last executing test programs: 3m9.514316626s ago: executing program 2 (id=1374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="34c8f274aff6af0f7e3a4866417049bd4d3ea7d63668f29e00741c9c43fdcf7b67852fe838dda4285fb078c739adc5d256b71fecad5b15b7f4a6fbea8324b11f8bcf9ac9021427c909719b89144206f1734d4e087cdfb055333bf830720c7de9d17bc49379c06366359f89ac7f94d2d05f", 0x71}, {&(0x7f0000000080)="9a950d049eb4c0398a492bcdae7c06fe", 0x10}, {&(0x7f00000000c0)="1f093496c2b17e2837a4de991d48a6daea471d6bba2cdadc9b6115540ad1c526521f7eeecb2f498727347c1b1088a947e23ea0830fa42219008b81f64ab7af31a190f23c6b0f7b275988f67d7a821332216689c28fe4e9c840b797c3f63c47d926523d85d77b7869e884a2fa743e628eafd9ecf3c267753b3fbe3359dae0093e00a345b3ac", 0x85}], 0x3, &(0x7f00000001c0)=[{0x80, 0x84, 0x8, "00b804dada4fdf4262ca60027964b8c3a7b457ee63d528494eaf003308810f26ee9952f180ff9426ece6776b37ff39e9aca18bdec7c5ef545c1df424754189e8fcd7961ca87ebb8ca054713fd0a78099db2ea5c6639a56e2a3a8e40350b6ea57e94b8278ebca529930987544"}, {0x38, 0x1, 0xfffffff2, "809dd0e84bbb95b3837fc32a57aa1ed54c91f5b6dd9230ed74e0b13808c94a737f7affd7122599"}], 0xb8}, 0x1) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x148, 0x6, 0x4, 0x70bd26, 0x25dfdbfd, {0x20}, [@typed={0x4}, @typed={0x8, 0x93, 0x0, 0x0, @pid=r2}, @generic, @nested={0x120, 0xfa, 0x0, 0x1, [@nested={0x4, 0x149}, @generic="8c0d7e525a661e95593956d8db191cd9e65fd521f64ec2c71b5a2a5fad4373aa18357539f9b746d0cdebd485bfc3306219066566cbfa34778ad9316fa7f4b67772a296de01db118be0c2a878169bd0b0842f3dbe2109b91c46d05affa3a46aed5d04d6240772d0f083b2f8b2542c303c98c1c91bcaf76dddc971a50b11cd291ee7ec2e22d9440f07f93b633d48c52370fe355c293cef59aaa63d5c812061b9b61597009c7bc5cb830e6a2dbf34c271a24e0ab83c92fe15b06efd67679a9f2daa618452d433876ae0f9b272c90debe1e77ff4b2122e571bd98586572eb44bebdb7deb98", @generic="8fa1d8827fbb4fd60c342f10f475fdd25857ccca3258aad89bc9fa1167", @nested={0x4, 0x155}, @nested={0x4, 0x7c}, @nested={0x4, 0xcc}, @typed={0x4, 0x12e}, @typed={0x8, 0x25, 0x0, 0x0, @uid=r3}]}, @generic, @typed={0x8, 0xdd, 0x0, 0x0, @ipv4=@multicast1}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000020}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa8, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000900)={r1, &(0x7f0000000800)='\x00', 0x204621, &(0x7f0000000840)={@_ha_fsid={[0x9, 0x7f]}, {0x5, 0x6, 0xa, 0x6}}, 0x7fffffff, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x1}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf}, @ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xc}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xf}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5d}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8b}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x200000d1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r4) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x50, r7, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x7, 0x24, [{0x2}, {0x3}, {0x3}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}], @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000803}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, r7, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x24000001) syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), r4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x140, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x57e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff0001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x200000d4}, 0x4000) ioctl$XFS_IOC_FSGEOMETRY_V1(r8, 0x80705864, &(0x7f0000000f40)) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0x90, 0x0, 0x1, 0x994d8f3f5605252, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7c6fcc18}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xf10}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1ff}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001180), r4) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0), r1) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, r10, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x714}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008001}, 0x40) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_AP(r11, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x20, r7, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x60}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000001500)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}, 0xc) poll(&(0x7f0000001540)=[{r11, 0x2000}], 0x1, 0x5) r12 = accept4$packet(r6, &(0x7f0000001580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000015c0)=0x14, 0x80400) getsockopt$IP_SET_OP_GET_FNAME(r12, 0x1, 0x53, &(0x7f0000001600)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000001640)=0x2c) 3m9.26793287s ago: executing program 2 (id=1377): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x2, 0x3, 0x8, 0x4}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x5f, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000100000c02000000000000000100000d00000000000000000000000000005f"], 0x0, 0x3c, 0x0, 0x0, 0x3}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x49}, @TCA_IFE_METALST={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000001000000950000000000000089e77f8ebcaddbfc4a227578d1cb976ecc68c344d8ff40ff622e0468de3e8635b575a60c2f52f68a3d09ae0786d54b8566432a45477d69e5253bd7789fc72a4a0a98dffafe6f807759dad9dd8a388bd108b1a1193dfad8076886fe0696fae3d18be4f67b3c32efec1fa3716b5081948eaa4462801032f5629435a871d5f4ed206bc04fb1cfebcaa01f15abc5266dfe125c3159992515f536b9c9108988abdea6df3dbb4d8a8998bdd76dea"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 3m8.882797591s ago: executing program 2 (id=1385): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x8, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x6a, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @empty}}}}) 3m8.716962785s ago: executing program 2 (id=1387): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514240cc008001900030002000600090000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000038f030000000000fe02001085000000b900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000000380)={r2}) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000080)=0x2, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) (async) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}], 0x1c) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x80, 0xae, 0x6}, [@NDA_LLADDR={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) close(r2) (async) close(r2) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={r0, &(0x7f0000000000)='geneve\x00', 0x208000, &(0x7f0000000040)={@_ha_fsid={[0xa6, 0x9a8]}, {0xa, 0x9, 0x8, 0x2}}, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0xffffff0f}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={r0, &(0x7f0000000000)='geneve\x00', 0x208000, &(0x7f0000000040)={@_ha_fsid={[0xa6, 0x9a8]}, {0xa, 0x9, 0x8, 0x2}}, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0xffffff0f}) ioctl$SIOCGETNODEID(r8, 0x89e1, &(0x7f0000000240)={0x4}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="9420010000000000280012800b000100674d6e657625c3ff6f52070a7700060008000200ac1414aa0800010000000000"], 0x48}}, 0x20000050) 3m8.424581084s ago: executing program 2 (id=1390): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x38, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000b00)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m8.263488452s ago: executing program 2 (id=1394): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m53.189750061s ago: executing program 32 (id=1394): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m58.49944288s ago: executing program 4 (id=2130): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e34, @local}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}]}, &(0x7f0000000380)=0x10) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7, 0x1}, &(0x7f00000000c0)=0x8) clock_gettime(0x7, &(0x7f0000000100)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000000580)=0xe8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) sendmmsg$inet(r10, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x4e21, 0x9, 0x4e22, 0x0, 0x2, 0x0, 0x80, 0x5c, r5, r9}, {0x4, 0x8, 0xffff, 0x41, 0xff, 0x0, 0x8, 0x80000001}, {0xc0b1, 0x3, 0x2, 0x59d}, 0x40f8dabf, 0x6e6bb4, 0x0, 0x2, 0x3, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d4, 0x6c}, 0xbf1b208918be370, @in=@rand_addr=0x64010101, 0x34ff, 0x2, 0x1, 0x2, 0x6, 0x101, 0x9934}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r5, @ANYRES8=r8], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r11, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) 1m57.484610656s ago: executing program 4 (id=2139): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}], 0x2}, 0x2000) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1, &(0x7f0000000200)=""/125, 0x7d}, 0x6}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000000480)=""/215, 0xd7}, {&(0x7f0000000780)=""/236, 0xec}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/58, 0x3a}, {&(0x7f0000000700)=""/17, 0x11}, {&(0x7f0000000740)=""/46, 0x2e}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x7, &(0x7f0000000280)=""/27, 0x1b}, 0xff}], 0x2, 0x20, &(0x7f0000003840)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$sock(r4, &(0x7f0000005a80)=[{{&(0x7f0000000940)=@hci={0x1f, 0x4}, 0x80, &(0x7f0000001e00)=[{&(0x7f00000009c0)="08c70534087ab26885d776c313b95a4a78cc5fd69840e13c9889bb2cc9914e45f3e93647bfb1ae3ebcc99d147f1a0eb089ade5e510989e15b11746bd56612ef157c48a734d56f53ac322890ebfa412a8658495e5dc9fa572ea6b1fb818a6f75ea85ddd19b0c56c", 0x67}, {&(0x7f0000000ac0)="a9451a6110e6509d9bbc70ba4138157b437b538e8cdb87eb0a", 0x19}], 0x2}}], 0x1, 0x4818) sendmmsg$inet(r3, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="169381", 0x3}], 0x1}}], 0x1, 0x48c4) sendmmsg$inet6(r1, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffd}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 1m56.487848842s ago: executing program 4 (id=2150): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000800000300697036746e6c300000000000000000001c0012800b000100697036746e6c00ed0c00028006000f0000001f00"], 0x50}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xfffffffc}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x1, 0x5, 0x801}, 0x14}}, 0x0) ioctl(r2, 0x8b22, &(0x7f0000000040)) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000010000008018310000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(r1) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$l2tp6(0xa, 0x2, 0x73) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r9, 0x6, 0x2, 0x0, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000000200)=0x80000000, 0x4) (async) setsockopt$inet6_int(r8, 0x29, 0x38, 0x0, 0x0) bind$l2tp6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) (async) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600110d0000000000000000030000000000000008000a00fe03ffff"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, r6, 0x400, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x77}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xcb5d}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x400}]}, 0x38}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 1m56.332131044s ago: executing program 4 (id=2153): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000800000040"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$NS_GET_PARENT(r1, 0x8004b709, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1m56.185875008s ago: executing program 4 (id=2156): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) 1m55.790526052s ago: executing program 4 (id=2161): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000100), &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000020000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0x0, 0xff0000ff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xffffff], 'vlan0\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x20, 0x0, 0x64}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], [0xff, 0xffffff00], 'batadv0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0xf9, 0x0, 0x8}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x20}, {0x2, 0x4, 0x0, [0x4, 0xff80, 0xeb81, 0x6, 0x0, 0x6858, 0x7, 0x4, 0xb3, 0x6, 0x0, 0x3, 0x8, 0xfbe, 0x6, 0xbe8], 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@local, @private0, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0xffffffff], 'ip6tnl0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x33, 0x50, 0x5, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x1ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0xb0, 0x0, 0x0, 0x5, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0xa, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x71, 0x1, [{0x0, 0xc, "00fcba8c599d2a81fb52"}, {0x0, 0x9, "789607671442eb"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x2, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x5, 0xa, "6580a9e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f4696706000000a95e"}]}, @timestamp_addr={0x44, 0xc, 0xdf, 0x1, 0x5, [{@multicast1, 0x8}]}]}}}}}}}, 0x0) 1m40.561064713s ago: executing program 33 (id=2161): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000100), &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000020000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0x0, 0xff0000ff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xffffff], 'vlan0\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x20, 0x0, 0x64}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], [0xff, 0xffffff00], 'batadv0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0xf9, 0x0, 0x8}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x20}, {0x2, 0x4, 0x0, [0x4, 0xff80, 0xeb81, 0x6, 0x0, 0x6858, 0x7, 0x4, 0xb3, 0x6, 0x0, 0x3, 0x8, 0xfbe, 0x6, 0xbe8], 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@local, @private0, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0xffffffff], 'ip6tnl0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x33, 0x50, 0x5, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x1ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0xb0, 0x0, 0x0, 0x5, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0xa, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x71, 0x1, [{0x0, 0xc, "00fcba8c599d2a81fb52"}, {0x0, 0x9, "789607671442eb"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x2, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x5, 0xa, "6580a9e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f4696706000000a95e"}]}, @timestamp_addr={0x44, 0xc, 0xdf, 0x1, 0x5, [{@multicast1, 0x8}]}]}}}}}}}, 0x0) 1m30.510636153s ago: executing program 0 (id=2448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="90000000000109000000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008060000ac1414bb0c000280cc92a9b925e1c29d43050001aba5090d6cca16c140000000001c000f800800034000000001080003400000000008004b0d0b39ed408f600c4000000003afa1f890f845df3b0e7a8f2f534b943938215d7ee79fd4d9fe0589"], 0x90}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) getpeername$packet(r3, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000011c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000001280)={&(0x7f0000001140), 0xc, &(0x7f0000001240)={&(0x7f0000001200)=@newqdisc={0x2c, 0x24, 0x800, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x4, 0xb}, {0x2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x10, 0xf}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14000894}, 0x20044841) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000012c0), 0x200, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff000000007110ac000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) r7 = accept4$phonet_pipe(r3, &(0x7f0000001040), &(0x7f00000010c0)=0x10, 0xc0400) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000001100)) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r9, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) 1m30.246707392s ago: executing program 0 (id=2449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept(r0, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000200)='N\f~', &(0x7f0000000240)=@buf="8cb284f542fa8f4c01503bab171c41af16e1f298016b8b4fd74b14627e5c2c4de42533952e06c2a7a6cb0768876c718a23369ead86cfd38437584b35565edee27c8bba1af812a8531a28d95740dfdd566abd0ef09f1a3b171c8c000216b17a19d71337eb6bea00feeb63f4e0f5206d906dafd48e60ab6b44fa20922bfd8529e16f07c863067a8c8cf182f9c5acc1e5b8e44db7a692db3af11b6cfcd4367127781e5edcb85800af976f60b802906f5847da3bb2216f300da3113ef7ab280ce6d53ef436306ff6b6792c8e607601bb2e42a9232796d87235a3ec", 0x4}, 0x20) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x220, 0x110, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000380), {[{{@arp={@multicast2, @dev={0xac, 0x14, 0x14, 0x2}, 0xff, 0xff, 0x9, 0xb, {@mac=@multicast, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xf, 0x7, 0x2, 0x822, 0x8, 0x3, 'team0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x0, 0x90}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@local, @dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x42}, 0x8, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x0, 0xffffff00, 0x0, 0x9, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x7ff, 0xf, 0x8d44, 0x0, 0x664, 0x53, 'veth1_virt_wifi\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x0, 0x9a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0xe}, @remote, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000840)={0x1, 'ip6_vti0\x00', {}, 0x4}) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000880)=""/63, 0x3f}, {&(0x7f00000008c0)=""/203, 0xcb}, {&(0x7f00000009c0)=""/195, 0xc3}, {&(0x7f0000000ac0)=""/237, 0xed}, {&(0x7f0000000bc0)=""/118, 0x76}, {&(0x7f0000000c40)=""/77, 0x4d}, {&(0x7f0000000cc0)=""/149, 0x95}], 0x7, &(0x7f0000000e00)=""/104, 0x68}, 0x7}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e80)=""/169, 0xa9}], 0x1, &(0x7f0000000f80)=""/6, 0x6}, 0x7ff}, {{&(0x7f0000000fc0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001040)=""/67, 0x43}, {&(0x7f00000010c0)=""/212, 0xd4}, {&(0x7f00000011c0)}, {&(0x7f0000001200)=""/29, 0x1d}], 0x4, &(0x7f0000001280)=""/200, 0xc8}, 0x7fffffff}, {{&(0x7f0000001380)=@ax25={{0x3, @netrom}, [@default, @null, @bcast, @rose, @netrom, @null, @rose, @netrom]}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001400)=""/81, 0x51}, {&(0x7f0000001480)=""/193, 0xc1}], 0x2, &(0x7f00000015c0)=""/78, 0x4e}, 0xd39}, {{&(0x7f0000001640)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001700)=[{&(0x7f00000016c0)=""/35, 0x23}], 0x1}, 0xa}, {{&(0x7f0000001740)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001880)=[{&(0x7f00000017c0)=""/157, 0x9d}], 0x1, &(0x7f00000018c0)=""/160, 0xa0}, 0x5}], 0x6, 0x2063, &(0x7f0000001b00)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002bc0)={&(0x7f0000001b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@union={0x8, 0x6, 0x0, 0x5, 0x1, 0xffff, [{0xc, 0x5, 0x2}, {0xd, 0x3, 0x2}, {0xc, 0x2, 0x1ff}, {0x0, 0x2, 0x3c40}, {0xb, 0x2, 0x4}, {0x9, 0x4, 0xab5}]}]}}, &(0x7f0000001bc0)=""/4096, 0x6e, 0x1000, 0x1, 0x1ff}, 0x28) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000002c00)={{0xa, 0x4e23, 0x1ff, @mcast2, 0x4}, {0xa, 0x4e22, 0x4, @empty, 0x5}, 0x1, {[0x300000, 0xffffff2b, 0x7, 0x6, 0xfffffffc, 0x1, 0x1, 0x3ff]}}, 0x5c) r6 = accept$packet(r1, &(0x7f0000002c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002cc0)=0x14) getsockname$packet(r6, &(0x7f0000002d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002d40)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002d80)={'vcan0\x00'}) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000002dc0)={0xffffffffffffffff, 0x0, 0x24, r4, 0x1}, 0xc) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000002e00)) ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000002e40)={0x3, 0x1, @start={0x0, 0x1, "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", "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"}, [0x49c6, 0x4, 0x5, 0x6, 0x3, 0x101, 0x95, 0xd1, 0x80, 0xdb, 0x6, 0x5, 0x586, 0x0, 0x5, 0x4, 0x9, 0x1, 0x8000000000000001, 0x39, 0x195600000000, 0x3, 0xffffffffffffb7a7, 0x5, 0x8000000000000000, 0xc, 0x4, 0x8000000000000001, 0x3250b2d3, 0x1, 0x0, 0x100000001, 0x57d, 0x4, 0x2, 0x8, 0x7fffffff, 0x7f, 0x5, 0x800, 0x2, 0x6, 0xffffffff, 0x6, 0xfffffffffffffff0, 0x6, 0x0, 0xc, 0x4, 0x4, 0x8, 0x1ff, 0x7, 0x2, 0x6, 0x8001, 0x6, 0x0, 0x40, 0x2, 0x3, 0x6, 0x5, 0x6]}) bind$inet(r0, &(0x7f0000003880)={0x2, 0x4e22, @empty}, 0x10) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f00000038c0), 0x4) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000003900)={{r6}, {@val={r7}, @max}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000003940)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000039c0), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000003ac0)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a00)={0x6c, r9, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfe000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6c}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) socket$kcm(0x29, 0x5, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r8, 0x82307202, &(0x7f0000003b00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6(0xa, 0x4, 0xdb) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000003d80)={0x4, &(0x7f0000003d40)=[{0x2a4f, 0x9, 0x4, 0xe}, {0x0, 0xd, 0x0, 0x2}, {0x2, 0xcc, 0x6}, {0x2, 0x8, 0xff, 0x26}]}) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000003dc0)={{0x84, @broadcast, 0x4e21, 0x1, 'nq\x00', 0x4, 0x3, 0x4d}, {@multicast1, 0x4e23, 0x0, 0x80000001, 0x3, 0x3b}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000004400)={0x5, 0x4, &(0x7f0000003e40)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0xe}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000003e80)='syzkaller\x00', 0x4, 0x4e, &(0x7f0000003ec0)=""/78, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, r5, 0x8, &(0x7f0000003f40)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000003f80)={0x5, 0x3, 0x1ff, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000043c0)=[{0x2, 0x3, 0x9, 0xc}], 0x10, 0x3a}, 0x94) 1m29.686153992s ago: executing program 0 (id=2454): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r3) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r4, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x44f1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40004) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="28000e0080000000ffffffffffff080211000000080211000000451d788300000000000064000100080026006c09000008000c006400000008000d0000000000873aba66cfdc4e5e70e563659031f9a6af2f768e41d10f3e066cf0fc854508753fe4d293bd2bddcc58c11e3a07db0737d69b06b6cb0364a477ed89920528c8da97fcf427a0dc4b823369f0f3a71dbb47"], 0x5c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x43}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48440}, 0x4040000) 1m29.231238201s ago: executing program 0 (id=2456): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYRES32=r0], 0xe0}], 0x1}, 0x4011) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000005200010000000400000000000a000000"], 0x14}}, 0x0) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r13 = accept4(r12, 0x0, 0x0, 0x800) sendmmsg$alg(r13, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="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", 0x200}], 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x20044881) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x1}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r14 = socket(0x9, 0x5, 0x8000002) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x4020940d, &(0x7f0000000000)={'vcan0\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 1m29.061322137s ago: executing program 0 (id=2458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="011000000000fbdbdf2512000000080007008028f82cf2206df175e7e8e460ef0200000008000700f3cc000004000180037bdc5196bef951b17994b2c4cce0cb"], 0x28}}, 0x24040090) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x20, 0x0, 0x3, 0x5, {{0x24, 0x4, 0x0, 0x3d, 0x90, 0x66, 0x0, 0x6, 0x4, 0x0, @multicast1, @empty, {[@cipso={0x86, 0x40, 0x0, [{0x0, 0x11, "6f946ec1e24a615ccafc81e29b5254"}, {0x5, 0x6, "84252311"}, {0x2, 0xc, "4a95de010a309c876027"}, {0x3, 0x9, "a7a64c26637ac9"}, {0x5, 0x8, "a752211e78f5"}, {0x1, 0x6, "e03bb504"}]}, @end, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x3e, [@remote, @empty, @broadcast]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x8d, [@dev={0xac, 0x14, 0x14, 0x35}, @empty, @private=0xa010102]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x2, 0xc, "f1b98d53f3dac56f59f6"}]}]}}}}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x880) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20008083}, 0x1) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001000ffff26bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a0400ac00128009000100766c616e000000009c000280060001000400000004000380400004800c000100080000002b4a00000c000100fc0fabb2400000000c00010003000000040000000c00010066000000800000000c000100080000000e0000004c0003800c00010000000000530a00000c00010006000000ff0f00000c00010000000080ff0f00000c00010000000000050000000c0001000300000038da00000c000100fbffffff2103000008000500", @ANYRES32=r12, @ANYBLOB="67e90d5673e5497a6e48ebdb52164bfeb42a212c6858ed63e925ef8de1a201626ddde02d798aa11b87e9b0ade57044b43dc33fb473bb8b90510cb613b42caba23a7aa970949d47040be68d2c981157c4d5e0fd19cccd71b68d9a4614e3dde1ab8193c1c6dd93b9bc6e1b92f7"], 0xd4}}, 0x8000002) syz_emit_ethernet(0x7e3, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x7ad, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) 1m28.150919082s ago: executing program 0 (id=2468): r0 = socket(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40012160, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x48000) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x80800) (async) r4 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="b180dccc16eb676ff09b3e4ef26f701d", 0x10}, {&(0x7f0000001ac0)="185f70788926e08ce31809863a7db4d975e887eea5dcd974fef9c6ed45a821773237e5d2d329c07c7e1bb2e75ecccfb76e11781c5daab14253f6959a0400da0bf98a0ab829816250cf32206089785600f7c3ee056ab6fdd436f0c3e71740000000d5d70f35c3c55403e6a22e4560ac69", 0x70}], 0x2, 0x0, 0x0, 0x10}], 0x1, 0x84) (async) sendmmsg$alg(r4, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="b180dccc16eb676ff09b3e4ef26f701d", 0x10}, {&(0x7f0000001ac0)="185f70788926e08ce31809863a7db4d975e887eea5dcd974fef9c6ed45a821773237e5d2d329c07c7e1bb2e75ecccfb76e11781c5daab14253f6959a0400da0bf98a0ab829816250cf32206089785600f7c3ee056ab6fdd436f0c3e71740000000d5d70f35c3c55403e6a22e4560ac69", 0x70}], 0x2, 0x0, 0x0, 0x10}], 0x1, 0x84) recvmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/127, 0x7f}], 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) 1m13.025484803s ago: executing program 34 (id=2468): r0 = socket(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40012160, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x48000) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x80800) (async) r4 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="b180dccc16eb676ff09b3e4ef26f701d", 0x10}, {&(0x7f0000001ac0)="185f70788926e08ce31809863a7db4d975e887eea5dcd974fef9c6ed45a821773237e5d2d329c07c7e1bb2e75ecccfb76e11781c5daab14253f6959a0400da0bf98a0ab829816250cf32206089785600f7c3ee056ab6fdd436f0c3e71740000000d5d70f35c3c55403e6a22e4560ac69", 0x70}], 0x2, 0x0, 0x0, 0x10}], 0x1, 0x84) (async) sendmmsg$alg(r4, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="b180dccc16eb676ff09b3e4ef26f701d", 0x10}, {&(0x7f0000001ac0)="185f70788926e08ce31809863a7db4d975e887eea5dcd974fef9c6ed45a821773237e5d2d329c07c7e1bb2e75ecccfb76e11781c5daab14253f6959a0400da0bf98a0ab829816250cf32206089785600f7c3ee056ab6fdd436f0c3e71740000000d5d70f35c3c55403e6a22e4560ac69", 0x70}], 0x2, 0x0, 0x0, 0x10}], 0x1, 0x84) recvmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/127, 0x7f}], 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) 3.031755533s ago: executing program 5 (id=3196): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x801) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r3, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0xc, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x1000000, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071103500000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r9, &(0x7f0000000180), 0x0}, 0x20) r10 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="5d4524bd70a0fedbdf250100000c0002000000000000000000040007800c00aec30300000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040045}, 0x24000881) close(r1) 3.030824403s ago: executing program 6 (id=3197): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18420000faffffff00000000006ca7a82b000000270000d09500ddffffff0000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) pipe(&(0x7f0000000840)) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r5], 0x3c}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @local}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r10, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600780ea8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b31d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffece0b42a9ecbee5de603000000e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x40052) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000040)={0x1, 0xb79}) sendto$packet(r2, &(0x7f0000000840)="e6aaa18c6008103c3301ee0b30894a88807936738d1866e91b6acd2e6600009d8cb3f8f8a9d40c06", 0x28, 0x4048040, &(0x7f0000000200)={0x11, 0x86dd, r11, 0x1, 0x8, 0x6, @random="842c4c45bc33"}, 0x14) 2.703283358s ago: executing program 7 (id=3200): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af80200000000b70800000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x3, @empty, 0x100}], 0x2c) 2.700092191s ago: executing program 6 (id=3201): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x600, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.635978782s ago: executing program 7 (id=3202): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xd7d}, @TCA_TBF_PRATE64={0xc, 0x5, 0x2dc4fc5305ebb4f2}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x4, 0x38f, 0x8, 0x1}, {0xa7, 0x2, 0x7ffd, 0x9, 0x80, 0x1}, 0xa8000000, 0x5, 0x909}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af92e4b39ff, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000300)={{r1, &(0x7f0000000000)='+:%!!%+&-/+*\xff!()\x00', 0x20000, &(0x7f00000000c0)={@_ha_fsid={[0x8, 0x4952]}, {0x2, 0x0, 0x9, 0xfe}}, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x2bf8c0}, {[0x200, 0x4, 0x4, 0x1]}, 0xdcae, 0x1c, &(0x7f00000002c0)=""/28}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) sendmsg$kcm(r5, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="058b464175321d0278d0ac6014849c02071128af1c08b72cbd504b874d62cc4cee64c49ade9667b4e8d3a2234a5c4f689d8d8ae228cab47a4013e173d8448ba78a7fc0f337efbbb361076fb9b0aca8c40660620f8c5ad870c8b9c608c555fa0655a90f1915a760f9c9b9f9d29fd0c333da1c27248a729d5c5715c359b9507ceb0369bee7240d21d8c2eafc2ba87a08b690cf7330ff2eb877d8a4828cc57dec9b1d4554801c8eec01bedb9ee0c7a7af8735b9fca87d30568de09963c39ee8fb39cad88586232236fc6789f60388fd0b4fb09228365eaa9c65ca4d010d290c699528e6d5e7f41e555ca5b18e7679945a2810ca0ebc8573b28e8c", 0xf9}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="bf752b5f89bec4548cc823f2e084de5cb5884f21d98b31904a63e9616ce7c409f11e8bd61c3a91015a56a2512f4118b8f0a1d7e72eb7e5c25155e99111a73ccfb1b4ff6a1ba4e1274f95999ace175a97e5b155d32afe45b4bb99ed7b2cbc644ad652adbfa679c258142f23962d6df203f718294c59c86308", 0x78}, {&(0x7f0000000580)="509e45e4eea2940047c6185606941622100b7f5ea0a49f1aabf8dc76ddf6278c88660517a27de7f367404873f7013d50044710bb53f566eaf2b7a5cbc5f44321d3f16c3d8ec14ff2a7daf3dba3da0a7b11bcdabe6cfe43c0ce23de6e34ead521f68518e71e095c7700d1a97b9d412ba47a956bb2e573722ff5d0e46f1dc1babae3aea4b3f9af985da24735814d37e0e49dbe5dff8b", 0x95}, {&(0x7f0000000640)="e9ecc2eaf013cc5d62587cc33c575249c2e319957203b3b4abd35369b356a25549c1ee2284141dbc0c215cd236240e8a44e9bf5455a29b612e7a9fa9e742b1148df70d6cfd851de6d417db4a549d71f796485c1c472c8c454d8fb0586652e87b5c", 0x61}, {&(0x7f00000006c0)="ef15647babe48f393ff25bdcc42af02f18f09444b99afb944d8c2f1ee37091cdd047a7f895e9500b062a23600de2e897", 0x30}, {&(0x7f0000000780)="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", 0xfd}], 0x7, &(0x7f0000000e00)=[{0x1010, 0x108, 0x98d7, "c22c79c2029d5e852f569df07db7f33614e25031c6bda002d9d2ebd0cb6b67c76725ffdb3957b1d20569253d2f8853264f1c00d95429adfa498a13fa84690ff56e835d3952b6a29e85a34110f074f6632fc7eaf642fa664db4edab7e55dd25c6b4fd714a07e8e3158a20116ff9fb1a661aaae20182fa13567c156210c57b43e3bd79934979d274916f64ea4c299b2bf626e1cb4a2c87c530710c324821adfd0538e3a95ad739af6694a491647c4aaaa9c4c6bab652f652d3cfbd58fd6036ac75c5230b68441d328f5225ae76eab8ecf11a60c1c1059f0810ecda278086b9f1c5a901c5d707bf336b386b0e2ccad166551ccf08a0f40abe0df715199147f44e3e3a4db55aa2f6988562ae1640e6286fc8e0087a09735b03b06daab3789fada6099a908e34c0fffc935db69715c0fb84585babde99d7cea53d02234c95cefc599bce47b2e92a5f2fd71ea998f5e21c934ef305c9964d01924b7cd0a635ab1159b61d3420b4934dbb0fec2bf0b3dd5ba2b475f1f1e40d37594cf3013743bc8b341555e87ead0ed8a483bf7ebc5642c5c23ab78fc732499b70236b3e0bea4b8c8da2dcd4130a5e84d5c8ea38bb43a8f31ed9a3907e55b02b74ddd029abb0dc0859d97a086ef65daa2fa767bca5650c591e04138984f7becc301f78cda5ce04a0b32941ce2295a0c29ee54c63176560ca371a8b55344b8ebfba7a5a55b2d7893db4487215c4ff680c721a7b08b3654eaaed14e74a140f50d9f67472f58039bad48e1bdecebaaf5e2da5888e2c424ae55039ecc2513c7b320729dd5ea1c11326737cf23281013e70a214a6ca9c5ed4e68719c07b100e5e2d1250e7571533a41d7e6f567b6dc8cc34ab86c1a21ac023ec9f476d996e65e671334f95e2d7fbbc1f45230ad974cd2b3bbe095eb6193f66cb0fb1833255c2d3d7bcd2ee0dd27840bf51bb31bd15c91ae9ec39f6c6ac4ffb5e42f0bd69c6ca5505c5d18ab596b61120cdb9d2d714db853e9441fffee299a5acf66e73835d0af0f07001acbdc9cc6ae04f3cdb7ea6d2fdca335e9f836319cf6a2f96da0a0d194e1d66f30ff17fac38135ed06ffe35b00b843d254f1febb92e2233e6780e2dcb16f6bbdf42d8d406139cfb1fb337f3b3582c82684999206c6af2a6c5a97c9f90bf4e663d9163b5acc903d616e2ee8828443a657361486cce8ce48cc899c23b22f6492eaf0bbbe32ea6c835c5530d316bb155c598b2956d551acc8d47505ff5763b27375cf36c559260d192a9e2fe27a326e66ec7ad4b79edbbb8a39d7eb5b70ea4f9e0fb0c8203af0e6325ab7fcbe43fec320793f097a6c85b5c53a0ae3787ab161b7c38b6c66de1fb0db7f80ef2897b5da2c0d5beb5a649946cc3812ec3c8f8e8bc98e0350135255530e00cc45c020a18c895f3c02a79200e30a389f46b46d91b983a56c9dd8e4e655bf8d173ae1e1777d3f32edd47acc2542b313773007d8b6036f91bf678ca9c96377b0c61817d2328c0266346ff7d39126cbb00323cbbea72255ca1e1163fef700aa5d007779e353182ed4c8af57a1b0d933af0a23722d3b703f5e0ceb7fa4457c998d43bae863b8b02bb492b146e497d50b649ac9e2240bb8b4c390aa815a710ef5ba8251f19a5d468cdc0ea20af9f77b10a7f6c333aa2d52d104b254e0d8d132f3596d000b7f67f470d87c6a9e1d795957ce52690da436cff82eeeb06cb4ae5d9ccaa1c1b0053e0c1a13edad08791cd9a5525917c5770ed91f256b795b06369d98fcd5ba290f433a6c6f6974e419cf165e1643e1a1ed5e2d49b830193a3bae060ebd546093460c308d2301d752d8aaca74bb63b3a79731c3ca57de473febde321e5030f87db02c9f477f91ad8116f498ca5ef90be8b6d1499c2d22010cbe81a61a8967ed90fb9b4a583fb24452f0e59a0a17fdb1491ed539775fd3d09a1b32f6b64a9efd8e82d58f52844ffb97129668bb011e3697a9c3146e1fe21ff1a81e6786f69819f527a6c3ef495d32a158099b7b40424c5afd9f43ba65e24a0cd78a24dc7ec6df45c7edd3ba17293921d9971a0f7ce580c22ad3fadf71943a9d887a0ca5ad0f258fb8b9932973583595ce61772211d0911923b7b181e95ab3063e76260443824b9207d565b599fa131826c1c0c760e8313b135ed14a2d3799afd4fff1610612f23590b07e9688b1ba75bfe1733019a0dceb54a7c404089f78a572898649f59a8c4b5d716dd1163338bbd922aa6a313c7d77fc4bf61d5acfb50fe679f2998694b92c9a436aa8c82fc9a30da18bdeb9d02c5b32b52effc4dd9b393946a5171142ef92b08c046c55244eaccf6df61a3d7a96c63486451101fbdc9550760e1981293608ca35d57aa27fd9f392deea178a2a63d8ac59fc8dfd5ab121a858b3f87bb7cc3fae05be18730539fbcda0cdd3e69248fc71381d21b6f298ed674630a75337dde47aeaffbf7222db2f355d75614076f1598b716e56ca1de99006cd5721b473c23b767a448d809b65ad0da996cdfb16b5e5bf6ab66a67feeaebe969b51a3470e3a09307dfa9b687c5a7193e47cfc37f10966c60a8ad75492e6f240d8e4dd1db50d21950c1e7e1b5a7e1b24c3ed8a31d6ff34a2690833c8f9e4ef266bba74feb658cbb36a86586dfb3cecf0cc818ed7836967ab79d12d8e159f55103b039332a736257733252019c2063d403cb508ac4ea86c484466c4aac643a8af17c565b25f856f2c3ddc4b2bf8ce399e9406d128d11ecea13c1f29cb37c987538f9637f77cb5f63f6a23c4041bdb2174252dbe62cf0db04d77d0dec53af553ec4570862d420cbd1f09aa171b299ab83d00131c599cf77b78f490f919224834d9cd47c095a7c28f05f50a7a3fccf31a99238977400cebfcaca24aa7fdaa83d3732860594da5c8dd39314dd93a110b482f379320fb5331e749de7413df1254e2115e3f4def8fed95fff8a1c05badeecd09b2f901e72f48499dae2ab3294bbd667e850725afeaf67d8bfec2a7d5fa7b510b33e2c9f711688eb9c80d59d207f88ceb06dde2befadd746f95e15d4936719e6c443c9da0005d81a1b773af17a4192fd5a4db0fb071047f822555caf83684d5d255bbd82c8adf492e8e1389477bf636d8c82d701cbb9ac3044bc9a2266568a3a0117a343abc30e1492e66709db7ae708bc69741ed5cfb1671943d2323af06eb324de8483099a555227119cad4e57fa2191f9825afba299ad8cf9fb7f7b85c75227a45ea66d231872fced4e02552e679a6d8aa45f40307cc578e2a7bfa9c675ddf5066ca7edd6ddc5f0b4dbc02c9e87fab3aacc69dda9adf9745d597419105a9b9687247bc0428a4abe464439ff5ad5aa27bce413d0ae6afede586346a841b98ffea65b8910d46ed28f2a5419584b812ec5cd629d7321b980bb36475d52d798b70680314d3c861a37ff96c35ef2f28b17650225953ae21f38ec0358e0996c03ef2c32f0de6afa6a6e88b591ec3dc25ab408dcaba8f845692b4b5e680848367e602595704f48622463cd57957b8c6ba78dea4a4acdb71e1a7146f4e8033a4f5eeac41ce449095c9445ad758e8ea6757b503f7b29aa8b608d293febd45c2a31e1e3620f0c1f7ce88cad7f8f96aefc040af04b9b23d661cc971f15392d9fb00735a9ed3970d1501b35544286defb5f0ef53a250d7940c8b9a8de5092368e69d822580bf560663955613d4273fefba89c5de77002808ee7e942d99b65fa40f9210477e2cf30e4e29069252388c84deed578ec16044b25e59eb7f1e76cbdf52a0cce84a807dd27c091965777fc743882a0f8ae9b0b5f2a4c05d609b21bac8e3defd3164705109899bf7bfa1b9745fdac7fc3ec3fae9def7dd2d32a4ab322f193f2d30de2256c1cbf7120f5ac10eb8887d1053eddf3b15fed1fb91db1d33c28d296427bd1b4145ad38f2835f881e66254dd3cb9387507eb694154c6ab0a2501e6e3c2a0bbfd0de2587003760a78704c0b9d9f6e663900c7c91918d16a09b1fd05764e0c07fedecf997fd139f58c43091a971ff203615856a111724ea814c909fbcdc22a08a99082eb2e0bcfeffd3f74e653f9b4418e405c08c302fe273df36a716ffe759bdea8edb2006c4fc6e9684f7f60cb6202972e71156f55e207db48721454a37df282bc28fcb364a8b6c33cea93b207822f6471bad17e8b0aa4d1708d48dd4c8f35cf872f6cc650845006459be90389fad32b18f136f4be4a428eddee3f660fc2929b37aec3eca562449ecc8b3d1521a8db54b2ef3e7901ec3bf37e4e5010981bbf0f40fdd5f757a8b485323f2b6dbdb77df7595f3cf2b8144951727fce58cc68ec394362d5c3bfed7c3cf652d43197db7d57960637b19b4ed46270b88289fdb503e6785929fd8cd6390f853e68bd04284652cc85ddb3f1282eed9f8d586981d40ee7aa51b335572fc426a36f8f671e01a522541be368474bbbc44959a6c8376bb34dadbd349570728dcdecff7e8c503a00cfa51aba491f7178e4792856a50aa89b73788e8c4ab3a878d6d6a781198ec88b6bc374d2a591b53aed5196c2b60a03778fdaab0042abdd8e93cd1929a6c4bc91b64e7f18bfafebfa4a574ecced8b7cca041ffb81a029d1d31accbcb3b85215c6ddb12d4d7bde9ccf0293f6880b99c9a0b88c8370d4c079d8a02bf0ff58cf23171e398d03ac0109b46113601efe7404bc9e9fe31ea8ecc3ab8f4f1eef92350c078a18c145a8ee0a909f2e8a55a74f8a00e974458768a7475fbffb089987b8dbb8c5466568e31b4eb9653867d4bb28e5ec6aad900505f9e9aa055fe45a8522ba5906c303a307fbf239e9388a534207c9feb314bc8be6ee41b42c0054f74636ad94c41566d64d66ea8c3fcae275bc886838df8f3e9a9b73150dbbfd83cf66971e19e3da19900e995bbd31e0c265433397721beeae92ee7571a27a5237eacc7a5b91c7dbd36e1330d30b720e4e79181c608b4aa3f08f74ff76d55299c6af884f8e03e875255ae79231bd1b8cd101572644987306bdd0a224955ffbfd37a89f9db93e22636df20bef754b593d74de3bd7f4f29e3da6536430611009fcfc73a8f9573fd58fd6e7ccf32f42796d8e84ef54d7974f28ecbdeb1b32a96d1a6baf77501aeec3c8a2ce8944e33ade0e5b19219377eb09c31c6cb08bdfd3fb9463c58262a6ed35b9da82bd1a333b1c751e3d26fe1ee3ac79a8d762f5683f204c1ccbfb1d852184b95c6e2735b2b434e492dee50b3a841d1d4f5463139fea016e239f79e4debaf5556cf28bc3a2029d3945fd414aa5f5b4458d4ef73e6d8260a160298344e8c9d637d216ea2a2145fbd4090012282d993f851068ee85be90f8717ccad9522d2030655e49aee6686b5e8af07baa30daf17c6701701e801b1883b31dea902fa1b05bf7e95362676f72a182bfedb2a3054908cd73a09dd96e191862671b92f879ab311d465603403abb7748b9e9ff15c36b4fd1118711aec64a0f362136d7051ba5486c76688c77da354d53a2773930f0d36b4749878f032d9366cf0da3e844ba861486d6c87dca4030e76ba35249872f357d18d8836f70c5b28a3b64a07222f5990c6dbf51c56d86076dba91b40b751e7e95da30b5157e9572bf3d7e1a87c0b40fca8286227fa1dd05226932dec86fc14958856a72ec656da7527193db100b93acc8c7e8953af96856caeb04b2314d33abde82b3b9052bee5d5640cb4f36cfbcf1be966b5ddfc911ee5bdae72953318afcbf6efff9ccb3f42458d24a6712c84acecb860710197a4d4d094628512e27a1cd9f0a9ad7d8e409d9d4e97d7c580e34dd14ec3b86e"}, {0x10, 0x109, 0x271c}, {0xe8, 0x110, 0xffffffff, "9abe0653c0919535be1d6e047786d2b9d9ebbf64d288d21c7c632750c3204f26f2336c9494577044e76d0eb9d498bdd4758c3caea3b08deea5a2de3df4c5b90b6f4c543f095769ec33f2008c053f549ba44c1f91b9a6d0816e311c95a09042653d2374898ca09f8a963810a569fbe0fbbbdc2e6ff46be4f75c8a9863eb5416f4cf7033318279d2fa08a2c60bebac92eff302671af5b8aa32898a2d7a70fdfc67eb8553af0eaeeb7e01331e91fb04a7143da0efdface716fb3135c8f7a510e21ec80521c617bbd6eb6916daedf8ba1b8be0"}, {0x110, 0x115, 0x6, "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"}, {0x68, 0x10a, 0x3, "6d6fcee0fe7b6ddd799033bb0f8d9b2c00ab92a16a0e0478046792d105f5177560abd8324e32e8e6da838cd64e65c51d32319a747ef95d23e5652bccc5abdc34a1c2a01fec4d6717525cd36090f49ec7af4117d229389c67"}], 0x1280}, 0x800) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) 2.542346538s ago: executing program 3 (id=3203): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000990000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018410000020000000000000000000000182a0000", @ANYRES32=0x1, @ANYBLOB="0000000008020000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x74, &(0x7f0000000440)=""/116, 0x41100, 0x68, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x1, 0x7f, 0x1}, 0x10, 0x1cc42, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000580)=[{0x4, 0x1, 0x4, 0x9}, {0x4, 0x5, 0xf, 0xb}, {0x1, 0x4, 0x3, 0x4}, {0x4, 0x2, 0xd, 0x1}, {0x1, 0x5, 0x10, 0x8}, {0x1, 0x4, 0x9, 0x6}, {0x2, 0x4, 0xf, 0x4}, {0x3, 0x1, 0xb, 0xa}], 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r1, 0x0, 0xf2, 0xcb, &(0x7f00000006c0)="00d64561052e86c5d3ca040238105d28f9b7d86aad4c340c60cdd9ab83d18a4a61c11f1b8aeefd9a1c5556e35bf1076784ee30fe9058742e53342e03f9e1578fed719cffde8f43c46e7d0d6b1dd9eefb5915822b46fa17d6240feea9febb2cdc69f4fce3acb4f32c3565247a5a5374dac33fa9aed55536534609a8e5b5794a72512a528bdeee3f5b055bf7a51555f721045935db444ec22ff173de842f6f20b30ee3c980c6093de61f56276f722e246fe8dfa48695db3bc7deda413a7ac9820d2e093da0dfabfa8677cb04262772f737ed2bf70e2c8260ed5762f44b3459e08c6cff7cfb7220ff096969053eeadbfe6eef53", &(0x7f00000007c0)=""/203, 0x1000, 0x0, 0x33, 0xf7, &(0x7f00000008c0)="d0fa3a8e2c1054f75466573c21a3c5a35a622c9b9bbadbb246c92acfde70f87c7f43461c76c4812a585fe935b752a762a10012", &(0x7f0000000900)="21936c59a86c27231d97d4e29579332309d8155cb08e536fe3461a4d32264aacd3060b6e286e33c9b79addbdc783962da6db49963f9ad2e108b41e92de383815bbc4b93ee8de23b40fe88f01f15dca889b8402659765e74cd39c27dd407d029d5890782cc6d28ce7357f04c63c41fc70c01b17d241ead194b8664b4cd002f19c6d120ac30c3f0248519262bf1c905c73c5a249ae69c5a54bd383693775502688992b731002cf00801b395a280bea2bdd206e56d42c6ff2b46cffedfb8bb7dbf2976f98d1a689e13821143a53bf330ddf54ddf1e2f3ff8471978260fbcac06a7902e5e05e6d1b6804d49ab281083495af1d5080bbc8d84e", 0x2, 0x0, 0xffe0000}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x339e68f63b70890, 0x4}}}]}, 0x3c}}, 0x4000010) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_NAT_DST={0x4}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}]}, 0x40}}, 0x40090) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000a80)=0x6, 0x12) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}, {&(0x7f00000002c0)='\f', 0x1}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) sendto(r8, &(0x7f0000000340)="f8f6c54bd2067e7293ee4b8ba859f1cecc96236cd7548cde35d22a8e745e0118c2584dc44fec5307b604cbeb5eab4247f25f37796982b98bab4862cdb79b2ff57b996a4364354807e41c24cbf92ca53f95c20bcc3ecdcaae2d87e9e43b121fd0f341fa802f85875163b16ec9a34a68449cf49c61287f0baf286695cd3b59f897a228ff711c90e8e908425f7b60c86000dda3", 0x92, 0x4010, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304, 0x3a}, "08db7a9d27f81000", "acef0d00330723599e69856bf21ad6caf77c9a99b7bbebfa4dc371090d0e3808", "33681901"}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4b}, 0x48) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000180)={0x0, @llc={0x1a, 0x312, 0x9, 0x7, 0x9, 0x3}, @phonet={0x23, 0x8, 0x1, 0x2}, @tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x82, 0x3}) 2.38396289s ago: executing program 1 (id=3204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r3, &(0x7f0000000240)=""/202, 0xfffffffffffffdef, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 2.072461416s ago: executing program 6 (id=3205): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x400000008000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x114, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000020095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf200000000000001600020038e873a23d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000c4d9b5e23150c76d3275030fef0cfb00000000000800004000000769efe01fe533dc42467bdcdba662d744195edaccd513326e71184ba27ed6", @ANYRES32=0x0, @ANYRES32=r4], 0x40}}, 0xc810) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000015c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001580)={&(0x7f0000001600)=ANY=[@ANYBLOB='X\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0c01028054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000900fa0602000000400001080900000007005a05000000000100e10310a92f6d3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e6700000000000005000300030000000800040027e26b7ef350e401d3756d5bcea84430bfe5576c5eb1c3b05834a3966a2e61200fee98bd0537a8d61b352c0466314270d901a6fe4dd61762ea5fa7bf109db48f5bf83a902c656ec1647f7b74dcb9a2f5e039e6b80fdbf91b88ef7b05e0e99aadff66aa7ed6aab89bc1c02609c116529858d659e13ea79f47c8af35a8e3a06f4381698e8ca1b26cb0c2606e637a24aa9b24b2cb18f6866ef24e0e6a7a66a92e093d11320e0f23e977066c5dd9e38948807fdec289bd7f68f8f47e1a86917c0d86", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040064b2000008000100", @ANYRES32=0x0, @ANYBLOB="bc000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffff7f08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000c00000008000100", @ANYRES32=0x0, @ANYBLOB="7801028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400feff000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010000000100757365725f6c696e6b757000000000000000000000000000000000000000000000000300060000000000040000000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000500000008000100", @ANYRES32=0x0, @ANYBLOB="ec01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400060000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000006600010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c000100afff0100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000002000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040005000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000650000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ec00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB], 0x858}, 0x1, 0x0, 0x0, 0x20000400}, 0x20048008) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0xa, 0x300) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r8, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x31, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0xf, 0x0, @opaque="2272422b619160"}}}}}, 0x0) 2.039923316s ago: executing program 1 (id=3206): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x60}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (rerun: 64) 1.831126583s ago: executing program 3 (id=3207): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x44010, r1, 0x1c614000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x0, 0xb55, 0x0, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40440c4}, 0x0) 1.829430148s ago: executing program 5 (id=3208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="2cf568c98614500bad27ca2e65007585f539ba8a140451c38e413333a454c83c90cdc920c45e58bfa939639df4bfedd388730e3890d66eb299aceb0bd0771f614e0cb022c26062d5548447ea54f1d32aa06e68b623315f7c203e3d47c18e891db23146c00fba7a0b08cc036f9b061628afb5a98648", 0x75}], 0x1, 0x0, 0x180}, 0x4000) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000000000000006c0000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000035000002000100000000000000000048000300"], 0x138}}, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x4008815) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$inet6(0xa, 0x3, 0x7) (rerun: 32) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000380)={r2, &(0x7f0000000240)='*@{\x00', 0x121200, &(0x7f0000000280)={@_ha_fsid={[0x1, 0x9f]}, {0x0, 0x6, 0x7}}, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x5}) bind$bt_hci(r5, &(0x7f0000000500)={0x1f, 0x4, 0x3}, 0x6) (async) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000200001010000000000000000010100800c00"], 0x114}], 0x1}, 0x0) (async) ioctl$sock_netdev_private(r4, 0x89f0, &(0x7f0000000100)="2ee685f026aafe1ffb3d6538797e0c7ad9804e1bcc299f0daaf21300859ca7977b5f79e49f48c4cde4c7959bc8987d9b160643a4b8b5f97475395fb60797edcf3ba70fb751067060ae1da67abc864bfbac1608c8b0329155aaf827bac718391e56a79485383993ea0ffaf4dbf92a387e49e02d48fed4aa5f2d0284d08bd4000d4e1db6ad1d1032d3ba9d9c8895489f61b94ed88e292bc9caf3ecf744f4a1a77b185fdff6078c2c30717738c6f3d204c75862d40d89d2") 1.567670192s ago: executing program 3 (id=3209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_OKEY={0x8, 0x18}, @IFLA_GRE_COLLECT_METADATA={0xff59}]}}}]}, 0x50}}, 0x0) 1.518425151s ago: executing program 5 (id=3210): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x3, 0xba65}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x80, 0x800) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4040006) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000280)) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000002c0)={0x8, [0x5, 0x9, 0x2, 0x200, 0x7, 0x0, 0x6, 0xff00]}, 0x14) recvmmsg(r1, &(0x7f0000002640)=[{{&(0x7f0000000300)=@rc, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)=""/100, 0x64}, {&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/184, 0xb8}], 0x4, &(0x7f0000000680)=""/113, 0x71}, 0xbb1f}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/14, 0xe}, {&(0x7f0000000740)=""/53, 0x35}], 0x2, &(0x7f00000007c0)=""/4096, 0x1000}, 0x7}, {{&(0x7f00000017c0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001840)=""/113, 0x71}, {&(0x7f00000018c0)=""/1, 0x1}, {&(0x7f0000001900)=""/17, 0x11}], 0x3, &(0x7f0000001980)=""/125, 0x7d}, 0xfffffffb}, {{&(0x7f0000001a00)=@hci, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a80)=""/58, 0x3a}, {&(0x7f0000001ac0)=""/42, 0x2a}], 0x2, &(0x7f0000001b40)=""/28, 0x1c}, 0x39a0}, {{&(0x7f0000001b80)=@ax25={{0x3, @default}, [@bcast, @rose, @netrom, @remote, @default, @default, @default, @default]}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001c00)=""/174, 0xae}], 0x1, &(0x7f0000001d00)=""/167, 0xa7}, 0x1ff}, {{&(0x7f0000001dc0)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001e40)=""/181, 0xb5}, {&(0x7f0000001f00)=""/233, 0xe9}, {&(0x7f0000002000)=""/126, 0x7e}, {&(0x7f0000002080)=""/106, 0x6a}, {&(0x7f0000002100)=""/36, 0x24}, {&(0x7f0000002140)=""/114, 0x72}], 0x6}, 0xed}, {{&(0x7f0000002240)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000022c0)=""/93, 0x5d}, {&(0x7f0000002340)=""/86, 0x56}, {&(0x7f00000023c0)=""/30, 0x1e}, {&(0x7f0000002400)=""/16, 0x10}, {&(0x7f0000002440)=""/115, 0x73}], 0x5, &(0x7f0000002540)=""/195, 0xc3}, 0x4}], 0x7, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000002800)={r1, 0xff, 0x984, 0x8}) ioctl$PPPIOCUNBRIDGECHAN(r3, 0x7434) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000002880), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000028c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x40, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'TIPC\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4094) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x20, 0x3, 0x3, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x7f}}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40) unshare(0x4000000) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000002ac0)=[{{0x2, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1}}], 0x8) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000002b00)=0x4) ioctl$PPPIOCGIDLE64(r3, 0x8010743f, &(0x7f0000002b40)) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002c80)={'gre0\x00', &(0x7f0000002bc0)={'ip_vti0\x00', 0x0, 0x7800, 0x8, 0xf, 0x3, {{0x25, 0x4, 0x0, 0x32, 0x94, 0x64, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0x82, 0x3, 0x0, [{@multicast1}, {@rand_addr=0x64010101, 0x5}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x1}, {@loopback, 0x986f}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x2}]}, @timestamp={0x44, 0x20, 0xdf, 0x0, 0x0, [0x8aa2, 0x1, 0xc, 0x1000, 0x2, 0x53, 0x401]}, @timestamp_addr={0x44, 0x2c, 0x11, 0x1, 0x1, [{@broadcast, 0xc4c4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@remote, 0x33a1}]}]}}}}}) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000002f00)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002cc0)={0x1fc, 0x13, 0x100, 0x70bd28, 0x25dfdbfe, {0x29, 0x7, 0x3, 0x40, {0x4e24, 0x4e24, [0xfffffffe, 0x1, 0x4, 0x8], [0x7ff, 0x0, 0x8001, 0x8001], r8, [0xb, 0x1]}, 0x1ff, 0x80000001}, [@INET_DIAG_REQ_BYTECODE={0x74, 0x1, "f7e4eceeca7f2704839d7dbce84c1f465742f4feda920053b58a46fa0b432cc75064312aea8e79778510e32580a2594b5992864cc3ecebdd9b717ca7751b1cb3e9d83062fdebc6197e2802f9c53e7d38bc7332774a93b68a1d4f4ecdd47e9196322e1efa89708bd4bf44fbfa2bfeee85"}, @INET_DIAG_REQ_BYTECODE={0x82, 0x1, "64d31ded129bdaa5f4ac2f0fd0d3db08fa4c4a587b657c755b7f9a06f38298aa383ffc1d7e44edb19ce711702bd9712b05574270d35f69b9e5a7146a09d5e79d253574e8574f86d22f0f97cfb312b8cd77808d192c786c9b13cf4f451a8e7f38f6c7d96fa4215a8bb168334e9c07c23e30ca088fa026d912d1e6ac12cbc6"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "fcc7cdfd7bdabe"}, @INET_DIAG_REQ_BYTECODE={0xa9, 0x1, "56b6b9f542baf52cef9c78e0d083fb228b3aee130bd01fe49aa09a0125b4b69662069c4204f26c1bc63750dee869cab3d6c09b56d02bf23f08abb1d01028965934eba00162d6e786dd4249e83a6075415cde06f4c68fa60659969d063f7b979165f558405642e43ade1b8e1562be3fcd3b89bf7dcc9be70e52e9d61d440df9f050950c6b5cee17d1dc42bf3758d05c585cfb9eddf3de2a62d5f0f2815ac6fc10d3c5c02c89"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000002f40)=""/125, &(0x7f0000002fc0)=0x7d) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000034c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003480)={&(0x7f0000003040)={0x428, 0xd, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x400, 0x3, 0x0, 0x1, [{0x2fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_KEY_END={0x2b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x72, 0x1, "3de87d5d843bdfed6084aace4a7993c91b587dc12f37b3ba877ac5f95cc2dc13aeed5e9b8a9ce0d27bea47f03b534b996fab8a424db8fff037b7524c6de5fd6ef43268e47022e130f8d78cc112b3e1780acabab5722135439776d784fd97a2325c621f482269ccee7d862e22148d"}, @NFTA_DATA_VALUE={0x50, 0x1, "e5c9f715c900c6adcbe4ea1d67bc1f65acf9a402f73480caca3d906bfe299da0d71096b24c5a7c79d6504268ee421f9715375abdede756036efae2a843c469ba0351eaf68a38dff88f002360"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x6b, 0x1, "93fbf7498df89db0519669def1e3334046b7b535e3da213622c9a40e77eea23d10f0aefcde1ab5804b77892dc32cc3748ac9fee80d039ead82ab85f354dd79c4264938b5f9bd4f61e5637fe27b87636ad0e5419bc8fe61488837e20589862a977fd12bb9a6f582"}, @NFTA_DATA_VALUE={0xce, 0x1, "8c36272ca73cdb6b5cd82fe0f20ba9561a56ca2f6ccbc333111970fe56cec1ad1630f826f9e6618b3928a88f16fdf207c9b7ad785b814fca5fc53f1ef601aa4f75f21e11393065905c5e6ac06b383706c9dd9fbb2c692188daef1d2d9bf829baf58445f2fd4a9c31101347eda8e24fe7cab9e051dd7207dd87c0e9cd0bd9b01a4619eb943756bd240202a2ff6c259135ea600d09ca5eddf9dd6a084dbe14fdbcdf7974098460422aeefea347b2b7d97720e946f98cdcb551423cda10a451820d9ede71ac4dd82c596255"}]}, @NFTA_SET_ELEM_USERDATA={0x1a, 0x6, 0x1, 0x0, "a5217baa3c3a51670a254bedb0a055d7d5369751835a"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_KEY={0x68, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x63, 0x1, "aa151805aae112caf2992f820a03555ea69089548c0a2b9a685dddf8dca656c7e80fdde0d8b076c86c84b8aec73968e5556dbee067098c9c3f9565808ac2c3966801623699be9adadf33b016714d3cf5ff441ddbfffa183351cf1fc490ee34"}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x428}, 0x1, 0x0, 0x0, 0xc}, 0x20004001) unshare(0x8020600) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003540), r4) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000003600)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003580)={0x1c, r9, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000040) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000003640)={0x21, 0x2}) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000003740)={&(0x7f0000003680), 0xc, &(0x7f0000003700)={&(0x7f00000036c0)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x804) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f00000039c0)={&(0x7f0000003780), 0xc, &(0x7f0000003980)={&(0x7f00000037c0)={0x18c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdd87}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "ba518ba73b7570d1fa29b37b2f48ddabd093db0a4c7456a38b940cb36e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "4a39fc1a3c68cee3e713d67e95aaeef009567a8b"}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}}}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x10}, 0x90) 1.517619385s ago: executing program 6 (id=3211): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) (async, rerun: 64) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100003052abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) 1.259029801s ago: executing program 6 (id=3212): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x3fa, 0x400, 0x70bd2b, 0x25dfdbff, {0x1, 0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x4000010) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r2, 0x8102}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4) recvmsg(r1, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/45, 0x2d}, {&(0x7f0000001240)=""/252, 0xfc}, {&(0x7f0000001340)=""/111, 0x6f}, {&(0x7f00000013c0)=""/219, 0xdb}, {&(0x7f00000014c0)=""/68, 0x44}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x7, &(0x7f00000025c0)}, 0x0) 1.252521602s ago: executing program 7 (id=3213): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095004f0000000000febf819de5da7e303c67e50cd814433ba9c807af03b9e46dc0005da5f4024d83c10561ecccaa9cfaa816653a214f14d1153ab95a92eeb755759748f46daf3c3fcf4265f53778cffd57d238b4f267581a080000001f496cee55476a86d547ae469aa2c8"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000040001001feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b600884706c3c66eea36dd5e3e60cc17e1e1fa193474faded0f30280978349831a3c398f010ab238ba2264c86d3b0bd753308871310b40a46ce45111204865ce940f8e05fc5dc9604641cc879da7ea3f1a209d925bcc70f0b8d7000000"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc801) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000077c0), 0x8000000000001ac, 0x2140, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x3c, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x68}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r6) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r7, 0x30b}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.249957332s ago: executing program 1 (id=3214): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x2e0, 0x190, 0xffffffff, 0x190, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) socket(0x10, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f00000004c0)=0xab94, 0x4) 1.249424332s ago: executing program 3 (id=3215): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)=',8', 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db09f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) 1.239067046s ago: executing program 5 (id=3216): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x712, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 839.396896ms ago: executing program 1 (id=3217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000e00000008000300", @ANYRES32=0x0, @ANYBLOB="18000e6107bd06ffffffffe5ff3c04010201ef7dd94e593efafb233672000000"], 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f0000000480)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRES64=r2, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES8=r2, @ANYBLOB="00000000100000000000000000000000000000800000000000000000"], 0x48) 838.234414ms ago: executing program 7 (id=3218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000a000000000000e30300040014000600fe80000000000700"/40], 0x30}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000002c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="05000000010000", 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [0xff], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_to_batadv\x00', 'tunl0\x00', {0xff}, {0xff}, 0x8, 0xa, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xfe1, 0x80, 0xfffffffe, 'snmp_trap\x00', {0x80}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0x0, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0xffffff00], '\x00', 'rose0\x00', {0xff}, {0xff}, 0x6, 0x40, 0x5, 0x47}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x4}, {0x9, 0x7}, {0x8, 0x5000000000000}, 0x800}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xae}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100ffffffff0a2000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200001400490005ac0f"], 0x3c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4004050) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x23}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00'}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r12 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r10, r11, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r12, 0x0, 0x0}, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r13, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 814.454879ms ago: executing program 3 (id=3219): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800500140080ff000008000840000000000500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000400) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 564.700342ms ago: executing program 5 (id=3220): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r4, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 507.705947ms ago: executing program 1 (id=3221): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x400000008000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x114, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000020095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf200000000000001600020038e873a23d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000c4d9b5e23150c76d3275030fef0cfb00000000000800004000000769efe01fe533dc42467bdcdba662d744195edaccd513326e71184ba27ed6", @ANYRES32=0x0, @ANYRES32=r4], 0x40}}, 0xc810) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000015c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001580)={&(0x7f0000001600)=ANY=[@ANYBLOB='X\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0c01028054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000900fa0602000000400001080900000007005a05000000000100e10310a92f6d3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e6700000000000005000300030000000800040027e26b7ef350e401d3756d5bcea84430bfe5576c5eb1c3b05834a3966a2e61200fee98bd0537a8d61b352c0466314270d901a6fe4dd61762ea5fa7bf109db48f5bf83a902c656ec1647f7b74dcb9a2f5e039e6b80fdbf91b88ef7b05e0e99aadff66aa7ed6aab89bc1c02609c116529858d659e13ea79f47c8af35a8e3a06f4381698e8ca1b26cb0c2606e637a24aa9b24b2cb18f6866ef24e0e6a7a66a92e093d11320e0f23e977066c5dd9e38948807fdec289bd7f68f8f47e1a86917c0d86", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040064b2000008000100", @ANYRES32=0x0, @ANYBLOB="bc000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffff7f08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000c00000008000100", @ANYRES32=0x0, @ANYBLOB="7801028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400feff000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010000000100757365725f6c696e6b757000000000000000000000000000000000000000000000000300060000000000040000000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000500000008000100", @ANYRES32=0x0, @ANYBLOB="ec01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400060000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000006600010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c000100afff0100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000002000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040005000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000650000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ec00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB], 0x858}, 0x1, 0x0, 0x0, 0x20000400}, 0x20048008) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0xa, 0x300) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r8, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x31, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0xf, 0x0, @opaque="2272422b619160"}}}}}, 0x0) 386.431425ms ago: executing program 3 (id=3222): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbff2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbff2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) (async) 299.044777ms ago: executing program 5 (id=3223): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x800, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3a}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x20008880) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40408c0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r5, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004011}, 0x40) r6 = socket$inet6(0xa, 0x5, 0x2) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r3) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r7, 0x2, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0xda14}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x240008c0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x84, &(0x7f0000000700)=[@in6={0xa, 0x4e20, 0x2, @remote, 0x2}, @in6={0xa, 0x4e22, 0x4000, @remote, 0x55334453}, @in6={0xa, 0x4e23, 0x7fffffff, @mcast2, 0x80}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000800)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000840)=@assoc_value={r9}, 0x8) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r5, 0x1, 0x3, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c801}, 0x200080c0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000a00), 0x4) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f0000000a40), &(0x7f0000000a80)=0xc) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000b00)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x24000004) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r12, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040081}, 0x40) syz_80211_inject_frame(&(0x7f0000000d80)=@broadcast, &(0x7f0000000dc0)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x4}, @broadcast, @device_b, @random="12e79dea6d70", {0x1, 0xe2f}, @value=@ver_80211n={0x0, 0x9, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x1, 0x6, 0x0, {0x58, 0x5, 0x0, 0x81, 0x0, 0x1, 0x0, 0x2}, 0x8, 0x8, 0x40}}, @val={0x72, 0x6}, [{0xdd, 0x49, "2681cee3f711020ffb89c2d88a0eb800034bca023a7025eaafe374a020fc10a6b29c3986dd906d0c4f955f6be30f5edff2e78b9a71019c434fcd8e82fcb68d860f92a2a87a7c998195"}]}, 0x8b) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r13, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @void, @val={0xc, 0x99, {0xfffffff9, 0x70}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48844}, 0x24000804) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000001500)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f00000010c0)={0x3ec, 0x14, 0x300, 0x70bd28, 0x25dfdbfe, {0x15}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "b7926e330993b4586c0483a84e2622db1e98cdae80828ca67bcbfc3b309ffd7fc7"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "f09b1e2eafbc92a6b26004eca1316e085efa1592"}, @INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "76deae54fdabecaf81c9198e868b5b53162a5def63601fb77ab27ecb7cb134d51bca838072f8c05d72d9e377fe2cb14b0e1bbae08c009179a70a8ab970ce251d88cc2c11d6837c59ce78f89179e43f621f8e636080ec06866986eaf36cb49727e6fc83480060db7312e57d8c6afdb11051b67f6270c7225ddf65cc51ba43aeab149d2599aa15bbc840e818bd08b71a2db5cac1b5354977f5f8f406f2462ec8ba927216007072171119ddd294b9034977f7c4d79fd799559534bee66156e99ad97ea12cccb057c582b7389888e83cfb"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "29ff1376ccbf635fc19c9f4a52901364157ee1ceffb85ac5ac94e3a3fe6c35363df2aa7029e2913bb0eed312a0cf497775194dce58e140d17463cbd7788f2223bb1dfa7ea09190f5c807275da452d0728fb27cc20fed7c837260adb93337954b9e9f11d828130b702a96419315c73b065876960cb4c0050740cf57e74e5db8929b6af7471a62d0318334"}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "31227d1d03d94821ecf81b83545c946b7365447de97c8282d81e55502de96a4e86076d72654932f9c2e2968c04ee4276dca90fa656013dda320fe24ca9e9c8ac41e5b42e88d8be3ed76211335c95f9a582a8521145c99d9dae4e5adb4fe99a5c4bba12d48b17bf03d39a0f4190b7d65d8604060d18e5282147"}, @INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "bbbe49690bb012e9df4f51d44525d85347018e3bb852120907031d7a2ad5c9b6f66c06cd8173a0da448a941efe410dd7406bab552fc9b90ea9"}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "22d67c27227e26eeb8b3d1e7a0f50c25d45c190b7d79fe3f8d7a0239d235bf195baa3b39be4088e4a6b2238b9a2d3447354364538c28723f04157310463695a25b637e4bebc161a8e95b8dd64b9732e9a70598e89d309ccf56fa55c113e506d4cf8d2cd1d71e60617bae33232c710b0d756be000ae78fd1eba011fe06b63b916c4c6"}, @INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "7a2219942e71af0a69b4b3c84e3a197c4472d5ff480eb6a4955980f6bb378fd2339b4ebea0115bb25a627ea89977a1dcd202b17eafac672a62eb194f44ef26d6eedf3b74c39935c8698332b4425d11a35817a70ae3465b2648c55f12a7198ae7cb0d507b143e0174a0504c023a8b67d5f6c3de6313c02a0ebe2f06ee638dc751a14aa5b78b0324d80d4cd6909dee3d8a4e79507131f3851f89eadbfad97d315905390ee6dcd0a1f450989ce5a9e7231a2056a1f69d3bfd7ebeab5db222e409b31078793fe7bfc5b8c6168079c98c52f19eb163b534efea025c36b814abad1d1852c85a037b461d"}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 175.421372ms ago: executing program 7 (id=3224): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000300)={'nat\x00', 0x0, 0x4, 0xdb, [0x5, 0xfffffffffffffffe, 0x7, 0x2, 0x2, 0x8a], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000200)=""/219}, &(0x7f0000000380)=0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 173.920087ms ago: executing program 6 (id=3225): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000300000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e21, @broadcast}, 0xc1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xfffffffffffffffc, 0x9, 0x6}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc) 110.115882ms ago: executing program 1 (id=3226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x33a) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) recvfrom$inet(r5, &(0x7f0000000000)=""/41, 0x29, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=3227): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}]}, &(0x7f0000000080)=0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8010, 0x3}, 0x48) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069106b0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYRES32=r1], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 263214][T12074] bond7: (slave bridge8): making interface the new active one [ 250.304461][T12074] bridge8: entered promiscuous mode [ 250.311011][T12074] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 250.746489][T12098] Cannot find add_set index 0 as target [ 251.208324][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 251.954618][T12110] validate_nla: 29 callbacks suppressed [ 251.954637][T12110] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 252.031246][T12110] bond12: entered promiscuous mode [ 252.042233][T12110] 8021q: adding VLAN 0 to HW filter on device bond12 [ 252.145202][T12115] netlink: 'syz.0.1738': attribute type 12 has an invalid length. [ 252.157008][T12115] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1738'. [ 252.170771][T12121] bond12: (slave bridge5): making interface the new active one [ 252.179956][T12121] bridge5: entered promiscuous mode [ 252.188400][T12121] bond12: (slave bridge5): Enslaving as an active interface with an up link [ 252.588544][T12135] xt_TCPMSS: Only works on TCP SYN packets [ 252.691803][T12142] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1747'. [ 252.714534][T12141] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1747'. [ 252.862326][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1748'. [ 253.113904][T12162] netlink: 'syz.4.1753': attribute type 1 has an invalid length. [ 253.200394][T12162] bond11: entered promiscuous mode [ 253.206709][T12162] 8021q: adding VLAN 0 to HW filter on device bond11 [ 253.256787][T12174] bond11: (slave bridge11): making interface the new active one [ 253.264725][T12174] bridge11: entered promiscuous mode [ 253.272298][T12174] bond11: (slave bridge11): Enslaving as an active interface with an up link [ 253.372035][T12178] netlink: 'syz.0.1756': attribute type 2 has an invalid length. [ 253.387344][T12171] netlink: 'syz.0.1756': attribute type 2 has an invalid length. [ 253.524551][T12184] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1757'. [ 253.630939][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1761'. [ 253.647315][T12193] openvswitch: netlink: Flow key attr not present in new flow. [ 253.672479][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1761'. [ 253.727574][T12195] syzkaller0: entered promiscuous mode [ 253.733202][T12195] syzkaller0: entered allmulticast mode [ 253.935812][T12203] ipvlan3: entered allmulticast mode [ 253.943093][T12203] batadv_slave_1: entered allmulticast mode [ 253.953951][T12203] batman_adv: batadv0: Adding interface: ipvlan3 [ 253.968432][T12203] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.017785][T12203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.034779][T12203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.049153][T12203] batman_adv: batadv0: Interface activated: ipvlan3 [ 254.157250][T12213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1766'. [ 254.259698][T12216] netlink: 'syz.0.1768': attribute type 1 has an invalid length. [ 254.351224][T12205] x_tables: duplicate underflow at hook 1 [ 254.436508][T12226] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1771'. [ 254.499448][T12216] bond8: entered promiscuous mode [ 254.522487][T12216] 8021q: adding VLAN 0 to HW filter on device bond8 [ 254.623010][T12219] bond8: (slave bridge9): making interface the new active one [ 254.633780][T12219] bridge9: entered promiscuous mode [ 254.640190][T12219] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 255.277973][T12263] __nla_validate_parse: 1 callbacks suppressed [ 255.277994][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1780'. [ 255.450142][T12265] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1778'. [ 255.718927][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.726996][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.103791][T12305] xt_l2tp: v2 doesn't support IP mode [ 256.150704][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 256.500940][T12325] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1794'. [ 256.768609][ T5293] veth0_macvtap: left promiscuous mode [ 256.983729][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1800'. [ 257.025318][T12349] openvswitch: netlink: Unknown nsh attribute 0 [ 257.065339][T12354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1802'. [ 257.092500][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'. [ 257.422151][T12370] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1806'. [ 257.756231][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1810'. [ 258.033038][T12403] netlink: 'syz.4.1814': attribute type 1 has an invalid length. [ 258.059475][T12404] netlink: 'syz.4.1814': attribute type 1 has an invalid length. [ 258.113134][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1815'. [ 258.440921][T12419] netlink: 'syz.5.1820': attribute type 1 has an invalid length. [ 258.465861][T12419] netlink: 'syz.5.1820': attribute type 2 has an invalid length. [ 258.578514][T12425] bond26 (unregistering): Released all slaves [ 259.453872][T12474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.075222][T12497] netlink: 'syz.5.1839': attribute type 2 has an invalid length. [ 260.109736][T12497] netlink: 'syz.5.1839': attribute type 11 has an invalid length. [ 260.135907][T12500] netlink: 'syz.1.1840': attribute type 1 has an invalid length. [ 260.187234][T12501] sctp: [Deprecated]: syz.3.1841 (pid 12501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.187234][T12501] Use struct sctp_sack_info instead [ 260.212573][T12500] bond26: entered promiscuous mode [ 260.219318][T12500] 8021q: adding VLAN 0 to HW filter on device bond26 [ 260.334884][T12504] bond26: (slave bridge12): making interface the new active one [ 260.373544][T12504] bridge12: entered promiscuous mode [ 260.407634][T12504] bond26: (slave bridge12): Enslaving as an active interface with an up link [ 260.443420][T12516] netlink: 'syz.5.1844': attribute type 1 has an invalid length. [ 260.480699][T12516] netlink: 'syz.5.1844': attribute type 11 has an invalid length. [ 260.514873][T12516] __nla_validate_parse: 9 callbacks suppressed [ 260.514893][T12516] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1844'. [ 260.641364][T12528] netlink: 'syz.3.1847': attribute type 9 has an invalid length. [ 261.008337][T12543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1852'. [ 261.093549][T12545] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1852'. [ 261.140999][T12548] sit0: entered promiscuous mode [ 261.155038][T12548] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1853'. [ 261.174419][T12551] netlink: 'syz.5.1854': attribute type 11 has an invalid length. [ 261.508876][T12560] bond12: entered promiscuous mode [ 261.514905][T12560] 8021q: adding VLAN 0 to HW filter on device bond12 [ 261.522819][T12556] syzkaller1: entered promiscuous mode [ 261.530725][T12556] syzkaller1: entered allmulticast mode [ 261.582845][T12564] bond12: (slave bridge12): making interface the new active one [ 261.591050][T12564] bridge12: entered promiscuous mode [ 261.597638][T12564] bond12: (slave bridge12): Enslaving as an active interface with an up link [ 261.772092][T12579] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1862'. [ 261.793331][T12576] vlan3: entered allmulticast mode [ 261.802513][T12576] veth1_virt_wifi: entered allmulticast mode [ 261.932542][T12588] veth0: entered promiscuous mode [ 262.218872][T12584] veth0: left promiscuous mode [ 262.529767][T12623] bond1: entered promiscuous mode [ 262.536324][T12623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.590012][T12630] bond1: (slave bridge2): making interface the new active one [ 262.600662][T12630] bridge2: entered promiscuous mode [ 262.608564][T12630] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 263.095077][T12649] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1880'. [ 263.112816][T12651] netlink: 808 bytes leftover after parsing attributes in process `syz.0.1881'. [ 263.158274][T12649] : renamed from bond0 (while UP) [ 263.259676][T12655] ip_vti0: left promiscuous mode [ 263.302595][T12655] syz_tun: left promiscuous mode [ 263.371416][T12655] bridge3: left promiscuous mode [ 263.378827][T12655] bond1: left promiscuous mode [ 263.384452][T12655] bond2: left promiscuous mode [ 263.394762][T12655] bridge4: left promiscuous mode [ 263.415068][T12655] gretap1: left promiscuous mode [ 263.421651][T12655] bond3: left promiscuous mode [ 263.428098][T12655] bridge5: left promiscuous mode [ 263.436423][T12655] bond4: left promiscuous mode [ 263.441326][T12655] bridge6: left promiscuous mode [ 263.450238][T12655] geneve2: left promiscuous mode [ 263.459720][T12655] geneve3: left promiscuous mode [ 263.465491][T12655] bond7: left promiscuous mode [ 263.485280][T12655] bridge8: left promiscuous mode [ 263.498444][T12655] bond8: left promiscuous mode [ 263.509074][T12655] bridge9: left promiscuous mode [ 263.777626][T12672] validate_nla: 4 callbacks suppressed [ 263.777646][T12672] netlink: 'syz.5.1888': attribute type 1 has an invalid length. [ 263.942481][T12665] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ..ô§÷&ªáï×àJ†?=\þlµ[[¹úi5„ž` [ 263.982336][T12672] bond2: entered promiscuous mode [ 263.988695][T12672] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.027497][T12674] bond2: (slave bridge3): making interface the new active one [ 264.035386][T12674] bridge3: entered promiscuous mode [ 264.044569][T12674] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 264.334007][T12678] syzkaller0: entered promiscuous mode [ 264.347690][T12678] syzkaller0: entered allmulticast mode [ 264.886816][T12696] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1894'. [ 264.887594][T12697] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1894'. [ 264.906511][T12697] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1894'. [ 264.929963][T12696] gretap0: entered promiscuous mode [ 264.948658][T12696] gretap0: left promiscuous mode [ 264.997630][T12697] gretap0: entered promiscuous mode [ 265.004928][T12697] gretap0: left promiscuous mode [ 265.976707][T12725] netlink: 'syz.5.1899': attribute type 1 has an invalid length. [ 266.078516][T12725] bond3: entered promiscuous mode [ 266.084247][T12725] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.112996][T12729] bond3: (slave bridge4): making interface the new active one [ 266.120827][T12729] bridge4: entered promiscuous mode [ 266.127457][T12729] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 267.400416][T12768] __nla_validate_parse: 2 callbacks suppressed [ 267.400432][T12768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1908'. [ 269.260334][T12732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.413310][T12772] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1909'. [ 269.441646][T12772] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 269.463163][T12776] netlink: 'syz.0.1910': attribute type 5 has an invalid length. [ 269.488303][T12772] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 269.609486][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'. [ 269.651115][T12787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1913'. [ 269.870846][T12792] 8021q: adding VLAN 0 to HW filter on device bond9 [ 269.886722][T12792] bridge0: port 3(bond9) entered blocking state [ 269.893800][T12792] bridge0: port 3(bond9) entered disabled state [ 269.902095][T12792] bond9: entered allmulticast mode [ 269.912912][T12792] bond9: entered promiscuous mode [ 269.924642][T12780] syzkaller1: entered promiscuous mode [ 269.933592][T12780] syzkaller1: entered allmulticast mode [ 270.582225][T12840] netlink: 'syz.5.1922': attribute type 21 has an invalid length. [ 270.598792][T12840] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1922'. [ 270.642880][T12840] netlink: 'syz.5.1922': attribute type 5 has an invalid length. [ 270.705885][T12840] netlink: 'syz.5.1922': attribute type 6 has an invalid length. [ 270.730760][T12840] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1922'. [ 271.022536][T12862] netlink: zone id is out of range [ 271.029808][T12862] netlink: zone id is out of range [ 271.035177][T12862] netlink: zone id is out of range [ 271.041100][T12862] netlink: zone id is out of range [ 271.046753][T12862] netlink: zone id is out of range [ 271.049464][T12855] bond13: option lp_interval: invalid value (0) [ 271.052343][T12862] netlink: zone id is out of range [ 271.066210][T12862] netlink: zone id is out of range [ 271.071462][T12862] netlink: zone id is out of range [ 271.079153][T12862] netlink: zone id is out of range [ 271.089283][T12862] netlink: zone id is out of range [ 271.105905][T12855] bond13: option lp_interval: allowed values 1 - 2147483647 [ 271.136353][T12855] bond13 (unregistering): Released all slaves [ 271.191154][T12865] netlink: 'syz.0.1929': attribute type 12 has an invalid length. [ 271.484775][T12876] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1932'. [ 271.521510][T12875] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1932'. [ 271.836724][T12899] netlink: 'syz.0.1937': attribute type 9 has an invalid length. [ 272.058105][T12908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1941'. [ 272.323211][T12925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1944'. [ 272.661775][T12950] netlink: 'syz.4.1949': attribute type 1 has an invalid length. [ 272.784249][T12930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1944'. [ 273.509167][T12984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1957'. [ 273.560755][ T6791] udevd[6791]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 273.656657][T12986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.719968][T12994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.736649][T12994] batadv_slave_1: entered promiscuous mode [ 273.959882][T13003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1963'. [ 274.027386][T13009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1964'. [ 274.052046][T13007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1963'. [ 274.061859][T13007] nbd: nbd64 already in use [ 274.332585][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'. [ 274.485410][ T6791] udevd[6791]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 274.688804][T13031] netlink: 'syz.0.1969': attribute type 21 has an invalid length. [ 274.705848][T13031] IPv6: NLM_F_CREATE should be specified when creating new route [ 274.730531][T13031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.739530][T13031] IPv6: NLM_F_CREATE should be set when creating new route [ 274.746879][T13031] IPv6: NLM_F_CREATE should be set when creating new route [ 274.754139][T13031] IPv6: NLM_F_CREATE should be set when creating new route [ 274.786538][T13033] vlan1: entered allmulticast mode [ 275.004228][T13044] netlink: 'syz.3.1973': attribute type 1 has an invalid length. [ 275.025145][T13044] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1973'. [ 275.048572][T13044] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1973'. [ 275.069960][T13044] netlink: 'syz.3.1973': attribute type 1 has an invalid length. [ 275.090508][T13044] netlink: 'syz.3.1973': attribute type 8 has an invalid length. [ 275.108323][T13044] netlink: 606 bytes leftover after parsing attributes in process `syz.3.1973'. [ 275.495350][T13055] syzkaller0: entered promiscuous mode [ 275.527330][T13055] syzkaller0: entered allmulticast mode [ 275.562064][T13066] IPv6: sit1: Disabled Multicast RS [ 275.602469][T13069] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1979'. [ 278.032627][T13107] bond0: (slave bond_slave_1): Releasing backup interface [ 278.080362][T13105] syzkaller0: entered promiscuous mode [ 278.096614][T13105] syzkaller0: entered allmulticast mode [ 278.150165][T13105] tipc: Started in network mode [ 278.169483][T13105] tipc: Node identity 2ec1d126cbd8, cluster identity 4711 [ 278.181871][T13115] Cannot find del_set index 3 as target [ 278.202453][T13105] tipc: Enabled bearer , priority 0 [ 278.219111][T13108] __nla_validate_parse: 2 callbacks suppressed [ 278.219133][T13108] netlink: 211128 bytes leftover after parsing attributes in process `syz.5.1991'. [ 278.277979][T13104] tipc: Resetting bearer [ 278.364677][T13121] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1997'. [ 278.382288][T13104] tipc: Disabling bearer [ 278.395053][T13124] netlink: 'syz.1.1999': attribute type 2 has an invalid length. [ 278.404103][T13124] netlink: 'syz.1.1999': attribute type 11 has an invalid length. [ 278.412200][T13124] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1999'. [ 278.428564][T13121] netlink: 'syz.4.1997': attribute type 10 has an invalid length. [ 278.610906][T13128] netlink: 'syz.3.2001': attribute type 8 has an invalid length. [ 278.650451][T13128] sch_fq: defrate 0 ignored. [ 278.693977][T13128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2001'. [ 278.820040][T13142] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2006'. [ 278.831447][T13138] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2005'. [ 278.841092][T13142] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2006'. [ 278.851687][T13130] rdma_op ffff8880564191f0 conn xmit_rdma 0000000000000000 [ 278.863061][T13143] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2006'. [ 279.149158][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2011'. [ 279.351166][T13168] syzkaller0: entered promiscuous mode [ 279.365804][T13168] syzkaller0: entered allmulticast mode [ 279.657490][T13180] pimreg3: entered allmulticast mode [ 279.669915][T13180] sctp: [Deprecated]: syz.4.2015 (pid 13180) Use of int in max_burst socket option deprecated. [ 279.669915][T13180] Use struct sctp_assoc_value instead [ 280.308415][T13199] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2018'. [ 281.315814][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.028021][T13151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.235183][ T9300] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 283.222409][T13244] syzkaller0: entered promiscuous mode [ 283.235049][T13244] syzkaller0: entered allmulticast mode [ 283.272470][T13252] __nla_validate_parse: 2 callbacks suppressed [ 283.272493][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2032'. [ 283.912881][T13276] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2039'. [ 285.647353][T13265] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 285.654748][T13265] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 285.733226][T13276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.744725][ T5654] Bluetooth: hci5: link tx timeout [ 285.750341][ T5654] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.787887][T13276] bond0 (unregistering): Released all slaves [ 285.899998][ T9301] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 285.981982][ T9301] bond1: now running without any active interface! [ 286.108615][ T5654] Bluetooth: hci5: link tx timeout [ 286.114758][ T5654] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.368500][T13311] netlink: 'syz.3.2046': attribute type 11 has an invalid length. [ 286.407427][T13311] netlink: 'syz.3.2046': attribute type 4 has an invalid length. [ 286.424149][T13311] netlink: 'syz.3.2046': attribute type 6 has an invalid length. [ 286.469365][T13311] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.2046'. [ 286.491595][T13311] netlink: 'syz.3.2046': attribute type 11 has an invalid length. [ 286.499991][T13311] netlink: 'syz.3.2046': attribute type 4 has an invalid length. [ 286.509312][T13311] netlink: 'syz.3.2046': attribute type 6 has an invalid length. [ 286.521609][T13311] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.2046'. [ 286.532485][T13311] netlink: 'syz.3.2046': attribute type 11 has an invalid length. [ 286.542201][T13311] netlink: 'syz.3.2046': attribute type 4 has an invalid length. [ 286.551939][T13311] netlink: 'syz.3.2046': attribute type 6 has an invalid length. [ 286.572931][T13311] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.2046'. [ 286.599407][T13311] netlink: 'syz.3.2046': attribute type 11 has an invalid length. [ 286.621669][T13311] netlink: 'syz.3.2046': attribute type 4 has an invalid length. [ 286.641428][T13311] netlink: 'syz.3.2046': attribute type 6 has an invalid length. [ 286.661867][T13311] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.2046'. [ 286.685460][T13311] netlink: 'syz.3.2046': attribute type 11 has an invalid length. [ 286.697348][T13311] netlink: 'syz.3.2046': attribute type 4 has an invalid length. [ 286.705437][T13311] netlink: 'syz.3.2046': attribute type 6 has an invalid length. [ 286.713926][T13311] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.2046'. [ 286.751895][T13311] netlink: 'syz.3.2046': attribute type 11 has an invalid length. [ 286.773820][T13324] 8021q: VLANs not supported on ip6gre0 [ 286.782910][T13311] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.2046'. [ 286.813565][T13311] netlink: 'syz.3.2046': attribute type 11 has an invalid length. [ 286.832644][T13311] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.2046'. [ 286.867960][T13311] netlink: 'syz.3.2046': attribute type 11 has an invalid length. [ 286.907448][T13311] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.2046'. [ 286.937996][T13311] netlink: 'syz.3.2046': attribute type 11 has an invalid length. [ 286.972560][T13311] netlink: 'syz.3.2046': attribute type 11 has an invalid length. [ 287.011788][T13339] NCSI netlink: No device for ifindex 0 [ 287.234774][T13346] bridge14: entered promiscuous mode [ 287.274710][T13346] bridge14: entered allmulticast mode [ 287.790376][T13367] IPv6: sit1: Disabled Multicast RS [ 287.805908][ T5654] Bluetooth: hci5: command 0x040f tx timeout [ 288.420360][T13411] __nla_validate_parse: 30 callbacks suppressed [ 288.420383][T13411] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.2074'. [ 288.484345][T13413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2075'. [ 288.614870][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2076'. [ 288.678773][T13424] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2079'. [ 288.709020][T13424] net_ratelimit: 819 callbacks suppressed [ 288.709038][T13424] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 288.941855][T13436] bridge_slave_0: left allmulticast mode [ 288.947829][T13436] bridge_slave_0: left promiscuous mode [ 288.953787][T13436] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.008590][T13436] bridge_slave_1: left allmulticast mode [ 289.037254][T13436] bridge_slave_1: left promiscuous mode [ 289.057193][T13436] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.081396][T13436] bond9: left promiscuous mode [ 289.093173][T13448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2086'. [ 289.110005][T13436] bond0: (slave bond_slave_0): Releasing backup interface [ 289.118669][T13436] bond_slave_0: left allmulticast mode [ 289.127257][T13436] bond0: (slave bond_slave_1): Releasing backup interface [ 289.139590][T13436] bond_slave_1: left allmulticast mode [ 289.160124][T13436] team0: Port device team_slave_0 removed [ 289.186005][T13436] team0: Port device team_slave_1 removed [ 289.199398][T13436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.210383][T13436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.221727][T13436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.231590][T13436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.251466][T13436] bond2: (slave bridge4): Releasing backup interface [ 289.272064][T13436] bond3: (slave bridge5): Releasing backup interface [ 289.290278][T13436] bond4: (slave bridge6): Releasing backup interface [ 289.304801][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2086'. [ 289.331210][T13436] bond7: (slave bridge8): Releasing backup interface [ 289.343488][T13436] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 289.350846][T13436] batman_adv: batadv0: Removing interface: ipvlan3 [ 289.366136][T13455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2086'. [ 289.376930][T13436] bond8: (slave bridge9): Releasing backup interface [ 289.389390][T13436] bond9: left allmulticast mode [ 289.395286][T13436] bridge0: port 3(bond9) entered disabled state [ 289.548354][T13448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.585884][T13463] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2088'. [ 289.672926][T13451] 8021q: adding VLAN 0 to HW filter on device bond27 [ 289.681899][T13451] bond0: (slave bond27): Enslaving as an active interface with an up link [ 289.699696][T13454] bond0 (unregistering): (slave bond27): Releasing backup interface [ 289.714133][T13454] bond0 (unregistering): Released all slaves [ 289.752747][T13458] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 289.791949][T13467] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 290.152935][T13474] 8021q: adding VLAN 0 to HW filter on device bond4 [ 290.321105][T13478] bond4: (slave gretap1): making interface the new active one [ 290.343301][T13504] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 290.359399][T13478] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 290.421920][T13487] IPv6: sit1: Disabled Multicast RS [ 290.622304][T13511] xt_hashlimit: size too large, truncated to 1048576 [ 290.647420][T13516] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2103'. [ 290.717298][T13521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.728034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.918362][ T9300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.928438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.126743][T13533] veth7: entered allmulticast mode [ 291.373545][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2113'. [ 291.421894][T13553] validate_nla: 94 callbacks suppressed [ 291.421916][T13553] netlink: 'syz.0.2112': attribute type 1 has an invalid length. [ 291.457416][T13555] 8021q: VLANs not supported on gre0 [ 291.830023][T13576] xt_hashlimit: invalid interval [ 292.047013][T13567] team1: entered promiscuous mode [ 292.060237][T13567] team1: entered allmulticast mode [ 292.196967][ T132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.210465][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.222213][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.232124][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.121822][T13633] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.131359][T13633] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.381733][T13633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.423157][T13633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.663016][T13633] bond1: left promiscuous mode [ 293.673073][T13633] bridge2: left promiscuous mode [ 293.674005][T13677] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.693553][T13633] bond2: left promiscuous mode [ 293.698846][T13633] bridge3: left promiscuous mode [ 293.710607][T13633] bond3: left promiscuous mode [ 293.716870][T13633] bridge4: left promiscuous mode [ 293.724967][T13677] netlink: 'syz.4.2139': attribute type 13 has an invalid length. [ 293.745065][T13677] __nla_validate_parse: 7 callbacks suppressed [ 293.745086][T13677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2139'. [ 293.787761][T13633] team1: left promiscuous mode [ 293.792815][T13633] team1: left allmulticast mode [ 293.802251][T13640] tipc: Enabling not permitted [ 293.810258][T13640] tipc: Enabling of bearer rejected, failed to enable media [ 293.835603][ T54] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.884158][ T54] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.924722][ T54] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.944439][ T54] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.062904][T13682] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2140'. [ 294.354324][T13698] netlink: 'syz.0.2146': attribute type 10 has an invalid length. [ 294.373297][T13698] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2146'. [ 294.425470][T13701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2147'. [ 294.558490][T13709] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2150'. [ 295.153507][T13735] net_ratelimit: 1 callbacks suppressed [ 295.153529][T13735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.168925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.272894][T13735] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2158'. [ 295.316441][T13646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.562338][T13750] netlink: 'syz.3.2164': attribute type 63 has an invalid length. [ 295.565002][T13753] netlink: 'syz.3.2164': attribute type 63 has an invalid length. [ 295.709385][T13759] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 295.743649][T13759] tipc: Enabled bearer , priority 10 [ 295.829216][T13761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.840322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.914422][T13764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2168'. [ 295.934313][T13764] gtp0: entered promiscuous mode [ 295.939876][T13764] gtp0: entered allmulticast mode [ 296.015850][T13764] xt_connbytes: Forcing CT accounting to be enabled [ 296.051033][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.059876][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.264954][T13782] dvmrp0: entered allmulticast mode [ 296.388778][T13785] netlink: 'syz.5.2175': attribute type 1 has an invalid length. [ 296.475834][T13785] bond5: (slave veth3): Enslaving as an active interface with a down link [ 296.515033][T13792] 8021q: adding VLAN 0 to HW filter on device bond5 [ 296.614679][T13796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2177'. [ 296.691212][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2177'. [ 296.769941][T13802] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2178'. [ 296.996397][T13812] veth1_to_bond: entered allmulticast mode [ 297.084985][T13812] xt_hashlimit: size too large, truncated to 1048576 [ 297.167603][T13814] veth1_to_bond (unregistering): left allmulticast mode [ 297.287111][T13814] bond0: (slave bond_slave_1): Releasing backup interface [ 297.457658][T13842] x_tables: unsorted underflow at hook 4 [ 297.966706][ T9301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.976174][T13646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.994799][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.231195][T13872] netlink: 'syz.5.2198': attribute type 21 has an invalid length. [ 298.275379][T13872] netlink: 'syz.5.2198': attribute type 6 has an invalid length. [ 298.684974][T13896] netlink: 'syz.1.2203': attribute type 24 has an invalid length. [ 298.777163][T13900] syzkaller0: entered promiscuous mode [ 298.782842][T13900] syzkaller0: entered allmulticast mode [ 298.967336][T13907] __nla_validate_parse: 9 callbacks suppressed [ 298.967355][T13907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2206'. [ 299.822301][T13911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.932915][T13946] ieee802154 phy0 wpan0: encryption failed: -22 [ 300.013390][T13952] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2216'. [ 300.015059][T13953] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2216'. [ 300.048445][T13948] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2216'. [ 300.140038][T13957] netlink: 'syz.5.2219': attribute type 28 has an invalid length. [ 300.148184][T13957] netlink: 'syz.5.2219': attribute type 3 has an invalid length. [ 300.158722][T13957] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2219'. [ 300.281452][T13960] netlink: 'syz.3.2220': attribute type 9 has an invalid length. [ 300.349785][T13646] IPVS: starting estimator thread 0... [ 300.363758][T13961] net_ratelimit: 3 callbacks suppressed [ 300.363837][T13961] IPVS: dh: FWM 3 0x00000003 - no destination available [ 300.471121][T13965] IPVS: using max 27 ests per chain, 64800 per kthread [ 300.714448][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.723632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.773941][T13979] netlink: 'syz.5.2226': attribute type 1 has an invalid length. [ 300.801894][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2226'. [ 300.976776][T13993] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 300.993284][T13993] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 301.079057][T13646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.652544][T14021] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2237'. [ 301.669302][T14021] netlink: 'syz.1.2237': attribute type 2 has an invalid length. [ 301.677751][T14021] netlink: 'syz.1.2237': attribute type 1 has an invalid length. [ 301.687298][T14024] nla_validate_range_unsigned: 23 callbacks suppressed [ 301.687316][T14024] netlink: 'syz.0.2238': attribute type 11 has an invalid length. [ 301.723246][T14024] netlink: 'syz.0.2238': attribute type 5 has an invalid length. [ 301.734427][T14024] netlink: 6548 bytes leftover after parsing attributes in process `syz.0.2238'. [ 301.779073][T14030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2239'. [ 301.804261][ T132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.812959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.198811][T14049] xt_l2tp: invalid flags combination: 4 [ 302.300696][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 302.504171][T14059] bond13 (unregistering): Released all slaves [ 303.147457][T14090] netlink: Unknown conntrack attr (type=2304, max=9) [ 303.624984][T14113] validate_nla: 4 callbacks suppressed [ 303.625003][T14113] netlink: 'syz.3.2261': attribute type 21 has an invalid length. [ 303.716882][ T9296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.749393][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.763500][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.885181][T14124] syzkaller0: entered promiscuous mode [ 303.892864][T14124] syzkaller0: entered allmulticast mode [ 303.903622][T14124] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 304.302348][T14140] netlink: 'syz.1.2269': attribute type 23 has an invalid length. [ 304.413149][T14146] __nla_validate_parse: 5 callbacks suppressed [ 304.413168][T14146] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2272'. [ 304.434122][T14146] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2272'. [ 304.662944][T14160] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2276'. [ 304.672762][T14159] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2276'. [ 304.808522][T14167] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2278'. [ 305.037093][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2281'. [ 305.069552][T14182] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2284'. [ 305.080756][T14183] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2284'. [ 305.109416][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2281'. [ 305.563806][T14205] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2288'. [ 305.865344][T14230] netlink: 'syz.0.2293': attribute type 2 has an invalid length. [ 305.902949][T14230] netlink: 'syz.0.2293': attribute type 11 has an invalid length. [ 306.099166][T14247] netlink: 'syz.0.2297': attribute type 12 has an invalid length. [ 306.124228][T14243] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 306.132166][T14243] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 306.142493][T14244] 8021q: VLANs not supported on ip6gre0 [ 306.155844][T14243] 8021q: VLANs not supported on ip6gre0 [ 306.405036][T14257] netlink: 'syz.5.2301': attribute type 1 has an invalid length. [ 306.837231][ T10] net_ratelimit: 2 callbacks suppressed [ 306.837254][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.921987][ T9296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.930664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.244948][T14295] tipc: Enabled bearer , priority 0 [ 307.278908][T14304] tipc: Enabling of bearer rejected, already enabled [ 307.324514][T14295] syzkaller0: MTU too low for tipc bearer [ 307.337720][T14295] tipc: Disabling bearer [ 307.462078][T14308] syzkaller1: entered promiscuous mode [ 307.474287][T14308] syzkaller1: entered allmulticast mode [ 307.711707][T14324] netlink: 'syz.5.2317': attribute type 12 has an invalid length. [ 307.739339][T14324] netlink: 'syz.5.2317': attribute type 29 has an invalid length. [ 307.765128][T14324] netlink: 'syz.5.2317': attribute type 1 has an invalid length. [ 307.779450][T14324] netlink: 'syz.5.2317': attribute type 2 has an invalid length. [ 307.788393][T14328] syzkaller0: entered promiscuous mode [ 307.794046][T14328] syzkaller0: entered allmulticast mode [ 308.780249][T14376] validate_nla: 4 callbacks suppressed [ 308.780330][T14376] netlink: 'syz.5.2330': attribute type 39 has an invalid length. [ 309.097386][T14389] netlink: zone id is out of range [ 309.103278][T14389] netlink: zone id is out of range [ 309.109530][T14389] netlink: zone id is out of range [ 309.114797][T14389] netlink: zone id is out of range [ 309.132086][T14389] netlink: zone id is out of range [ 309.137673][T14389] netlink: zone id is out of range [ 309.149376][T14389] netlink: zone id is out of range [ 309.162459][T14391] ieee802154 phy0 wpan0: encryption failed: -22 [ 309.486628][T14410] netlink: 'syz.3.2339': attribute type 1 has an invalid length. [ 309.556785][T14410] __nla_validate_parse: 12 callbacks suppressed [ 309.556805][T14410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2339'. [ 309.716185][ T4948] Bluetooth: hci2: command 0x0406 tx timeout [ 309.959020][T14432] bridge7: entered allmulticast mode [ 309.978897][T14434] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2346'. [ 310.204979][T14446] netlink: 'syz.3.2349': attribute type 1 has an invalid length. [ 310.280883][T14456] xt_addrtype: ipv6 does not support BROADCAST matching [ 310.305018][T14453] bond10: Unable to set down delay as MII monitoring is disabled [ 310.319018][T14453] bond10 (unregistering): Released all slaves [ 310.483569][T14454] bridge13: entered promiscuous mode [ 310.521115][T14454] bridge13: entered allmulticast mode [ 310.849894][ T5654] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.871509][ T5654] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.881839][ T5654] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.895343][ T5654] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.914245][ T5654] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 311.371036][T14505] xt_hashlimit: size too large, truncated to 1048576 [ 311.902222][T14505] xt_hashlimit: size too large, truncated to 1048576 [ 312.495127][T14548] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2370'. [ 312.548073][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'. [ 312.599865][T14551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2369'. [ 312.679712][ T54] net_ratelimit: 825 callbacks suppressed [ 312.679732][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.694038][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.917526][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.002437][ T4948] Bluetooth: hci6: command tx timeout [ 313.409103][T14584] netlink: 'syz.1.2378': attribute type 14 has an invalid length. [ 313.569925][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 313.644117][T14482] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.678220][T14482] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.695923][T14482] bridge_slave_0: entered allmulticast mode [ 313.709884][T14482] bridge_slave_0: entered promiscuous mode [ 313.728265][T14482] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.751696][T14482] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.767871][T14482] bridge_slave_1: entered allmulticast mode [ 313.789156][T14482] bridge_slave_1: entered promiscuous mode [ 313.901683][T14482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.930114][T14617] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2385'. [ 313.940894][T14482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.954775][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2385'. [ 313.989544][T14617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2385'. [ 314.082438][T14482] team0: Port device team_slave_0 added [ 314.119605][T14482] team0: Port device team_slave_1 added [ 314.265691][T14482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.295911][T14619] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2385'. [ 314.298188][T14482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.422252][T14482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.488781][T14482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.519246][T14482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.570555][T14482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.786627][ T4948] block nbd0: Receive control failed (result -32) [ 314.880196][T14482] hsr_slave_0: entered promiscuous mode [ 314.922768][T14482] hsr_slave_1: entered promiscuous mode [ 314.955174][T14482] debugfs: 'hsr0' already exists in 'hsr' [ 315.005238][T14482] Cannot create hsr debugfs directory [ 315.075735][ T4948] Bluetooth: hci6: command tx timeout [ 315.662306][T14683] netlink: 'syz.0.2399': attribute type 21 has an invalid length. [ 315.712243][T14679] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2398'. [ 315.737929][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2399'. [ 315.779691][T14685] pim6reg: entered allmulticast mode [ 315.800026][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.810576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.957822][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.113768][T14696] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2402'. [ 316.460453][T14482] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 316.497389][T14482] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 316.517925][T14482] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 316.571107][T14482] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 316.580385][T14482] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 316.612348][T14482] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 316.629054][T14482] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 316.656451][T14725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2409'. [ 316.670750][T14482] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 317.160477][ T5654] Bluetooth: hci6: command tx timeout [ 317.167398][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.173924][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.191393][T14749] netlink: 'syz.3.2414': attribute type 1 has an invalid length. [ 317.228831][T14482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.440855][T14749] bond13: entered promiscuous mode [ 317.456157][T14749] 8021q: adding VLAN 0 to HW filter on device bond13 [ 317.523792][T14760] bond13: (slave bridge8): making interface the new active one [ 317.546787][T14760] bridge8: entered promiscuous mode [ 317.559933][T14760] bridge8: left promiscuous mode [ 317.620413][ T5293] veth0_macvtap: left promiscuous mode [ 317.721882][T14482] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.791126][ T9296] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.798379][ T9296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.840797][T14772] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2421'. [ 317.872736][ T9296] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.880024][ T9296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.886277][ T4948] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 317.922181][T14778] netlink: 'syz.1.2420': attribute type 1 has an invalid length. [ 318.002732][T14783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2422'. [ 318.023743][T14778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.178092][T14773] bond0: (slave gretap4): making interface the new active one [ 318.213082][T14773] bond0: (slave gretap4): Enslaving as an active interface with an up link [ 318.265965][T14795] openvswitch: netlink: Key type 30 is not supported [ 318.436577][ T9300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.445007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.997587][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.068004][T14829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.235776][ T4948] Bluetooth: hci6: command tx timeout [ 319.670263][T14482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.871277][T14870] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 319.920942][T14870] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 320.134375][T14882] netlink: 'syz.1.2445': attribute type 12 has an invalid length. [ 320.137971][T14884] netlink: 'syz.1.2445': attribute type 12 has an invalid length. [ 320.577657][T14482] veth0_vlan: entered promiscuous mode [ 320.587350][T14900] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2448'. [ 320.610553][T14482] veth1_vlan: entered promiscuous mode [ 320.626091][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2448'. [ 320.699241][T14482] veth0_macvtap: entered promiscuous mode [ 320.720988][T14482] veth1_macvtap: entered promiscuous mode [ 320.777891][T14482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.796858][T14906] x_tables: duplicate underflow at hook 1 [ 320.825084][T14482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.889773][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.919341][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.943864][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.958503][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.037367][T14882] infiniband syz2: set active [ 321.058051][T14882] infiniband syz2: added ipvlan0 [ 321.144986][T14882] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 321.215200][T14882] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 321.251175][T14882] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 321.369844][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.391570][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.510023][T14882] RDS/IB: syz2: added [ 321.518847][T14882] smc: adding ib device syz2 with port count 1 [ 321.533106][T14882] smc: ib device syz2 port 1 has no pnetid [ 321.639040][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.669880][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.902811][T14939] netlink: 'syz.3.2457': attribute type 83 has an invalid length. [ 321.904026][T14938] netlink: 'syz.3.2457': attribute type 83 has an invalid length. [ 322.007481][T14939] netlink: 'syz.3.2457': attribute type 29 has an invalid length. [ 322.039772][T14939] netlink: 'syz.3.2457': attribute type 29 has an invalid length. [ 322.088165][T14945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2458'. [ 322.193451][T14941] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2354'. [ 322.198842][T14950] xt_hashlimit: size too large, truncated to 1048576 [ 322.334525][T14954] erspan1: entered promiscuous mode [ 322.344737][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2354'. [ 322.798099][T14967] netlink: 'syz.5.2465': attribute type 27 has an invalid length. [ 322.817815][T14967] netlink: 'syz.5.2465': attribute type 4 has an invalid length. [ 322.837220][T14967] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2465'. [ 322.858125][T14969] xt_hashlimit: size too large, truncated to 1048576 [ 323.149956][T14984] tipc: Enabled bearer , priority 0 [ 323.411228][T14995] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2472'. [ 323.441786][T14993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2472'. [ 323.622689][T14998] veth0_to_bond: entered allmulticast mode [ 323.874475][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2477'. [ 324.231026][T15023] IPVS: set_ctl: invalid protocol: 59 172.20.20.46:20004 [ 324.267392][ T9] tipc: Node number set to 3843674406 [ 324.514297][ T10] IPVS: starting estimator thread 0... [ 324.615637][T15029] IPVS: using max 26 ests per chain, 62400 per kthread [ 324.740329][T15035] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 324.752768][T15035] bond1 (unregistering): Released all slaves [ 324.931763][T15039] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 325.080961][T15043] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2488'. [ 325.209601][T15049] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2490'. [ 325.344750][T15049] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.352530][T15049] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.451300][T15060] netlink: 'syz.1.2493': attribute type 1 has an invalid length. [ 325.528725][T15049] bridge_slave_0: left allmulticast mode [ 325.537484][T15049] bridge_slave_0: left promiscuous mode [ 325.543433][T15049] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.592703][T15049] bridge_slave_1: left allmulticast mode [ 325.601034][T15049] bridge_slave_1: left promiscuous mode [ 325.610544][T15049] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.635239][T15049] bond0: (slave bond_slave_0): Releasing backup interface [ 325.657964][T15049] bond0: (slave bond_slave_1): Releasing backup interface [ 325.674257][T15049] team0: Port device team_slave_0 removed [ 325.688933][T15049] team0: Port device team_slave_1 removed [ 325.698457][T15049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.709186][T15049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.724374][T15049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.735081][T15049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.749974][T15049] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 325.799281][T15062] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 325.839232][T15069] bond28: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 325.893075][T15069] bond28: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 325.931138][T15069] bond28: (slave ip6gre3): making interface the new active one [ 325.942182][T15069] bond28: (slave ip6gre3): Enslaving as an active interface with an up link [ 326.014246][T15082] x_tables: duplicate underflow at hook 1 [ 327.109317][T15106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2503'. [ 327.118654][T15105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2503'. [ 327.287597][T15108] bridge14: entered promiscuous mode [ 327.293487][T15108] bridge14: entered allmulticast mode [ 327.309543][T15108] syzkaller1: entered promiscuous mode [ 327.315185][T15108] syzkaller1: entered allmulticast mode [ 327.329450][T15108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2505'. [ 327.352841][T15117] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2504'. [ 327.509602][T15121] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2508'. [ 327.560175][T15119] syzkaller0: entered promiscuous mode [ 327.566749][T15119] syzkaller0: entered allmulticast mode [ 327.603587][T15119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2507'. [ 327.841886][T15137] nbd: must specify a size in bytes for the device [ 329.801507][T15152] x_tables: unsorted underflow at hook 2 [ 330.247775][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2524'. [ 330.301703][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2526'. [ 330.449889][T15193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2528'. [ 330.481308][T15196] netlink: 'syz.6.2530': attribute type 1 has an invalid length. [ 330.754859][T15214] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2533'. [ 331.243720][T15236] ipvlan2: entered promiscuous mode [ 331.850266][T15267] netlink: 'syz.1.2546': attribute type 1 has an invalid length. [ 332.393612][T15301] netlink: 'syz.6.2552': attribute type 10 has an invalid length. [ 332.405125][T15301] __nla_validate_parse: 1 callbacks suppressed [ 332.405143][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2552'. [ 332.445009][T15301] netlink: 'syz.6.2552': attribute type 10 has an invalid length. [ 332.457086][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2552'. [ 332.870113][T15319] : entered promiscuous mode [ 333.274366][T15327] bond1: (slave ip6gretap1): making interface the new active one [ 333.313636][T15327] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 333.391714][T15323] netdevsim netdevsim6: Direct firmware load for .. failed with error -2 [ 333.438093][T15323] netdevsim netdevsim6: Falling back to sysfs fallback for: .. [ 333.488546][T15346] vlan2: entered allmulticast mode [ 333.493919][T15346] bond0: entered allmulticast mode [ 333.500190][T15346] bond_slave_0: entered allmulticast mode [ 333.602606][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2564'. [ 333.926563][T15361] netlink: 'syz.6.2567': attribute type 83 has an invalid length. [ 334.300227][T15379] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2572'. [ 334.369158][T15379] bond2 (unregistering): Released all slaves [ 334.537109][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2575'. [ 334.570727][T15392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2574'. [ 334.614292][T15396] nbd: must specify a size in bytes for the device [ 334.842616][T15405] netlink: 'syz.6.2580': attribute type 1 has an invalid length. [ 334.965236][T15405] bond2: entered promiscuous mode [ 334.972283][T15405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 334.991489][T15414] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2581'. [ 335.063704][T15408] bond2: (slave bridge1): making interface the new active one [ 335.086551][T15408] bridge1: entered promiscuous mode [ 335.101278][T15408] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 335.136153][T15409] syzkaller0: mtu less than device minimum [ 335.164531][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2581'. [ 335.393001][T15433] Cannot find set identified by id 65534 to match [ 335.575031][T15439] sock: sock_set_timeout: `syz.3.2589' (pid 15439) tries to set negative timeout [ 335.685178][T15446] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2590'. [ 335.705114][T15446] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2590'. [ 335.724683][T15446] netlink: 'syz.5.2590': attribute type 6 has an invalid length. [ 335.751906][T15446] netlink: 'syz.5.2590': attribute type 5 has an invalid length. [ 335.982112][T15459] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 3, id = 0 [ 336.047914][T15463] netlink: 'syz.3.2596': attribute type 1 has an invalid length. [ 336.083910][T15466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.157616][T15463] bond14: entered promiscuous mode [ 336.163444][T15463] 8021q: adding VLAN 0 to HW filter on device bond14 [ 336.187002][T15469] bond14: (slave bridge8): making interface the new active one [ 336.194842][T15469] bridge8: entered promiscuous mode [ 336.203048][T15469] bond14: (slave bridge8): Enslaving as an active interface with an up link [ 336.265229][T15480] netlink: get zone limit has 4 unknown bytes [ 336.277360][T15480] netlink: get zone limit has 4 unknown bytes [ 337.031709][T15520] netlink: 'syz.5.2610': attribute type 1 has an invalid length. [ 337.157991][T15520] bond7: entered promiscuous mode [ 337.178568][T15520] 8021q: adding VLAN 0 to HW filter on device bond7 [ 337.225753][T15525] bond7: (slave bridge6): making interface the new active one [ 337.233454][T15525] bridge6: entered promiscuous mode [ 337.241638][T15525] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 337.482312][T15540] __nla_validate_parse: 7 callbacks suppressed [ 337.482334][T15540] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2617'. [ 337.577411][T15540] bond3 (unregistering): Released all slaves [ 337.595264][T15549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2617'. [ 337.799865][T15558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2623'. [ 337.810348][T15556] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2621'. [ 337.819893][T15558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2623'. [ 338.058950][T15572] netlink: 'syz.3.2626': attribute type 1 has an invalid length. [ 338.135271][T15572] bond15: entered promiscuous mode [ 338.146416][T15572] 8021q: adding VLAN 0 to HW filter on device bond15 [ 338.225007][ T5654] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.238580][ T5654] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.250772][ T5654] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.260238][ T5654] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.273697][ T5654] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.282971][T15574] bond15: (slave bridge9): making interface the new active one [ 338.294844][T15574] bridge9: entered promiscuous mode [ 338.303577][T15574] bond15: (slave bridge9): Enslaving as an active interface with an up link [ 338.472762][T15570] nbd1: detected capacity change from 0 to 63 [ 338.494812][ T5654] block nbd1: Receive control failed (result -32) [ 338.494818][ T4948] block nbd1: Receive control failed (result -32) [ 338.541547][T15589] sctp: [Deprecated]: syz.3.2630 (pid 15589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.541547][T15589] Use struct sctp_sack_info instead [ 338.591717][ T6791] block nbd1: Dead connection, failed to find a fallback [ 338.610335][ T6791] block nbd1: shutting down sockets [ 338.621856][ T6791] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.633930][ T6791] Buffer I/O error on dev nbd1, logical block 0, async page read [ 338.642907][ T6791] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.653447][ T6791] Buffer I/O error on dev nbd1, logical block 1, async page read [ 338.658123][T15589] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2630'. [ 338.668182][ T6791] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.681553][ T6791] Buffer I/O error on dev nbd1, logical block 2, async page read [ 338.685127][T15591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2629'. [ 338.689750][ T6791] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.689781][ T6791] Buffer I/O error on dev nbd1, logical block 3, async page read [ 338.689931][ T6791] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.727518][ T6791] Buffer I/O error on dev nbd1, logical block 0, async page read [ 338.736438][ T6791] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.757200][T15594] netlink: 'syz.3.2630': attribute type 8 has an invalid length. [ 338.773329][ T6791] Buffer I/O error on dev nbd1, logical block 1, async page read [ 338.797489][ T6791] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.828101][ T6791] Buffer I/O error on dev nbd1, logical block 2, async page read [ 338.851972][ T6791] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.891451][ T6791] Buffer I/O error on dev nbd1, logical block 3, async page read [ 338.904628][ T6791] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.921024][ T6791] Buffer I/O error on dev nbd1, logical block 0, async page read [ 338.953127][T15597] macvlan2: entered promiscuous mode [ 338.959792][ T6791] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.978969][T15597] macvlan2: entered allmulticast mode [ 338.994132][ T6791] Buffer I/O error on dev nbd1, logical block 1, async page read [ 339.051848][ T6791] ldm_validate_partition_table(): Disk read failed. [ 339.066854][T15601] openvswitch: netlink: IP tunnel dst address not specified [ 339.075427][ T6791] Dev nbd1: unable to read RDB block 0 [ 339.096925][ T6791] nbd1: unable to read partition table [ 339.174069][ T6791] ldm_validate_partition_table(): Disk read failed. [ 339.223697][ T6791] Dev nbd1: unable to read RDB block 0 [ 339.260915][ T6791] nbd1: unable to read partition table [ 339.318343][T15612] netlink: 288 bytes leftover after parsing attributes in process `syz.6.2637'. [ 339.769670][T15632] netlink: 'syz.1.2642': attribute type 13 has an invalid length. [ 339.919957][T15639] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2645'. [ 340.053478][T15647] netlink: 'syz.6.2647': attribute type 21 has an invalid length. [ 340.113853][T15647] IPv6: NLM_F_CREATE should be specified when creating new route [ 340.227365][T15652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2649'. [ 340.329957][T15656] veth0: entered promiscuous mode [ 340.358559][ T4948] Bluetooth: hci7: command tx timeout [ 340.370218][T15656] tunl0: entered promiscuous mode [ 340.387709][T15656] netlink: 'syz.6.2650': attribute type 3 has an invalid length. [ 340.408325][T15655] veth0: left promiscuous mode [ 340.596987][T15664] syzkaller0: entered promiscuous mode [ 340.619083][T15664] syzkaller0: entered allmulticast mode [ 340.751845][T15664] tipc: Enabled bearer , priority 0 [ 340.778563][T15662] tipc: Resetting bearer [ 340.823621][T15662] tipc: Disabling bearer [ 340.879065][T15680] netlink: 'syz.6.2659': attribute type 1 has an invalid length. [ 340.910874][T15681] netlink: 'syz.5.2658': attribute type 29 has an invalid length. [ 340.961346][T15680] 8021q: adding VLAN 0 to HW filter on device bond3 [ 341.031222][ T29] audit: type=1800 audit(1780458486.175:6): pid=15685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2660" name="memory.events" dev="tmpfs" ino=1105 res=0 errno=0 [ 341.589579][T15707] xt_CT: You must specify a L4 protocol and not use inversions on it [ 341.930089][T15736] x_tables: duplicate underflow at hook 2 [ 341.953052][T15580] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.961128][T15580] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.972286][T15580] bridge_slave_0: entered allmulticast mode [ 341.980763][T15580] bridge_slave_0: entered promiscuous mode [ 341.990126][T15580] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.998021][T15580] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.005334][T15580] bridge_slave_1: entered allmulticast mode [ 342.013672][T15580] bridge_slave_1: entered promiscuous mode [ 342.127638][T15580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.159948][T15580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.258682][T15580] team0: Port device team_slave_0 added [ 342.297788][T15580] team0: Port device team_slave_1 added [ 342.435911][ T4948] Bluetooth: hci7: command tx timeout [ 342.450431][T15580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.465762][T15580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.493629][T15580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.527796][T15580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.541479][T15580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.616481][T15580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.831933][T15580] hsr_slave_0: entered promiscuous mode [ 342.859188][T15580] hsr_slave_1: entered promiscuous mode [ 342.868669][T15776] __nla_validate_parse: 14 callbacks suppressed [ 342.868723][T15776] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2684'. [ 342.898052][T15580] debugfs: 'hsr0' already exists in 'hsr' [ 342.903866][T15580] Cannot create hsr debugfs directory [ 342.991365][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2684'. [ 343.026339][T15768] netlink: 'syz.5.2684': attribute type 5 has an invalid length. [ 343.048127][T15768] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2684'. [ 343.243761][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2691'. [ 343.263806][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2691'. [ 343.279367][T15791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.301483][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2691'. [ 343.659743][T15802] xt_socket: unknown flags 0x50 [ 343.837468][T15580] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 343.872781][T15580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 343.892252][T15580] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 343.936257][T15580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 343.974204][T15580] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 344.002391][T15580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 344.017608][T15580] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 344.048885][T15580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.146252][T15813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2697'. [ 344.481822][T15580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.518210][ T4948] Bluetooth: hci7: command tx timeout [ 344.624039][T15580] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.654940][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.662214][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.699447][ T9296] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 344.734823][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.742064][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.810269][T15845] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2706'. [ 345.033023][T15857] netlink: 'syz.6.2708': attribute type 10 has an invalid length. [ 345.120047][T15857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 345.152083][T15857] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 345.493833][T15887] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2714'. [ 345.536759][T15881] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2714'. [ 346.079523][T15921] Can't find ip_set type  [ 346.100402][ T4948] Bluetooth: hci5: link tx timeout [ 346.106876][T15916] Can't find ip_set type [ 346.113175][ T4948] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 346.139156][T15918] Can't find ip_set type [ 346.478178][T15939] vlan0: entered promiscuous mode [ 346.540039][T15580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.599077][ T4948] Bluetooth: hci7: command tx timeout [ 346.957184][T15967] netlink: 'syz.6.2737': attribute type 1 has an invalid length. [ 347.248179][T15580] veth0_vlan: entered promiscuous mode [ 347.301822][T15580] veth1_vlan: entered promiscuous mode [ 347.411178][T15580] veth0_macvtap: entered promiscuous mode [ 347.462936][T15580] veth1_macvtap: entered promiscuous mode [ 347.735005][T15580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.783374][T15580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.823074][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.854967][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.885069][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.905310][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.024991][T16010] __nla_validate_parse: 10 callbacks suppressed [ 348.025010][T16010] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2750'. [ 348.128138][T16011] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2749'. [ 348.174313][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.194556][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.202524][ T5634] Bluetooth: hci5: command 0x040f tx timeout [ 348.232682][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2749'. [ 348.520293][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2752'. [ 348.541583][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.564572][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.949031][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2756'. [ 349.145450][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2625'. [ 349.452604][T16060] netdevsim netdevsim7: Firmware load for '..' refused, path contains '..' component [ 349.631672][ T5634] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 349.644632][ T5634] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 349.655312][ T5634] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 349.670443][ T5634] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 349.679734][ T5634] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 349.952231][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2766'. [ 349.965703][ T5654] Bluetooth: hci4: command 0x0406 tx timeout [ 350.325415][T16095] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2770'. [ 350.597378][T16105] openvswitch: netlink: Message has 4 unknown bytes. [ 350.627321][T16105] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 350.661312][T16105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2773'. [ 350.832930][T16112] syzkaller0: entered promiscuous mode [ 350.867610][T16112] syzkaller0: entered allmulticast mode [ 350.981065][T16126] netlink: 'syz.3.2777': attribute type 1 has an invalid length. [ 351.038481][T16129] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2779'. [ 351.088030][T16129] nbd: must specify a size in bytes for the device [ 351.223698][T16139] netlink: 'syz.7.2780': attribute type 20 has an invalid length. [ 351.281435][ T13] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.281453][T16139] netlink: 'syz.7.2780': attribute type 20 has an invalid length. [ 351.328417][ T13] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.343783][ T13] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.358352][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058d26400: rx timeout, send abort [ 351.385350][ T13] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.716685][ T4948] Bluetooth: hci8: command tx timeout [ 351.858659][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058d24c00: rx timeout, send abort [ 351.871391][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058d26400: abort rx timeout. Force session deactivation [ 352.027687][T16167] netlink: 'syz.7.2787': attribute type 9 has an invalid length. [ 352.188871][T16173] tipc: Can't bind to reserved service type 0 [ 352.367015][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058d24c00: abort rx timeout. Force session deactivation [ 352.417317][T16188] netlink: 'syz.3.2792': attribute type 21 has an invalid length. [ 352.438080][T16188] netlink: 'syz.3.2792': attribute type 22 has an invalid length. [ 352.503157][T16188] netlink: 'syz.3.2792': attribute type 23 has an invalid length. [ 352.554385][T16188] netlink: 'syz.3.2792': attribute type 25 has an invalid length. [ 352.632758][T16188] netlink: 'syz.3.2792': attribute type 26 has an invalid length. [ 352.660894][T16185] netlink: 'syz.7.2791': attribute type 5 has an invalid length. [ 353.554664][T16067] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.562241][T16067] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.570774][T16067] bridge_slave_0: entered allmulticast mode [ 353.579639][T16067] bridge_slave_0: entered promiscuous mode [ 353.603375][T16234] xt_TCPMSS: Only works on TCP SYN packets [ 353.687001][T16067] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.700452][T16067] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.717947][T16067] bridge_slave_1: entered allmulticast mode [ 353.730108][T16067] bridge_slave_1: entered promiscuous mode [ 353.796087][ T4948] Bluetooth: hci8: command tx timeout [ 353.943304][T16247] __nla_validate_parse: 11 callbacks suppressed [ 353.943386][T16247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2805'. [ 353.964513][T16067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.080458][T16067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.213990][T16067] team0: Port device team_slave_0 added [ 354.251348][T16067] team0: Port device team_slave_1 added [ 354.435128][T16067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.458918][T16067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.541344][T16067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.613475][T16265] veth3: entered allmulticast mode [ 354.681760][T16067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.696717][T16067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.805721][T16067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.913443][T16290] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2815'. [ 354.980745][T16291] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 355.142703][T16067] hsr_slave_0: entered promiscuous mode [ 355.149940][T16067] hsr_slave_1: entered promiscuous mode [ 355.158299][T16067] debugfs: 'hsr0' already exists in 'hsr' [ 355.173395][T16067] Cannot create hsr debugfs directory [ 355.182371][T16299] x_tables: duplicate underflow at hook 2 [ 355.709596][T16320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2823'. [ 355.821068][T16320] bond8: entered promiscuous mode [ 355.826882][T16320] 8021q: adding VLAN 0 to HW filter on device bond8 [ 355.877467][ T4948] Bluetooth: hci8: command tx timeout [ 356.014918][T16329] 8021q: adding VLAN 0 to HW filter on device bond8 [ 356.051201][T16329] bond8: (slave sit2): The slave device specified does not support setting the MAC address [ 356.073681][T16329] bond8: (slave sit2): Error -95 calling set_mac_address [ 356.200148][T16347] sctp: [Deprecated]: syz.6.2827 (pid 16347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.200148][T16347] Use struct sctp_sack_info instead [ 356.383637][T16356] netlink: 'syz.7.2830': attribute type 21 has an invalid length. [ 356.442026][T16356] netlink: 'syz.7.2830': attribute type 6 has an invalid length. [ 356.486009][T16356] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2830'. [ 356.552737][T16363] netlink: 'syz.3.2832': attribute type 11 has an invalid length. [ 356.765360][T16371] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2834'. [ 356.790307][T16067] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.837775][T16067] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.974219][T16376] IPv6: sit2: Disabled Multicast RS [ 356.997172][T16376] sit2: entered allmulticast mode [ 357.199949][T16067] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.245032][T16067] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.311511][T16399] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2840'. [ 357.336913][T16399] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2840'. [ 357.965073][ T4948] Bluetooth: hci8: command tx timeout [ 357.983870][T16421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.094403][T16399] gretap1: entered promiscuous mode [ 358.099872][T16399] gretap1: entered allmulticast mode [ 358.322035][T16426] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2849'. [ 358.354782][T16067] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.385249][T16067] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.622148][T16442] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2852'. [ 358.657222][T16442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2852'. [ 358.779939][T16067] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.795044][T16067] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.123526][T16469] __nla_validate_parse: 1 callbacks suppressed [ 359.123545][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2856'. [ 359.283754][T16469] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 359.664819][T16067] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 359.726919][T16067] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.738827][T16494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.770938][T16067] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 359.807436][T16067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.841700][T16067] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 359.874032][T16067] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 359.902234][T16067] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 359.933697][T16067] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 360.183876][T16519] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 360.294266][T16067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.441302][T16067] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.493514][ T9301] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.500802][ T9301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.559927][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.567221][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.673240][T16534] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.2875'. [ 361.021422][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2869'. [ 361.149878][T16555] vlan3: entered allmulticast mode [ 361.187318][T16555] veth1_virt_wifi: entered allmulticast mode [ 362.473167][T16067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.601299][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2885'. [ 362.642877][T16601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2886'. [ 362.660672][T16599] netlink: 'syz.7.2885': attribute type 6 has an invalid length. [ 362.688347][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2885'. [ 362.794932][T16067] veth0_vlan: entered promiscuous mode [ 362.799672][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2885'. [ 362.821125][T16067] veth1_vlan: entered promiscuous mode [ 362.829460][T16599] netlink: 'syz.7.2885': attribute type 6 has an invalid length. [ 362.845278][T16603] x_tables: duplicate underflow at hook 2 [ 362.855958][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2885'. [ 362.952805][T16067] veth0_macvtap: entered promiscuous mode [ 362.980961][T16067] veth1_macvtap: entered promiscuous mode [ 363.054965][T16067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.274084][T16067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.393251][ T54] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.426665][ T54] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.479034][ T54] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.510659][ T54] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.754415][T16643] netlink: 'syz.7.2898': attribute type 142 has an invalid length. [ 363.795088][T16643] netlink: 294 bytes leftover after parsing attributes in process `syz.7.2898'. [ 363.824988][T16643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.836093][T16646] netlink: 294 bytes leftover after parsing attributes in process `syz.7.2898'. [ 363.898942][T16646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.163667][T16656] netlink: 1116 bytes leftover after parsing attributes in process `syz.5.2899'. [ 366.274362][T16653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.430853][T16662] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2901'. [ 366.601710][ T9301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.633871][ T9301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.806616][ T9301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.833006][ T9301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.096806][T16689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2908'. [ 367.156731][T16692] xt_hashlimit: size too large, truncated to 1048576 [ 367.220464][T16689] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2908'. [ 367.803772][T16717] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2917'. [ 367.833456][T16717] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2917'. [ 367.874414][T16717] netlink: 'syz.1.2917': attribute type 6 has an invalid length. [ 367.939203][T16721] hsr0: entered promiscuous mode [ 367.971172][T16717] netlink: 'syz.1.2917': attribute type 5 has an invalid length. [ 368.013715][T16717] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2917'. [ 368.148226][ T5654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.175247][ T5654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.187146][ T5654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.200894][ T5654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.212994][ T5654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.498323][T16743] netlink: 'syz.1.2921': attribute type 1 has an invalid length. [ 368.645082][T16750] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2920'. [ 368.777105][T16745] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.784889][T16745] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.888772][T16745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.919328][T16745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.443586][T16745] veth3: left allmulticast mode [ 369.583408][T16760] netlink: 'syz.5.2924': attribute type 4 has an invalid length. [ 369.728602][T16766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2923'. [ 370.284369][ T4948] Bluetooth: hci0: command tx timeout [ 371.921005][ T132] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.946821][ T132] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.975633][ T132] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.999852][ T132] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.067444][T16766] veth0_macvtap: left promiscuous mode [ 372.161789][ T132] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.194339][ T132] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.304243][ T132] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.343353][T16780] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2927'. [ 372.355984][ T132] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.357705][ T4948] Bluetooth: hci0: command tx timeout [ 372.410157][T16780] netlink: 'syz.5.2927': attribute type 9 has an invalid length. [ 372.954095][T16807] netlink: 'syz.1.2933': attribute type 10 has an invalid length. [ 373.109654][T16807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2933'. [ 373.138958][T16807] netlink: 'syz.1.2933': attribute type 7 has an invalid length. [ 373.159794][T16807] netlink: 'syz.1.2933': attribute type 8 has an invalid length. [ 373.192225][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2933'. [ 373.649171][T16823] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2935'. [ 373.692952][T16823] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2935'. [ 374.129247][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2937'. [ 374.436561][ T4948] Bluetooth: hci0: command tx timeout [ 374.529981][T16853] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 374.568199][T16853] bond1 (unregistering): Released all slaves [ 374.850354][T16877] netlink: 'syz.5.2943': attribute type 58 has an invalid length. [ 374.916012][T16877] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2943'. [ 374.950630][T16883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2944'. [ 375.008106][T16883] openvswitch: netlink: IPv4 tun info is not correct [ 375.338269][T16898] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2948'. [ 375.736711][T16928] netlink: 'syz.1.2953': attribute type 12 has an invalid length. [ 375.752732][T16732] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.763467][T16732] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.788711][T16732] bridge_slave_0: entered allmulticast mode [ 375.820709][T16732] bridge_slave_0: entered promiscuous mode [ 375.856529][T16732] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.891636][T16732] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.919086][T16732] bridge_slave_1: entered allmulticast mode [ 375.939467][T16732] bridge_slave_1: entered promiscuous mode [ 376.047350][T16732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.058129][T16935] Bluetooth: MGMT ver 1.23 [ 376.096938][T16732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.310812][T16732] team0: Port device team_slave_0 added [ 376.339847][T16732] team0: Port device team_slave_1 added [ 376.474492][T16732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.511088][T16732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.550920][ T4948] Bluetooth: hci0: command tx timeout [ 376.569868][T16732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.584505][T16732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.592041][T16732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.619558][T16732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.662269][T16963] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2960'. [ 376.768627][T16732] hsr_slave_0: entered promiscuous mode [ 376.780400][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2961'. [ 376.791006][T16732] hsr_slave_1: entered promiscuous mode [ 376.806220][T16732] debugfs: 'hsr0' already exists in 'hsr' [ 376.818513][T16732] Cannot create hsr debugfs directory [ 377.362559][T16994] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2965'. [ 377.385949][T16993] x_tables: duplicate underflow at hook 1 [ 377.661467][T17008] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2968'. [ 377.681952][T17009] netlink: 'syz.6.2970': attribute type 1 has an invalid length. [ 378.028367][T17013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.047820][T17013] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.059782][T17013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.149734][T17013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.173010][T17013] 8021q: adding VLAN 0 to HW filter on device bond4 [ 378.181905][T17013] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check. [ 378.552813][T16732] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.580523][T16732] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.607342][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.614851][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 378.904111][T17057] netlink: 'syz.6.2976': attribute type 1 has an invalid length. [ 378.930608][T17057] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2976'. [ 378.951006][T16732] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.985893][T16732] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.247296][T17062] team_slave_0: entered promiscuous mode [ 379.271616][T17062] team_slave_0: entered allmulticast mode [ 379.418564][T17083] netlink: 'syz.5.2981': attribute type 12 has an invalid length. [ 379.469820][T16732] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.503810][T16732] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.630379][T17083] bond9: option primary_reselect: invalid value (255) [ 379.663202][T17083] bond9 (unregistering): Released all slaves [ 379.683005][T17093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2985'. [ 379.908392][T16732] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.949041][T16732] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.091847][T17108] x_tables: duplicate underflow at hook 1 [ 380.496009][T17121] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2993'. [ 380.891278][T16732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 380.951273][T16732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 380.978523][T16732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 381.014692][T16732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 381.060691][T16732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 381.134145][T16732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 381.176612][T16732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 381.221691][T16732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 381.511453][T17181] pim6reg: entered allmulticast mode [ 381.563128][T16732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.623972][T16732] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.640421][T17186] openvswitch: netlink: IP tunnel dst address not specified [ 381.654538][ T9301] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.662260][ T9301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.678214][T17187] xt_hashlimit: size too large, truncated to 1048576 [ 381.709423][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.716813][ T9300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.743684][T17188] tipc: Enabling of bearer rejected, failed to enable media [ 382.066801][T17200] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3004'. [ 382.244386][T17206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.315988][T17210] netlink: 'syz.6.3007': attribute type 1 has an invalid length. [ 382.401727][T17210] bond5: entered promiscuous mode [ 382.408580][T17210] 8021q: adding VLAN 0 to HW filter on device bond5 [ 382.466331][T17215] 8021q: adding VLAN 0 to HW filter on device bond5 [ 382.486225][T17215] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 382.547825][T17215] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 382.570710][T17215] bond5: (slave vti0): making interface the new active one [ 382.578326][T17215] vti0: entered promiscuous mode [ 382.585274][T17215] bond5: (slave vti0): Enslaving as an active interface with an up link [ 382.601916][T17221] netem: change failed [ 382.637624][T17221] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3008'. [ 382.815051][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3009'. [ 382.844736][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3009'. [ 382.859777][T17231] netlink: 'syz.6.3009': attribute type 14 has an invalid length. [ 382.871030][T17231] netlink: 'syz.6.3009': attribute type 13 has an invalid length. [ 382.896520][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3009'. [ 383.560140][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3013'. [ 383.642751][T17261] openvswitch: netlink: Flow actions attr not present in new flow. [ 383.837055][T16732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.934943][T16732] veth0_vlan: entered promiscuous mode [ 387.002484][T16732] veth1_vlan: entered promiscuous mode [ 387.260328][T17340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3021'. [ 387.294183][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3025'. [ 387.320055][T16732] veth0_macvtap: entered promiscuous mode [ 387.330515][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3025'. [ 387.357026][T16732] veth1_macvtap: entered promiscuous mode [ 387.547177][T17360] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3028'. [ 387.576914][T16732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.629990][T16732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.693646][ T9300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.811810][ T9300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.832787][ T9300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.866854][T17364] syzkaller0: entered promiscuous mode [ 387.891196][T17364] syzkaller0: entered allmulticast mode [ 387.909327][ T9300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.082056][T17373] tipc: Started in network mode [ 388.108169][T17373] tipc: Node identity f2f51e0eabbd, cluster identity 4711 [ 388.134401][T17373] tipc: Enabled bearer , priority 0 [ 388.244001][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3033'. [ 388.352312][T17380] syzkaller0: entered promiscuous mode [ 388.366098][T17380] syzkaller0: entered allmulticast mode [ 388.377996][T17380] tipc: Resetting bearer [ 388.447487][T17370] tipc: Resetting bearer [ 391.131301][T17370] tipc: Disabling bearer [ 391.146523][T17418] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3037'. [ 391.167257][T17418] tipc: Invalid UDP bearer configuration [ 391.167318][T17418] tipc: Enabling of bearer rejected, failed to enable media [ 391.197244][ T5784] tipc: Node number set to 1497898510 [ 391.459101][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.469630][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.541750][T17426] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3039'. [ 391.554225][ T9300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.566141][T17426] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3039'. [ 391.595924][ T9300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.248071][T17456] netlink: 'syz.7.3046': attribute type 1 has an invalid length. [ 392.256316][T17456] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3046'. [ 392.268894][T17458] netlink: 'syz.7.3046': attribute type 1 has an invalid length. [ 392.278598][T17458] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3046'. [ 394.737691][T17447] mac80211_hwsim hwsim45 ÿ: renamed from wlan1 (while UP) [ 395.070478][T17478] netlink: 'syz.5.3052': attribute type 21 has an invalid length. [ 395.080646][T17478] IPv6: NLM_F_CREATE should be specified when creating new route [ 395.095604][T17478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3052'. [ 395.170168][T17465] bridge_slave_0: left allmulticast mode [ 395.178655][T17465] bridge_slave_0: left promiscuous mode [ 395.187722][T17465] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.198785][T17465] bridge_slave_1: left allmulticast mode [ 395.204472][T17465] bridge_slave_1: left promiscuous mode [ 395.210745][T17465] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.222709][T17465] bond0: (slave bond_slave_0): Releasing backup interface [ 395.234569][T17465] bond0: (slave bond_slave_1): Releasing backup interface [ 395.257108][T17465] team0: Port device team_slave_0 removed [ 395.265406][T17465] team0: Port device team_slave_1 removed [ 395.276062][T17465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.288061][T17465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.304112][T17465] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 395.499339][T17500] netlink: 'syz.7.3055': attribute type 12 has an invalid length. [ 395.524809][T17500] netlink: 190972 bytes leftover after parsing attributes in process `syz.7.3055'. [ 395.841626][T17513] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3058'. [ 395.883665][T17513] RDS: rds_bind could not find a transport for ::ffff:172.30.16.8, load rds_tcp or rds_rdma? [ 396.504750][T17542] vlan2: entered promiscuous mode [ 396.529662][T17542] bridge0: entered promiscuous mode [ 396.744657][T17551] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3069'. [ 396.777769][T17554] netlink: 'syz.5.3069': attribute type 1 has an invalid length. [ 396.808531][T17554] netlink: 'syz.5.3069': attribute type 2 has an invalid length. [ 396.831044][T17554] netlink: 'syz.5.3069': attribute type 1 has an invalid length. [ 397.162794][T17578] netlink: 'syz.7.3073': attribute type 1 has an invalid length. [ 397.165216][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3074'. [ 397.199618][T17578] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3073'. [ 397.227561][T17578] netlink: 456 bytes leftover after parsing attributes in process `syz.7.3073'. [ 397.469945][ T54] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.487625][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.507500][ T9301] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.542423][ T9301] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.575843][ T9301] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.589967][T17594] netlink: 'syz.7.3076': attribute type 1 has an invalid length. [ 397.622100][T17594] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3076'. [ 397.649362][T17592] syzkaller0: entered promiscuous mode [ 397.676887][T17592] syzkaller0: entered allmulticast mode [ 397.848136][T17601] netlink: 'syz.3.3079': attribute type 8 has an invalid length. [ 397.856377][T17601] sch_fq: defrate 0 ignored. [ 397.895069][T17600] vlan2: entered allmulticast mode [ 397.900341][T17600] bond0: entered allmulticast mode [ 397.905932][T17600] bond_slave_0: entered allmulticast mode [ 397.911910][T17600] bond_slave_1: entered allmulticast mode [ 398.280277][ T5364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.393083][T17618] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3086'. [ 398.695141][T17619] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 398.709504][T17630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3087'. [ 398.849122][T17635] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3087'. [ 398.941518][T17644] netlink: 'syz.5.3091': attribute type 7 has an invalid length. [ 399.077212][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.287112][T17663] netlink: 'syz.1.3096': attribute type 9 has an invalid length. [ 399.318878][ T5364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.351683][T17666] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 399.473295][T17669] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3098'. [ 399.516203][T17673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.526824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.885252][T17687] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 399.928241][T17687] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3104'. [ 400.323677][T17704] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 400.357127][ T5364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.453922][T17711] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3108'. [ 400.519254][T16754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.579327][T17714] netlink: 12896 bytes leftover after parsing attributes in process `syz.6.3108'. [ 400.621301][T17714] netlink: 'syz.6.3108': attribute type 3 has an invalid length. [ 400.772643][T17717] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 400.825371][T17721] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3112'. [ 400.862027][T17724] netlink: 'syz.1.3109': attribute type 1 has an invalid length. [ 401.054834][T17724] bond1: entered promiscuous mode [ 401.058025][T17738] sctp: [Deprecated]: syz.3.3114 (pid 17738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.058025][T17738] Use struct sctp_sack_info instead [ 401.079840][T17724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.101513][T17738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3114'. [ 401.196979][T17726] bond1: (slave bridge1): making interface the new active one [ 401.204530][T17726] bridge1: entered promiscuous mode [ 401.233828][T17726] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 401.310689][T17741] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 401.351594][T17741] bond0 (unregistering): Released all slaves [ 401.398079][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.424465][T17758] netlink: 'syz.1.3121': attribute type 10 has an invalid length. [ 401.507938][T17758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.658539][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.917142][T17766] netlink: 'syz.6.3122': attribute type 1 has an invalid length. [ 401.969163][T17766] veth0_to_bond: left allmulticast mode [ 402.436920][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.473448][T17779] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.481409][T17779] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.628860][T17779] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 402.650194][T17812] syzkaller0: entered promiscuous mode [ 402.676702][T17812] syzkaller0: entered allmulticast mode [ 402.806783][T17818] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.815127][T17818] bridge0: port 3(bond2) entered blocking state [ 402.825866][T17818] bridge0: port 3(bond2) entered disabled state [ 402.835415][T17818] bond2: entered allmulticast mode [ 402.844542][T17818] bond2: entered promiscuous mode [ 402.851049][T17818] bridge0: port 3(bond2) entered blocking state [ 402.857560][T17818] bridge0: port 3(bond2) entered forwarding state [ 402.869452][ T132] bridge0: port 3(bond2) entered disabled state [ 403.152309][T17838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.229040][T17837] openvswitch: netlink: Key type 8198 is out of range max 32 [ 403.476511][ T5364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.591690][T17857] netlink: 'syz.5.3146': attribute type 1 has an invalid length. [ 403.729135][T17857] bond9: entered promiscuous mode [ 403.742832][T17857] 8021q: adding VLAN 0 to HW filter on device bond9 [ 403.801793][T17859] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 403.819821][T17859] bond0 (unregistering): Released all slaves [ 403.903701][T17876] __nla_validate_parse: 19 callbacks suppressed [ 403.903751][T17876] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3150'. [ 403.942422][T17865] bond9: (slave bridge8): making interface the new active one [ 403.958639][T17865] bridge8: entered promiscuous mode [ 403.989568][T17865] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 404.095419][T17880] netlink: 'syz.1.3152': attribute type 33 has an invalid length. [ 404.195724][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.516877][T17890] bond10: entered promiscuous mode [ 404.577812][T17899] macvlan2: entered promiscuous mode [ 404.594316][T17899] macvlan2: entered allmulticast mode [ 404.610091][T17911] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3156'. [ 404.634765][T17899] bond10: (slave macvlan2): Opening slave failed [ 404.710523][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3156'. [ 404.752054][T17901] netlink: 'syz.6.3156': attribute type 5 has an invalid length. [ 404.780738][T17901] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3156'. [ 404.899468][T17926] netlink: 'syz.1.3161': attribute type 63 has an invalid length. [ 404.927287][T17927] netlink: 'syz.1.3161': attribute type 63 has an invalid length. [ 404.961892][T17926] netlink: 'syz.1.3161': attribute type 63 has an invalid length. [ 405.066704][T17942] netlink: 'syz.5.3165': attribute type 1 has an invalid length. [ 405.482884][T17942] bond11: entered promiscuous mode [ 405.497230][T17942] 8021q: adding VLAN 0 to HW filter on device bond11 [ 405.556443][ T5751] net_ratelimit: 4 callbacks suppressed [ 405.556464][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.578535][T17944] bond11: (slave bridge9): making interface the new active one [ 405.602114][T17944] bridge9: entered promiscuous mode [ 405.613716][T17944] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 405.714809][ T9300] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.813181][ T9300] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.862455][ T9300] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.914876][T17975] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3172'. [ 405.921142][ T9300] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.969536][T17975] netlink: 'syz.5.3172': attribute type 1 has an invalid length. [ 406.005832][T17975] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3172'. [ 406.053902][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3172'. [ 406.147335][T17983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3173'. [ 406.184941][T17991] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3174'. [ 406.293994][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3174'. [ 406.305726][T17984] netlink: 'syz.3.3174': attribute type 5 has an invalid length. [ 406.472639][T18005] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 406.597886][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.677081][T18013] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 406.921776][T18034] netlink: 'syz.5.3183': attribute type 1 has an invalid length. [ 407.222095][T18034] bond12: entered promiscuous mode [ 407.246430][T18034] 8021q: adding VLAN 0 to HW filter on device bond12 [ 407.387199][T18038] bond12: (slave bridge10): making interface the new active one [ 407.414971][T18038] bridge10: entered promiscuous mode [ 407.433438][T18038] bond12: (slave bridge10): Enslaving as an active interface with an up link [ 407.615180][T18060] netlink: 'syz.6.3190': attribute type 11 has an invalid length. [ 407.638365][ T5364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.717571][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.201510][T18089] veth1_virt_wifi: entered promiscuous mode [ 408.373637][T18090] bond3: entered promiscuous mode [ 408.381719][T18090] bond3: entered allmulticast mode [ 408.388450][T18090] 8021q: adding VLAN 0 to HW filter on device bond3 [ 408.551453][T18104] bond0: entered promiscuous mode [ 408.557404][T18104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.676576][ T5364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.710907][T18109] bond0: (slave bridge3): making interface the new active one [ 408.733324][T18109] bridge3: entered promiscuous mode [ 408.747851][T18109] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 409.178209][T18135] __nla_validate_parse: 9 callbacks suppressed [ 409.179949][T18135] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3205'. [ 409.248304][T18138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3208'. [ 409.269273][T18129] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3205'. [ 409.285726][T18138] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3208'. [ 409.305754][T18129] validate_nla: 4 callbacks suppressed [ 409.305772][T18129] netlink: 'syz.6.3205': attribute type 5 has an invalid length. [ 409.356462][T18129] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3205'. [ 409.580965][T18148] netlink: 'syz.3.3209': attribute type 24 has an invalid length. [ 409.618812][T18148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3209'. [ 409.717961][ T5364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.898101][T18166] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 409.911771][T18167] netlink: 'syz.5.3216': attribute type 1 has an invalid length. [ 409.938129][T18168] netlink: 'syz.3.3215': attribute type 83 has an invalid length. [ 409.957460][T18164] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.3213'. [ 410.061502][T18162] "syz.3.3215" (18162) uses obsolete ecb(arc4) skcipher [ 410.098903][T18167] bond13: entered promiscuous mode [ 410.129453][T18167] 8021q: adding VLAN 0 to HW filter on device bond13 [ 410.223833][T18177] x_tables: duplicate underflow at hook 3 [ 410.282503][T18171] bond13: (slave bridge11): making interface the new active one [ 410.313576][T18171] bridge11: entered promiscuous mode [ 410.322267][T18171] bond13: (slave bridge11): Enslaving as an active interface with an up link [ 410.341278][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3217'. [ 410.376021][T18183] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3219'. [ 410.406836][T18183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3219'. [ 410.451822][T18183] netlink: 'syz.3.3219': attribute type 18 has an invalid length. [ 410.533703][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.559048][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.575051][ T29] audit: type=1804 audit(1780458555.725:7): pid=18186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3220" name="/newroot/337/cgroup.controllers" dev="tmpfs" ino=1737 res=1 errno=0 [ 410.578834][ T48] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.629074][ T29] audit: type=1800 audit(1780458555.755:8): pid=18186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3220" name="cgroup.controllers" dev="tmpfs" ino=1737 res=0 errno=0 [ 410.663393][ T48] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.755982][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.764203][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.784653][T18187] netlink: 'syz.1.3221': attribute type 5 has an invalid length. [ 410.792816][T18181] syz.7.3218 (18181) used greatest stack depth: 17920 bytes left [ 411.200728][T18218] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 411.239942][T18195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.393920][T18226] netlink: 'syz.6.3230': attribute type 1 has an invalid length. [ 411.437738][T18226] bond6: entered promiscuous mode [ 411.443528][T18226] 8021q: adding VLAN 0 to HW filter on device bond6 [ 411.514745][T18226] bond6: (slave bridge4): making interface the new active one [ 411.533397][T18226] bridge4: entered promiscuous mode [ 411.542378][T18226] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 411.779318][T18248] syzkaller0: entered promiscuous mode [ 411.785245][T18248] syzkaller0: entered allmulticast mode [ 411.796166][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.833766][T18248] TC_ACT_REPEAT abuse ? [ 412.025421][T18251] netlink: 'syz.5.3236': attribute type 5 has an invalid length. [ 412.276107][ T5654] Bluetooth: hci0: command 0x0c1a tx timeout [ 412.283473][ T4948] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 412.836910][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.796737][T16754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.805170][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.876153][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.916555][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.957335][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.836837][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.997839][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.036200][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.076108][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.876497][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.116293][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.156265][ T5364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.118399][T16754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.127019][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.196239][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.235932][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.276241][ T5364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.155940][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.319604][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.356097][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.598042][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.396256][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.195959][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.436008][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.476022][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.516292][T13641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.237221][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.556126][T13641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.357287][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.595989][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.636654][T13641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.675967][T13641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.916546][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.396745][T16754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.716066][T13641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.197904][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.756254][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.995714][ T5654] Bluetooth: hci6: command 0x0406 tx timeout [ 437.796827][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.436331][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.837528][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.876374][T13641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.916943][T13641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.480158][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.956564][T13641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.996442][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.036473][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.516440][T13655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.077428][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.797485][T16754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.116223][T13641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.156190][T13641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.556612][T16754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.197582][T13641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.997557][ T30] INFO: task syz.4.2161:13741 blocked for more than 143 seconds. [ 449.005383][ T30] Not tainted syzkaller #0 [ 449.010569][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 449.019388][ T30] task:syz.4.2161 state:D stack:27168 pid:13741 tgid:13739 ppid:5638 task_flags:0x400140 flags:0x00080002 [ 449.031777][ T30] Call Trace: [ 449.035100][ T30] [ 449.038267][ T30] __schedule+0x1821/0x5740 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 449.043116][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 449.048500][ T30] ? __pfx___schedule+0x10/0x10 [ 449.053453][ T30] ? schedule+0x90/0x360 [ 449.058558][ T30] schedule+0x164/0x360 [ 449.062812][ T30] schedule_preempt_disabled+0x13/0x30 [ 449.068533][ T30] __mutex_lock+0x7f7/0x1550 [ 449.073219][ T30] ? __mutex_lock+0x608/0x1550 [ 449.078868][ T30] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 449.084651][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 449.090284][ T30] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 449.095893][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 449.102025][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 449.108818][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 449.115246][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 449.121644][ T30] ? __asan_memcpy+0x40/0x70 [ 449.128223][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 449.134391][ T30] ? bpf_lsm_capable+0x9/0x20 [ 449.139587][ T30] ? security_capable+0x7e/0x2c0 [ 449.144753][ T30] genl_rcv_msg+0x61c/0x7a0 [ 449.215575][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 449.236693][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 449.245682][T13641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.274184][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 449.301228][ T30] netlink_rcv_skb+0x232/0x4b0 [ 449.322927][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 449.345314][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 449.375652][ T30] ? down_read+0x270/0x2e0 [ 449.381765][ T30] ? genl_rcv+0xd/0x40 [ 449.406028][ T30] genl_rcv+0x28/0x40 [ 449.410249][ T30] netlink_unicast+0x75c/0x8e0 [ 449.426922][ T30] netlink_sendmsg+0x813/0xb40 [ 449.445826][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.455780][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 449.467035][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.495520][ T30] ____sys_sendmsg+0x972/0x9f0 [ 449.500510][ T30] ? __might_fault+0xaf/0x130 [ 449.505267][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.535556][ T30] ? import_iovec+0x73/0xa0 [ 449.543156][ T30] ___sys_sendmsg+0x2a5/0x360 [ 449.558950][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 449.574193][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.592231][ T30] ? futex_wait+0x2a2/0x390 [ 449.607266][ T30] ? __fget_files+0x2a/0x420 [ 449.629395][ T30] ? __fget_files+0x3a0/0x420 [ 449.645680][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 449.656935][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.674552][ T30] ? rcu_is_watching+0x15/0xb0 [ 449.691102][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.709664][ T30] do_syscall_64+0x174/0x580 [ 449.726665][ T30] ? trace_irq_disable+0x3b/0x140 [ 449.742308][ T30] ? clear_bhb_loop+0x40/0x90 [ 449.757490][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.779272][ T30] RIP: 0033:0x7fafee79ce59 [ 449.805962][ T30] RSP: 002b:00007fafef5d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.835929][ T30] RAX: ffffffffffffffda RBX: 00007fafeea15fa0 RCX: 00007fafee79ce59 [ 449.852796][ T30] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000004 [ 449.887217][ T30] RBP: 00007fafee832d6f R08: 0000000000000000 R09: 0000000000000000 [ 449.907430][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.923855][ T30] R13: 00007fafeea16038 R14: 00007fafeea15fa0 R15: 00007ffc0f2ed0e8 [ 449.934311][ T30] [ 449.937956][ T30] [ 449.937956][ T30] Showing all locks held in the system: [ 449.946166][ T30] 1 lock held by khungtaskd/30: [ 449.951100][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 449.978800][ T30] 2 locks held by getty/5389: [ 449.983646][ T30] #0: ffff8880362bf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 450.011492][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 450.029563][ T30] 4 locks held by kworker/1:6/5784: [ 450.034844][ T30] 2 locks held by syz.2.1394/10825: [ 450.040975][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 450.050017][ T30] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 450.060636][ T30] 3 locks held by kworker/1:8/13655: [ 450.066336][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 450.077882][ T30] #1: ffffc9000de6fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 450.088433][ T30] #2: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 450.099479][ T30] 2 locks held by syz.4.2161/13741: [ 450.104687][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 450.113372][ T30] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 450.123772][ T30] 1 lock held by syz-executor/14482: [ 450.129320][ T30] #0: ffff88807c358ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 450.140783][ T30] 3 locks held by syz.0.2468/14978: [ 450.146248][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 450.154511][ T30] #1: ffff88806b4036e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 450.165224][ T30] #2: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 450.176170][ T30] 1 lock held by syz-executor/16732: [ 450.181502][ T30] #0: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 450.192511][ T30] [ 450.208479][ T30] ============================================= [ 450.208479][ T30] [ 450.232716][ T30] NMI backtrace for cpu 0 [ 450.232741][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 450.232763][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 450.232776][ T30] Call Trace: [ 450.232784][ T30] [ 450.232792][ T30] dump_stack_lvl+0xe8/0x150 [ 450.232845][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 450.232962][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 450.232999][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 450.233026][ T30] sys_info+0x135/0x170 [ 450.233049][ T30] watchdog+0xfd3/0x1030 [ 450.233092][ T30] ? watchdog+0x1c9/0x1030 [ 450.233127][ T30] kthread+0x389/0x470 [ 450.233154][ T30] ? __pfx_watchdog+0x10/0x10 [ 450.233190][ T30] ? __pfx_kthread+0x10/0x10 [ 450.233217][ T30] ret_from_fork+0x514/0xb70 [ 450.233253][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 450.233275][ T30] ? __switch_to+0xc79/0x1410 [ 450.233307][ T30] ? __pfx_kthread+0x10/0x10 [ 450.233334][ T30] ret_from_fork_asm+0x1a/0x30 [ 450.233374][ T30] [ 450.233387][ T30] Sending NMI from CPU 0 to CPUs 1: [ 450.348537][ C1] NMI backtrace for cpu 1 [ 450.348553][ C1] CPU: 1 UID: 0 PID: 4987 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 450.348573][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 450.348584][ C1] RIP: 0010:memset_orig+0x75/0xb0 [ 450.348610][ C1] Code: 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 <48> 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 75 f6 4c [ 450.348626][ C1] RSP: 0018:ffffc90003dc7370 EFLAGS: 00000246 [ 450.348641][ C1] RAX: 0000000000000000 RBX: ffffc90003dc7498 RCX: 0000000000000000 [ 450.348653][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90003dc74a0 [ 450.348671][ C1] RBP: dffffc0000000000 R08: ffffc90003dc74a7 R09: 0000000000000000 [ 450.348683][ C1] R10: ffffc90003dc7498 R11: fffff520007b8e95 R12: ffffc90003dc7940 [ 450.348696][ C1] R13: 1ffff920007b8e8b R14: ffffc90003dc7448 R15: ffffc90003dc7490 [ 450.348709][ C1] FS: 00007f48ca121c80(0000) GS:ffff88812539e000(0000) knlGS:0000000000000000 [ 450.348723][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.348735][ C1] CR2: 00007fffa0161f24 CR3: 0000000036a4a000 CR4: 00000000003526f0 [ 450.348750][ C1] Call Trace: [ 450.348756][ C1] [ 450.348762][ C1] unwind_next_frame+0xf33/0x2550 [ 450.348789][ C1] ? unwind_next_frame+0xa6/0x2550 [ 450.348809][ C1] ? alloc_skb_with_frags+0xc8/0x760 [ 450.348908][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 450.348943][ C1] arch_stack_walk+0x11b/0x150 [ 450.348966][ C1] ? sock_alloc_send_pskb+0x878/0x990 [ 450.349010][ C1] stack_trace_save+0xa9/0x100 [ 450.349035][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 450.349060][ C1] ? stack_depot_save_flags+0x33/0x810 [ 450.349079][ C1] ? stack_depot_save_flags+0x33/0x810 [ 450.349100][ C1] kasan_save_track+0x3e/0x80 [ 450.349123][ C1] ? kasan_save_track+0x3e/0x80 [ 450.349145][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 450.349168][ C1] ? __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 450.349194][ C1] ? __alloc_skb+0x2c1/0x7d0 [ 450.349221][ C1] ? alloc_skb_with_frags+0xc8/0x760 [ 450.349271][ C1] __kasan_kmalloc+0x93/0xb0 [ 450.349296][ C1] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 450.349325][ C1] ? alloc_skb_with_frags+0xc8/0x760 [ 450.349349][ C1] ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0 [ 450.349376][ C1] __alloc_skb+0x2c1/0x7d0 [ 450.349401][ C1] alloc_skb_with_frags+0xc8/0x760 [ 450.349425][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 450.349448][ C1] sock_alloc_send_pskb+0x878/0x990 [ 450.349475][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 450.349495][ C1] ? sock_def_readable+0xae/0x550 [ 450.349517][ C1] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 450.349543][ C1] unix_dgram_sendmsg+0x460/0x18d0 [ 450.349631][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 450.349655][ C1] ? finish_task_switch+0x4da/0xbe0 [ 450.349678][ C1] ? aa_sock_msg_perm+0xda/0x1b0 [ 450.349704][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.349726][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 450.349749][ C1] __sys_sendto+0x672/0x710 [ 450.349797][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 450.349827][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 450.349863][ C1] ? rcu_is_watching+0x15/0xb0 [ 450.349886][ C1] __x64_sys_sendto+0xde/0x100 [ 450.349910][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.349929][ C1] do_syscall_64+0x174/0x580 [ 450.349947][ C1] ? clear_bhb_loop+0x40/0x90 [ 450.349966][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.349983][ C1] RIP: 0033:0x7f48ca271407 [ 450.349998][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 450.350013][ C1] RSP: 002b:00007ffd20b97f50 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 450.350030][ C1] RAX: ffffffffffffffda RBX: 00007f48ca121c80 RCX: 00007f48ca271407 [ 450.350042][ C1] RDX: 000000000000003a RSI: 00007ffd20b98090 RDI: 0000000000000003 [ 450.350053][ C1] RBP: 00007ffd20b984c0 R08: 0000000000000000 R09: 0000000000000000 [ 450.350064][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd20b984d8 [ 450.350076][ C1] R13: 00007ffd20b98090 R14: 000000000000001f R15: 00007ffd20b98090 [ 450.350097][ C1] [ 450.783712][T13641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.792718][T16754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.793230][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 450.793284][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 450.793349][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 450.793381][ T30] Call Trace: [ 450.793412][ T30] [ 450.793435][ T30] vpanic+0x56c/0xa60 [ 450.793530][ T30] ? __pfx___schedule+0x10/0x10 [ 450.793618][ T30] ? __pfx_vpanic+0x10/0x10 [ 450.793680][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 450.793775][ T30] panic+0xc5/0xd0 [ 450.793836][ T30] ? __pfx_panic+0x10/0x10 [ 450.793907][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 450.794004][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 450.794083][ T30] watchdog+0x102c/0x1030 [ 450.794217][ T30] ? watchdog+0x1c9/0x1030 [ 450.794342][ T30] kthread+0x389/0x470 [ 450.794424][ T30] ? __pfx_watchdog+0x10/0x10 [ 450.794489][ T30] ? __pfx_kthread+0x10/0x10 [ 450.794561][ T30] ret_from_fork+0x514/0xb70 [ 450.794637][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 450.794682][ T30] ? __switch_to+0xc79/0x1410 [ 450.794763][ T30] ? __pfx_kthread+0x10/0x10 [ 450.794833][ T30] ret_from_fork_asm+0x1a/0x30 [ 450.794934][ T30] [ 450.801424][ T30] Kernel Offset: disabled