) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310700000000200000000000080001007063690011000200303030303a30303a31302e3000002a53d44073003d8fc5fae8ff"], 0x38}, 0x1, 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @null, 0x7, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000040)={'veth0_to_batadv\x00', @broadcast}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB="56bc5900000099fe294ae9e4ddbbddd95e56164414e147462526f9fff365269c3efd49655ff721f7b6366d27ceba79041129d905de01c1b31547287ed04c047f64985d58030047", @ANYRES16=r4, @ANYBLOB="010000080000000000000700000008000300", @ANYRES32=r9, @ANYBLOB="0c009900009000002d0000001400040070696d3672656730000000000000000008000500060000000800050009000000"], 0x4c}}, 0x4) unshare(0x6020400) r10 = gettid() syz_open_procfs$namespace(r10, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) close(0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000340)="7155b506edb24822da43f6c2a0b5ce2b40b0ec718aca10ae53cc28d1450e844eb4ec512f6968cb25f7c89e54f319df5a500000a467048e926b327c99c786d163734c9ded0be5ea02e4fcc7bb7b6bd0fd2fca27a4e17c3ac1a71c19bfd6770cedd6df3172c534213f8afd48cf028b9188dcc2fb1d9abadccdd4e6b964e249507921d2236e34735722ea7130954ee997f67950c1d7477fee42cb0fdb885c8b18258ba79d179eba5279ce1fd01e325e2516af7096b27ed72b6706d973a76622ee87229dee597ca72a5375427806ab1e487a72461a29b59ee5a37dab21e4ba03a7c7e94500"/241, 0x155) kernel console output (not intermixed with test programs): has an invalid length. [ 247.786101][T12605] tipc: Enabling of bearer rejected, already enabled [ 247.799062][T12605] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1880'. [ 247.808674][T12605] tc_dump_action: action bad kind [ 247.847561][T12597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1877'. [ 248.142349][T12624] tipc: Enabled bearer , priority 0 [ 248.193484][T12624] syzkaller0: entered promiscuous mode [ 248.203269][T12624] syzkaller0: entered allmulticast mode [ 248.214195][T12634] tipc: Enabled bearer , priority 0 [ 248.231256][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1886'. [ 248.257969][T12624] tipc: Resetting bearer [ 248.279979][T12623] tipc: Resetting bearer [ 248.300697][T12623] tipc: Disabling bearer [ 248.316643][T12634] syzkaller0: entered promiscuous mode [ 248.322384][T12634] syzkaller0: entered allmulticast mode [ 248.341242][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 248.384376][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1888'. [ 248.438385][T12634] tipc: Resetting bearer [ 248.467945][T12631] tipc: Resetting bearer [ 248.527710][T12631] tipc: Disabling bearer [ 248.550334][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'. [ 248.782428][T12659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1894'. [ 248.873877][T12662] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1896'. [ 248.897153][T12664] FAULT_INJECTION: forcing a failure. [ 248.897153][T12664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.927445][T12664] CPU: 1 UID: 0 PID: 12664 Comm: syz.1.1897 Not tainted syzkaller #0 PREEMPT(full) [ 248.927477][T12664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.927503][T12664] Call Trace: [ 248.927512][T12664] [ 248.927522][T12664] dump_stack_lvl+0x189/0x250 [ 248.927558][T12664] ? __pfx____ratelimit+0x10/0x10 [ 248.927589][T12664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.927615][T12664] ? __pfx__printk+0x10/0x10 [ 248.927661][T12664] should_fail_ex+0x414/0x560 [ 248.927696][T12664] _copy_to_user+0x31/0xb0 [ 248.927724][T12664] simple_read_from_buffer+0xe1/0x170 [ 248.927761][T12664] proc_fail_nth_read+0x1b3/0x220 [ 248.927789][T12664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.927818][T12664] ? rw_verify_area+0x2a6/0x4d0 [ 248.927844][T12664] ? __lock_acquire+0xab9/0xd20 [ 248.927874][T12664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.927900][T12664] vfs_read+0x200/0xa30 [ 248.927927][T12664] ? fdget_pos+0x247/0x320 [ 248.927952][T12664] ? __pfx___mutex_lock+0x10/0x10 [ 248.927984][T12664] ? __pfx_vfs_read+0x10/0x10 [ 248.928014][T12664] ? __fget_files+0x2a/0x420 [ 248.928051][T12664] ? __fget_files+0x3a0/0x420 [ 248.928082][T12664] ? __fget_files+0x2a/0x420 [ 248.928127][T12664] ksys_read+0x145/0x250 [ 248.928158][T12664] ? __pfx_ksys_read+0x10/0x10 [ 248.928184][T12664] ? rcu_is_watching+0x15/0xb0 [ 248.928212][T12664] ? do_syscall_64+0xbe/0x3b0 [ 248.928248][T12664] do_syscall_64+0xfa/0x3b0 [ 248.928277][T12664] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.928314][T12664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.928336][T12664] ? clear_bhb_loop+0x60/0xb0 [ 248.928363][T12664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.928391][T12664] RIP: 0033:0x7f372278d5fc [ 248.928415][T12664] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 248.928434][T12664] RSP: 002b:00007f3723580030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.928457][T12664] RAX: ffffffffffffffda RBX: 00007f37229b5fa0 RCX: 00007f372278d5fc [ 248.928473][T12664] RDX: 000000000000000f RSI: 00007f37235800a0 RDI: 0000000000000004 [ 248.928487][T12664] RBP: 00007f3723580090 R08: 0000000000000000 R09: 0000000000000000 [ 248.928500][T12664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.928513][T12664] R13: 00007f37229b6038 R14: 00007f37229b5fa0 R15: 00007ffd560f52c8 [ 248.928549][T12664] [ 250.118079][ T94] block nbd0: Possible stuck request ffff8880251c0000: control (read@0,4096B). Runtime 90 seconds [ 250.338653][T12729] hsr0 speed is unknown, defaulting to 1000 [ 250.449253][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.493257][T11675] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.502321][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.747631][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 250.766617][T11670] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.811109][T12737] syzkaller0: entered promiscuous mode [ 250.820787][T12737] syzkaller0: entered allmulticast mode [ 251.017755][T12755] netlink: 'syz.1.1920': attribute type 1 has an invalid length. [ 251.127783][T11675] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.090765][T12755] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 253.160639][T12764] veth5: entered promiscuous mode [ 253.479756][T12789] __nla_validate_parse: 7 callbacks suppressed [ 253.479778][T12789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1927'. [ 253.709046][T12804] nbd: socks must be embedded in a SOCK_ITEM attr [ 254.054509][T12816] netlink: 'syz.4.1933': attribute type 1 has an invalid length. [ 254.371540][T12819] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 254.448846][T12819] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 254.518980][T12822] gretap2: entered promiscuous mode [ 254.529782][T12822] bond3: (slave gretap2): making interface the new active one [ 254.538150][T12822] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 254.586565][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.724182][T12835] veth0_to_team: entered promiscuous mode [ 254.736510][T12835] veth0_to_team: entered allmulticast mode [ 254.794734][T12842] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1939'. [ 254.867161][T12842] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1939'. [ 255.437382][T12872] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 255.511335][T12872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.799587][T12885] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1951'. [ 255.872317][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.887604][T12885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1951'. [ 255.989635][T12896] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1951'. [ 256.054909][T12902] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 256.127939][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1954'. [ 256.391442][T12915] bridge2: entered promiscuous mode [ 256.407058][T12915] bridge2: entered allmulticast mode [ 256.553683][T11662] IPVS: starting estimator thread 0... [ 256.656548][T12925] IPVS: using max 24 ests per chain, 57600 per kthread [ 256.734876][T12934] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1961'. [ 256.819773][T12934] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1961'. [ 256.897710][T12934] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1961'. [ 257.199725][T12954] team0: No ports can be present during mode change [ 257.392913][T12963] netlink: 'syz.4.1972': attribute type 11 has an invalid length. [ 257.522026][T12966] netlink: 'syz.1.1974': attribute type 29 has an invalid length. [ 257.548700][T12966] netlink: 'syz.1.1974': attribute type 29 has an invalid length. [ 257.587251][T12973] netlink: 'syz.3.1973': attribute type 13 has an invalid length. [ 257.755214][T12983] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 257.765706][T12982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.772274][T12985] netlink: 'syz.1.1977': attribute type 9 has an invalid length. [ 257.823001][T12984] netlink: 'syz.1.1977': attribute type 9 has an invalid length. [ 258.014587][T12999] netlink: 'syz.1.1983': attribute type 1 has an invalid length. [ 258.090485][T13005] netlink: set zone limit has 8 unknown bytes [ 258.188860][T13005] gretap1: entered promiscuous mode [ 258.239086][T13005] bond9: (slave gretap1): making interface the new active one [ 258.250634][T13005] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 258.584833][T13021] __nla_validate_parse: 33 callbacks suppressed [ 258.584855][T13021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1989'. [ 258.708875][T13034] FAULT_INJECTION: forcing a failure. [ 258.708875][T13034] name failslab, interval 1, probability 0, space 0, times 0 [ 258.755162][T13034] CPU: 1 UID: 0 PID: 13034 Comm: syz.1.1992 Not tainted syzkaller #0 PREEMPT(full) [ 258.755194][T13034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.755208][T13034] Call Trace: [ 258.755217][T13034] [ 258.755227][T13034] dump_stack_lvl+0x189/0x250 [ 258.755259][T13034] ? __pfx____ratelimit+0x10/0x10 [ 258.755290][T13034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.755316][T13034] ? __pfx__printk+0x10/0x10 [ 258.755354][T13034] ? __pfx___might_resched+0x10/0x10 [ 258.755381][T13034] should_fail_ex+0x414/0x560 [ 258.755415][T13034] should_failslab+0xa8/0x100 [ 258.755450][T13034] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 258.755482][T13034] ? __alloc_skb+0x112/0x2d0 [ 258.755519][T13034] __alloc_skb+0x112/0x2d0 [ 258.755557][T13034] netlink_sendmsg+0x5c6/0xb30 [ 258.755601][T13034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.755638][T13034] ? aa_sock_msg_perm+0xf1/0x1d0 [ 258.755680][T13034] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 258.755704][T13034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.755737][T13034] __sock_sendmsg+0x21c/0x270 [ 258.755769][T13034] ____sys_sendmsg+0x505/0x830 [ 258.755799][T13034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.755832][T13034] ? import_iovec+0x74/0xa0 [ 258.755861][T13034] ___sys_sendmsg+0x21f/0x2a0 [ 258.755886][T13034] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.755952][T13034] ? __fget_files+0x2a/0x420 [ 258.755983][T13034] ? __fget_files+0x3a0/0x420 [ 258.756028][T13034] __x64_sys_sendmsg+0x19b/0x260 [ 258.756054][T13034] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 258.756088][T13034] ? __pfx_ksys_write+0x10/0x10 [ 258.756114][T13034] ? rcu_is_watching+0x15/0xb0 [ 258.756147][T13034] ? do_syscall_64+0xbe/0x3b0 [ 258.756183][T13034] do_syscall_64+0xfa/0x3b0 [ 258.756212][T13034] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.756242][T13034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.756263][T13034] ? clear_bhb_loop+0x60/0xb0 [ 258.756290][T13034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.756311][T13034] RIP: 0033:0x7f372278ebe9 [ 258.756331][T13034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.756349][T13034] RSP: 002b:00007f3723580038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.756370][T13034] RAX: ffffffffffffffda RBX: 00007f37229b5fa0 RCX: 00007f372278ebe9 [ 258.756385][T13034] RDX: 0000000000000850 RSI: 00002000000002c0 RDI: 0000000000000003 [ 258.756399][T13034] RBP: 00007f3723580090 R08: 0000000000000000 R09: 0000000000000000 [ 258.756411][T13034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.756423][T13034] R13: 00007f37229b6038 R14: 00007f37229b5fa0 R15: 00007ffd560f52c8 [ 258.756457][T13034] [ 259.071037][T13038] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1993'. [ 259.311245][T13044] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20001 [ 259.438699][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 259.628028][T13061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1999'. [ 259.680390][T13064] netlink: 'syz.1.2001': attribute type 21 has an invalid length. [ 259.701432][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1998'. [ 259.736784][T13064] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2001'. [ 259.813213][T13068] netlink: 'syz.1.2001': attribute type 21 has an invalid length. [ 259.953607][T13072] bridge_slave_0: left allmulticast mode [ 259.973169][T13072] bridge_slave_0: left promiscuous mode [ 260.006915][T13072] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.063902][T13072] bridge_slave_1: left allmulticast mode [ 260.070581][T13072] bridge_slave_1: left promiscuous mode [ 260.091573][T13072] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.123766][T13072] bond0: (slave bond_slave_0): Releasing backup interface [ 260.181183][T13072] team0: Port device team_slave_0 removed [ 260.224704][T13072] team0: Port device team_slave_1 removed [ 260.291591][T13072] bond3: (slave gretap2): Releasing active interface [ 260.307142][ T5939] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.551286][T13092] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2009'. [ 260.563553][T13097] netlink: 'syz.4.2011': attribute type 10 has an invalid length. [ 260.621188][T13092] netlink: 'syz.1.2009': attribute type 21 has an invalid length. [ 260.644641][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2009'. [ 260.666912][T13103] netlink: 'syz.0.2010': attribute type 21 has an invalid length. [ 260.696600][ T5939] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.713086][T13092] netlink: 'syz.1.2009': attribute type 21 has an invalid length. [ 260.761916][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2009'. [ 260.887093][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2013'. [ 260.918892][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2013'. [ 261.141930][T13121] FAULT_INJECTION: forcing a failure. [ 261.141930][T13121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.206503][T13121] CPU: 0 UID: 0 PID: 13121 Comm: syz.4.2017 Not tainted syzkaller #0 PREEMPT(full) [ 261.206535][T13121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 261.206549][T13121] Call Trace: [ 261.206557][T13121] [ 261.206567][T13121] dump_stack_lvl+0x189/0x250 [ 261.206599][T13121] ? __pfx____ratelimit+0x10/0x10 [ 261.206629][T13121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.206655][T13121] ? __pfx__printk+0x10/0x10 [ 261.206687][T13121] ? __might_fault+0xb0/0x130 [ 261.206731][T13121] should_fail_ex+0x414/0x560 [ 261.206765][T13121] _copy_from_iter+0x1db/0x16f0 [ 261.206793][T13121] ? rcu_is_watching+0x15/0xb0 [ 261.206817][T13121] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 261.206849][T13121] ? __pfx__copy_from_iter+0x10/0x10 [ 261.206873][T13121] ? __build_skb_around+0x257/0x3e0 [ 261.206911][T13121] ? netlink_sendmsg+0x642/0xb30 [ 261.206940][T13121] ? skb_put+0x11b/0x210 [ 261.206978][T13121] netlink_sendmsg+0x6b2/0xb30 [ 261.207022][T13121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.207058][T13121] ? aa_sock_msg_perm+0xf1/0x1d0 [ 261.207094][T13121] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.207118][T13121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.207152][T13121] __sock_sendmsg+0x21c/0x270 [ 261.207184][T13121] ____sys_sendmsg+0x505/0x830 [ 261.207222][T13121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.207256][T13121] ? import_iovec+0x74/0xa0 [ 261.207285][T13121] ___sys_sendmsg+0x21f/0x2a0 [ 261.207309][T13121] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.207375][T13121] ? __fget_files+0x2a/0x420 [ 261.207407][T13121] ? __fget_files+0x3a0/0x420 [ 261.207452][T13121] __x64_sys_sendmsg+0x19b/0x260 [ 261.207478][T13121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.207512][T13121] ? __pfx_ksys_write+0x10/0x10 [ 261.207539][T13121] ? rcu_is_watching+0x15/0xb0 [ 261.207566][T13121] ? do_syscall_64+0xbe/0x3b0 [ 261.207601][T13121] do_syscall_64+0xfa/0x3b0 [ 261.207630][T13121] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.207658][T13121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.207679][T13121] ? clear_bhb_loop+0x60/0xb0 [ 261.207706][T13121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.207726][T13121] RIP: 0033:0x7f30b3f8ebe9 [ 261.207745][T13121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.207764][T13121] RSP: 002b:00007f30b4e04038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.207787][T13121] RAX: ffffffffffffffda RBX: 00007f30b41b6090 RCX: 00007f30b3f8ebe9 [ 261.207820][T13121] RDX: 0000000000000850 RSI: 00002000000002c0 RDI: 0000000000000003 [ 261.207834][T13121] RBP: 00007f30b4e04090 R08: 0000000000000000 R09: 0000000000000000 [ 261.207847][T13121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.207859][T13121] R13: 00007f30b41b6128 R14: 00007f30b41b6090 R15: 00007ffcdd1315a8 [ 261.207894][T13121] [ 261.301944][T13131] netlink: 'syz.3.2021': attribute type 16 has an invalid length. [ 261.615140][T13140] netlink: 'syz.3.2021': attribute type 16 has an invalid length. [ 261.615369][T13131] netlink: 'syz.3.2021': attribute type 17 has an invalid length. [ 261.648538][T13140] netlink: 'syz.3.2021': attribute type 17 has an invalid length. [ 261.705889][T13142] netlink: zone id is out of range [ 261.728211][T13142] netlink: del zone limit has 4 unknown bytes [ 261.753794][T13140] gretap0: left promiscuous mode [ 261.766270][T13140] ip6_vti0: left promiscuous mode [ 261.772499][T13140] ip6_vti0: left allmulticast mode [ 261.789524][T13140] syz_tun: left promiscuous mode [ 261.794921][T13140] syz_tun: left allmulticast mode [ 261.813925][T13140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.853100][T13131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.939370][T13145] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.001699][T13147] sch_tbf: burst 0 is lower than device lo mtu (80) ! [ 262.508573][T13193] sctp: [Deprecated]: syz.3.2037 (pid 13193) Use of int in max_burst socket option deprecated. [ 262.508573][T13193] Use struct sctp_assoc_value instead [ 262.566311][T13194] sctp: [Deprecated]: syz.3.2037 (pid 13194) Use of int in maxseg socket option. [ 262.566311][T13194] Use struct sctp_assoc_value instead [ 262.906563][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.916571][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 280.206420][ T94] block nbd0: Possible stuck request ffff8880251c0000: control (read@0,4096B). Runtime 120 seconds [ 281.396522][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 284.082306][T13216] __nla_validate_parse: 7 callbacks suppressed [ 284.082327][T13216] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2042'. [ 285.306569][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 285.481428][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.491118][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.499460][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.526759][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.536904][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.647189][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.657557][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.674161][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.683470][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.695374][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.707094][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.733086][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.742786][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.759372][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.770218][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.780768][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.792491][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.815074][ T5185] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 285.835825][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 285.847898][ T5867] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 285.891587][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.902759][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.911590][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.920415][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.929524][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.970094][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.033604][T13227] hsr0 speed is unknown, defaulting to 1000 [ 286.089501][T13224] hsr0 speed is unknown, defaulting to 1000 [ 286.109924][ T5876] Bluetooth: hci4: command 0x0405 tx timeout [ 286.116535][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.155670][T13221] hsr0 speed is unknown, defaulting to 1000 [ 286.198790][T13223] hsr0 speed is unknown, defaulting to 1000 [ 286.216493][T13229] hsr0 speed is unknown, defaulting to 1000 [ 286.239413][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.311483][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.745505][T13227] chnl_net:caif_netlink_parms(): no params data found [ 286.937095][T13224] chnl_net:caif_netlink_parms(): no params data found [ 287.032226][T13223] chnl_net:caif_netlink_parms(): no params data found [ 287.062790][ T49] bridge_slave_1: left allmulticast mode [ 287.070164][ T49] bridge_slave_1: left promiscuous mode [ 287.077245][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.091416][ T49] bridge_slave_0: left allmulticast mode [ 287.097509][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.428607][ T49] bond7 (unregistering): (slave gretap0): Releasing active interface [ 287.448176][ T49] bond9 (unregistering): (slave gretap1): Releasing active interface [ 287.495476][ T49] dvmrp1 (unregistering): left allmulticast mode [ 287.514699][ T49] bond2 (unregistering): (slave geneve2): Releasing active interface [ 287.626658][ T5876] Bluetooth: hci2: command tx timeout [ 287.787281][ T5876] Bluetooth: hci0: command tx timeout [ 287.866690][ T5876] Bluetooth: hci1: command tx timeout [ 287.947286][ T5876] Bluetooth: hci5: command tx timeout [ 288.027051][ T5876] Bluetooth: hci3: command tx timeout [ 289.269724][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.280790][ T49] bond_slave_0: left allmulticast mode [ 289.290429][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.299572][ T49] bond_slave_1: left allmulticast mode [ 289.307736][ T49] bond0 (unregistering): (slave bond3): Releasing backup interface [ 289.316182][ T49] bond3 (unregistering): left allmulticast mode [ 289.323082][ T49] bond0 (unregistering): Released all slaves [ 289.412069][ T49] bond1 (unregistering): Released all slaves [ 289.498363][ T49] bond2 (unregistering): Released all slaves [ 289.588391][ T49] bond3 (unregistering): Released all slaves [ 289.604284][ T49] bond4 (unregistering): Released all slaves [ 289.693728][ T49] team0: Port device bond5 removed [ 289.700979][ T49] bond5 (unregistering): Released all slaves [ 289.708121][ T5876] Bluetooth: hci2: command tx timeout [ 289.803781][ T49] team0: Port device bond6 removed [ 289.811592][ T49] bond6 (unregistering): Released all slaves [ 289.827045][ T49] bond7 (unregistering): Released all slaves [ 289.842157][ T49] bond8 (unregistering): Released all slaves [ 289.857785][ T49] bond9 (unregistering): Released all slaves [ 289.866554][ T5876] Bluetooth: hci0: command tx timeout [ 289.942113][T13221] chnl_net:caif_netlink_parms(): no params data found [ 289.956305][T13229] chnl_net:caif_netlink_parms(): no params data found [ 289.957681][ T5876] Bluetooth: hci1: command tx timeout [ 290.027158][ T5876] Bluetooth: hci5: command tx timeout [ 290.116777][ T5876] Bluetooth: hci3: command tx timeout [ 290.142995][ T49] tipc: Disabling bearer [ 290.163507][ T49] tipc: Disabling bearer [ 290.170455][ T49] tipc: Left network mode [ 290.192616][ T49] IPVS: stopping master sync thread 7257 ... [ 290.221624][T13227] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.229350][T13227] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.238032][T13227] bridge_slave_0: entered allmulticast mode [ 290.245506][T13227] bridge_slave_0: entered promiscuous mode [ 290.345094][T13227] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.352629][T13227] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.360537][T13227] bridge_slave_1: entered allmulticast mode [ 290.369739][T13227] bridge_slave_1: entered promiscuous mode [ 290.416243][T13223] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.424007][T13223] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.432066][T13223] bridge_slave_0: entered allmulticast mode [ 290.440279][T13223] bridge_slave_0: entered promiscuous mode [ 290.453250][T13223] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.463630][T13223] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.473179][T13223] bridge_slave_1: entered allmulticast mode [ 290.482154][T13223] bridge_slave_1: entered promiscuous mode [ 290.502935][T13224] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.510245][T13224] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.518061][T13224] bridge_slave_0: entered allmulticast mode [ 290.525429][T13224] bridge_slave_0: entered promiscuous mode [ 291.786597][ T5876] Bluetooth: hci2: command tx timeout [ 291.828355][T13227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.842455][T13227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.851880][T13224] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.859210][T13224] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.867329][T13224] bridge_slave_1: entered allmulticast mode [ 291.875417][T13224] bridge_slave_1: entered promiscuous mode [ 291.899580][ T1344] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 291.953889][ T5876] Bluetooth: hci0: command tx timeout [ 292.003777][T13223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.018077][T13223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.027461][ T5876] Bluetooth: hci1: command tx timeout [ 292.051079][T13227] team0: Port device team_slave_0 added [ 292.085620][T13221] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.093110][T13221] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.101193][T13221] bridge_slave_0: entered allmulticast mode [ 292.108445][ T5876] Bluetooth: hci5: command tx timeout [ 292.110535][T13221] bridge_slave_0: entered promiscuous mode [ 292.139725][ T49] hsr_slave_0: left promiscuous mode [ 292.145814][ T49] hsr_slave_1: left promiscuous mode [ 292.152216][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.160034][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.168160][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.175570][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.187870][ T5876] Bluetooth: hci3: command tx timeout [ 292.204209][ T49] veth1_macvtap: left promiscuous mode [ 292.210481][ T49] veth0_macvtap: left promiscuous mode [ 292.558573][ T49] team0 (unregistering): Port device team_slave_1 removed [ 292.601835][ T49] team0 (unregistering): Port device team_slave_0 removed [ 292.909817][T13227] team0: Port device team_slave_1 added [ 292.920152][T13224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.942964][T13224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.952350][T13229] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.959693][T13229] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.967376][T13229] bridge_slave_0: entered allmulticast mode [ 292.974686][T13229] bridge_slave_0: entered promiscuous mode [ 292.982434][T13221] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.990455][T13221] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.998415][T13221] bridge_slave_1: entered allmulticast mode [ 293.005743][T13221] bridge_slave_1: entered promiscuous mode [ 293.083080][T13229] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.090765][T13229] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.098199][T13229] bridge_slave_1: entered allmulticast mode [ 293.105669][T13229] bridge_slave_1: entered promiscuous mode [ 293.185221][T13223] team0: Port device team_slave_0 added [ 293.230110][T13229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.244180][T13221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.262884][T13223] team0: Port device team_slave_1 added [ 293.289050][T13227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.296037][T13227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.324093][T13227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.338357][T13224] team0: Port device team_slave_0 added [ 293.347278][T13229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.358769][T13221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.401377][T13227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.410158][T13227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.437057][T13227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.470087][T13224] team0: Port device team_slave_1 added [ 293.512653][T13223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.520229][T13223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.547783][T13223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.560830][T13223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.568332][T13223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.594597][T13223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.641389][T13229] team0: Port device team_slave_0 added [ 293.649407][T13221] team0: Port device team_slave_0 added [ 293.658937][T13221] team0: Port device team_slave_1 added [ 293.727914][T13229] team0: Port device team_slave_1 added [ 293.769197][T13224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.776285][T13224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.803256][T13224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.872871][ T5876] Bluetooth: hci2: command tx timeout [ 293.880710][T13227] hsr_slave_0: entered promiscuous mode [ 293.887918][T13227] hsr_slave_1: entered promiscuous mode [ 293.894350][T13227] debugfs: 'hsr0' already exists in 'hsr' [ 293.901019][T13227] Cannot create hsr debugfs directory [ 293.911359][T13224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.918435][T13224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.944697][T13224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.977160][T13221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.984335][T13221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.011048][T13221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.024307][T13221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.031538][T13221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.037629][ T5876] Bluetooth: hci0: command tx timeout [ 294.064359][T13221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.106503][ T5876] Bluetooth: hci1: command tx timeout [ 294.124950][T13229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.132419][T13229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.165960][T13229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.180450][T13229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.188264][ T5876] Bluetooth: hci5: command tx timeout [ 294.188733][T13229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.220444][T13229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.246091][T13223] hsr_slave_0: entered promiscuous mode [ 294.252739][T13223] hsr_slave_1: entered promiscuous mode [ 294.264924][T13223] debugfs: 'hsr0' already exists in 'hsr' [ 294.271281][ T5876] Bluetooth: hci3: command tx timeout [ 294.271306][T13223] Cannot create hsr debugfs directory [ 294.395896][T13224] hsr_slave_0: entered promiscuous mode [ 294.403706][T13224] hsr_slave_1: entered promiscuous mode [ 294.410256][T13224] debugfs: 'hsr0' already exists in 'hsr' [ 294.416019][T13224] Cannot create hsr debugfs directory [ 294.461396][T13229] hsr_slave_0: entered promiscuous mode [ 294.468663][T13229] hsr_slave_1: entered promiscuous mode [ 294.474889][T13229] debugfs: 'hsr0' already exists in 'hsr' [ 294.481242][T13229] Cannot create hsr debugfs directory [ 294.490691][ T49] IPVS: stop unused estimator thread 0... [ 294.513416][T13221] hsr_slave_0: entered promiscuous mode [ 294.520629][T13221] hsr_slave_1: entered promiscuous mode [ 294.531912][T13221] debugfs: 'hsr0' already exists in 'hsr' [ 294.538049][T13221] Cannot create hsr debugfs directory [ 294.833318][ T49] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.931153][ T49] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.009750][ T49] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.156105][ T49] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.295888][T13227] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 295.310795][T13227] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 295.323535][T13227] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 295.364129][T13227] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 295.464502][T13229] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 295.494811][T13229] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 295.509444][T13229] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 295.523591][ T49] bridge_slave_1: left allmulticast mode [ 295.529834][ T49] bridge_slave_1: left promiscuous mode [ 295.535608][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.545565][ T49] bridge_slave_0: left allmulticast mode [ 295.551999][ T49] bridge_slave_0: left promiscuous mode [ 295.558167][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.923599][ T49] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 296.306455][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.318025][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.331383][ T49] bond0 (unregistering): Released all slaves [ 296.430641][ T49] team0: Port device bond1 removed [ 296.437557][ T49] bond1 (unregistering): Released all slaves [ 296.452576][ T49] bond2 (unregistering): Released all slaves [ 296.549508][ T49] bond3 (unregistering): Released all slaves [ 296.647995][ T49] bond4 (unregistering): Released all slaves [ 296.753873][ T49] bond5 (unregistering): Released all slaves [ 296.769968][T13229] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 296.916165][ T49] tipc: Disabling bearer [ 296.928881][ T49] tipc: Left network mode [ 296.977722][ T49] IPVS: stopping backup sync thread 8403 ... [ 297.018833][T13221] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 297.033062][T13221] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 297.078996][T13221] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 297.090436][T13221] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 297.204000][T13229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.244466][T13227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.272214][ T49] hsr_slave_0: left promiscuous mode [ 297.279094][ T49] hsr_slave_1: left promiscuous mode [ 297.284943][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.293383][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.324555][ T49] veth1_macvtap: left promiscuous mode [ 297.330224][ T49] veth0_macvtap: left promiscuous mode [ 297.335851][ T49] veth1_vlan: left promiscuous mode [ 297.341653][ T49] veth0_vlan: left promiscuous mode [ 297.470300][ T49] pimreg3 (unregistering): left allmulticast mode [ 297.845469][ T49] team0 (unregistering): Port device team_slave_1 removed [ 297.890983][ T49] team0 (unregistering): Port device team_slave_0 removed [ 298.270194][T13223] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 298.284488][T13223] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 298.314483][T13229] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.339143][T13223] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 298.353247][T13223] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 298.406273][T10840] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.413537][T10840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.519829][ T1344] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.527008][ T1344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.540674][T13227] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.571215][T13224] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 298.590813][T13224] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 298.605437][T13224] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 298.640034][T13224] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 298.662098][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.669415][ T1344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.698427][ T1344] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.705823][ T1344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.095719][T13221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.202204][T13221] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.283212][T13223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.315229][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.322497][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.372259][T10828] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.379523][T10828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.447626][T13223] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.501710][T13224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.513902][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.522108][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.556291][T13227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.573706][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.581064][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.664262][T13229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.689072][T13224] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.750937][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.758170][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.862401][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.869798][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.443307][T13227] veth0_vlan: entered promiscuous mode [ 300.529647][T13227] veth1_vlan: entered promiscuous mode [ 300.582143][T13221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.720346][T13227] veth0_macvtap: entered promiscuous mode [ 300.784802][T13227] veth1_macvtap: entered promiscuous mode [ 300.831760][T13224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.839791][T13229] veth0_vlan: entered promiscuous mode [ 300.880832][T13223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.900060][T13229] veth1_vlan: entered promiscuous mode [ 300.910798][T13227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.933722][T13227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.972206][T10828] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.042474][T10828] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.089672][T10828] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.108627][T10828] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.192114][T13229] veth0_macvtap: entered promiscuous mode [ 301.248640][T13229] veth1_macvtap: entered promiscuous mode [ 301.350448][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.387088][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.406177][T13229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.487715][T13229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.512889][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.521762][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.561553][T10843] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.578721][T10843] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.604709][T10843] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.623571][T10843] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.750903][T13221] veth0_vlan: entered promiscuous mode [ 301.825931][T13221] veth1_vlan: entered promiscuous mode [ 301.862449][T13224] veth0_vlan: entered promiscuous mode [ 301.899801][T13344] validate_nla: 2 callbacks suppressed [ 301.899824][T13344] netlink: 'syz.8.2048': attribute type 13 has an invalid length. [ 301.916722][T13344] veth0_macvtap: left promiscuous mode [ 301.922365][T13344] macvtap0: entered allmulticast mode [ 301.931654][T13344] macvtap0: refused to change device tx_queue_len [ 301.964608][T13344] IPVS: length: 157 != 24 [ 301.965021][T13223] veth0_vlan: entered promiscuous mode [ 301.993917][T10840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.997673][T13224] veth1_vlan: entered promiscuous mode [ 302.010835][T10840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.052777][T13221] veth0_macvtap: entered promiscuous mode [ 302.087928][T13223] veth1_vlan: entered promiscuous mode [ 302.103462][T13221] veth1_macvtap: entered promiscuous mode [ 302.122622][T10840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.149707][T10840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.184395][T13221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.247429][T13221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.263970][T13224] veth0_macvtap: entered promiscuous mode [ 302.300580][T13223] veth0_macvtap: entered promiscuous mode [ 302.335829][T13224] veth1_macvtap: entered promiscuous mode [ 302.367817][ T1108] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.380050][ T1108] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.392457][T13223] veth1_macvtap: entered promiscuous mode [ 302.417700][ T1108] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.432596][ T1108] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.543919][T13223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.579373][T13351] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2050'. [ 302.604910][T13224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.690904][T13223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.715118][T13224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.798250][ T1108] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.822767][ T1108] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.857805][T10840] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.870543][T10840] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.881817][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.899788][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.921859][T10840] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.937700][T10840] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.003223][T10840] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.014824][T13361] netlink: 'syz.8.2054': attribute type 1 has an invalid length. [ 303.024051][T13361] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2054'. [ 303.064008][T10840] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.155698][ T1344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.178683][ T1344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.365943][T13371] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2057'. [ 303.380329][T13367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.401102][T10840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.419905][T10840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.537710][T10840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.568674][T10840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.584634][T10828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.598307][T10828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.639347][T13378] netlink: 'syz.5.2059': attribute type 83 has an invalid length. [ 303.672564][T10828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.674510][T13379] netlink: 'syz.5.2059': attribute type 83 has an invalid length. [ 303.695798][T10828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.862111][T13389] netlink: 'syz.6.2044': attribute type 1 has an invalid length. [ 303.893644][T13389] netlink: 'syz.6.2044': attribute type 1 has an invalid length. [ 303.904507][T13387] netlink: 'syz.5.2060': attribute type 58 has an invalid length. [ 303.928832][T13387] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2060'. [ 303.957934][T13388] ipvlan2: entered promiscuous mode [ 303.975636][T13388] netlink: 'syz.9.2061': attribute type 10 has an invalid length. [ 304.019762][T13388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.034030][T13388] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 304.622216][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2069'. [ 304.655290][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2069'. [ 304.902768][T13437] netlink: 'syz.5.2073': attribute type 8 has an invalid length. [ 305.298036][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2080'. [ 305.361531][T13462] netlink: 'syz.5.2082': attribute type 14 has an invalid length. [ 305.368530][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2080'. [ 305.377520][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2082'. [ 305.434081][T13465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2082'. [ 305.510847][T13458] bond0: (slave bond_slave_0): Releasing backup interface [ 305.618942][T10828] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.643139][ T59] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.684021][ T59] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.711110][ T59] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.224624][T13515] macsec1: entered promiscuous mode [ 306.233697][T13515] macsec1: entered allmulticast mode [ 306.504426][T13536] FAULT_INJECTION: forcing a failure. [ 306.504426][T13536] name failslab, interval 1, probability 0, space 0, times 0 [ 306.534720][T13536] CPU: 0 UID: 0 PID: 13536 Comm: syz.5.2103 Not tainted syzkaller #0 PREEMPT(full) [ 306.534751][T13536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.534766][T13536] Call Trace: [ 306.534775][T13536] [ 306.534784][T13536] dump_stack_lvl+0x189/0x250 [ 306.534816][T13536] ? __pfx____ratelimit+0x10/0x10 [ 306.534847][T13536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.534873][T13536] ? __pfx__printk+0x10/0x10 [ 306.534906][T13536] ? __lock_acquire+0xab9/0xd20 [ 306.534949][T13536] should_fail_ex+0x414/0x560 [ 306.534983][T13536] should_failslab+0xa8/0x100 [ 306.535024][T13536] kmem_cache_alloc_noprof+0x73/0x3c0 [ 306.535053][T13536] ? skb_clone+0x212/0x3a0 [ 306.535082][T13536] skb_clone+0x212/0x3a0 [ 306.535110][T13536] __netlink_deliver_tap+0x404/0x850 [ 306.535156][T13536] ? netlink_deliver_tap+0x2e/0x1b0 [ 306.535189][T13536] netlink_deliver_tap+0x19c/0x1b0 [ 306.535221][T13536] netlink_unicast+0x7fa/0x9e0 [ 306.535260][T13536] ? __pfx_netlink_unicast+0x10/0x10 [ 306.535291][T13536] ? netlink_sendmsg+0x642/0xb30 [ 306.535320][T13536] ? skb_put+0x11b/0x210 [ 306.535358][T13536] netlink_sendmsg+0x805/0xb30 [ 306.535401][T13536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.535437][T13536] ? aa_sock_msg_perm+0xf1/0x1d0 [ 306.535473][T13536] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 306.535497][T13536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.535530][T13536] __sock_sendmsg+0x21c/0x270 [ 306.535562][T13536] ____sys_sendmsg+0x505/0x830 [ 306.535591][T13536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.535624][T13536] ? import_iovec+0x74/0xa0 [ 306.535653][T13536] ___sys_sendmsg+0x21f/0x2a0 [ 306.535679][T13536] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.535750][T13536] ? __fget_files+0x2a/0x420 [ 306.535782][T13536] ? __fget_files+0x3a0/0x420 [ 306.535827][T13536] __x64_sys_sendmsg+0x19b/0x260 [ 306.535853][T13536] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 306.535887][T13536] ? __pfx_ksys_write+0x10/0x10 [ 306.535913][T13536] ? rcu_is_watching+0x15/0xb0 [ 306.535941][T13536] ? do_syscall_64+0xbe/0x3b0 [ 306.535976][T13536] do_syscall_64+0xfa/0x3b0 [ 306.536005][T13536] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.536053][T13536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.536074][T13536] ? clear_bhb_loop+0x60/0xb0 [ 306.536102][T13536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.536122][T13536] RIP: 0033:0x7ff37c58ebe9 [ 306.536142][T13536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.536162][T13536] RSP: 002b:00007ff37d3fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.536185][T13536] RAX: ffffffffffffffda RBX: 00007ff37c7b5fa0 RCX: 00007ff37c58ebe9 [ 306.536201][T13536] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 306.536214][T13536] RBP: 00007ff37d3fb090 R08: 0000000000000000 R09: 0000000000000000 [ 306.536227][T13536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.536240][T13536] R13: 00007ff37c7b6038 R14: 00007ff37c7b5fa0 R15: 00007ffc60f5f888 [ 306.536275][T13536] [ 307.035010][T13548] vlan2: entered allmulticast mode [ 307.046923][T13548] bond0: entered allmulticast mode [ 307.069493][T13548] bond_slave_0: entered allmulticast mode [ 307.094007][T13548] bond_slave_1: entered allmulticast mode [ 307.182854][T13562] Bluetooth: MGMT ver 1.23 [ 307.513505][T13582] FAULT_INJECTION: forcing a failure. [ 307.513505][T13582] name failslab, interval 1, probability 0, space 0, times 0 [ 307.535797][T13582] CPU: 1 UID: 0 PID: 13582 Comm: syz.6.2116 Not tainted syzkaller #0 PREEMPT(full) [ 307.535830][T13582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.535844][T13582] Call Trace: [ 307.535852][T13582] [ 307.535862][T13582] dump_stack_lvl+0x189/0x250 [ 307.535895][T13582] ? __pfx____ratelimit+0x10/0x10 [ 307.535926][T13582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.535952][T13582] ? __pfx__printk+0x10/0x10 [ 307.535990][T13582] ? __pfx___might_resched+0x10/0x10 [ 307.536010][T13582] ? fs_reclaim_acquire+0x7d/0x100 [ 307.536050][T13582] should_fail_ex+0x414/0x560 [ 307.536084][T13582] should_failslab+0xa8/0x100 [ 307.536118][T13582] kmem_cache_alloc_noprof+0x73/0x3c0 [ 307.536158][T13582] ? skb_clone+0x212/0x3a0 [ 307.536187][T13582] skb_clone+0x212/0x3a0 [ 307.536208][T13582] ? nfnetlink_rcv+0x486/0x2520 [ 307.536239][T13582] nfnetlink_rcv+0x4b4/0x2520 [ 307.536270][T13582] ? __dev_queue_xmit+0x1d79/0x3b50 [ 307.536307][T13582] ? __dev_queue_xmit+0x27b/0x3b50 [ 307.536348][T13582] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 307.536392][T13582] ? ref_tracker_free+0x63a/0x7d0 [ 307.536422][T13582] ? __asan_memcpy+0x40/0x70 [ 307.536446][T13582] ? __pfx_ref_tracker_free+0x10/0x10 [ 307.536474][T13582] ? __skb_clone+0x63/0x7a0 [ 307.536501][T13582] ? __skb_clone+0x483/0x7a0 [ 307.536531][T13582] ? skb_clone+0x246/0x3a0 [ 307.536557][T13582] ? __netlink_deliver_tap+0x807/0x850 [ 307.536589][T13582] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.536640][T13582] netlink_unicast+0x82c/0x9e0 [ 307.536679][T13582] ? __pfx_netlink_unicast+0x10/0x10 [ 307.536708][T13582] ? netlink_sendmsg+0x642/0xb30 [ 307.536738][T13582] ? skb_put+0x11b/0x210 [ 307.536775][T13582] netlink_sendmsg+0x805/0xb30 [ 307.536818][T13582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.536854][T13582] ? aa_sock_msg_perm+0xf1/0x1d0 [ 307.536890][T13582] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.536914][T13582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.536947][T13582] __sock_sendmsg+0x21c/0x270 [ 307.536979][T13582] ____sys_sendmsg+0x505/0x830 [ 307.537008][T13582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.537040][T13582] ? import_iovec+0x74/0xa0 [ 307.537069][T13582] ___sys_sendmsg+0x21f/0x2a0 [ 307.537094][T13582] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.537164][T13582] ? __fget_files+0x2a/0x420 [ 307.537196][T13582] ? __fget_files+0x3a0/0x420 [ 307.537240][T13582] __x64_sys_sendmsg+0x19b/0x260 [ 307.537266][T13582] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.537300][T13582] ? __pfx_ksys_write+0x10/0x10 [ 307.537326][T13582] ? rcu_is_watching+0x15/0xb0 [ 307.537354][T13582] ? do_syscall_64+0xbe/0x3b0 [ 307.537390][T13582] do_syscall_64+0xfa/0x3b0 [ 307.537420][T13582] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.537450][T13582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.537471][T13582] ? clear_bhb_loop+0x60/0xb0 [ 307.537498][T13582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.537519][T13582] RIP: 0033:0x7f960af8ebe9 [ 307.537539][T13582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.537558][T13582] RSP: 002b:00007f960beaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.537581][T13582] RAX: ffffffffffffffda RBX: 00007f960b1b5fa0 RCX: 00007f960af8ebe9 [ 307.537597][T13582] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 307.537611][T13582] RBP: 00007f960beaf090 R08: 0000000000000000 R09: 0000000000000000 [ 307.537624][T13582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.537636][T13582] R13: 00007f960b1b6038 R14: 00007f960b1b5fa0 R15: 00007ffd876408d8 [ 307.537671][T13582] [ 308.039183][T13584] validate_nla: 4 callbacks suppressed [ 308.039205][T13584] netlink: 'syz.7.2117': attribute type 21 has an invalid length. [ 308.053053][T13584] __nla_validate_parse: 12 callbacks suppressed [ 308.053346][T13584] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2117'. [ 308.069662][T13584] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2117'. [ 308.084140][T13584] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2117'. [ 308.096732][T13584] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2117'. [ 308.154477][T13596] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2120'. [ 308.191690][T13591] netlink: 'syz.9.2121': attribute type 10 has an invalid length. [ 308.212083][T13596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2120'. [ 308.240585][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2123'. [ 308.249607][T13600] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2123'. [ 308.252996][T13591] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 308.258632][T13600] netlink: 'syz.7.2123': attribute type 15 has an invalid length. [ 308.391095][T13611] vlan2: entered promiscuous mode [ 308.396201][T13611] bridge0: entered promiscuous mode [ 308.574431][T13620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.585461][T13622] netlink: 34 bytes leftover after parsing attributes in process `syz.7.2128'. [ 308.702333][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2130'. [ 309.007051][T13643] smc: net device bond0 applied user defined pnetid SYZ2 [ 309.180332][T13653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.227126][ T5876] Bluetooth: hci0: command tx timeout [ 309.235568][T13643] smc: removing net device bond0 with user defined pnetid SYZ2 [ 309.255927][T13643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.300058][T13643] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 309.313844][T13643] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 309.326691][T13643] bond0 (unregistering): Released all slaves [ 309.636482][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.767530][T13669] gtp0: entered promiscuous mode [ 309.775460][T13669] gtp0: entered allmulticast mode [ 309.822430][T13676] netlink: 'syz.5.2147': attribute type 7 has an invalid length. [ 309.855796][T13676] netlink: 'syz.5.2147': attribute type 7 has an invalid length. [ 310.269947][ T94] block nbd0: Possible stuck request ffff8880251c0000: control (read@0,4096B). Runtime 150 seconds [ 310.405814][T13717] bond1: entered promiscuous mode [ 310.412242][T13717] bond1: entered allmulticast mode [ 310.421664][T13717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.661762][T13728] netlink: 'syz.6.2162': attribute type 7 has an invalid length. [ 311.038803][T13760] netlink: 'syz.5.2171': attribute type 1 has an invalid length. [ 311.070568][T13760] netlink: 'syz.5.2171': attribute type 2 has an invalid length. [ 311.094747][T13760] netlink: 'syz.5.2171': attribute type 1 has an invalid length. [ 311.532362][T13790] FAULT_INJECTION: forcing a failure. [ 311.532362][T13790] name failslab, interval 1, probability 0, space 0, times 0 [ 311.597604][T13790] CPU: 0 UID: 0 PID: 13790 Comm: syz.9.2179 Not tainted syzkaller #0 PREEMPT(full) [ 311.597637][T13790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.597651][T13790] Call Trace: [ 311.597660][T13790] [ 311.597670][T13790] dump_stack_lvl+0x189/0x250 [ 311.597702][T13790] ? __pfx____ratelimit+0x10/0x10 [ 311.597733][T13790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.597759][T13790] ? __pfx__printk+0x10/0x10 [ 311.597796][T13790] ? __pfx___might_resched+0x10/0x10 [ 311.597816][T13790] ? fs_reclaim_acquire+0x7d/0x100 [ 311.597863][T13790] should_fail_ex+0x414/0x560 [ 311.597898][T13790] should_failslab+0xa8/0x100 [ 311.597932][T13790] __kmalloc_cache_noprof+0x70/0x3d0 [ 311.597962][T13790] ? nfnetlink_rcv+0xeff/0x2520 [ 311.597993][T13790] nfnetlink_rcv+0xeff/0x2520 [ 311.598059][T13790] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 311.598106][T13790] ? ref_tracker_free+0x63a/0x7d0 [ 311.598171][T13790] ? __netlink_deliver_tap+0x807/0x850 [ 311.598202][T13790] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.598254][T13790] netlink_unicast+0x82c/0x9e0 [ 311.598293][T13790] ? __pfx_netlink_unicast+0x10/0x10 [ 311.598322][T13790] ? netlink_sendmsg+0x642/0xb30 [ 311.598351][T13790] ? skb_put+0x11b/0x210 [ 311.598388][T13790] netlink_sendmsg+0x805/0xb30 [ 311.598431][T13790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.598466][T13790] ? aa_sock_msg_perm+0xf1/0x1d0 [ 311.598503][T13790] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 311.598526][T13790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.598559][T13790] __sock_sendmsg+0x21c/0x270 [ 311.598591][T13790] ____sys_sendmsg+0x505/0x830 [ 311.598624][T13790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.598658][T13790] ? import_iovec+0x74/0xa0 [ 311.598688][T13790] ___sys_sendmsg+0x21f/0x2a0 [ 311.598713][T13790] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.598777][T13790] ? __fget_files+0x2a/0x420 [ 311.598807][T13790] ? __fget_files+0x3a0/0x420 [ 311.598856][T13790] __x64_sys_sendmsg+0x19b/0x260 [ 311.598881][T13790] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.598914][T13790] ? __pfx_ksys_write+0x10/0x10 [ 311.598939][T13790] ? rcu_is_watching+0x15/0xb0 [ 311.598965][T13790] ? do_syscall_64+0xbe/0x3b0 [ 311.598999][T13790] do_syscall_64+0xfa/0x3b0 [ 311.599027][T13790] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.599054][T13790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.599075][T13790] ? clear_bhb_loop+0x60/0xb0 [ 311.599101][T13790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.599122][T13790] RIP: 0033:0x7f9e03f8ebe9 [ 311.599142][T13790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.599160][T13790] RSP: 002b:00007f9e04d31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.599183][T13790] RAX: ffffffffffffffda RBX: 00007f9e041b5fa0 RCX: 00007f9e03f8ebe9 [ 311.599198][T13790] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 311.599211][T13790] RBP: 00007f9e04d31090 R08: 0000000000000000 R09: 0000000000000000 [ 311.599224][T13790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.599236][T13790] R13: 00007f9e041b6038 R14: 00007f9e041b5fa0 R15: 00007ffe39a0c688 [ 311.599270][T13790] [ 311.981042][T13801] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 311.993936][T13801] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 312.162006][T13812] netlink: 'syz.5.2186': attribute type 10 has an invalid length. [ 312.176122][T13812] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.184527][T13812] bridge_slave_1: left allmulticast mode [ 312.198140][T13812] bridge_slave_1: left promiscuous mode [ 312.204119][T13812] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.218525][T13812] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 312.394339][T13825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.420252][T13827] bridge1: entered promiscuous mode [ 312.435819][T13827] bridge1: entered allmulticast mode [ 312.579656][T13837] FAULT_INJECTION: forcing a failure. [ 312.579656][T13837] name failslab, interval 1, probability 0, space 0, times 0 [ 312.616751][T13837] CPU: 0 UID: 0 PID: 13837 Comm: syz.5.2195 Not tainted syzkaller #0 PREEMPT(full) [ 312.616784][T13837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.616797][T13837] Call Trace: [ 312.616806][T13837] [ 312.616815][T13837] dump_stack_lvl+0x189/0x250 [ 312.616846][T13837] ? __pfx____ratelimit+0x10/0x10 [ 312.616876][T13837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.616902][T13837] ? __pfx__printk+0x10/0x10 [ 312.616938][T13837] ? __pfx___might_resched+0x10/0x10 [ 312.616957][T13837] ? fs_reclaim_acquire+0x7d/0x100 [ 312.616996][T13837] should_fail_ex+0x414/0x560 [ 312.617030][T13837] should_failslab+0xa8/0x100 [ 312.617062][T13837] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 312.617092][T13837] ? __pfx_nf_tables_abort+0x10/0x10 [ 312.617111][T13837] ? __alloc_skb+0x112/0x2d0 [ 312.617148][T13837] __alloc_skb+0x112/0x2d0 [ 312.617184][T13837] netlink_ack+0x146/0xa50 [ 312.617220][T13837] ? __kasan_kmalloc+0x93/0xb0 [ 312.617260][T13837] nfnetlink_rcv+0x2290/0x2520 [ 312.617324][T13837] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 312.617369][T13837] ? ref_tracker_free+0x63a/0x7d0 [ 312.617432][T13837] ? __netlink_deliver_tap+0x807/0x850 [ 312.617462][T13837] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.617523][T13837] netlink_unicast+0x82c/0x9e0 [ 312.617561][T13837] ? __pfx_netlink_unicast+0x10/0x10 [ 312.617591][T13837] ? netlink_sendmsg+0x642/0xb30 [ 312.617619][T13837] ? skb_put+0x11b/0x210 [ 312.617656][T13837] netlink_sendmsg+0x805/0xb30 [ 312.617698][T13837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.617733][T13837] ? aa_sock_msg_perm+0xf1/0x1d0 [ 312.617768][T13837] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.617797][T13837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.617829][T13837] __sock_sendmsg+0x21c/0x270 [ 312.617860][T13837] ____sys_sendmsg+0x505/0x830 [ 312.617889][T13837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.617921][T13837] ? import_iovec+0x74/0xa0 [ 312.617949][T13837] ___sys_sendmsg+0x21f/0x2a0 [ 312.617974][T13837] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.618037][T13837] ? __fget_files+0x2a/0x420 [ 312.618068][T13837] ? __fget_files+0x3a0/0x420 [ 312.618112][T13837] __x64_sys_sendmsg+0x19b/0x260 [ 312.618137][T13837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.618171][T13837] ? __pfx_ksys_write+0x10/0x10 [ 312.618196][T13837] ? rcu_is_watching+0x15/0xb0 [ 312.618223][T13837] ? do_syscall_64+0xbe/0x3b0 [ 312.618258][T13837] do_syscall_64+0xfa/0x3b0 [ 312.618287][T13837] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.618315][T13837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.618336][T13837] ? clear_bhb_loop+0x60/0xb0 [ 312.618362][T13837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.618383][T13837] RIP: 0033:0x7ff37c58ebe9 [ 312.618402][T13837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.618420][T13837] RSP: 002b:00007ff37d3fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.618442][T13837] RAX: ffffffffffffffda RBX: 00007ff37c7b5fa0 RCX: 00007ff37c58ebe9 [ 312.618458][T13837] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 312.618471][T13837] RBP: 00007ff37d3fb090 R08: 0000000000000000 R09: 0000000000000000 [ 312.618484][T13837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 312.618496][T13837] R13: 00007ff37c7b6038 R14: 00007ff37c7b5fa0 R15: 00007ffc60f5f888 [ 312.618537][T13837] [ 313.057801][T13847] validate_nla: 1 callbacks suppressed [ 313.057830][T13847] netlink: 'syz.7.2199': attribute type 9 has an invalid length. [ 313.126180][T13847] __nla_validate_parse: 16 callbacks suppressed [ 313.126201][T13847] netlink: 211988 bytes leftover after parsing attributes in process `syz.7.2199'. [ 313.318586][T13861] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2201'. [ 313.553130][T13871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.591814][T13876] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2208'. [ 313.623424][T13881] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 313.641819][T13876] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2208'. [ 313.703003][T13876] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2208'. [ 313.730628][T13876] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2208'. [ 313.761380][T13876] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2208'. [ 313.774198][T13888] netlink: 'syz.6.2211': attribute type 1 has an invalid length. [ 313.782477][T13876] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2208'. [ 313.791102][T13888] netlink: 'syz.6.2211': attribute type 10 has an invalid length. [ 313.792718][T13885] pim6reg1: entered promiscuous mode [ 313.804727][T13885] pim6reg1: entered allmulticast mode [ 313.823661][T13876] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2208'. [ 313.835533][T13876] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2208'. [ 314.573575][T13932] netlink: 'syz.7.2226': attribute type 21 has an invalid length. [ 314.879332][T13945] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 315.059965][T13957] FAULT_INJECTION: forcing a failure. [ 315.059965][T13957] name failslab, interval 1, probability 0, space 0, times 0 [ 315.084469][T13957] CPU: 0 UID: 0 PID: 13957 Comm: syz.9.2234 Not tainted syzkaller #0 PREEMPT(full) [ 315.084501][T13957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.084515][T13957] Call Trace: [ 315.084524][T13957] [ 315.084533][T13957] dump_stack_lvl+0x189/0x250 [ 315.084564][T13957] ? __pfx____ratelimit+0x10/0x10 [ 315.084594][T13957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.084619][T13957] ? __pfx__printk+0x10/0x10 [ 315.084654][T13957] ? netlink_unicast+0x82c/0x9e0 [ 315.084685][T13957] ? ___sys_sendmsg+0x21f/0x2a0 [ 315.084706][T13957] ? do_syscall_64+0xfa/0x3b0 [ 315.084750][T13957] should_fail_ex+0x414/0x560 [ 315.084784][T13957] should_failslab+0xa8/0x100 [ 315.084819][T13957] kmem_cache_alloc_noprof+0x73/0x3c0 [ 315.084848][T13957] ? skb_clone+0x212/0x3a0 [ 315.084876][T13957] skb_clone+0x212/0x3a0 [ 315.084904][T13957] __netlink_deliver_tap+0x404/0x850 [ 315.084950][T13957] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.084984][T13957] netlink_deliver_tap+0x19c/0x1b0 [ 315.085016][T13957] netlink_sendskb+0x68/0x140 [ 315.085046][T13957] netlink_unicast+0x397/0x9e0 [ 315.085071][T13957] ? __asan_memcpy+0x40/0x70 [ 315.085106][T13957] ? __pfx_netlink_unicast+0x10/0x10 [ 315.085146][T13957] nfnetlink_rcv+0x2290/0x2520 [ 315.085210][T13957] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 315.085256][T13957] ? ref_tracker_free+0x63a/0x7d0 [ 315.085320][T13957] ? __netlink_deliver_tap+0x807/0x850 [ 315.085351][T13957] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.085402][T13957] netlink_unicast+0x82c/0x9e0 [ 315.085442][T13957] ? __pfx_netlink_unicast+0x10/0x10 [ 315.085473][T13957] ? netlink_sendmsg+0x642/0xb30 [ 315.085508][T13957] ? skb_put+0x11b/0x210 [ 315.085545][T13957] netlink_sendmsg+0x805/0xb30 [ 315.085588][T13957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.085625][T13957] ? aa_sock_msg_perm+0xf1/0x1d0 [ 315.085670][T13957] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 315.085694][T13957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.085727][T13957] __sock_sendmsg+0x21c/0x270 [ 315.085758][T13957] ____sys_sendmsg+0x505/0x830 [ 315.085787][T13957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.085821][T13957] ? import_iovec+0x74/0xa0 [ 315.085850][T13957] ___sys_sendmsg+0x21f/0x2a0 [ 315.085876][T13957] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.085939][T13957] ? __fget_files+0x2a/0x420 [ 315.085971][T13957] ? __fget_files+0x3a0/0x420 [ 315.086016][T13957] __x64_sys_sendmsg+0x19b/0x260 [ 315.086042][T13957] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.086074][T13957] ? __pfx_ksys_write+0x10/0x10 [ 315.086100][T13957] ? rcu_is_watching+0x15/0xb0 [ 315.086128][T13957] ? do_syscall_64+0xbe/0x3b0 [ 315.086164][T13957] do_syscall_64+0xfa/0x3b0 [ 315.086193][T13957] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.086222][T13957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.086243][T13957] ? clear_bhb_loop+0x60/0xb0 [ 315.086271][T13957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.086291][T13957] RIP: 0033:0x7f9e03f8ebe9 [ 315.086311][T13957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.086330][T13957] RSP: 002b:00007f9e04d31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.086351][T13957] RAX: ffffffffffffffda RBX: 00007f9e041b5fa0 RCX: 00007f9e03f8ebe9 [ 315.086367][T13957] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 315.086380][T13957] RBP: 00007f9e04d31090 R08: 0000000000000000 R09: 0000000000000000 [ 315.086393][T13957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.086405][T13957] R13: 00007f9e041b6038 R14: 00007f9e041b5fa0 R15: 00007ffe39a0c688 [ 315.086440][T13957] [ 315.538245][T13964] xt_socket: unknown flags 0xe4 [ 316.139688][T13989] netem: unknown loss type 0 [ 316.161787][T13989] netem: change failed [ 316.318081][T13995] FAULT_INJECTION: forcing a failure. [ 316.318081][T13995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.346906][T13995] CPU: 1 UID: 0 PID: 13995 Comm: syz.6.2246 Not tainted syzkaller #0 PREEMPT(full) [ 316.346936][T13995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.346950][T13995] Call Trace: [ 316.346958][T13995] [ 316.346968][T13995] dump_stack_lvl+0x189/0x250 [ 316.347000][T13995] ? __pfx____ratelimit+0x10/0x10 [ 316.347031][T13995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.347058][T13995] ? __pfx__printk+0x10/0x10 [ 316.347103][T13995] should_fail_ex+0x414/0x560 [ 316.347138][T13995] _copy_to_user+0x31/0xb0 [ 316.347166][T13995] simple_read_from_buffer+0xe1/0x170 [ 316.347203][T13995] proc_fail_nth_read+0x1b3/0x220 [ 316.347231][T13995] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.347267][T13995] ? rw_verify_area+0x2a6/0x4d0 [ 316.347293][T13995] ? __lock_acquire+0xab9/0xd20 [ 316.347323][T13995] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.347349][T13995] vfs_read+0x200/0xa30 [ 316.347375][T13995] ? fdget_pos+0x247/0x320 [ 316.347399][T13995] ? __pfx___mutex_lock+0x10/0x10 [ 316.347431][T13995] ? __pfx_vfs_read+0x10/0x10 [ 316.347461][T13995] ? __fget_files+0x2a/0x420 [ 316.347499][T13995] ? __fget_files+0x3a0/0x420 [ 316.347530][T13995] ? __fget_files+0x2a/0x420 [ 316.347573][T13995] ksys_read+0x145/0x250 [ 316.347603][T13995] ? __pfx_ksys_read+0x10/0x10 [ 316.347628][T13995] ? rcu_is_watching+0x15/0xb0 [ 316.347655][T13995] ? do_syscall_64+0xbe/0x3b0 [ 316.347691][T13995] do_syscall_64+0xfa/0x3b0 [ 316.347720][T13995] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.347748][T13995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.347769][T13995] ? clear_bhb_loop+0x60/0xb0 [ 316.347796][T13995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.347817][T13995] RIP: 0033:0x7f960af8d5fc [ 316.347841][T13995] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 316.347860][T13995] RSP: 002b:00007f960beaf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 316.347882][T13995] RAX: ffffffffffffffda RBX: 00007f960b1b5fa0 RCX: 00007f960af8d5fc [ 316.347898][T13995] RDX: 000000000000000f RSI: 00007f960beaf0a0 RDI: 0000000000000004 [ 316.347911][T13995] RBP: 00007f960beaf090 R08: 0000000000000000 R09: 0000000000000000 [ 316.347924][T13995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 316.347936][T13995] R13: 00007f960b1b6038 R14: 00007f960b1b5fa0 R15: 00007ffd876408d8 [ 316.347972][T13995] [ 316.868678][T14006] IPVS: ip_vs_edit_dest(): server weight less than zero [ 316.875881][T11672] IPVS: starting estimator thread 0... [ 317.036988][T14015] IPVS: using max 26 ests per chain, 62400 per kthread [ 317.040032][T14021] netlink: 'syz.5.2254': attribute type 1 has an invalid length. [ 317.101771][T14022] netlink: 'syz.6.2256': attribute type 1 has an invalid length. [ 317.327184][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.375395][T14034] geneve2: entered promiscuous mode [ 317.391057][T14034] geneve2: entered allmulticast mode [ 317.473214][T14047] netlink: 'syz.9.2266': attribute type 1 has an invalid length. [ 317.491559][T14046] netlink: 'syz.9.2266': attribute type 1 has an invalid length. [ 317.824497][T14062] netlink: 'syz.5.2270': attribute type 4 has an invalid length. [ 318.014251][T14080] netlink: 'syz.8.2276': attribute type 1 has an invalid length. [ 318.070451][T14080] validate_nla: 30 callbacks suppressed [ 318.070474][T14080] netlink: 'syz.8.2276': attribute type 1 has an invalid length. [ 318.107109][T14080] netlink: 'syz.8.2276': attribute type 1 has an invalid length. [ 318.135514][T14080] netlink: 'syz.8.2276': attribute type 1 has an invalid length. [ 318.177723][T14080] netlink: 'syz.8.2276': attribute type 1 has an invalid length. [ 318.185823][T14080] netlink: 'syz.8.2276': attribute type 1 has an invalid length. [ 318.259303][T14080] netlink: 'syz.8.2276': attribute type 1 has an invalid length. [ 318.295037][T14080] netlink: 'syz.8.2276': attribute type 1 has an invalid length. [ 318.310636][T14080] netlink: 'syz.8.2276': attribute type 1 has an invalid length. [ 318.334560][T14080] netlink: 'syz.8.2276': attribute type 1 has an invalid length. [ 318.363155][T14080] netlink: 'syz.8.2276': attribute type 1 has an invalid length. [ 318.585904][T14100] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.637102][T14107] __nla_validate_parse: 81 callbacks suppressed [ 318.637124][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2283'. [ 318.713961][T14110] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2284'. [ 318.847919][T14100] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.958261][T14100] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.004790][T14112] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2285'. [ 319.105874][T14100] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.353280][T10840] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.404612][T10840] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.469119][ T999] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.491445][ T999] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.588430][T14141] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2293'. [ 319.876953][T14157] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 319.978030][T14161] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2298'. [ 320.211550][T14177] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2301'. [ 320.556310][T14198] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 321.040022][T14225] nftables ruleset with unbound set [ 321.424238][T14227] tipc: Started in network mode [ 321.435209][T14227] tipc: Node identity 522b6aee5bf2, cluster identity 4711 [ 321.454978][T14227] tipc: Enabled bearer , priority 0 [ 321.468184][T14230] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2317'. [ 321.529757][T14238] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2319'. [ 321.541734][T14239] syzkaller0: entered promiscuous mode [ 321.552813][T14230] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2317'. [ 321.559195][T14239] syzkaller0: entered allmulticast mode [ 321.593882][T14244] veth3: entered allmulticast mode [ 321.677902][T14226] tipc: Resetting bearer [ 321.740116][T14226] tipc: Disabling bearer [ 321.767471][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2322'. [ 321.876749][T14252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.099564][T14275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.619669][T14294] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 322.828814][T10843] tipc: Subscription rejected, illegal request [ 323.713736][T14350] team0: No ports can be present during mode change [ 323.946813][T14370] __nla_validate_parse: 11 callbacks suppressed [ 323.946834][T14370] netlink: 165 bytes leftover after parsing attributes in process `syz.7.2360'. [ 323.974561][T14370] Unsupported ieee802154 address type: 0 [ 323.990792][T14342] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 324.008240][T14369] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 324.010787][T14342] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 324.045109][T14365] syzkaller0: refused to change device tx_queue_len [ 324.093628][T14342] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 324.121367][T14382] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 324.134757][T14342] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 324.199456][T14342] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 324.205440][T14342] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 324.319317][T14342] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 324.332058][T14342] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 324.394619][T14342] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 324.415143][T14342] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 324.652644][T14414] validate_nla: 28 callbacks suppressed [ 324.652665][T14414] netlink: 'syz.7.2371': attribute type 1 has an invalid length. [ 324.687169][T14418] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2372'. [ 324.701826][T14418] netlink: 'syz.8.2372': attribute type 10 has an invalid length. [ 324.743611][T14418] bond0: (slave wlan1): Opening slave failed [ 324.763371][T14414] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2371'. [ 324.816708][T14420] netlink: 'syz.6.2373': attribute type 1 has an invalid length. [ 324.831085][T14420] syz.6.2373 uses old SIOCAX25GETINFO [ 325.043001][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2377'. [ 325.162389][T14436] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2378'. [ 325.203469][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2379'. [ 325.391480][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2383'. [ 325.474281][T14454] smc: adding net device bond0 with user defined pnetid SYZ2 [ 325.489621][T14454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.544330][T14460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.563283][T14460] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 325.585801][T14460] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 325.646082][T14471] netlink: 'syz.7.2388': attribute type 1 has an invalid length. [ 325.655078][T14471] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2388'. [ 325.667998][T14471] netlink: 'syz.7.2388': attribute type 1 has an invalid length. [ 325.799948][T14474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.010093][T14478] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 326.020777][T14488] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2393'. [ 326.072909][T14495] netlink: 'syz.6.2390': attribute type 11 has an invalid length. [ 326.081154][T14495] netlink: 'syz.6.2390': attribute type 11 has an invalid length. [ 326.089201][T14495] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2390'. [ 326.688001][T14516] netlink: 'syz.5.2400': attribute type 39 has an invalid length. [ 326.717540][T14516] 8021q: VLANs not supported on ipvlan0 [ 326.724855][T14518] netlink: 'syz.9.2401': attribute type 1 has an invalid length. [ 326.733602][T14519] netlink: 'syz.5.2400': attribute type 39 has an invalid length. [ 326.747369][T14520] 8021q: VLANs not supported on ipvlan0 [ 327.401412][T14572] tipc: Enabled bearer , priority 0 [ 327.409222][T14572] syzkaller0: entered promiscuous mode [ 327.414736][T14572] syzkaller0: entered allmulticast mode [ 327.456948][T14572] tipc: Resetting bearer [ 327.503192][T14570] tipc: Resetting bearer [ 327.575227][T14570] tipc: Disabling bearer [ 327.663834][T14582] netlink: 'syz.6.2420': attribute type 29 has an invalid length. [ 327.804968][T14592] batadv_slave_0: entered promiscuous mode [ 327.874162][T14591] batadv_slave_0: left promiscuous mode [ 328.177933][T14621] netlink: 'syz.5.2432': attribute type 1 has an invalid length. [ 329.594417][T14615] sit0: entered promiscuous mode [ 329.605198][T14615] __nla_validate_parse: 12 callbacks suppressed [ 329.605221][T14615] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2430'. [ 329.832198][T14634] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2436'. [ 330.084406][T14655] tipc: Enabled bearer , priority 0 [ 330.099741][T14655] syzkaller0: entered promiscuous mode [ 330.105461][T14655] syzkaller0: entered allmulticast mode [ 330.129901][T14655] tipc: Resetting bearer [ 330.170861][T14655] bond1: entered promiscuous mode [ 330.176118][T14655] bond1: entered allmulticast mode [ 330.182147][T14655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.315523][T14655] bond1 (unregistering): Released all slaves [ 330.382836][T14654] tipc: Resetting bearer [ 330.402077][T14654] tipc: Disabling bearer [ 330.748454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.928316][T14689] tipc: Started in network mode [ 330.945551][T14689] tipc: Node identity 2aa491931fe6, cluster identity 4711 [ 330.969318][T14689] tipc: Enabled bearer , priority 0 [ 331.000850][T14695] syzkaller0: entered promiscuous mode [ 331.041359][T14695] syzkaller0: entered allmulticast mode [ 331.054119][T14697] validate_nla: 1 callbacks suppressed [ 331.054139][T14697] netlink: 'syz.6.2454': attribute type 1 has an invalid length. [ 331.078358][T14697] tipc: Enabling of bearer rejected, media not registered [ 331.107276][T14689] tipc: Resetting bearer [ 331.125033][T14688] tipc: Resetting bearer [ 331.181324][T14688] tipc: Disabling bearer [ 331.216204][T14704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2456'. [ 331.553570][T14725] netlink: 'syz.9.2464': attribute type 12 has an invalid length. [ 331.561867][T14724] netlink: 576 bytes leftover after parsing attributes in process `syz.8.2462'. [ 331.584171][T14725] netlink: 'syz.9.2464': attribute type 29 has an invalid length. [ 331.602789][T14725] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2464'. [ 331.630970][T14735] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2466'. [ 331.631624][T14725] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2464'. [ 331.679627][T14725] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2464'. [ 331.712968][T14740] netlink: 'syz.5.2467': attribute type 8 has an invalid length. [ 331.722437][T14740] netlink: 'syz.5.2467': attribute type 2 has an invalid length. [ 331.730988][T14740] netlink: 'syz.5.2467': attribute type 3 has an invalid length. [ 331.931345][T14750] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2470'. [ 331.941434][T14750] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2470'. [ 332.277009][T14773] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 332.396790][T14781] netlink: 'syz.8.2480': attribute type 33 has an invalid length. [ 333.391594][T14834] openvswitch: netlink: Missing key (keys=40, expected=100) [ 333.455355][T14836] bond0: entered promiscuous mode [ 333.462741][T14836] bond_slave_0: entered promiscuous mode [ 333.472506][T14836] bond_slave_1: entered promiscuous mode [ 333.543271][T14837] 8021q: VLANs not supported on ip6_vti0 [ 333.591692][T14839] sctp: [Deprecated]: syz.8.2496 (pid 14839) Use of int in max_burst socket option. [ 333.591692][T14839] Use struct sctp_assoc_value instead [ 334.133411][T14864] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 334.174425][T14872] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 334.290133][T14879] netlink: 'syz.5.2507': attribute type 5 has an invalid length. [ 334.535285][T14896] netlink: 'syz.9.2513': attribute type 1 has an invalid length. [ 334.737555][T14909] __nla_validate_parse: 13 callbacks suppressed [ 334.737578][T14909] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2512'. [ 334.743312][T14906] rdma_op ffff88814d1ad1f0 conn xmit_rdma 0000000000000000 [ 334.931177][T14916] netlink: 'syz.9.2522': attribute type 1 has an invalid length. [ 334.991518][T14915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.044649][T14926] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2523'. [ 335.086828][T14916] 8021q: adding VLAN 0 to HW filter on device bond2 [ 335.170256][T14921] batman_adv: batadv0: Adding interface: team0 [ 335.182168][T14921] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.208196][T14921] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 335.334288][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2528'. [ 335.470358][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2530'. [ 335.620085][T14963] tipc: Invalid UDP bearer configuration [ 335.620145][T14963] tipc: Enabling of bearer rejected, failed to enable media [ 335.658742][T14965] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2535'. [ 335.668251][T14965] 0{X: renamed from gretap0 (while UP) [ 335.688290][T14965] 0{X: entered allmulticast mode [ 335.709575][T14965] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 335.927258][T14981] syzkaller1: entered promiscuous mode [ 335.934431][T14981] syzkaller1: entered allmulticast mode [ 335.975248][T14983] dvmrp1: entered allmulticast mode [ 336.251492][T14996] validate_nla: 3 callbacks suppressed [ 336.251516][T14996] netlink: 'syz.7.2544': attribute type 8 has an invalid length. [ 336.271178][T14996] : renamed from bridge_slave_0 (while UP) [ 336.669393][T15019] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2553'. [ 336.727411][T15019] netlink: 'syz.9.2553': attribute type 11 has an invalid length. [ 336.735293][T15019] netlink: 'syz.9.2553': attribute type 4 has an invalid length. [ 336.771007][T15019] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2553'. [ 336.834119][T15027] netlink: 'syz.8.2558': attribute type 13 has an invalid length. [ 336.870440][T15029] netlink: 'syz.6.2559': attribute type 22 has an invalid length. [ 336.886541][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2559'. [ 336.944576][ T1344] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.979354][ T1344] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.017146][ T1344] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.064459][ T1344] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.098777][T15035] tipc: Enabled bearer , priority 0 [ 337.160636][T15040] netlink: 1196 bytes leftover after parsing attributes in process `syz.6.2564'. [ 337.214053][T15035] syzkaller0: entered promiscuous mode [ 337.219706][T15035] syzkaller0: entered allmulticast mode [ 337.226163][T15035] tipc: Resetting bearer [ 337.240744][T15042] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2565'. [ 337.389878][T10843] tipc: Resetting bearer [ 337.401832][T15034] tipc: Resetting bearer [ 337.452407][T15057] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20001 [ 337.459405][T11680] IPVS: starting estimator thread 0... [ 337.475953][T15057] netlink: 'syz.5.2567': attribute type 1 has an invalid length. [ 337.484160][T15057] netlink: 'syz.5.2567': attribute type 1 has an invalid length. [ 337.570107][T15058] IPVS: using max 23 ests per chain, 55200 per kthread [ 338.109823][ T121] tipc: Node number set to 893555091 [ 338.836255][T15034] tipc: Disabling bearer [ 339.196704][T15077] Bluetooth: MGMT ver 1.23 [ 339.209661][T15078] IPVS: length: 61 != 8 [ 339.662992][T15109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.695837][T15082] nbd3: detected capacity change from 0 to 127 [ 339.714886][ T5876] block nbd3: Receive control failed (result -32) [ 339.879460][T15117] netlink: 'syz.6.2587': attribute type 29 has an invalid length. [ 339.896135][T15123] __nla_validate_parse: 7 callbacks suppressed [ 339.896157][T15123] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2589'. [ 339.921466][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2587'. [ 340.155096][T15144] "syz.6.2593" (15144) uses obsolete ecb(arc4) skcipher [ 340.347273][ T94] block nbd0: Possible stuck request ffff8880251c0000: control (read@0,4096B). Runtime 180 seconds [ 340.536664][T15166] netlink: 'syz.9.2599': attribute type 1 has an invalid length. [ 340.560942][T15166] netlink: 'syz.9.2599': attribute type 2 has an invalid length. [ 341.135290][T15197] netlink: 'syz.8.2613': attribute type 7 has an invalid length. [ 341.145884][T15197] netlink: 140 bytes leftover after parsing attributes in process `syz.8.2613'. [ 341.563762][T15216] bond0: entered promiscuous mode [ 341.580326][T15216] bond_slave_0: entered promiscuous mode [ 341.586299][T15216] bond_slave_1: entered promiscuous mode [ 341.621320][T15216] batadv0: entered promiscuous mode [ 341.686926][T15216] debugfs: 'hsr1' already exists in 'hsr' [ 341.719052][T15216] Cannot create hsr debugfs directory [ 341.725072][T15216] hsr1: entered allmulticast mode [ 341.786430][T15216] bond0: entered allmulticast mode [ 341.806985][T15216] bond_slave_0: entered allmulticast mode [ 341.814310][T15216] bond_slave_1: entered allmulticast mode [ 341.827723][T15216] batadv0: entered allmulticast mode [ 341.842926][T15216] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 341.865231][T15235] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 341.901028][T15216] bond0: left promiscuous mode [ 341.905959][T15216] bond_slave_0: left promiscuous mode [ 341.912678][T15216] bond_slave_1: left promiscuous mode [ 341.913546][T15235] netlink: 153028 bytes leftover after parsing attributes in process `syz.9.2622'. [ 341.939688][T15216] batadv0: left promiscuous mode [ 342.130720][T15243] netlink: 'syz.7.2625': attribute type 21 has an invalid length. [ 342.149604][T15243] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2625'. [ 342.183116][T15243] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2625'. [ 342.394027][T15263] netlink: 'syz.9.2631': attribute type 1 has an invalid length. [ 342.402247][T15263] netlink: 184 bytes leftover after parsing attributes in process `syz.9.2631'. [ 342.420629][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2629'. [ 342.429936][T15253] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2629'. [ 342.442938][T15253] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2629'. [ 342.452025][T15253] netlink: 'syz.7.2629': attribute type 3 has an invalid length. [ 342.465005][T15255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.928643][T15281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.514297][T15311] lo: entered promiscuous mode [ 343.538531][T15311] tunl0: entered promiscuous mode [ 343.565369][T15311] gre0: entered promiscuous mode [ 343.610426][T15311] gretap0: entered promiscuous mode [ 343.641426][T15311] erspan0: entered promiscuous mode [ 343.654918][T15311] ip_vti0: entered promiscuous mode [ 343.672468][T15316] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 343.746298][T15323] bond0: (slave bond_slave_1): Releasing backup interface [ 343.946013][T15329] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 343.972288][T15331] netlink: 'syz.8.2653': attribute type 21 has an invalid length. [ 344.006833][T15331] netlink: 'syz.8.2653': attribute type 22 has an invalid length. [ 344.014713][T15331] netlink: 'syz.8.2653': attribute type 23 has an invalid length. [ 344.063295][T15336] ieee802154 phy0 wpan0: encryption failed: -22 [ 344.066130][T15331] netlink: 'syz.8.2653': attribute type 25 has an invalid length. [ 344.075083][T15339] ieee802154 phy0 wpan0: encryption failed: -22 [ 344.518100][T15365] tipc: Enabled bearer , priority 10 [ 344.543323][T15366] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20004 [ 344.759620][T15382] batman_adv: batadv0: Adding interface: dummy0 [ 344.766028][T15382] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.803302][T15382] batman_adv: batadv0: Interface activated: dummy0 [ 344.900822][T15381] batadv0: mtu less than device minimum [ 344.931052][T15381] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.943675][T15381] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.955748][T15381] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.967851][T15381] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.979855][T15381] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.992199][T15381] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 345.004148][T15381] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 345.016096][T15381] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 345.028160][T15381] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 345.214445][T15397] netlink: 'syz.7.2674': attribute type 1 has an invalid length. [ 345.225347][T15398] __nla_validate_parse: 12 callbacks suppressed [ 345.225368][T15398] netlink: 92 bytes leftover after parsing attributes in process `syz.9.2675'. [ 345.761881][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2680'. [ 345.818814][T15424] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2680'. [ 345.879402][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2682'. [ 346.577647][T15470] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2698'. [ 346.615967][T15471] netlink: 'syz.5.2697': attribute type 10 has an invalid length. [ 346.624298][T15471] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2697'. [ 346.670026][T15471] team0: Port device geneve0 added [ 346.712915][T15470] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2698'. [ 346.770713][T15476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2699'. [ 346.795445][T15476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2699'. [ 346.813196][T15476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2699'. [ 347.294210][T15497] netlink: 'syz.5.2706': attribute type 1 has an invalid length. [ 348.545233][T15578] netlink: 'syz.9.2734': attribute type 12 has an invalid length. [ 349.017570][T15606] bond0: entered promiscuous mode [ 349.022816][T15606] bond_slave_0: entered promiscuous mode [ 349.050849][T15606] bridge_slave_1: entered promiscuous mode [ 349.072154][T15606] batadv0: entered promiscuous mode [ 349.090049][T15606] debugfs: 'hsr1' already exists in 'hsr' [ 349.097278][T15606] Cannot create hsr debugfs directory [ 349.103536][T15606] hsr1: entered allmulticast mode [ 349.108858][T15606] bond0: entered allmulticast mode [ 349.114012][T15606] bond_slave_0: entered allmulticast mode [ 349.120270][T15606] bridge_slave_1: entered allmulticast mode [ 349.128978][T15606] batadv0: entered allmulticast mode [ 349.130797][T15616] netlink: 'syz.7.2748': attribute type 1 has an invalid length. [ 349.135980][T15606] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 349.142916][T15616] netlink: 'syz.7.2748': attribute type 2 has an invalid length. [ 349.169383][T15606] bond0: left promiscuous mode [ 349.174284][T15606] bond_slave_0: left promiscuous mode [ 349.180275][T15606] bridge_slave_1: left promiscuous mode [ 349.190654][T15606] batadv0: left promiscuous mode [ 349.255402][T15619] tipc: Enabled bearer , priority 0 [ 349.353951][T15605] tipc: Disabling bearer [ 351.058498][T15640] erspan0: entered promiscuous mode [ 351.063794][T15640] erspan0: entered allmulticast mode [ 351.120873][T15649] tap0: tun_chr_ioctl cmd 1074025672 [ 351.135944][T15649] tap0: ignored: set checksum disabled [ 351.202548][T15652] __nla_validate_parse: 14 callbacks suppressed [ 351.202571][T15652] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2755'. [ 351.239545][T15654] net_ratelimit: 19 callbacks suppressed [ 351.239567][T15654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.447370][T15668] syzkaller1: entered promiscuous mode [ 351.459245][T15668] syzkaller1: entered allmulticast mode [ 351.521222][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2762'. [ 351.788528][T15691] netlink: 'syz.6.2767': attribute type 10 has an invalid length. [ 351.806847][T15691] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2767'. [ 351.840771][T15691] dummy0: entered promiscuous mode [ 351.848592][T15691] bridge0: port 3(dummy0) entered blocking state [ 351.877620][T15691] bridge0: port 3(dummy0) entered disabled state [ 351.884858][T15695] netlink: 'syz.6.2767': attribute type 1 has an invalid length. [ 351.893172][T15691] dummy0: entered allmulticast mode [ 351.901765][T15691] bridge0: port 3(dummy0) entered blocking state [ 351.908373][T15691] bridge0: port 3(dummy0) entered forwarding state [ 352.074147][T15704] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2770'. [ 352.131543][T15704] 0{X: renamed from gretap0 [ 352.183851][T15704] 0{X: left promiscuous mode [ 352.212727][T15704] 0{X: entered allmulticast mode [ 352.258600][T15704] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 352.418834][T15725] bridge_slave_0: left allmulticast mode [ 352.451690][T15725] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.522388][T15725] bridge_slave_1: left allmulticast mode [ 352.529967][T15725] bridge_slave_1: left promiscuous mode [ 352.535986][T15725] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.589421][T15725] team0: Port device team_slave_0 removed [ 352.616107][T15725] team0: Port device team_slave_1 removed [ 352.634225][T15725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.650373][T15725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.660498][T15725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.671017][T15725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.989732][T15755] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2787'. [ 353.035055][T15757] sctp: Trying to GSO but underlying device doesn't support it. [ 353.036745][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2786'. [ 353.063137][T15765] netlink: 'syz.7.2788': attribute type 11 has an invalid length. [ 353.087757][T15758] sctp: [Deprecated]: syz.9.2786 (pid 15758) Use of int in max_burst socket option. [ 353.087757][T15758] Use struct sctp_assoc_value instead [ 353.103603][T15768] sctp: [Deprecated]: syz.9.2786 (pid 15768) Use of int in max_burst socket option. [ 353.103603][T15768] Use struct sctp_assoc_value instead [ 353.189883][T15758] bond3 (unregistering): Released all slaves [ 353.258397][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2792'. [ 353.494852][T15783] netlink: 'syz.8.2795': attribute type 2 has an invalid length. [ 353.501416][T15787] netlink: 'syz.7.2796': attribute type 29 has an invalid length. [ 353.529789][T15787] netlink: 'syz.7.2796': attribute type 29 has an invalid length. [ 353.565443][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2795'. [ 353.574549][T15791] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 353.592571][T15791] netlink: 'syz.5.2797': attribute type 10 has an invalid length. [ 353.606819][T15794] netlink: 500 bytes leftover after parsing attributes in process `syz.7.2796'. [ 353.626010][T15791] mac80211_hwsim hwsim20 wlan1: left allmulticast mode [ 353.644856][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2797'. [ 353.927626][T15805] ieee802154 phy0 wpan0: encryption failed: -22 [ 353.994580][T15812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.992991][T15878] sctp: [Deprecated]: syz.5.2822 (pid 15878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.992991][T15878] Use struct sctp_sack_info instead [ 355.790690][T15906] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 356.067411][T15914] netlink: 'syz.8.2833': attribute type 1 has an invalid length. [ 356.368916][T15931] __nla_validate_parse: 24 callbacks suppressed [ 356.368939][T15931] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2840'. [ 356.524901][T15941] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2842'. [ 356.574356][T15942] netlink: 'syz.7.2843': attribute type 1 has an invalid length. [ 356.587512][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2843'. [ 356.760524][T15959] netlink: 165 bytes leftover after parsing attributes in process `syz.8.2847'. [ 357.006053][T15970] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 357.650328][T16002] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2861'. [ 357.685095][T16011] netlink: 360 bytes leftover after parsing attributes in process `syz.5.2862'. [ 357.705043][T16014] netlink: 22 bytes leftover after parsing attributes in process `syz.8.2863'. [ 357.715499][T16014] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 357.830962][T16017] netlink: 'syz.8.2864': attribute type 12 has an invalid length. [ 357.846915][T16017] netlink: 'syz.8.2864': attribute type 29 has an invalid length. [ 357.854788][T16017] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2864'. [ 357.892945][T16017] netlink: 59 bytes leftover after parsing attributes in process `syz.8.2864'. [ 357.914004][T16026] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2864'. [ 357.943567][T16026] netlink: 'syz.8.2864': attribute type 3 has an invalid length. [ 357.996076][T16017] bridge0: port 3(vlan2) entered blocking state [ 358.007255][T16017] bridge0: port 3(vlan2) entered disabled state [ 358.030630][T16017] vlan2: entered allmulticast mode [ 358.038879][T16017] bridge0: entered allmulticast mode [ 358.068075][T16017] vlan2: left allmulticast mode [ 358.077453][T16017] bridge0: left allmulticast mode [ 358.162017][T16034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.183256][T16023] tipc: Started in network mode [ 358.202920][T16023] tipc: Node identity 6ab8c392fa4, cluster identity 4711 [ 358.215397][T16023] tipc: Enabled bearer , priority 0 [ 358.240101][T16034] validate_nla: 1 callbacks suppressed [ 358.240120][T16034] netlink: 'syz.6.2868': attribute type 3 has an invalid length. [ 358.284518][T16018] tipc: Disabling bearer [ 358.334333][T16042] dummy0: entered promiscuous mode [ 358.345414][T16042] batadv_slave_1: entered promiscuous mode [ 358.356783][T16042] debugfs: 'hsr1' already exists in 'hsr' [ 358.362573][T16042] Cannot create hsr debugfs directory [ 358.391877][T16040] netlink: 'syz.6.2868': attribute type 64 has an invalid length. [ 358.466267][T16047] 8021q: VLANs not supported on ip_vti0 [ 365.947728][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.436755][ T94] block nbd0: Possible stuck request ffff8880251c0000: control (read@0,4096B). Runtime 210 seconds [ 373.626552][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.849837][T16064] __nla_validate_parse: 8 callbacks suppressed [ 373.849858][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2881'. [ 374.052963][T16077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2884'. [ 374.136677][T16085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2884'. [ 374.175211][T16083] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2887'. [ 374.271812][T16089] netlink: 'syz.9.2890': attribute type 9 has an invalid length. [ 374.286749][T16090] hsr0 speed is unknown, defaulting to 1000 [ 374.292803][T16090] hsr0 speed is unknown, defaulting to 1000 [ 374.299906][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2887'. [ 374.324878][T16090] hsr0 speed is unknown, defaulting to 1000 [ 374.336442][ T5974] IPVS: starting estimator thread 0... [ 374.402414][T16101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.455724][T16101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.476460][T16097] IPVS: using max 25 ests per chain, 60000 per kthread [ 374.512376][T16104] netlink: 'syz.7.2892': attribute type 4 has an invalid length. [ 374.524603][T16105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.525240][T16090] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 374.555098][T16101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.644871][T16101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.720813][T16101] batman_adv: batadv0: Removing interface: team0 [ 374.876188][T16090] hsr0 speed is unknown, defaulting to 1000 [ 374.937012][T16128] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2897'. [ 375.012185][T16090] hsr0 speed is unknown, defaulting to 1000 [ 375.064463][T16090] hsr0 speed is unknown, defaulting to 1000 [ 375.083940][T16090] hsr0 speed is unknown, defaulting to 1000 [ 375.091968][T16090] hsr0 speed is unknown, defaulting to 1000 [ 375.102646][T16090] hsr0 speed is unknown, defaulting to 1000 [ 375.110819][T16090] hsr0 speed is unknown, defaulting to 1000 [ 375.124745][T16090] hsr0 speed is unknown, defaulting to 1000 [ 375.217367][T16140] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.335005][T16149] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2904'. [ 375.349244][T16153] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2903'. [ 375.407667][T16147] can: request_module (can-proto-4) failed. [ 375.487429][T16154] 8021q: adding VLAN 0 to HW filter on device bond3 [ 375.602425][T16157] tipc: Enabling of bearer rejected, failed to enable media [ 375.810448][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2910'. [ 375.819994][T16165] netlink: 'syz.6.2910': attribute type 22 has an invalid length. [ 375.829730][T16165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2910'. [ 375.849523][T16165] netlink: 'syz.6.2910': attribute type 22 has an invalid length. [ 375.935911][T16172] tipc: Enabled bearer , priority 0 [ 375.994170][T16172] syzkaller0: entered promiscuous mode [ 376.004239][T16172] syzkaller0: entered allmulticast mode [ 376.086943][T16171] tipc: Resetting bearer [ 376.167360][T16171] tipc: Disabling bearer [ 376.421369][T16200] netlink: 'syz.8.2918': attribute type 13 has an invalid length. [ 376.464159][T16202] bridge0: port 3(vlan0) entered blocking state [ 376.470578][T16200] netlink: 'syz.8.2918': attribute type 58 has an invalid length. [ 376.490704][T16204] netlink: 'syz.8.2918': attribute type 1 has an invalid length. [ 376.497481][T16202] bridge0: port 3(vlan0) entered disabled state [ 376.539796][T16202] vlan0: entered allmulticast mode [ 376.554113][T16202] bridge0: entered allmulticast mode [ 376.581382][T16202] vlan0: left allmulticast mode [ 376.590216][T16202] bridge0: left allmulticast mode [ 376.694641][T16208] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 377.005552][T16228] netlink: 'syz.8.2927': attribute type 33 has an invalid length. [ 377.181949][T16231] dummy0 (unregistering): left promiscuous mode [ 377.217178][T16232] syzkaller1: entered promiscuous mode [ 377.225971][T16232] syzkaller1: entered allmulticast mode [ 377.397352][T16232] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.319216][T16290] delete_channel: no stack [ 378.415481][T16294] tipc: Started in network mode [ 378.430562][T16294] tipc: Node identity 4a62b1a3ae1b, cluster identity 4711 [ 378.443817][T16294] tipc: Enabled bearer , priority 0 [ 378.489524][T16296] syzkaller0: entered promiscuous mode [ 378.508057][T16296] syzkaller0: entered allmulticast mode [ 378.676616][T16294] tipc: Resetting bearer [ 378.732840][T16294] tipc: Disabling bearer [ 378.751575][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.785481][T16316] lo: left promiscuous mode [ 378.800545][T16316] tunl0: left promiscuous mode [ 378.807890][T16316] gre0: left promiscuous mode [ 378.832615][T16322] netlink: 'syz.8.2956': attribute type 1 has an invalid length. [ 378.845340][T16316] 0{X: left allmulticast mode [ 378.870078][T16316] erspan0: left promiscuous mode [ 378.891612][T16316] ip_vti0: left promiscuous mode [ 379.101591][T16316] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.109261][T16316] bridge0: port 1() entered disabled state [ 379.135005][T16316] bond0: left promiscuous mode [ 379.141104][T16316] bond_slave_0: left promiscuous mode [ 379.155419][T16316] bond_slave_1: left promiscuous mode [ 379.182547][T16316] batman_adv: batadv0: Interface deactivated: dummy0 [ 379.204978][T16316] batman_adv: batadv0: Removing interface: dummy0 [ 379.293672][T16316] : left allmulticast mode [ 379.301209][T16316] : left promiscuous mode [ 379.306044][T16316] bridge0: port 1() entered disabled state [ 379.353408][T16316] bridge_slave_1: left allmulticast mode [ 379.363957][T16316] bridge_slave_1: left promiscuous mode [ 379.383141][T16316] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.445354][T16316] bond0: (slave bond_slave_0): Releasing backup interface [ 379.494240][T16316] bond0: (slave bond_slave_1): Releasing backup interface [ 379.604390][T16316] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 379.639468][T16318] __nla_validate_parse: 22 callbacks suppressed [ 379.639489][T16318] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2956'. [ 379.712900][T16335] pim6reg1: entered promiscuous mode [ 379.718427][T16335] pim6reg1: entered allmulticast mode [ 379.986565][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2961'. [ 380.216598][T16372] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2968'. [ 380.452199][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2971'. [ 380.493034][T16381] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 380.577600][T16381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.581819][T16384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.691596][T16386] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2974'. [ 380.744066][T16388] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2976'. [ 380.878896][T16397] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2978'. [ 380.908103][T16400] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2978'. [ 380.941453][T16397] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2978'. [ 380.973183][T16400] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2978'. [ 381.200270][T16416] netlink: 'syz.6.2981': attribute type 1 has an invalid length. [ 381.447593][T16435] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 381.473289][T16435] netlink: zone id is out of range [ 381.494968][T16435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.744857][T16451] netlink: 'syz.9.2993': attribute type 1 has an invalid length. [ 381.753556][T16453] netlink: 'syz.8.2992': attribute type 8 has an invalid length. [ 381.893341][T16464] netlink: 'syz.9.2997': attribute type 1 has an invalid length. [ 382.053793][T16471] gretap0: entered promiscuous mode [ 382.078763][T16471] bond4: (slave gretap0): making interface the new active one [ 382.097928][T16471] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 382.357686][T16490] smc: net device bond0 applied user defined pnetid SYZ2 [ 382.376185][T16499] netlink: 'syz.9.3007': attribute type 2 has an invalid length. [ 382.448292][T16502] netlink: 'syz.9.3007': attribute type 2 has an invalid length. [ 382.496558][T16490] smc: removing net device bond0 with user defined pnetid SYZ2 [ 382.515140][T16490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.541507][T16490] bond_slave_0: left allmulticast mode [ 382.573459][T16490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.585718][T16490] bond_slave_1: left allmulticast mode [ 382.613705][T16490] bond0 (unregistering): Released all slaves [ 382.850489][T16521] tipc: Started in network mode [ 382.855756][T16521] tipc: Node identity , cluster identity 4711 [ 382.865337][T16521] tipc: Failed to obtain node identity [ 382.875551][T16521] tipc: Enabling of bearer rejected, failed to enable media [ 382.887137][T16524] sctp: [Deprecated]: syz.9.3013 (pid 16524) Use of int in max_burst socket option. [ 382.887137][T16524] Use struct sctp_assoc_value instead [ 383.163702][T16539] netlink: zone id is out of range [ 383.172908][T16539] netlink: get zone limit has 8 unknown bytes [ 383.210432][T16543] netlink: 'syz.5.3020': attribute type 2 has an invalid length. [ 383.249913][T16543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.272265][T16543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.363256][T16543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.373079][T16543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.461391][T16552] tipc: Enabled bearer , priority 0 [ 383.485090][T16552] syzkaller0: entered promiscuous mode [ 383.507281][T16552] syzkaller0: entered allmulticast mode [ 383.579042][T16552] tipc: Resetting bearer [ 383.679555][T16549] tipc: Resetting bearer [ 383.705428][T16570] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 383.735238][T16549] tipc: Disabling bearer [ 384.393969][T16621] netlink: 'syz.8.3039': attribute type 11 has an invalid length. [ 384.422867][T16621] netlink: 'syz.8.3039': attribute type 4 has an invalid length. [ 384.454222][T16625] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 384.695872][T16642] delete_channel: no stack [ 384.738837][T16644] __nla_validate_parse: 15 callbacks suppressed [ 384.738858][T16644] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3046'. [ 384.814850][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3046'. [ 384.865231][T16644] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3046'. [ 384.885064][T16653] netlink: 277 bytes leftover after parsing attributes in process `syz.8.3050'. [ 385.124679][T16668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.264526][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3056'. [ 385.348345][T16679] tipc: Enabled bearer , priority 0 [ 385.382909][T16679] syzkaller0: entered promiscuous mode [ 385.396508][T16679] syzkaller0: entered allmulticast mode [ 385.482365][T16683] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 385.495417][T16679] tipc: Resetting bearer [ 385.522912][T16678] tipc: Resetting bearer [ 385.539053][T16678] tipc: Disabling bearer [ 385.557045][T16686] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3062'. [ 385.669710][T16689] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3063'. [ 385.813151][T16703] pimreg: entered allmulticast mode [ 385.927752][T16709] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 385.987449][T16713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3071'. [ 386.207785][T16726] netlink: 208 bytes leftover after parsing attributes in process `syz.9.3074'. [ 386.234515][T16726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.387148][T16735] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 386.492408][T16747] syz.9.3079 (16747) used obsolete PPPIOCDETACH ioctl [ 386.583228][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3079'. [ 386.790522][T16767] netlink: 'syz.6.3086': attribute type 11 has an invalid length. [ 386.992835][T16780] sctp: [Deprecated]: syz.5.3091 (pid 16780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.992835][T16780] Use struct sctp_sack_info instead [ 387.392946][T16807] veth1_macvtap: left promiscuous mode [ 387.509589][T16813] [ 387.511982][T16813] ====================================================== [ 387.519111][T16813] WARNING: possible circular locking dependency detected [ 387.526170][T16813] syzkaller #0 Not tainted [ 387.530644][T16813] ------------------------------------------------------ [ 387.537681][T16813] syz.6.3102/16813 is trying to acquire lock: [ 387.543772][T16813] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 387.553143][T16813] [ 387.553143][T16813] but task is already holding lock: [ 387.560540][T16813] ffff888031a56770 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 387.569915][T16813] [ 387.569915][T16813] which lock already depends on the new lock. [ 387.569915][T16813] [ 387.580327][T16813] [ 387.580327][T16813] the existing dependency chain (in reverse order) is: [ 387.589521][T16813] [ 387.589521][T16813] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 387.597588][T16813] lock_acquire+0x120/0x360 [ 387.602657][T16813] _raw_spin_lock_bh+0x36/0x50 [ 387.607957][T16813] nr_rt_device_down+0x12a/0x720 [ 387.613443][T16813] nr_device_event+0x137/0x150 [ 387.618748][T16813] notifier_call_chain+0x1b3/0x3e0 [ 387.624388][T16813] netif_close_many+0x29c/0x410 [ 387.629772][T16813] netif_close+0x158/0x210 [ 387.634735][T16813] dev_close+0x10a/0x220 [ 387.639511][T16813] bpq_device_event+0x377/0x6a0 [ 387.644897][T16813] notifier_call_chain+0x1b3/0x3e0 [ 387.650555][T16813] netif_close_many+0x29c/0x410 [ 387.655941][T16813] netif_close+0x158/0x210 [ 387.660890][T16813] dev_close+0x10a/0x220 [ 387.665669][T16813] bond_setup_by_slave+0x5f/0x3f0 [ 387.671233][T16813] bond_enslave+0x7a0/0x3a20 [ 387.676351][T16813] bond_do_ioctl+0x635/0x9b0 [ 387.681496][T16813] bond_siocdevprivate+0x17e/0x350 [ 387.687143][T16813] dev_ifsioc+0xb57/0xf00 [ 387.692002][T16813] dev_ioctl+0x84c/0x1150 [ 387.696948][T16813] sock_ioctl+0x719/0x790 [ 387.701804][T16813] __se_sys_ioctl+0xfc/0x170 [ 387.706922][T16813] do_syscall_64+0xfa/0x3b0 [ 387.711960][T16813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.718396][T16813] [ 387.718396][T16813] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 387.726232][T16813] lock_acquire+0x120/0x360 [ 387.731360][T16813] _raw_spin_lock_bh+0x36/0x50 [ 387.736679][T16813] nr_rt_device_down+0xa9/0x720 [ 387.742060][T16813] nr_device_event+0x137/0x150 [ 387.747349][T16813] notifier_call_chain+0x1b3/0x3e0 [ 387.752986][T16813] netif_close_many+0x29c/0x410 [ 387.758459][T16813] netif_close+0x158/0x210 [ 387.763405][T16813] dev_close+0x10a/0x220 [ 387.768184][T16813] bpq_device_event+0x377/0x6a0 [ 387.773577][T16813] notifier_call_chain+0x1b3/0x3e0 [ 387.779224][T16813] netif_close_many+0x29c/0x410 [ 387.784633][T16813] netif_close+0x158/0x210 [ 387.789584][T16813] dev_close+0x10a/0x220 [ 387.794360][T16813] bond_setup_by_slave+0x5f/0x3f0 [ 387.799923][T16813] bond_enslave+0x7a0/0x3a20 [ 387.805044][T16813] bond_do_ioctl+0x635/0x9b0 [ 387.810209][T16813] bond_siocdevprivate+0x17e/0x350 [ 387.815942][T16813] dev_ifsioc+0xb57/0xf00 [ 387.820805][T16813] dev_ioctl+0x84c/0x1150 [ 387.825680][T16813] sock_ioctl+0x719/0x790 [ 387.830560][T16813] __se_sys_ioctl+0xfc/0x170 [ 387.835695][T16813] do_syscall_64+0xfa/0x3b0 [ 387.840751][T16813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.847188][T16813] [ 387.847188][T16813] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 387.855125][T16813] validate_chain+0xb9b/0x2140 [ 387.860458][T16813] __lock_acquire+0xab9/0xd20 [ 387.866140][T16813] lock_acquire+0x120/0x360 [ 387.871202][T16813] _raw_spin_lock_bh+0x36/0x50 [ 387.876517][T16813] nr_remove_neigh+0x25/0xe0 [ 387.881659][T16813] nr_add_node+0x1d9f/0x2570 [ 387.886793][T16813] nr_rt_ioctl+0xc12/0xd50 [ 387.891758][T16813] sock_do_ioctl+0xd9/0x300 [ 387.896808][T16813] sock_ioctl+0x576/0x790 [ 387.901682][T16813] __se_sys_ioctl+0xfc/0x170 [ 387.906811][T16813] do_syscall_64+0xfa/0x3b0 [ 387.911853][T16813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.918274][T16813] [ 387.918274][T16813] other info that might help us debug this: [ 387.918274][T16813] [ 387.928503][T16813] Chain exists of: [ 387.928503][T16813] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 387.928503][T16813] [ 387.942334][T16813] Possible unsafe locking scenario: [ 387.942334][T16813] [ 387.949789][T16813] CPU0 CPU1 [ 387.955164][T16813] ---- ---- [ 387.960531][T16813] lock(&nr_node->node_lock); [ 387.965306][T16813] lock(nr_node_list_lock); [ 387.972595][T16813] lock(&nr_node->node_lock); [ 387.979884][T16813] lock(nr_neigh_list_lock); [ 387.984574][T16813] [ 387.984574][T16813] *** DEADLOCK *** [ 387.984574][T16813] [ 387.992731][T16813] 1 lock held by syz.6.3102/16813: [ 387.997927][T16813] #0: ffff888031a56770 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 388.007698][T16813] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 388.007698][T16813] stack backtrace: [ 388.014237][T16813] CPU: 0 UID: 0 PID: 16813 Comm: syz.6.3102 Not tainted syzkaller #0 PREEMPT(full) [ 388.014261][T16813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.014277][T16813] Call Trace: [ 388.014286][T16813] [ 388.014295][T16813] dump_stack_lvl+0x189/0x250 [ 388.014321][T16813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.014343][T16813] ? __pfx__printk+0x10/0x10 [ 388.014367][T16813] ? stack_trace_save+0x9c/0xe0 [ 388.014394][T16813] print_circular_bug+0x2ee/0x310 [ 388.014415][T16813] check_noncircular+0x134/0x160 [ 388.014443][T16813] validate_chain+0xb9b/0x2140 [ 388.014461][T16813] ? do_syscall_64+0xfa/0x3b0 [ 388.014498][T16813] __lock_acquire+0xab9/0xd20 [ 388.014527][T16813] ? nr_remove_neigh+0x25/0xe0 [ 388.014550][T16813] lock_acquire+0x120/0x360 [ 388.014575][T16813] ? nr_remove_neigh+0x25/0xe0 [ 388.014601][T16813] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 388.014623][T16813] ? nr_remove_neigh+0x25/0xe0 [ 388.014646][T16813] _raw_spin_lock_bh+0x36/0x50 [ 388.014668][T16813] ? nr_remove_neigh+0x25/0xe0 [ 388.014691][T16813] nr_remove_neigh+0x25/0xe0 [ 388.014715][T16813] nr_add_node+0x1d9f/0x2570 [ 388.014738][T16813] ? dev_get_by_name+0x21/0x200 [ 388.014758][T16813] ? dev_get_by_name+0x21/0x200 [ 388.014777][T16813] ? dev_get_by_name+0x21/0x200 [ 388.014795][T16813] ? nr_call_to_digi+0x136/0x1b0 [ 388.014817][T16813] nr_rt_ioctl+0xc12/0xd50 [ 388.014842][T16813] ? kasan_quarantine_put+0xdd/0x220 [ 388.014865][T16813] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 388.014891][T16813] ? apparmor_capable+0x137/0x1b0 [ 388.014916][T16813] ? capable+0x89/0xe0 [ 388.014933][T16813] ? nr_ioctl+0x1b1/0x3b0 [ 388.014950][T16813] sock_do_ioctl+0xd9/0x300 [ 388.014973][T16813] ? __pfx_sock_do_ioctl+0x10/0x10 [ 388.014994][T16813] ? __lock_acquire+0xab9/0xd20 [ 388.015027][T16813] sock_ioctl+0x576/0x790 [ 388.015048][T16813] ? __pfx_sock_ioctl+0x10/0x10 [ 388.015068][T16813] ? __fget_files+0x2a/0x420 [ 388.015095][T16813] ? __fget_files+0x3a0/0x420 [ 388.015122][T16813] ? __fget_files+0x2a/0x420 [ 388.015165][T16813] ? bpf_lsm_file_ioctl+0x9/0x20 [ 388.015188][T16813] ? __pfx_sock_ioctl+0x10/0x10 [ 388.015209][T16813] __se_sys_ioctl+0xfc/0x170 [ 388.015232][T16813] do_syscall_64+0xfa/0x3b0 [ 388.015257][T16813] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.015281][T16813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.015298][T16813] ? clear_bhb_loop+0x60/0xb0 [ 388.015318][T16813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.015341][T16813] RIP: 0033:0x7f960af8ebe9 [ 388.015358][T16813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.015375][T16813] RSP: 002b:00007f960beaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.015393][T16813] RAX: ffffffffffffffda RBX: 00007f960b1b5fa0 RCX: 00007f960af8ebe9 [ 388.015407][T16813] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000006 [ 388.015419][T16813] RBP: 00007f960b011e19 R08: 0000000000000000 R09: 0000000000000000 [ 388.015430][T16813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.015447][T16813] R13: 00007f960b1b6038 R14: 00007f960b1b5fa0 R15: 00007ffd876408d8 [ 388.015468][T16813] [ 389.021335][ T1344] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.119692][ T1344] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.176662][ T1344] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.229926][ T1344] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.308365][ T1344] bridge_slave_1: left allmulticast mode [ 389.314054][ T1344] bridge_slave_1: left promiscuous mode [ 389.320037][ T1344] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.330387][ T1344] bridge_slave_0: left allmulticast mode [ 389.336069][ T1344] bridge_slave_0: left promiscuous mode [ 389.342144][ T1344] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.492907][ T1344] dvmrp1 (unregistering): left allmulticast mode [ 389.731886][ T1344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.741073][ T1344] bond_slave_0: left allmulticast mode [ 389.748149][ T1344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.758814][ T1344] bond_slave_1: left allmulticast mode [ 389.765262][ T1344] bond0 (unregistering): Released all slaves [ 389.812489][ T1344] tipc: Left network mode [ 389.946492][ T1344] batadv_slave_1: left promiscuous mode [ 389.955552][ T1344] hsr_slave_0: left promiscuous mode [ 389.961640][ T1344] hsr_slave_1: left promiscuous mode [ 389.970052][ T1344] veth1_vlan: left promiscuous mode [ 389.975325][ T1344] veth0_vlan: left promiscuous mode [ 390.022530][ T1344] pimreg (unregistering): left allmulticast mode [ 390.164482][ T1344] team0 (unregistering): Port device team_slave_1 removed [ 390.189015][ T1344] team0 (unregistering): Port device team_slave_0 removed [ 390.359411][T11662] hsr0 speed is unknown, defaulting to 1000 [ 390.365348][T11662] infiniband syz1: ib_query_port failed (-19) [ 390.649918][ T1344] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.727836][ T1344] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.798384][ T1344] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.866771][ T1344] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.040120][ T1344] bond4 (unregistering): (slave gretap0): Releasing active interface [ 391.482036][ T1344] smc: removing net device bond0 with user defined pnetid SYZ2 [ 391.490161][ T1344] bond0 (unregistering): Released all slaves [ 391.586256][ T1344] bond1 (unregistering): Released all slaves [ 391.675657][ T1344] bond2 (unregistering): Released all slaves [ 391.772591][ T1344] bond3 (unregistering): Released all slaves [ 391.783107][ T1344] bond4 (unregistering): Released all slaves [ 391.854182][ T1344] tipc: Left network mode [ 392.049334][ T1344] hsr_slave_0: left promiscuous mode [ 392.055200][ T1344] hsr_slave_1: left promiscuous mode [ 392.064072][ T1344] veth1_macvtap: left promiscuous mode [ 392.069762][ T1344] veth0_macvtap: left promiscuous mode [ 392.075391][ T1344] veth1_vlan: left promiscuous mode [ 392.081453][ T1344] veth0_vlan: left promiscuous mode