last executing test programs: 2m33.4631167s ago: executing program 1 (id=972): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000000b40)=""/232, 0x1a, 0xe8, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x10, 0x80002, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x7}, {0x6}]}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x10, 0x400, 0x4, @rand_addr=' \x01\x00', @loopback, 0x64e91e306b4fab98, 0x700, 0xd, 0x10000}}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}], 0x20) sendto$inet(r2, &(0x7f0000000440)="217aae43", 0x4, 0x4048845, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 2m33.377110601s ago: executing program 1 (id=974): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6, @in=@broadcast}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6, @in=@broadcast}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$kcm(0xa, 0x3, 0x87) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x5, 0x5, 0x9, 0x82, 0x2, 0xa9, 0x2000000000000009, 0x3}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) (async) sendto$inet(r2, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) close(r7) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) (async) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r5, 0x1) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) (async) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r9 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r9}) ioctl$sock_bt_bnep_BNEPCONNADD(r10, 0x400442c8, &(0x7f00000001c0)={r1, 0x0, 0x1ff, "40de97b3169eb2ce46159d3062bb7be1fe73076b32f4984b3c29ce838a"}) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) connect$inet(r8, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) (async) connect$inet(r8, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) 2m32.747766916s ago: executing program 1 (id=980): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61106200000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d786046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000ff44b0a4577fa8e6084e9c47687f2330203a0a3edca9d4ffc012df1006a70ed9b841cfdedac17240dfe4171bcf94e05bc14f0063ce9e3f18e133ff27db7fc3fa53cc587cc58ece5f86f7a6520eeea8b3e885090acabaebf8bc1dea67de28f23b1756977a30534fc2f6abbe72b68bcd88bbf0749c72fcf19229ac72c24260838d89babf1ecf13e5908d286f71ae0c66b8c2413ae3a7a225132acfa8c3e0a9ab5f094a50786bf4fef8f096446fdeea118294957b97d958ecb028be46dd1434eb1a439218b39f8e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, r0, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 2m32.745947984s ago: executing program 1 (id=983): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, &(0x7f0000000500)) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3c4253b9109c290000000000", @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 2m32.159238737s ago: executing program 1 (id=995): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x0, 0x8, 0x0, 0x3}, 0x14}}, 0x40) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2m31.951110774s ago: executing program 1 (id=998): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) 2m16.929716448s ago: executing program 32 (id=998): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) 2m5.131749901s ago: executing program 4 (id=1334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000f00)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000ec0), r1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r3}, 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) (async, rerun: 32) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async, rerun: 64) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) listen(r2, 0x10ef32) (async) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000090a010200000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000340000000300c000b4047"], 0x78}}, 0x0) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) (async) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_ifreq(r8, 0x8919, &(0x7f0000000040)={'veth0_vlan\x00', @ifru_mtu=0x2}) sendmmsg(r8, &(0x7f0000000e00)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @empty}, 0x4, 0x1, 0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="39d6bf92f21605b1b162c6a1692d22099722963b3cfca5393f798ce928e0bce0e08eaf1bcbfb1ff304097557c21d9cd88400e69281b2", 0x36}], 0x1, &(0x7f0000000300)=[{0x30, 0x1, 0x400, "c69cc6621648ef0310613998f14dd158f06766590ae54ec6d722736b9a"}, {0xe0, 0x112, 0x0, "1b71c8038d75619085707741ae867b8bc7a6a95c75287c0ab124ec42d2d0f700a0dcc7aabeb03fcce7fd65bd5858dc6d9a0012774ffb72b4f84f7101238bd4ed37ebfd67224842e4e99551c1d031a41f896b7a7840a74b2be91eeb986f5a8c1eb604c0426abfe2ca1f206b862a221423e28819ee8a437d42a4a55753d0d291198b84e4777bb51c5d8941484b255d40016c7909c45d6aa7828d7d9a35198cc311ddfa9f5f52efa2a96264c03995e83881f78fc4928ca0ca35b7d821389106a80c2149d9ca84488e92a1"}, {0x78, 0x1, 0x4, "7a0ad9af7c4a6ccdd6cdb680b435aaf967fea8faa3dda3659261d4f4c47dfb6e6407e1f6bd499ddaeccd113922e32939cf9b802b1cd6094d8515997f7a74e8bba58a2de631c8dbd638e16feb84702792940920a787455d7a6f848ff47ba2797d747a16"}], 0x188}}, {{&(0x7f00000004c0)=@caif=@dbg={0x25, 0x9, 0x40}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)="17bd9e42b39fe14c0e45043a759e672a423a3abbcc103cff4274a7ff509c5afe802bbc31d29e61a449265195e679375df54921a0e48c213ac0e1ba6fe5378da38703d428c19d3ef247d2b63ab2", 0x4d}, {&(0x7f00000005c0)="ff89416dd2d22bf0704af011ca8011eb968755fd08c3f22ff34310", 0x1b}, {&(0x7f0000000600)="08458d6a673af2e508f0936d5bb22e9a8aac2abd4eab90b10be0bf4f5bf9ad2194c1be2125b08359091c051a5e23fd495fff8cf77c2b34e0e0333ebe3aecbae35516f528765df19f0506879d1c33b9eed61a6559fa6203a00a195d4b9cf618f6fc528f8bf1419710c140a670c067e47418064edaf167f60707cd164a47c44ee224dc85cc7ef78b03b21565c8e84c7b75d302411eae2eff853d5dbb5ceafcb0bfc128da2986b9b37ca36fc1", 0xab}, {&(0x7f00000006c0)="aaece015b1bec50162766db128be7f58233cdf2ccf782b5c0d9a49205589f238924c378fb6d1b6bba1f60471363296b2bf5639b12f5cf10b14bf05603a8ab69fcf03ac004da3a9cbd84c4a6b97bb75d92fb618804622a50c01c9055deed60e2f69d8313267a28d49c30bd4933411af005885ed5b7fbbd7da3075298695dbade43bf56cb91fff23922a", 0x89}], 0x4, &(0x7f00000007c0)=[{0x60, 0x104, 0x1, "095925d3403322e1679c517b1ceaff2ea96dedb63291a751d3d40bdb2767200e651cacdd6b8f62ecdd3dc148ff92dbb780c720fb8bcb1955ed0ad4b14ae5bcce8e2612f06f057511ee2568b47585b1"}, {0x98, 0x88, 0x6, "32ea5661a0137b4192573954d9dee679c006fe44d7c25aa3faa16f212d9da8a19e658025c2859d433529f40a76d1cf46c5b69eab63bbc4f3cdd58b0ec436491401a53b8370f01efa19859316d325c5425b4c8aa4506ecd9ea5aaf60b13a63fc42b3e372eef3b875f75dc154c8ce03ebac6768ab599ab035377ab636e4f833f6bf4a8a036277b"}, {0x90, 0x118, 0x0, "9437e628755f53e499786e6771594b165fcf6b116b42616cf564557e8eb177bd686cb2831500e04c111d180233773229d44859c0aa5566689b53f6a7c6ff0304026f968751256fb9f6cdb7bd2bdebee58a5e550abeb401670421291890e67879eb5433b0d6dc39fac206f323aec3affda908bdcb6aad28d8829bf901ef57148f"}], 0x188}}, {{&(0x7f0000000980)=@ieee802154={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a00)="b70350d362b39c3a0b63afc89e5d1085127d86739c76053a3d30c121c1199494a8da7b312f39bb7ed188a1748d1e968f76783ec48e9e4cfa9ec3f0d22f10c2f31b0eb27e79f58652214e65cd837cc96e181e4ce0ad0089c2ec49c6754a5f97de0255b68412d65f6111f583c3d87678fe41df30ecf93245e368da567cc70ba13feb709757d1505ef8587dcfa1fb0feae663", 0x91}, {&(0x7f0000000ac0)="0feb2d4542aec1154a2750ed1f8533ca38a5ed4edb2275f109856292ad798c284ce2b02ba72889dbd7ae035c875df2070cfc49e96bf73e52068ba32080ca0e29bdd793919140909f3c83641a83d3ad3b26e59320964727468f2b4c4f2424", 0x5e}, {&(0x7f0000000b40)="5796c539ce8aa8412be99b1b482891d6602b8a219ef1b59e02b79edab6952c8ae27bbc36962ec91e8c68e4375d6243422b9c172aad363632af3efc491d5f2cabc035af79394198d0145080e5d819513fd031a434f39ccfb8a9d0c8f15fe574d91df028c1437b0276251b2eef3ee1d17df036b3b6f6c0984491254d7caeb8724805a435ed20b9ba0cec771e39c44f200af34cca777fae7c42", 0x98}], 0x3, &(0x7f0000000c40)=[{0x78, 0x10d, 0x3, "9175e1bf3b281d926ba7e66f61095a8f3ba15405edc777d41fdecd8c1d98b24972f931757a0b33e3a108b18f548610edbdfec958433a42b0d2515bf195c157d268979d1ceb738c9136518a2accf8e710ce4116faecd1cd07e9ae1c72f7b038997a9e79b9"}, {0x100, 0x108, 0x2, "bce0948aab452d5832a3994d009056f842dec9d073848d16f4e4754a2df2e69de54e2614419777bc18e7333f7d3ceda30b4e5bfae6305846b914870d558443d0a87a2998ad6054724055a013601d14640687a5c149943a87cc413347287558fb8b710b1a6086ab2dab76b27d48822a73e3781881b1d925cd27f7e0e8ac048476be8e9447d9a27cee977789debf57eeea8e6851de8c04fd81fc7c0e3bfbabc21757543115f1aa2e5447697218a870314d5321048501ebe3f01d2e5931b52ded2f8d360c4a6fa973bbea63d09a3bf672bd61666a84096a972fabd908a4a1baeaee3f277463a788024feff8"}, {0x30, 0x115, 0x1, "6867e70b5600d1225409c1d2d3ae8a8423db4cae0e340d1be0"}], 0x1a8}}], 0x3, 0x4000) (async) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (rerun: 32) 2m4.635318416s ago: executing program 4 (id=1340): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003500)={0xe0, 0x13, 0x1, 0x0, 0x0, "", [@generic="d8f00d2c09a739aaf9a450f21dd3ab4b0551f902cbf669a2e5ac6b1a5317c2d9532d75ff4393c8de5aed294ee89cd85a07ecb834de0e49d5bb9ff633e6425c1ba3849a0e10f972e2f4d18aabb3175c574e59c6419f3b9f60f7779c868d9c7b400f20c00ca51b4c9e29f97a9bdd9620d71a84a46d52dd3dc1661e478c9a1934d5e0cdd5f2c9076e879ddca6639824c343424bd884dc991f14b5b58ce35b1699bd64dd4e7e4e5cde2ff49723c8624f33298c16cf9d4c41b9e61c8416bd52700661880e486563693121216e05c62f"]}, 0xe0}], 0x1, 0x0, 0x0, 0xc848}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0) 2m4.222063776s ago: executing program 4 (id=1345): r0 = socket$unix(0x1, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8b1c}]}, 0x44}}, 0x0) (async) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) r3 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) (async) close(r0) 2m3.932182815s ago: executing program 4 (id=1348): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) ppoll(&(0x7f0000000180)=[{r5}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r4, @ANYRES32=r6], 0x24}}, 0x20008000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r2, @ANYBLOB="308041bb4b284848", @ANYRES32=r2, @ANYBLOB="0c000200ff7f000000000000"], 0x3c}}, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000080), &(0x7f00000000c0)=@udp, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0xf}, {0x0, 0x0, 0x0, 0x81}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f0000000040)}, 0x20) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8923, &(0x7f0000000000)={'veth1_vlan\x00', 0x1ba}) 2m3.470244387s ago: executing program 4 (id=1351): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000000000008500000094000000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r9, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) r11 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r11, 0x110, 0x5, &(0x7f00000000c0)=[0x4, 0x3], 0x2) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r7) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x1, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x2, 0x9, 0x30, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @remote, {[@lsrr={0x83, 0x3, 0xe2}, @ssrr={0x89, 0x3, 0x2e}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x81, 0x8, 0x99f, 0x10000, 0x2}}}}}, 0x0) 2m2.885669219s ago: executing program 4 (id=1357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1d, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}]}, 0x2c}}, 0x0) 1m47.799620668s ago: executing program 33 (id=1357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1d, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}]}, 0x2c}}, 0x0) 1m2.186892764s ago: executing program 3 (id=2238): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000200)="7be1f308de") (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x810) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) (async) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001900599c6d0eab070004000523"], 0xfe33) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}, [@jmp={0x5, 0x0, 0xc, 0x4, 0xa, 0x4, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r5}, 0x94) 1m2.085299342s ago: executing program 3 (id=2241): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) syz_emit_ethernet(0x6c, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x37, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x6]}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1m2.031085348s ago: executing program 3 (id=2242): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000}, 0x10, 0xffffffffffffffff}, 0x94) 1m1.887179679s ago: executing program 3 (id=2244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x30, r1, 0x5, 0x8000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}]}]}, 0x30}}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='G', 0x1}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc20655b8ddd4c5d851da4a4e8f1657b360105", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fddbdf25010000000000000001410000001400170000001a000000016574683a00000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000640)={@remote, @loopback, @private2={0xfc, 0x2, '\x00', 0x6}, 0x40000, 0x40, 0x2, 0x100, 0x0, 0x40180043, r7}) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$cgroup_subtree(r8, &(0x7f0000000240)={[{0x2b, 'net'}, {0x2d, 'memory'}, {0x2d, 'hugetlb'}, {0x2b, 'hugetlb'}, {0x2d, 'hugetlb'}, {0x2b, 'devices'}]}, 0x31) 1m1.653612649s ago: executing program 3 (id=2250): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtfilter={0x138, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x108, 0x2, [@TCA_CGROUP_EMATCHES={0x104, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xf4, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x84}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xcb, 0x5, "38ca89ebb189006ab8d7f73583c2de8320c31349d779b104f6e3a77da033dc037741851601a84225bee9ae388e4e87dd8ec0f5591c46ecc5f514a88cd0291f1b9b0b6d359b18e15f5fe948cf7cbdd162a9960ab32bf99eca3e0dc2074e13de71eb4f38e6e9da65cbd3a37a7533ac83ec1a853d44af8036c4f823c78efb7e91b50741bef159fc2185a0163ef9c39465f73c20454ad85c8ce934d4d88cc1330cbeaed10e9aef1f13fb677c6833367d6c3ed6741ac2bff058f44d0e0e3e295ee3416e5fcbf75b60b0"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x138}}, 0x4811) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x202000, 0x0) bind$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x5, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="060000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191) listen(r7, 0x100) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000540)={0x3b}, 0x8) (async, rerun: 32) r8 = accept$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @private}, &(0x7f0000000400)=0x10) (rerun: 32) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r8, 0x8002f515, &(0x7f0000000440)) accept4(r7, 0x0, 0x0, 0x0) (async, rerun: 64) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 64) getsockopt$inet6_opts(r9, 0x29, 0x39, 0x0, &(0x7f00000010c0)) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r10, 0x0, 0x13, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=@report={0xd4, 0x20, 0x8, 0x70bd28, 0x25dfdbfc, {0x2b, {@in=@dev={0xac, 0x14, 0x14, 0x36}, @in=@loopback, 0x4e24, 0x3, 0x4e22, 0x8001, 0x2, 0xa0, 0xa0, 0x73, r6}}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @policy_type={0xa}, @algo_auth={0x74, 0x1, {{'sha384\x00'}, 0x160, "a6c513f9e8e0ae72cdf0a11fbda6b781f38cc9c7ee16f80c3b12dcdf53d41266143a383efca7bc829a97b370"}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8010}, 0x4040) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 1m0.725335176s ago: executing program 3 (id=2267): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"6ef17473b7fc0797ac5adbc038a7e87f", 0x0, 0x0, {0x4, 0x2}, {0x8, 0x5}, 0x81, [0x0, 0x1, 0x4, 0x3, 0xe, 0x40, 0x6, 0x2, 0x2, 0xbb, 0xff00000000000000, 0x9, 0x1a2e, 0x6, 0xffffffffffffff81, 0x1]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000480)={{r0}, r1, 0xa, @inherit={0x88, &(0x7f00000003c0)={0x1, 0x8, 0xfffffffffffffffb, 0x5, {0x2e, 0x5, 0x8, 0x8000000000000001, 0xfffffffffffffff9}, [0xaf, 0xc27, 0x8, 0x8001, 0x6, 0x2, 0x8, 0x3ff]}}, @devid}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r3, 0x0, 0x7f}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 46.523494227s ago: executing program 5 (id=2446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x11, 0x25, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_UNIT={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtaction={0x14, 0x68, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0xff85}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r4], 0x54}}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x11, 0x25, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_UNIT={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtaction={0x14, 0x68, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0xff85}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r4], 0x54}}, 0x800) (async) 46.240073233s ago: executing program 5 (id=2451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000300)="a0", 0x1, 0x0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0x21) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x58}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r5, 0x0, 0xfffffc60) r6 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001039010000000000000000000d00000a140000001100010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r11, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x702}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8001) socket$kcm(0x10, 0x2, 0x0) 45.664184716s ago: executing program 34 (id=2267): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"6ef17473b7fc0797ac5adbc038a7e87f", 0x0, 0x0, {0x4, 0x2}, {0x8, 0x5}, 0x81, [0x0, 0x1, 0x4, 0x3, 0xe, 0x40, 0x6, 0x2, 0x2, 0xbb, 0xff00000000000000, 0x9, 0x1a2e, 0x6, 0xffffffffffffff81, 0x1]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000480)={{r0}, r1, 0xa, @inherit={0x88, &(0x7f00000003c0)={0x1, 0x8, 0xfffffffffffffffb, 0x5, {0x2e, 0x5, 0x8, 0x8000000000000001, 0xfffffffffffffff9}, [0xaf, 0xc27, 0x8, 0x8001, 0x6, 0x2, 0x8, 0x3ff]}}, @devid}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r3, 0x0, 0x7f}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 44.511943865s ago: executing program 5 (id=2469): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000200)="000088a8e28158408ce7eacd4e84fa2edbeae4d973357b", 0x17, 0x4000041, &(0x7f0000000140)={0x11, 0x8100, r3, 0x1, 0x80, 0x6, @local}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) socket$tipc(0x1e, 0x2, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000480)={r6}, &(0x7f00000004c0)=0x8) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=@newtaction={0x48, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x54, 0x33, 0x1, 0x70bd28, 0x25dbdbfe, {0x8}, [@generic="1d69b8583c0a2eee09b028ab8be7f7b0620200d639ee6ede9a925caa7f9c11fde4db5cd237d5095308b9ce14ebfbd5252617b14989408223412f2a270a07"]}, 0x54}, 0x1, 0x0, 0x0, 0x4000859}, 0x24000811) bind$netlink(r8, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x40000000}, 0xc) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}}, 0x40004010) 44.197784521s ago: executing program 5 (id=2475): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x47c0a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x4}]}}}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x11eac000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x2000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x4e24, 0xc5, @empty, 0x58ea23c3}, {0xa, 0x4e22, 0x40, @private0, 0x1ff}, 0x1, {[0x4, 0xd1, 0x1, 0x7, 0x1, 0x7fffffff, 0x2, 0x200]}}, 0x5c) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r4, 0x1, 0x0, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 43.922702516s ago: executing program 5 (id=2479): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'ip_vti0\x00', {0x1}, 0x3}) r0 = socket$nl_generic(0x10, 0x3, 0x10) accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@rose, @netrom, @remote, @remote, @bcast, @default, @default, @netrom]}, &(0x7f0000000000)=0x48) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 43.66321998s ago: executing program 5 (id=2484): connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000000000000000130400"], 0x0, 0x37}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c00018006000600655800004c150280081511"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x7f}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) 28.623982064s ago: executing program 35 (id=2484): connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000000000000000130400"], 0x0, 0x37}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c00018006000600655800004c150280081511"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x7f}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) 10.840863459s ago: executing program 0 (id=2845): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)="35ebc9747b", 0x5, 0x400440e9, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071106f000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 10.613471483s ago: executing program 0 (id=2848): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xf, 0x2, 0x0) (async) r2 = socket(0xf, 0x2, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000001ec0)="823a734c4f45e4d9720d9abbe9704398", 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRESDEC=r2], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x50, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5421, &(0x7f00000000c0)=0x7) write$cgroup_int(r6, &(0x7f0000000140), 0xfffffdef) write$cgroup_subtree(r6, 0x0, 0x12) (async) write$cgroup_subtree(r6, 0x0, 0x12) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x18}, 0x8000) (async) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x18}, 0x8000) connect$rxrpc(r2, &(0x7f00000002c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) (async) connect$rxrpc(r2, &(0x7f00000002c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) 10.341661932s ago: executing program 0 (id=2852): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x25}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)={0x10, 0x3d, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) 10.015175039s ago: executing program 0 (id=2856): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newqdisc={0x50, 0x24, 0x0, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xffff, 0xf}, {0x1, 0xfff2}, {0x4, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0xfffffe5a}], 0x2, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001780)=""/121, 0x79}], 0x1}, 0x8}], 0x1, 0x2120, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0x130, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_USERDATA={0x72, 0xd, 0x1, 0x0, "923400c0dc162bad5793ac84ea1237dc37c4e040e2bf163352b79ae4cb13fd5b647a9e8c3085fdca7afe3d5c4550be7b10198f0f740979d905f37439dbcc8562a5168d8a86b42d598d5afc13bb57b939eaf4c4c92b6fdfc23d92397693d34cafad0a3b77ec3b660e1343ca2f483f"}, @NFTA_SET_EXPRESSIONS={0x9c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xb}]}}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x1404, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}}, 0x4040080) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r5, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) 9.885184498s ago: executing program 0 (id=2859): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7c, r1}) r3 = socket(0xa, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x40}}}}, ["", "", ""]}, 0x28}}, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 9.583109124s ago: executing program 0 (id=2861): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040), 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0x0, 0x0, 0x40}, 0x50) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000010c0)={{r3}, 0x0, 0x2, @unused=[0xb, 0x4, 0x2, 0x7], @subvolid=0x2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000007c0), 0x4) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r5, 0xffffffffffffffff, r5, r5], 0x0, 0x10, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1c, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = accept$nfc_llcp(r0, &(0x7f0000000680), &(0x7f0000000700)=0x60) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) bind$nfc_llcp(r6, &(0x7f0000000740)={0x27, r9, 0xffffffffffffffff, 0x6, 0x99, 0x0, "c2a19bf2e2306166a4cfb9801d8f55ac6904e69854e442402b375cd86e23363a9765fe0caf211590ea9b08bf995e6946f0c49783747a578fe0c098d91a1357", 0x26}, 0x60) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r10, 0x104, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r4, 0x0, 0xfffffdf6, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f00000000c0)="f074d4a86f999d734d1f26a1a7b23e568c95b52d306ee068d6746953c5b8ac136085a6246139ce7ae23add4c0349122f65e28345f3d4b1786542e8bdd11e00be53fd6b", &(0x7f0000000240)=""/222, &(0x7f00000003c0)="841812ca9dc23d1d792dec99679eb69e42cba0f0d868cd144f9ad7205f74531dd9e339745e4175febaf30d152a3a07b5db1eca9425b5c1a6be00349005f48ce7e585a7c26f63", &(0x7f0000000500)="1127c6e0195a9635ae98eb011470c9bb55e1b00535192a452c69e00a70966d1b705db1e9c981be279022f237edfd60494869a83db693f38c222982c3ac6a0b3a79765fdf3204d299c155eadc58a89a891a6e7f981687acb94bca75973b5479bfd74c63dbab0dfa25d1c4b82880d1e8e67b96a95dd77fecc437b51cf83080aff09bbf6c9789fedb7de95a0bcbf48e178bb2b17ac4f7721d118e0de04364bccffbbd93b941910ec72c54f23113be0dc21212372129ce66da5e76afa297676dc79897c94d30062b43dc5a08b855f3ae774e54aba19ba0", 0x55, r2, 0x4}, 0x38) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0xa, &(0x7f0000000180)=ANY=[], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 2.010384304s ago: executing program 2 (id=2944): syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r1, 0x0, 0x40) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001200970c25bd70000200000007000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000040034"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) (async) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1) (async) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0) 1.921617773s ago: executing program 8 (id=2945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="7989"], 0x28}, 0x1, 0x0, 0x0, 0x20004004}, 0x24000000) 1.829367601s ago: executing program 7 (id=2946): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x4000000}, 0xc) 1.715365621s ago: executing program 2 (id=2947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x10, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3c}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000002c0)={0x7}, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={r0}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffff801}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) connect$pppl2tp(r5, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @multicast1}, 0x1, 0x4, 0x0, 0x4}}, 0x2e) sendmsg$rds(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000500)=""/46, 0x2e}], 0x1}, 0x20000040) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000005c0)={@multicast2, @initdev, 0x0}, &(0x7f0000000600)=0xc) bind$xdp(r5, &(0x7f0000000640)={0x2c, 0x4, r7, 0xb, r4}, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r2, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004011}, 0x40880) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r5) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r8, 0x609, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000001) getsockopt$inet_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000900)=""/23, &(0x7f0000000940)=0x17) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x6c, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8000, 0x49}}}}, [@NL80211_ATTR_SSID={0x1d, 0x34, @random="4d8ab2ad10ecbc2556796f0c41596936707b7f3e973f2f8693"}, @NL80211_ATTR_SSID={0x15, 0x34, @random="b65003c5d06f886236d50ea4be9c7c903b"}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x100c0}, 0x2000c811) setsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000ac0), 0x4) socket$kcm(0x29, 0x4, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000b00)={0x0, 0x5}, &(0x7f0000000b40)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000b80)={r9, @in={{0x2, 0x4e22, @empty}}, 0x9, 0xc4}, 0x90) r10 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r10, &(0x7f0000000c40), &(0x7f0000000c80)=0x20) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r11, 0x89f8, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000cc0)={'gre0\x00', r7, 0x8000, 0x1, 0x5, 0x6, {{0x36, 0x4, 0x0, 0x2, 0xd8, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x8, 0x1, [{0x7, 0x2}]}, @cipso={0x86, 0x7c, 0x3, [{0x5, 0xc, "77fc15307b4777db3d13"}, {0x7, 0xa, "b2dfee15930ca176"}, {0x7, 0x5, "880bf2"}, {0x5, 0xf, "31463e7eeb6bbe8db69fe34aba"}, {0x5, 0xd, "0e7fc5a14fa6b47dfb5837"}, {0x6, 0xd, "f1ba27dca9388fd3d444d8"}, {0x6, 0x12, "d1b410467ec8599af01f2be8cb657349"}, {0x0, 0xb, "5d3fbfffe7e1d9d854"}, {0x0, 0x9, "9761b23403e563"}, {0x0, 0xc, "b3191194aee9b79fd8d2"}]}, @ssrr={0x89, 0x1b, 0x72, [@multicast2, @multicast2, @broadcast, @loopback, @local, @empty]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xd, 0x3, 0x3, [{@broadcast, 0x9ae2}]}, @generic={0x7, 0xf, "05b20d978b9c8e496823470738"}]}}}}}) r12 = socket(0x18, 0xa, 0x4b3) sendmsg$NL80211_CMD_LEAVE_MESH(r12, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r2, 0x10, 0x70bd2d, 0x3, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xac1b808308524277}, 0x4000) 1.680787489s ago: executing program 8 (id=2948): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="680000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000380008800c0001010800094000000094"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000000)={0x20, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x83cd5ee2fa2aa4c2}, 0x8010) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@generic={0x6, 0x9, 0x6, 0x4, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x1b, r1}, 0x94) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="680000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000380008800c0001010800094000000094"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000000)={0x20, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x83cd5ee2fa2aa4c2}, 0x8010) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@generic={0x6, 0x9, 0x6, 0x4, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x1b, r1}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) 1.553872127s ago: executing program 7 (id=2949): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x400}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x58}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x7bdc, 0x3, 0x100, 0x0, 0x0, r3}) 1.406774027s ago: executing program 8 (id=2950): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "30bd05a78f0edbcb66cce5984343e09c262fc62d381cd6515d33e142245708d9", "85db081dcb26409ecb60274324d72410", {"0c1c28b8552c9dfdf23da2340cb8cbc7", "1f5489d79cc13665174cedcb215e4a1a"}}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000420000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r2) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r4, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}}, 0x0) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x40, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x73}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x85}, 0x20000000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x1c, r6, 0x1, 0x70bd2a, 0xfffffffd, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044025}, 0x4024800) readv(0xffffffffffffffff, &(0x7f0000002340)=[{0x0}], 0x1) r7 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111cc000000000006000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r8}, 0x94) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, &(0x7f0000002f80), &(0x7f0000003000)=0x80) r9 = socket(0xa, 0x2400000001, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtaction={0xa4, 0x30, 0x53b, 0x2, 0x0, {0x9}, [{0x90, 0x1, [@m_sample={0x8c, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6a9c, 0x4, 0x5, 0xa53, 0xfffffffe}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x26, 0x6, "4c23bd7389f784685e1708fd06c1cbf5dba85a35503603f98a68a2387cc5cd715390"}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket(0x10, 0x80002, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) getsockopt$inet6_buf(r9, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 1.36188313s ago: executing program 2 (id=2951): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r3, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8913, &(0x7f0000000680)={'veth1_to_bond\x00', @ifru_mtu=0x1}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b000000000008000a00", @ANYRES32=0x0, @ANYBLOB="73f3011f9c2f1cc39f3382d20d0da2928273efba45f85931c3f5dcb0bc035eebc55483abf9502fe9de70f4967f5d57889b"], 0x3c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000005c0)={@pptp={0x18, 0x2, {0x0, @local}}, {&(0x7f0000000000)=""/27, 0x1b}, &(0x7f0000000580), 0x4a}, 0xa0) 1.25507861s ago: executing program 7 (id=2953): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40110}, [@IFLA_AF_SPEC={0x44, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x38, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x61}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x10}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}]}, 0x64}, 0x1, 0xba01}, 0x0) r2 = socket(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xa, [@ptr, @const, @typedef={0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x8, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x0, 0x5f]}}, &(0x7f0000001400)=""/149, 0x5e, 0x95, 0x1}, 0x20) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x3c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 1.205681395s ago: executing program 8 (id=2954): socket$rds(0x15, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_crypto(0x10, 0x3, 0x15) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x173042, 0x0) r3 = socket(0x2, 0x2, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$AUDIT_GET(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3e8, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x8c5) recvmmsg(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/191, 0xbf}], 0x1}, 0xfffffffa}], 0x1, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000400000000000000010000009500e800000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f00000000c0)=""/123, &(0x7f0000000140)=0x7b) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0xb}}}, 0x24}}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB='0x0}, &(0x7f00000014c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001500)={0x0, 0xc, "4f672ff1f3e7433fa2f06924"}, &(0x7f0000001540)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001580)={0x0, 0xe66, 0x10}, &(0x7f00000015c0)=0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001600)={0x0, 0x9}, &(0x7f0000001640)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000002f40)={0x2, 0x2, 0x0, 0xdfac, 0x2, 0x8, 0xfff, 0x81, 0x0}, &(0x7f0000002f80)=0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000002fc0)={0x0, 0xe8, "cdfbe9b0cf65e4343e8749e47770c2a0b39115c265503a31fcf959639f9b9a37ed01d162c59828e4779b6d84d37f02f6d2b6b91a86f1350fd725f585e6de4d14c5a341c6ef6057df9ee6df0d9431095cec1efc9f2c0d814c1fb28ccaa0a95b4286997b64c5296fe1a1b2d4d71715b7e5d03d6b90b4b8501d6687ae52fd3a8522677ece1894997c08064f253883eeb077e280f56960994f3aced239822a9d6288e4afdd05101c7a1d899d2716728a8e769824ad8562db6b5a9907d61dd293a52429851a544a58f2a4289b6a4c7813ad78cd907bef4c9fc867bd1b6be8e3b2f0f5128f2f5658360c4e"}, &(0x7f00000030c0)=0xf0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000003100)={0x0, 0x0, 0x9, 0x10, 0x3, 0xdc, 0x1, 0x9, {0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffffffe, 0x1, 0x2, 0x6}}, &(0x7f00000031c0)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000003200)={0x0, 0xe43, 0x4, 0x8, 0x6, 0x4, 0x7ff, 0x4, 0x0}, &(0x7f0000003240)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000003280)={0x0, 0x3ff, 0x8, 0x4, 0xffcb, 0x9, 0x9f, 0x8, {0x0, @in6={{0xa, 0x4e24, 0x6, @remote, 0x7}}, 0x1, 0x7, 0x3, 0x3, 0x8661}}, &(0x7f0000003340)=0xb0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000003380)={0x0, 0x0, 0x101, 0x2, 0x7, 0x6, 0x8, 0x0, {0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x3, 0x6, 0x9, 0x4, 0x8}}, &(0x7f0000003440)=0xb0) sendmmsg$inet_sctp(r0, &(0x7f00000035c0)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000040)="4e6a6558ad004003e2801899877af3e8ff08d5a4874e9cf89aef81a374191d17a73ca3ca096f5878d9c17e953f19eaf121eb2d54b05a231a6030f9b17e7e2797cd3f65bce2331572cb760a73cba6dae77bc35f818d19c3635f35320f48bec53071dd468c9ee1ed90288376040716a671af54b7f21b1dba7db51847b903fea11a8b0f3534cb4f", 0x86}, {&(0x7f0000000100)="8ed390120198142f88ea8c06bda735d78c5eca140fec835af7b298aa5cdbe15e8d2215a5f5665492a505f04dad3126d31bba7966c4711d482f2e9f4d8b8a9b3210b9b17d23903ad5bce2ff8606bfc9f9a49ce8bd3304c26ac2a6ab4f5e862a2ab813b61f9c4e4aab7ee45add5574767bdda2d0c7c3359a3fae463708d1725ba345e6d93508de1e43e665b0c3d8798821468e53fed826d75dd024a294a18a62d7c5257688641f1139400e67a191252b28dc77", 0xb2}, {&(0x7f00000001c0)="6c2c1622299b418f5d339073897cff20c8b4272e879db3aef2f16e8b9019ccbf6adea6a38f616b1dd9346f1ad6e1edeeef9f626a8405b8d01cee44fc8854452ae62d37564a5f1bb8c0c1b50e4e1ef0bd140d996d912f135a989074985e30902a8c76c0c1112bf1d9cdc233cdf0a74c424b63571400e08dde3245a44c3cf37abfd9fc8224230f61efe05b7870c787d938759fa1c9235706bac0de30e589182172940f42700111852979a44a0f2fa46ce55854490cd4eb94", 0xb7}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="530249159f69cd72fbaae23bd6b9668d60ec9c4be31d0bf5c3fb347b6044a8b39646a039c52a2101a62a369d2fe2fba9010fa074fc05406356a0dce91c73c9bad35f40b1c2a7a68b0cebd14edd82246fdf8eaf52a6bc0011031784e29f104e5bf19d1155807fdbadcda4c7d5c0bfd3affd35be28ae20378a13dd48019567a5095b954c33a77b9a752e0378c8c0bbd6532eabea23c33c58dd73097ae3dc1319cfcb755b1de1906f5a5499f21714be73f49c28892c4d1af8ea4b612030ffd13725db53ff1e2719a43566acda25ccabca147712", 0xd2}, {&(0x7f0000001380)="d87f2edbed456faef6a4cd6e7620c6c6b49227420090ac6e29932d92fd0f6ea6c6133e0451442286ccf3f39d3ea5614506f0e0b4fc4d74a29252f9f7766cad3ed0ccc3d7ed1df6d77dad1986bead4fbe8f9b5c91d3ebea38bd86936bf7a6531961c7e7", 0x63}], 0x6, &(0x7f0000001680)=[@authinfo={0x18, 0x84, 0x6, {0x3}}, @init={0x18, 0x84, 0x0, {0x4, 0xe, 0x2, 0x486e}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x8000, 0x8, 0x6}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x200, 0xc004, 0x8, 0x10, 0x80000001, 0x9, 0xae1, r1}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x8000, 0x800, 0xbdc, r2}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x200, 0x3ff, 0xa403, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x9, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x105, 0xbe7, 0x9, r4}}], 0x118, 0x48080}, {&(0x7f00000017c0)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000001800)="b0dc5c0b92a5efbd3522f4e37039a734173e66a0e8e9ba1f92238326cd3e2bbb3fa4789e0b62a63c25e226a9fadeca21a25a3405073314f5414aeb1c3a8d728be1b1fa2af9", 0x45}, {&(0x7f0000001880)="226d27bfd161135f0d98dcb69edd31cce58b7fa9b6b432b49c4a83266117", 0x1e}, {&(0x7f00000018c0)="e19af69ac85022f3b97b657e43684235acd85565067664fdf784bff3e299f7b36dfb1b41fb79b4153a3b37fe270e613ebb7bd0a58ca9f1b1429ed0371ffe17678c655ad06cb92374e28b5ee58cfadf52ee0bcffb388567f6829c58aadf13b717306c8d9c71a0ff977f5190ce6de7bfff445646945d66df274643887bbdda9272bfdd827dca97a73cfe0f27f2d9d98e9bbf3d2e907866d7783b2f5e0d0a93aab4c02d60ded0e624566a2aaadf87778d9b43e973a4e3621f80746e533e0882a5987ff35c7bef54ca95958a888c", 0xcc}, {&(0x7f00000019c0)="79a52e846e521c721134cea8390ede11d66e8abb833160ccc27e64116b642aff12f5da48e222d9427751", 0x2a}, {&(0x7f0000001a00)="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", 0x1000}], 0x5, 0x0, 0x0, 0x10}, {&(0x7f0000002a80)=@in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, 0x1c, &(0x7f0000002ec0)=[{&(0x7f0000002ac0)="29a9d55a3baed099bf4a142771c10943c8de3ec2d3ebd121312b1852bbd31e957f0a570b4e30ea9a263c8b", 0x2b}, {&(0x7f0000002b00)="993f79def1c776f9f9fa255963eb78100e8a3429d6fe2e463ca52a0856f3eec64d0dab6d3ea0d98ff27f4e6685e68e86ed240463af4b9c252375ef019758df686558fa40912baef7b848c8d797576d129e2d293da968d7827398c68b734b2e384370a132209b474deb6226ba2b3fcc936f02b4679e2b64b614ca8856b80ef2682fb63c08b153716401788856d4397f2ae81f9b043c32ad06d40083d3b15ccc255de9a3abd3fcd39bebe42b57251819912b81202ccd5ae47ab303618337235ef0f3b8ed394164f6c12dfc36c0559f3566beea2b64b3d434887904133cf22747", 0xdf}, {&(0x7f0000002c00)="a4a182dc698d16d1a08f66c334fa632124623c450637483babe11b51e0e795b36c5d4de67dc060973ff1aa87aa30e1160138dcb8f4927fc3b5aca586c0c6c82246b76d90635869ba70d3bf69d6bf0b392bfb56d23b98281ba67e981df4ccf67c5517537295a611947a08926de282b2e78c99683fece32cc32e34b1d7b4e7d8d66f226cf741cf98bccea66dc1e70bee0f6c9bf85429e87840068d4a125ffef82a284ff372f60073af48991588c0d88ea29464187015d4e75dc6ab56912743a92cac665abb2f217e0d1e0308d7364ea4d539c58c9cb2242b6c8107b69e7368ae", 0xdf}, {&(0x7f0000002d00)="9e3f1b87dceb6ed46c3d65fbb6fa2ab99216fb921fe72be41a0a348f1abe342e0dcbfeffb100f6ed57e3887bdb032dd8f1848786bf7db027611aa806e44823ce4f912e89b3bf5adc8a8c50a4a3181f1039c09e69f9e7067c76b17fdafff120c866fe7306d1ceefe76503108ef1f1cc1c12", 0x71}, {&(0x7f0000002d80)="f1290585fa302adf02d3186abd29bd0db95a47bfd154f013627686ac23a2a3804038d006fc1c4c7bc22cc57d60de38e6dd511c92", 0x34}, {&(0x7f0000002dc0)="c2710c0046209b3e7e75c2c424995b873418997daa3bd1e41b68c7a68c74d8984c22fd8ed79a90981a7563b1e0f1f5f0253088e32690c767ce1db0355d03c3a3c670d36a55cf313da3b94599924f36107abe46085a61d3e99d865127ad478331e36a63f3089c02f62f52654127e35ea695b1f303db0c037afc0ba73d001e9a341caeb5c37061bad2d3ff34d3a7492309e6647eae00d4c41f726bead5d6407babd4870575f128330be28d14439100e87d435d905261753081cc6530a75b1cab173dc52b55d39d9a86ec0be40be10fad08736d95934ef87b36550591b86b492f2b8e01263654afc4", 0xe7}], 0x6, &(0x7f0000003480)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x8002, 0xfffffff8, 0xc, r5}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x1, 0x8200, 0xffff0000, 0x5, 0x3ff, 0x6, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x17e, 0x2, 0x20a, 0x80, 0x0, 0x6, 0x4, 0x5, r6}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x1, 0x200, 0x7, 0x1, 0x0, 0xfffffff2, 0x7fff, r7}}, @sndinfo={0x20, 0x84, 0x2, {0xb0, 0x8000, 0x1, 0x5, r8}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0xa, 0x3, r10}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x8002, 0x1, 0x1, r11}}], 0x110, 0xc058}], 0x3, 0x40c0) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r13, 0x84, 0x76, &(0x7f0000003680)={r7, 0x8}, 0x8) r14 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r14, &(0x7f00000036c0)=""/167, 0xa7, 0x40000020, 0x0, 0x0) r15 = accept4(0xffffffffffffffff, &(0x7f0000003780)=@isdn, &(0x7f0000003800)=0x80, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r15, 0x28, 0x2, &(0x7f0000003840)=0x3, 0x8) bind$vsock_stream(r15, &(0x7f0000003880)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r14, 0x8010671f, &(0x7f0000003940)={&(0x7f00000038c0)=""/103, 0x67}) setsockopt$inet_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000003980), 0x3) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r15, 0x84, 0x18, &(0x7f00000039c0)={r9, 0xd}, &(0x7f0000003a00)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f0000003a40)={r12, 0xffff7fff}, 0x8) read(r15, &(0x7f0000003a80)=""/16, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000003ac0)='nicvf0\x00', 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r15, 0x84, 0xa, &(0x7f0000003b00)={0xb7, 0xb, 0x206, 0x0, 0x7ff, 0x4, 0xfffff9bd, 0x1, r4}, &(0x7f0000003b40)=0x20) bind$rxrpc(r14, &(0x7f0000003b80)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @loopback, 0x2}}, 0x24) getsockopt$bt_BT_POWER(r15, 0x112, 0x9, &(0x7f0000003bc0)=0xa2, &(0x7f0000003c00)=0x1) socket$kcm(0x29, 0x0, 0x0) setsockopt$MRT_DEL_MFC(r15, 0x0, 0xcd, &(0x7f0000003c40)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0x1, "4f58688588d4dab224834cdb8eb29b8c5337bd013a6348b1fa98b9eefe77b50f", 0x5, 0xfffffffb, 0x266, 0x9}, 0x3c) 947.10093ms ago: executing program 6 (id=2956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_getanyicast={0x14, 0x3e, 0x21, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000300)=0x3ff, 0x4) connect$caif(r3, &(0x7f0000000100)=@rfm={0x25, 0x0, "d034e68fae880aca9de7751355b0eb74"}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) 864.341902ms ago: executing program 6 (id=2957): mmap(&(0x7f000058e000/0x1000)=nil, 0x1000, 0x3000004, 0x20010, 0xffffffffffffffff, 0xffffc000) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0xd, &(0x7f0000004180)=""/4114, &(0x7f0000000000)=0x1055) 775.650971ms ago: executing program 6 (id=2958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x6, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r3}, 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x21, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000001a0af900000000000000000001000400090001"], 0xd8}}, 0x4f3033cead2b0b26) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newqdisc={0x2d4, 0x24, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xd, 0x5}, {0x7, 0xe}, {0xfff1, 0x8}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x16c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe6, 0x6, 0x9, 0x3, 0x1, 0x1d, 0x6, 0x5}}, {0xe, 0x2, [0xda1, 0x5, 0x0, 0x8001, 0xff80]}}, {{0x1c, 0x1, {0x5, 0x3, 0x284, 0x0, 0x0, 0x4, 0x3, 0x8}}, {0x14, 0x2, [0xc0, 0x1, 0xa1b, 0x5, 0x3, 0xa26, 0xf, 0x5]}}, {{0x1c, 0x1, {0x6, 0xe, 0x6, 0x5, 0x1, 0x7fff, 0x8, 0x4}}, {0xc, 0x2, [0x6, 0x8, 0x7, 0xa]}}, {{0x1c, 0x1, {0x5, 0x6, 0x101, 0x1, 0x1, 0xd, 0x1, 0x8}}, {0x14, 0x2, [0x4, 0x8, 0x100, 0x9910, 0xd, 0x6, 0x1, 0xa]}}, {{0x1c, 0x1, {0xfe, 0xfd, 0x2, 0x9, 0x0, 0xfffffff9, 0x2a1, 0x7}}, {0x12, 0x2, [0x7, 0x7, 0x1, 0xfffe, 0x8, 0x80, 0xdd]}}, {{0x1c, 0x1, {0x0, 0x40, 0x4, 0x0, 0x1, 0x83, 0x6, 0x5}}, {0xe, 0x2, [0xd, 0x6, 0xff96, 0x5, 0x8]}}, {{0x1c, 0x1, {0xc, 0x7f, 0x4, 0x7, 0x3, 0x80000001, 0x8, 0x2}}, {0x8, 0x2, [0xfffe, 0x2]}}, {{0x1c, 0x1, {0x8, 0x6, 0x124, 0x80, 0x1, 0x4, 0x9, 0xa}}, {0x18, 0x2, [0x9, 0x0, 0x5acf, 0x1, 0x1, 0xf289, 0x8, 0xffff, 0x0, 0xe]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x20000000}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xb, 0x2, 0x6, 0x36c, 0x9, 0x6, 0x9e71, 0x1ff, 0x9}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff7fff}, @qdisc_kind_options=@q_taprio={{0xb}, {0xe0, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x9}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xe, 0xc, 0x0, 0x6, 0xf, 0x0, 0x9, 0xa, 0xb, 0x5, 0x7, 0xe, 0x5, 0xb, 0x5, 0x8], 0x0, [0xff81, 0x1, 0x2, 0x10, 0x1, 0x2d, 0x1, 0x1, 0x6e1, 0x401, 0x9, 0x0, 0x4, 0xff00, 0x9, 0x5], [0x6, 0x6, 0x3, 0x0, 0x1, 0x5, 0x8000, 0x0, 0x100, 0x1ff, 0x8, 0x0, 0x1c00, 0x1, 0x7f, 0xfffe]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x7}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x10, [0x8, 0xf, 0xa, 0x5, 0x0, 0x7, 0x1, 0x1, 0x5, 0x3, 0xd, 0x8, 0xc, 0x4, 0x0, 0x4], 0x0, [0x28, 0x2, 0x4, 0x796a, 0x5, 0x9, 0xffc0, 0xfff8, 0x6, 0x414, 0x9, 0x200, 0x2, 0x1, 0x2, 0x800], [0x8, 0x4, 0xa42, 0xb, 0x4, 0x10, 0x4, 0x1000, 0x0, 0x813a, 0x40, 0x2, 0x6, 0x3ef9, 0x7, 0x5]}}]}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x8014}, 0xe805) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000140)={0x0, 'bond0\x00', {0x3}, 0xffff}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x6, 0x42}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r3}, 0x38) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x21, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x4000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000001a0af900000000000000000001000400090001"], 0xd8}}, 0x4f3033cead2b0b26) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newqdisc={0x2d4, 0x24, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xd, 0x5}, {0x7, 0xe}, {0xfff1, 0x8}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x16c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe6, 0x6, 0x9, 0x3, 0x1, 0x1d, 0x6, 0x5}}, {0xe, 0x2, [0xda1, 0x5, 0x0, 0x8001, 0xff80]}}, {{0x1c, 0x1, {0x5, 0x3, 0x284, 0x0, 0x0, 0x4, 0x3, 0x8}}, {0x14, 0x2, [0xc0, 0x1, 0xa1b, 0x5, 0x3, 0xa26, 0xf, 0x5]}}, {{0x1c, 0x1, {0x6, 0xe, 0x6, 0x5, 0x1, 0x7fff, 0x8, 0x4}}, {0xc, 0x2, [0x6, 0x8, 0x7, 0xa]}}, {{0x1c, 0x1, {0x5, 0x6, 0x101, 0x1, 0x1, 0xd, 0x1, 0x8}}, {0x14, 0x2, [0x4, 0x8, 0x100, 0x9910, 0xd, 0x6, 0x1, 0xa]}}, {{0x1c, 0x1, {0xfe, 0xfd, 0x2, 0x9, 0x0, 0xfffffff9, 0x2a1, 0x7}}, {0x12, 0x2, [0x7, 0x7, 0x1, 0xfffe, 0x8, 0x80, 0xdd]}}, {{0x1c, 0x1, {0x0, 0x40, 0x4, 0x0, 0x1, 0x83, 0x6, 0x5}}, {0xe, 0x2, [0xd, 0x6, 0xff96, 0x5, 0x8]}}, {{0x1c, 0x1, {0xc, 0x7f, 0x4, 0x7, 0x3, 0x80000001, 0x8, 0x2}}, {0x8, 0x2, [0xfffe, 0x2]}}, {{0x1c, 0x1, {0x8, 0x6, 0x124, 0x80, 0x1, 0x4, 0x9, 0xa}}, {0x18, 0x2, [0x9, 0x0, 0x5acf, 0x1, 0x1, 0xf289, 0x8, 0xffff, 0x0, 0xe]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x20000000}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xb, 0x2, 0x6, 0x36c, 0x9, 0x6, 0x9e71, 0x1ff, 0x9}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff7fff}, @qdisc_kind_options=@q_taprio={{0xb}, {0xe0, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x9}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xe, 0xc, 0x0, 0x6, 0xf, 0x0, 0x9, 0xa, 0xb, 0x5, 0x7, 0xe, 0x5, 0xb, 0x5, 0x8], 0x0, [0xff81, 0x1, 0x2, 0x10, 0x1, 0x2d, 0x1, 0x1, 0x6e1, 0x401, 0x9, 0x0, 0x4, 0xff00, 0x9, 0x5], [0x6, 0x6, 0x3, 0x0, 0x1, 0x5, 0x8000, 0x0, 0x100, 0x1ff, 0x8, 0x0, 0x1c00, 0x1, 0x7f, 0xfffe]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x7}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x10, [0x8, 0xf, 0xa, 0x5, 0x0, 0x7, 0x1, 0x1, 0x5, 0x3, 0xd, 0x8, 0xc, 0x4, 0x0, 0x4], 0x0, [0x28, 0x2, 0x4, 0x796a, 0x5, 0x9, 0xffc0, 0xfff8, 0x6, 0x414, 0x9, 0x200, 0x2, 0x1, 0x2, 0x800], [0x8, 0x4, 0xa42, 0xb, 0x4, 0x10, 0x4, 0x1000, 0x0, 0x813a, 0x40, 0x2, 0x6, 0x3ef9, 0x7, 0x5]}}]}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x8014}, 0xe805) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000140)={0x0, 'bond0\x00', {0x3}, 0xffff}) (async) 719.253415ms ago: executing program 7 (id=2959): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x20, 0x0, 0xfe, 0x0, 0xff}}, 0x1c}}, 0x0) (async) bind$tipc(r0, 0x0, 0x0) 676.093801ms ago: executing program 2 (id=2960): r0 = socket(0x9, 0x2, 0x6) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x0, 0x2}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000180)={0x3, @bcast, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r0}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r3, 0x404, 0x9, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffff1b}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x10, 0xfffffffb, 0x6, 0x4, 0x9]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x42, 0xfffffff9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xf5, 0x3, 0x6, 0xfffffff7]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000380)={r2}) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f5, 0x1, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000908) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = gettid() ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000004c0)=r6) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000805}, 0x40001) shutdown(r5, 0x1) syz_open_procfs$namespace(r6, &(0x7f0000000600)='ns/net\x00') r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r7, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r8, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x120, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x7f, 0x6, "f4dcf2113bb1fc2954fcc55384c87bbde68795fc7b0b1b25f04943cfed76901bde216aa89903ed7ea76f81ec959a55b5dab6ca6e967c84bc3d3b8995a8f0aea8689985f8d174bd068c45e4f9adea5b7b1113d700e13ff371c73c5722dfaee2221a03b66db9d8e04fe7b7f3402bb4736a57ed1097abf256feca41ef"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x6d, 0x6, "7758f84ef4d4b068037eaaccac15956e1116876a1ef9e1a8925602f53a3e5168e7c90baea66db3a3ea48ce6abdf49e8550b82891ffb2d4a5aa421be01c1000a6360173b03d033c88e86130682bc1890563c00f10546f584303179e00d1c9e93ea9bf93b79efbbb33a2"}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x204, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7fff}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x104, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe5, 0x6, "390f73cc249403f742088bdb6858430a7d41574f87b99a038fbd9402aa40875612f61e6be07cdcbed28d7a2d639d3664fcea58c8eef58c231b8e80f52b81c846b18c59e0fffd6adc0a49edddb547927168a5a5983bf444d36ca9919fff57a08ef462c1c455b2c7be7b694bf1017e00c3db20dadfe0b66fc2d920ef4d1f6b0cdc0ebb7da040ba04caaf704da3f63ec63ff55bd5989ee63ccf50cb438e253a2d9ed88d4da855f3a13e97b8913d6866057ee948be3f3b80b3e846295d90fa738103fc6aef35f7dab0579afb78b9f05574bdebf40ab3d8612ada98d6eff2c2d3e2be48"}]}], {0x14}}, 0x2dc}, 0x1, 0x0, 0x0, 0x20040049}, 0x4000004) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000b80)=0x7, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r4) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x35}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4880) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000f80)={'batadv_slave_1\x00', 0x0}) sendmsg$inet(r4, &(0x7f0000001040)={&(0x7f0000000d40)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000d80)="3f3f68817b7c1126993688", 0xb}, {&(0x7f0000000dc0)="ded0b4217e1bf3d4c6554b66c036f7776ab782e9a4313b3d24663a0226e04e68beae77a773bcee41f15224ea02df31a0bca360a5df9ef106c82acf618e1529e81d795a2169c1aedc2ddfba9bc5557042d666577fe7e009d0d2e4de0cc7cdc148d5b5b9d47cc8ac2f5122266d7d033da608e7bc", 0x73}, {&(0x7f0000000e40)="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", 0xfc}], 0x3, &(0x7f0000000fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x3f}, @empty}}}], 0x50}, 0x4c050) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000001080), 0x8) sendmsg$SEG6_CMD_DUMPHMAC(r12, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffe01}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) ioctl$FIGETBSZ(r5, 0x2, &(0x7f00000011c0)) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x3c, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 483.303691ms ago: executing program 8 (id=2961): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x800, 0x7) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 435.139547ms ago: executing program 7 (id=2962): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000c40)="3d43faa767b0f9c35758f9fd46823866ccaca78e919758d57a97d8a14d8381c7560b5399f800e950fe29fb605542ae99da7e8e7d45b1302f68df199a2190e920134d1a3e2f49f6aff287b6143a1ab1ab7a99dd4d31b0d99ff113650a99c2e9c2e4df07c0559d70d8ea2815d24e352c90cf1eddb0426fb354d2cd5934ceec667e335989e0ca5749ba7ca7a9373ca62e286b5efa22b15f3340b03cf3f512580d6be66b1f977dd1e9e1970be1e22dadfb9f3bbc2752afb5467e03faa74ab4e1c265c22b70f68c3d38b949aed9a242e3b898c44b69e88596e59b7950feb958690a0c1ee32d426edb647251f31477d94bf414d826569529d8cd7a8d9e49f4f0f39da153ed7a221d031f340dd5959e59c0e189ac46643d0826f3865223504212ed9a1bafdb3d7338dde301f1214eb6719051e7b50f454ae4cbaada8f69cecd5ef4b8253440ca82f35e58808b533767b299e8787f32a208b3beb5b6e55693da1b41a0c367f00547ed8d9bb7302171ef9afa2f13311d076d90141355cbc5d342d1967b08ec82c3372fd96a1326c5ffafbd4d6d195087d431683cad62a4eab43b049172e79238ad21423c4c97664c898634cebbb603a9c0f4f0fc6a9cd7e677e8b5d6e034b02de08156fb05969115514d187b65c3c7379f163d2f47db26cf9b011efacc2e05f4f7f2da21a4da2a9ae2fc86ec235c1c95fcc9d335ce5485727fe0075bc67b46b6090d6e1f82d37cd4eec87874c6feb8436f744e38fde4f71e642f5f36de74dae2b3c4ff14faa368306a3ee5ff59512391cf23c534788b3cc80852ae89c14d77990294a85b59b6680c6fd8c48b906ea4879f3d08d944c523b316fe930f2b25bc79d90ab8ad820c0ede53da5c53a76c6f0e7f97df4662154e09c3bf731bc1851f85b6ff6e7a64127ec62528857f2f55867aff08e95f09d3f23f602040a66e81666ac6037b5eeba0ea5bfeee55b53ced817085ded21cdc3dabcc5622491d909f960a69159261d454c4edb8c61ee267b0538ede23f10a4fd863eb491f397ff9981c5017696e86e9c482cf06d7a74c22388dff16a8510e6254161e90f455945809c83b2c799abd1765606655ad8d02fa02386d08b8c3b59e86cd231ea2aa3ada892a2839fcb287f14693d0c0a61218cea3bf43ca385be5b073f366e9c2a7ef0b783551d43dff29a6c97e5140e29ea29d9a73cd2e2b6c75d5e755b2005fcc612de45b1fa9bd41280e519bb9526fbf7499d76c20b6e230ac33d5305f2065c7f76e5648ac82b874c24754379cbf3450c403779565d09bcb1854f37c4c93831d3da5649551fcf36741df95262aa612b9281fedb309737ac23015d0f77e361a2ff679a3dd86b7736b6dd30d5f1dbcf01d7831c2bd9d78fa29a5b6a01998308a5c99ea533216c60efd5c1d759e639a076da6994920f18280a51ce98eae370b0a691a33b5703a2159e59ea6c9a0a0a4c4c2104a5cb388301d75055aef4cd84f0b846e37ab3018ef5fb3c84c309b1f70371e10fda1c0c93f762bfa6218152ed2dfa1df47d498b635a45affc0db0ed66370afcb4c280d311aa872cd7e2c3cfe31473e651ee4517ddb9d4bef4852bc447b78d49260e627cb93f8f53e0d0570ffe8b2a69ee974b91fe4b6f72b4f9c059b9d0565214892e817d047ecec4e841c40ef6dbd11127a1098f978f625cfbdffeb24580fadac4aeb358f05ccab0703483c283a22e54ddb678d142b27443d24ae4a58926dd762e9b25d1d97bace83211622dc2f0cdffe5147749de6748eb834663fc1b60a8cef71ce321faf6d062f10b5fe83daaedc2800b4e6f5fddf91bcd3eaad2560c0a507b526f619f375c1dc5196f7c3eee253b0e0671c9ec37e4a591fdd059e6dedeb1e8a3a0f3be06903a0b01be53faab718a81af2d832aefd15bee4e81c067a2bc417d5d3af5f87b3bd53d6f99ecab80408d414643aabb5658a33de9391abbf4a3968565259359e53ea751675dae625b3af1c8a0e61c74580e785a0d631a5fbca7542a8b88458409ca89e4202ef5e45f471997ee4bd55cf7093b6ccd55d238e105bac86483ec466eecc0d256f004bf0ba3d92086995f3d02ddafda2bc9bace8aebcbdb9fc1e7044d85b1a6e83ceb0208adc2eaa953515925a0122bbbed6562cf40f5694b6180f68ffc8813480fac3def4b0f084c3cb2586f14d9c563a5c113d03cecadb092861b72ef461b35120c755573a49e53bde69846149ce3b6e52e8e06714166d7ddf17c86934eb73b70d8ffb07d83f51a0001d383c86783e13b6ecad515062c90b7459d8cae7a46c1cf3276f945f7a870ff50844255987f4779d638dc94f64889d945721bac0797fb7e29d2f2d81e5996f41b8e9679f1b1036e6120535b150dc534ed8f240e2ff9bcfa81047da1249da5fed29b33f5c83ac1966600d114099a7b0ff65c89deebff2cb07a462f32e3ffd0324dc0f55361ec969ea7820831b23b9d3fc8ee80e3adf6da2a54d5386973077d8e1d5676f27f71f0921d41641d36e16c2667c017fa8853ffbad43143d068a662caf90058ecf85811fa553d38ca0fadbba52d0f131f851e5926296342250a931691d5488fc6c1910feaab3352db923fc4259752453e56ae45d4a82f5bf66655de11ac68b56216851b278c39987f6490d83bfb08b3f6c962e3d97919b89795016b00072386986ba8e194254e8159c14a07e28e97d0501ab1deb3a8c45e1792fcca53b58d56c14df568455508a1b4c0b20a8aa2221ec075036f57590ca1ddecb43b586fcd608fec7e8b8d6223c0bf2e71d89be75dc7093337c4be31f6516e555fde15bb4cb52d0cd538476c6ee9b5c84915738c32ffaca4d94a450102ccf9fa5321b9a420ed094dbb69f47a017c8c840e8fb3021710f0e6afa0e6866c887db5152d31736ed9535755b9c1e3c546fea8cd3a4f0167ed19bf4f5816a960d101ea86471ad22fdcc2e9b0d803f4b45f0e009a650d9622ce316da9cdfafca3d115b64b93158eccf2576a029bbb476760415fa1b75f083c554d855e94c7657b749777a0cd8a945a1d9dbc2d08a4ed5946953555a3e11b8a02dcb3a0caee198ab225f82507ee8ad4ac7d43d1970d31af359f7e6adabbc04c10a57889664135057625a9dab20c6e35fa8644663ede222e11b7fa8d6b80e5ec7bdac6be3dbdf46b79b857af71292039b36f787aa1aae71e8b47b6ef292397d6f8bcc4f843521a6f46f81f5f3d30f212acf15db837ab65545dd207cf980f38d83f0d02faa5eb08f7b2a12a3a0d624e360ce92bb83606e7678092182015139e0d3dc5428406241802f83afe78ff781006bb5f0645ee0fa8a192833d87b61ff963138ac9c3db3cd93d2dd2157e2872540d253db35e4bdb3c60b117f71271fae5a6b78abb69bd7fec8b47c8f7b27ca06f61195da5a758f9f49e3584453355ea99b76992ac155332082f8e41385be789299b40d46db39b66216c564455bc5aaf30c012f32b99b63f2c8da5abe55c8c771485be273a93b0f28add84eac68216ad15123cb3f9383fb7e7dab5b6c9558d72a46c84e773a85252fc85b54b025f820fc10089de11573e5a6f35261e347132eea0ee9846a22d4da86acc1417ba19d9ef5310d321f4cd0f80b817224a863317f7dc99581b7b8e78081ec9a6e11302d5e4c0154f3020f06677fd38c5e5e1e645d060432a3a9a7acb729301c8b07413ec8bbb0fb36028408aef0265ab9ce65f316a30e66c513623c8553e55c9a1d0a5213a89750e1bdd5444c247c4de762d2453f559befa0ed0753ba1353379e08622018e085c8ad89d0dbdf25ad590100a8c4e281a767a5343841957f6673d8eeb9d597dabe7dcbe7e2bbe880a02820c9fe8d1d96c33177d05b744fda68cdef54d9cbb94b379c34385df5b166e0f74fc9b840cbb0722bff8e101dd2d012e6ffb0c6d4698fcb74938884e966bddaeabbd601a4e0cd46d7dddafa8547ff9a4d4a4890f3cf32ac18410c0187e82bde0e1cdf26c2648255da72788339b31aec9cf1cc7f1c3fde448741ed9b93c7c7398820e80843bf61e7374c7bac29b4d8688808cc50b19dda768ffef32eddce5e1e9f9d81fb144eeae580101186febf0335037a35c7e6e7a327fe37f5bec1ec14cf0f6e3ebde076f60965e39c4036b3c29c856f6964247e1f297844c82e6a943b43d6e685985aa1194c3ab812e7b0d66a3fd68dd97c09c478b3df144272eb0e285143942fd140fbd8ad125901cca06eaf8cb1a792f01e3c77013bdd2d6c3273178ee55d6b7ba4d1b05dcc778eadec95fa49383ca2fe17ea66270c56c0e3443e54c8f7f9846e3e670344d8ba6ec23a4b7d823e30169bab97eccf760996755e7710daf40c9f105864188d8f8ceb4710af95032cbb84019193b6a5201905fc7eb731c647088724564786a692ff7c72c1c290228d3946e1293fd06a841961ee92d0a82bc96c4fdf7e9cabc4fbfa21c709647a20601b3e1f9a0a7ff8189f5de27e0940755aacde674664b038a8b6efdd3f42d9ae3e219e6c1c2c784bfd68f2a3a7b6874ffae48dcdc12b8351cc21ec75e594c458cede28c461165214823d3c1b96a0fcc4f9a4f3cd92add2df79f3767ef73ff484ec609e81e4e992298ecf2f4518c5ebfc73147ad72f73d766a229e4802645c64f2dedc08c948556780a56476a8d1243544b39e467e09991cecd418e0178c3a4c8a0e6b35a061926810fc09d29abbbeba5a3082fa4b8415b1e4646640ac439e0ddca49e66acaa39cb5c1c7e9e1f977908d53f673c5cc4205e1a4af2a23cf4eca17c6f7cf5c8ee612fa391b8366d97e9c7ade633aeac1f685a7485e14e735916bf67611fc43afb148c40608fba9af3442893c3f4200831d5f5a6b9122969599f6dc67262cfaa725a8377a955183a5067b61cf262ae22c7e14af9778151c58801e0f57c6353f6a9ca21250c050c94344b364f650da3c124bfcd22593c33bdb99d6003f2e6cdab436d4d1166eb1376a0b0f03f32a1e7ff8dbf2f80c2b1065f9db61706bdd789f564e9d50aa6b584f1562889d36b2861a2eadd191311d3ef740f85119e124b6ee2c594c71e20fb37a10a114e75ccfb7f355dec738da108c3e985a479d4d35f84de0304397fc74b2977edcc7c53b35c58a3c7a00682c5075d576f4c0c8c9f6f48baf3269113765926e612316c2114a660dc3912aebb5a8ddbdb25601dbabf4ffe582aec5fcb1ded4725f456c5f02152255a8c73fd750f1500b5845386f44c040d49439c27f74708da04ec6603ee5ef4a83412dcb3b36f70812463529089b15085321fce998c8f966a7ec01ace87ba7a6b4db16619d0c7287592ebe64137f346f754692431472827542451b0f30ad1d96b33e656f7d87064cf17a43ba4d2491973bac7026ef60ffceb71c802a5c55f9ab3acad9a0697196e03de3d9bb577b5e76e73180c254cf6e38d4983dbd4abed5f2499bfe38c565588daaba04250148fb519cdce80855070955a5038357bbb1c80d28c1b896e5c0e0f5d9dd442bf5b3fbc1591092f20bbe74ba02e8b9480c02ae5ed52441003653c6660b3206ecb7a9c4a56c27ea1339ac53d288789efba5e4da99b827ddcd0c4315e999ac402336a9e880ecf9447d019e3ad24983e8d28c65b8860d16991b672f9e945cef19de2636b44bd96954280556ba5ee191e3b0076cd5ffca4aa6a431f7dde19c3958f722fa78ea566524db67a5081b378e7047a053c135f292a5ecaea594190bdc3bf87756d9173dd8e79ce913d98af1f7f5a589744f74c3b9c020be67751c26383b9082238a3916d76decf029c2602481963eb1a7569a8932", 0x1000}, {&(0x7f0000000080)="e892a9136d6e3dfc792aafa67f70cf4e331790f8b5c908182b677a4977cee01481186f4f8065f4c2992a6764775e084050182f0a3c66e261a73a16f006e2242328fc6bfbfb39d32a31b89c8a2e70b3e346064077ac47ee488761b8fb4bef22ed4a38926ae2c03b49dadd2779e86a74c981f5ad677574055e6b6e73bc66faada951140f493d44b19c825943353f80ab53cdc10df68006dcf0719cc20f6a9440dead3477103793bf5bfc6cbb817810a3550fcb4f40e1a5b8f9381cce921ea5fb2c58f514747cc7e08c619496c92c5525601f333568d23d79de66a15c596aa322d3e11becd02620fe", 0xe7}, {&(0x7f0000000180)="a295c0a358e9b8ce1d0928e5230b29ca3e152c380af962b11b8ee2e6a9bee617cbe11b7641c56a5dd5ee2f7d9feb190fdded0beeee57557f080a3c70172daac3a326b99ebe41144fcf8ccfabc24abc4464323d17c87ad7315613e4f7be5dc01e214770c936f39261d10438b88491ff230138886635183bd3b0fb7bd2", 0x7c}], 0x3, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd}}], 0x18}, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) sendmmsg(r1, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x200048c1) 434.447046ms ago: executing program 2 (id=2963): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r4, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r12, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r12, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r12, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r12, &(0x7f0000000100)={0x2c, 0x0, r14}, 0x10) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x1, 0x0, {0xa}}, 0x14}}, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r16, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 318.983917ms ago: executing program 6 (id=2964): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x7}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') writev(r0, &(0x7f0000000280), 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x7}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) writev(r0, &(0x7f0000000280), 0x0) (async) 202.393886ms ago: executing program 8 (id=2965): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000000)='yeah\x00', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4}]}}}]}, 0x64}}, 0x0) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x80000010}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600180003600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600180003600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x82a3aff9d4aa8b59}, 0x4000) 122.727457ms ago: executing program 7 (id=2966): bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x1a, 0x63098bae, 0xa, 0xf41b, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14, 0x80800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x10, 0x7800, 0x8, 0x1, {{0xe, 0x4, 0x2, 0x2, 0x38, 0x65, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x23, 0x6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010102, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @noop]}}}}}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000640)={r1, 0x1, 0x6}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r5, 0xff06, 0x0) r6 = socket(0x1e, 0x805, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) connect$tipc(r6, &(0x7f0000000000)=@id, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x44) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x814) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8f974b8120bd9edd}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000880) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000200)=r14, 0x4) sendto$unix(r13, &(0x7f00000004c0)="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", 0x140, 0x4c010, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r11, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 80.779812ms ago: executing program 6 (id=2967): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffd, @empty, 0x3}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0xe, 0x0, &(0x7f0000000900)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a01040000000000000000020000000900010073797a300000000009000200739c7a320000008ca67c63d8983720dc3f4cf39c0024000480200001800b00010064796e736574001f000402800900010073797a3200000000140000001100010000000000000000000000000aac0355b77ba25b9245ede16347b7cb4fae329aa8b955729239455da27e97106e40ff"], 0x78}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000000002000000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017004a9245"], 0x1c0}}, 0x0) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000480)=""/245, &(0x7f0000000140)=0xf5) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 0s ago: executing program 2 (id=2968): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xfc, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb4c3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6de5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newlink={0x360, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x12002, 0x3348a}, [@IFLA_VFINFO_LIST={0x340, 0x16, 0x0, 0x1, [{0xb4, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x1, @remote}}, @IFLA_VF_MAC={0x28, 0x1, {0x13f8, @broadcast}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x10001, 0x10000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @local}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x64d}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x43}}]}, {0x110, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @remote}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x9}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9765, 0x269, 0x6, 0x8100}}, {0x14, 0x1, {0x8000, 0x1b2, 0x80000000, 0x88a8}}, {0x14, 0x1, {0x3b000000, 0x3a8, 0x81, 0x88a8}}, {0x14, 0x1, {0x2, 0x632, 0x3, 0x8100}}, {0x14, 0x1, {0xfffffff7, 0x506, 0x8000000, 0x8100}}, {0x14, 0x1, {0x6, 0x69f, 0x4, 0x8100}}, {0x14, 0x1, {0x4, 0x250, 0x0, 0x8100}}]}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x1fe, @link_local}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xffffffff, 0xc5, 0xa, 0x88a8}}, {0x14, 0x1, {0x3, 0x75a, 0x5, 0x8100}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x9, 0x2}}]}, {0x110, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x548, 0xda}}, @IFLA_VF_MAC={0x28, 0x1, {0x1b, @random="08fdcfdaa4e4"}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0xd6, 0xffff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xb68, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0xfff, 0x1ff, 0x80000000}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x7}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xd, 0xd31, 0x0, 0x8100}}, {0x14, 0x1, {0x3, 0xb6d, 0x7f, 0x88a8}}, {0x14, 0x1, {0x401, 0x5e0, 0x933, 0x19050}}, {0x14, 0x1, {0x7ff, 0x855, 0x3bfc, 0x8100}}, {0x14, 0x1, {0x9, 0x931, 0x3, 0x88a8}}, {0x14, 0x1, {0x5, 0xf7b, 0x6, 0x8100}}, {0x14, 0x1, {0x4, 0x7c8, 0x7, 0x8100}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffff, 0x4}}]}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x2}, 0x0) kernel console output (not intermixed with test programs): rms(): no params data found [ 256.144861][T10471] sctp: [Deprecated]: syz.0.1259 (pid 10471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.144861][T10471] Use struct sctp_sack_info instead [ 256.318474][T10370] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.350026][T10370] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.408667][T10370] bridge_slave_0: entered allmulticast mode [ 256.443020][T10370] bridge_slave_0: entered promiscuous mode [ 256.492075][T10370] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.517257][T10370] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.549883][T10370] bridge_slave_1: entered allmulticast mode [ 256.575965][T10370] bridge_slave_1: entered promiscuous mode [ 256.705005][T10501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1269'. [ 256.763270][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1268'. [ 256.776464][T10370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.804093][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1270'. [ 256.829316][T10370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.924378][T10514] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1272'. [ 257.005704][T10514] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1272'. [ 257.060095][T10514] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1272'. [ 257.108050][T10514] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1272'. [ 257.150542][T10514] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1272'. [ 257.273549][T10370] team0: Port device team_slave_0 added [ 257.296709][T10370] team0: Port device team_slave_1 added [ 257.382123][T10528] team0: Cannot enslave team device to itself [ 257.498812][T10370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.532995][T10370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.579586][T10538] netlink: 'syz.0.1280': attribute type 2 has an invalid length. [ 257.627656][T10370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.664589][T10370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.675434][T10370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.722064][T10370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.724707][T10547] netlink: 'syz.3.1282': attribute type 58 has an invalid length. [ 257.828116][T10370] hsr_slave_0: entered promiscuous mode [ 257.844434][T10370] hsr_slave_1: entered promiscuous mode [ 257.881489][T10370] debugfs: 'hsr0' already exists in 'hsr' [ 257.910614][T10553] netlink: 'syz.2.1284': attribute type 10 has an invalid length. [ 257.929771][T10370] Cannot create hsr debugfs directory [ 257.955169][ T5845] Bluetooth: hci5: command tx timeout [ 258.019863][T10553] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 258.798652][T10591] netlink: 'syz.4.1296': attribute type 1 has an invalid length. [ 258.930893][T10593] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 259.007906][ T994] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 259.009371][T10591] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.156874][ T9106] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 259.178656][T10593] veth7: entered promiscuous mode [ 259.189835][T10593] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 259.246710][T10605] vlan4: entered allmulticast mode [ 259.645307][T10620] __nla_validate_parse: 36 callbacks suppressed [ 259.645325][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 259.707176][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 259.724500][T10370] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 259.750881][T10370] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 259.767559][T10370] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 259.830665][T10370] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 260.030480][ T5845] Bluetooth: hci5: command tx timeout [ 260.044706][T10370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.115376][T10370] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.155508][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.165447][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.244417][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.254398][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.270877][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 260.300657][T10648] vlan4: entered allmulticast mode [ 260.306426][T10648] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 260.583517][T10660] syz.0.1313: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 260.632695][T10660] CPU: 0 UID: 0 PID: 10660 Comm: syz.0.1313 Not tainted syzkaller #0 PREEMPT(full) [ 260.632723][T10660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 260.632735][T10660] Call Trace: [ 260.632743][T10660] [ 260.632751][T10660] dump_stack_lvl+0x189/0x250 [ 260.632783][T10660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.632806][T10660] ? __pfx__printk+0x10/0x10 [ 260.632834][T10660] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 260.632857][T10660] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 260.632881][T10660] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 260.632905][T10660] warn_alloc+0x214/0x310 [ 260.632932][T10660] ? stack_depot_save_flags+0x40/0x860 [ 260.632961][T10660] ? __pfx_warn_alloc+0x10/0x10 [ 260.632989][T10660] ? kasan_save_track+0x4f/0x80 [ 260.633008][T10660] ? xskq_create+0x56/0x170 [ 260.633033][T10660] ? xsk_init_queue+0xb0/0x110 [ 260.633059][T10660] ? xsk_setsockopt+0x4dc/0x8d0 [ 260.633082][T10660] ? do_sock_setsockopt+0x17c/0x1b0 [ 260.633099][T10660] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 260.633120][T10660] ? do_syscall_64+0xfa/0x3b0 [ 260.633138][T10660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.633165][T10660] __vmalloc_node_range_noprof+0x125/0x12f0 [ 260.633231][T10660] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 260.633267][T10660] ? __kasan_kmalloc+0x93/0xb0 [ 260.633295][T10660] vmalloc_user_noprof+0xad/0xf0 [ 260.633321][T10660] ? xskq_create+0xbf/0x170 [ 260.633352][T10660] xskq_create+0xbf/0x170 [ 260.633386][T10660] xsk_init_queue+0xb0/0x110 [ 260.633416][T10660] xsk_setsockopt+0x4dc/0x8d0 [ 260.633446][T10660] ? __pfx_xsk_setsockopt+0x10/0x10 [ 260.633473][T10660] ? __pfx_aa_sk_perm+0x10/0x10 [ 260.633510][T10660] ? aa_sock_opt_perm+0xff/0x1b0 [ 260.633543][T10660] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 260.633574][T10660] ? __pfx_xsk_setsockopt+0x10/0x10 [ 260.633604][T10660] do_sock_setsockopt+0x17c/0x1b0 [ 260.633632][T10660] __x64_sys_setsockopt+0x13f/0x1b0 [ 260.633661][T10660] do_syscall_64+0xfa/0x3b0 [ 260.633680][T10660] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.633711][T10660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.633730][T10660] ? clear_bhb_loop+0x60/0xb0 [ 260.633754][T10660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.633772][T10660] RIP: 0033:0x7fea8678eec9 [ 260.633791][T10660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.633807][T10660] RSP: 002b:00007fea87569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 260.633829][T10660] RAX: ffffffffffffffda RBX: 00007fea869e5fa0 RCX: 00007fea8678eec9 [ 260.633845][T10660] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 260.633857][T10660] RBP: 00007fea86811f91 R08: 0000000000000004 R09: 0000000000000000 [ 260.633870][T10660] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.633882][T10660] R13: 00007fea869e6038 R14: 00007fea869e5fa0 R15: 00007ffc946c9a18 [ 260.633911][T10660] [ 260.633933][T10660] Mem-Info: [ 261.077835][T10660] active_anon:6428 inactive_anon:0 isolated_anon:0 [ 261.077835][T10660] active_file:2825 inactive_file:39930 isolated_file:0 [ 261.077835][T10660] unevictable:768 dirty:135 writeback:0 [ 261.077835][T10660] slab_reclaimable:11615 slab_unreclaimable:103109 [ 261.077835][T10660] mapped:34477 shmem:1366 pagetables:1271 [ 261.077835][T10660] sec_pagetables:0 bounce:0 [ 261.077835][T10660] kernel_misc_reclaimable:0 [ 261.077835][T10660] free:1310151 free_pcp:15124 free_cma:0 [ 261.170357][T10660] Node 0 active_anon:25612kB inactive_anon:0kB active_file:11300kB inactive_file:159516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137908kB dirty:540kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13868kB pagetables:5032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 261.227812][T10674] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1317'. [ 261.243194][T10660] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 261.280889][T10370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.351318][T10660] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.413900][T10660] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 261.446722][T10660] Node 0 DMA32 free:1337628kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25472kB inactive_anon:0kB active_file:11300kB inactive_file:159192kB unevictable:1536kB writepending:536kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:41980kB local_pcp:20372kB free_cma:0kB [ 261.533617][T10660] lowmem_reserve[]: 0 0 0 0 0 [ 261.580735][T10660] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.645843][T10689] Bluetooth: hci1: too big key_count value 32778 [ 261.681973][T10660] lowmem_reserve[]: 0 0 0 0 0 [ 261.688738][T10660] Node 1 Normal free:3888336kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18760kB local_pcp:7492kB free_cma:0kB [ 261.744995][T10660] lowmem_reserve[]: 0 0 0 0 0 [ 261.758638][T10660] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 261.778607][T10660] Node 0 DMA32: 276*4kB (UM) 446*8kB (UME) 260*16kB (UME) 110*32kB (UM) 621*64kB (UM) 281*128kB (UM) 66*256kB (UME) 1*512kB (U) 5*1024kB (UME) 5*2048kB (UM) 297*4096kB (M) = 1337344kB [ 261.846502][T10694] sctp: [Deprecated]: syz.4.1323 (pid 10694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.846502][T10694] Use struct sctp_sack_info instead [ 261.847365][T10660] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 261.889351][T10660] Node 1 Normal: 202*4kB (UE) 41*8kB (UME) 42*16kB (UME) 78*32kB (UME) 22*64kB (UME) 5*128kB (UME) 6*256kB (UME) 3*512kB (ME) 4*1024kB (UME) 0*2048kB 946*4096kB (M) = 3888336kB [ 261.914650][T10660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.989971][T10660] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.033847][T10660] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.063275][T10660] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.094016][T10660] 44117 total pagecache pages [ 262.139733][T10660] 0 pages in swap cache [ 262.144573][T10370] veth0_vlan: entered promiscuous mode [ 262.157762][T10660] Free swap = 124996kB [ 262.194123][T10370] veth1_vlan: entered promiscuous mode [ 262.202936][T10660] Total swap = 124996kB [ 262.210073][T10660] 2097051 pages RAM [ 262.217191][T10660] 0 pages HighMem/MovableOnly [ 262.271691][T10660] 423781 pages reserved [ 262.277346][T10660] 0 pages cma reserved [ 262.333945][T10370] veth0_macvtap: entered promiscuous mode [ 262.404125][T10370] veth1_macvtap: entered promiscuous mode [ 262.499743][T10370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.519013][T10370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.549910][T10724] netlink: 'syz.3.1332': attribute type 2 has an invalid length. [ 262.574941][T10728] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1334'. [ 262.589687][T10724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1332'. [ 262.620594][T10724] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1332'. [ 262.661849][ T9094] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.687339][ T9094] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.762907][ T9094] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.836689][ T9094] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.001272][T10749] netlink: 'syz.4.1340': attribute type 33 has an invalid length. [ 263.063807][T10749] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 263.096748][T10749] bond5 (unregistering): Released all slaves [ 263.325596][ T9094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.353655][ T9094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.474420][ T9094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.527811][ T9094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.770738][T10780] º: renamed from veth1_vlan [ 263.831315][T10783] nbd0: detected capacity change from 0 to 63 [ 263.847581][ T5845] block nbd0: Receive control failed (result -32) [ 263.861911][ T6309] block nbd0: Dead connection, failed to find a fallback [ 263.874841][ T6309] block nbd0: shutting down sockets [ 263.891460][ T6309] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.911564][ T6309] Buffer I/O error on dev nbd0, logical block 0, async page read [ 263.922018][ T6309] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.934006][ T6309] Buffer I/O error on dev nbd0, logical block 1, async page read [ 263.948738][ T6309] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.018338][ T6309] Buffer I/O error on dev nbd0, logical block 2, async page read [ 264.041592][ T6309] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.104198][ T6309] Buffer I/O error on dev nbd0, logical block 3, async page read [ 264.122285][T10797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1350'. [ 264.136653][ T6309] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.157391][T10797] netlink: 'syz.2.1350': attribute type 10 has an invalid length. [ 264.172439][T10797] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1350'. [ 264.187393][ T6309] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.204942][ T6309] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.217642][ T6309] Buffer I/O error on dev nbd0, logical block 1, async page read [ 264.231467][T10797] batadv0: entered promiscuous mode [ 264.245787][T10797] batadv0: entered allmulticast mode [ 264.257886][ T6309] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.271710][T10797] bridge0: port 3(batadv0) entered blocking state [ 264.290292][ T6309] Buffer I/O error on dev nbd0, logical block 2, async page read [ 264.299974][ T6309] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.330829][T10797] bridge0: port 3(batadv0) entered disabled state [ 264.343418][ T6309] Buffer I/O error on dev nbd0, logical block 3, async page read [ 264.383881][ T6309] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.408504][ T6309] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.484959][ T6309] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.497239][ T9094] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 264.509421][ T9094] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 264.523805][ T6309] Buffer I/O error on dev nbd0, logical block 1, async page read [ 264.544864][ T6309] ldm_validate_partition_table(): Disk read failed. [ 264.557322][T10813] sctp: [Deprecated]: syz.0.1355 (pid 10813) Use of int in maxseg socket option. [ 264.557322][T10813] Use struct sctp_assoc_value instead [ 264.568328][ T6309] Dev nbd0: unable to read RDB block 0 [ 264.590067][ T6309] nbd0: unable to read partition table [ 264.782664][ T6309] ldm_validate_partition_table(): Disk read failed. [ 264.794396][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 264.811799][ T6309] Dev nbd0: unable to read RDB block 0 [ 264.827163][T10821] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1357'. [ 264.829224][ T6309] nbd0: unable to read partition table [ 265.027471][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1361'. [ 265.051218][T10828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1361'. [ 265.064097][T10828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1361'. [ 265.077135][T10826] tipc: Enabled bearer , priority 0 [ 265.111161][T10826] syzkaller0: entered promiscuous mode [ 265.117370][T10826] syzkaller0: entered allmulticast mode [ 265.179224][T10826] tipc: Resetting bearer [ 265.230037][T10825] tipc: Resetting bearer [ 265.303590][T10825] tipc: Disabling bearer [ 265.505019][T10849] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1369'. [ 265.526563][T10855] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1368'. [ 265.547530][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'. [ 265.561604][T10852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.571321][T10852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.607676][T10849] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1369'. [ 265.824930][ T24] hid-generic 0005:16C0:0009.0001: unknown main item tag 0x0 [ 265.863828][ T24] hid-generic 0005:16C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 265.993397][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'. [ 266.517555][T10909] lo: entered promiscuous mode [ 266.524907][T10909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.800422][T10923] nbd: must specify a size in bytes for the device [ 266.985797][T10929] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 267.093511][T10939] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 267.552110][T10967] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 268.785429][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.813391][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.936431][T11019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.561735][T11038] netlink: 'syz.2.1420': attribute type 10 has an invalid length. [ 269.579973][T11038] lo: left promiscuous mode [ 269.590795][T11038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.972493][T11054] netlink: 'syz.5.1426': attribute type 1 has an invalid length. [ 270.038519][T11058] syzkaller1: entered promiscuous mode [ 270.066316][T11058] syzkaller1: entered allmulticast mode [ 270.429048][T11083] netlink: 'syz.3.1434': attribute type 1 has an invalid length. [ 270.437462][T11083] __nla_validate_parse: 9 callbacks suppressed [ 270.437478][T11083] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1434'. [ 270.620067][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1437'. [ 270.660897][T11098] xt_bpf: check failed: parse error [ 270.790014][T11108] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1438'. [ 270.898025][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1442'. [ 270.908050][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1442'. [ 271.031096][T11117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.727920][T11153] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 271.910546][T11160] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1456'. [ 272.102869][T11168] netlink: zone id is out of range [ 272.110890][T11168] netlink: zone id is out of range [ 272.116188][T11168] netlink: zone id is out of range [ 272.122844][T11168] netlink: zone id is out of range [ 272.128060][T11168] netlink: zone id is out of range [ 272.138551][T11168] netlink: zone id is out of range [ 272.144661][T11168] netlink: zone id is out of range [ 272.149997][T11168] netlink: zone id is out of range [ 272.155951][T11168] netlink: zone id is out of range [ 272.365360][T11179] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1463'. [ 272.424928][T11184] veth0: entered promiscuous mode [ 272.523306][T11183] veth0: left promiscuous mode [ 272.716775][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1469'. [ 272.946495][T11221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1476'. [ 272.978231][T11224] netlink: 'syz.5.1477': attribute type 1 has an invalid length. [ 272.986825][T11224] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1477'. [ 273.283636][T11244] team_slave_0: entered promiscuous mode [ 273.289707][T11244] team_slave_1: entered promiscuous mode [ 273.342838][T11244] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 273.766065][T11280] sctp: [Deprecated]: syz.3.1493 (pid 11280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.766065][T11280] Use struct sctp_sack_info instead [ 273.805228][T11279] sctp: [Deprecated]: syz.3.1493 (pid 11279) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.805228][T11279] Use struct sctp_sack_info instead [ 274.038204][T11300] netlink: 'syz.5.1499': attribute type 1 has an invalid length. [ 274.063508][T11300] sctp: [Deprecated]: syz.5.1499 (pid 11300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.063508][T11300] Use struct sctp_sack_info instead [ 274.615612][T11336] bridge_slave_0: left allmulticast mode [ 274.624150][T11336] bridge_slave_0: left promiscuous mode [ 274.633455][T11336] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.663648][T11336] bridge_slave_1: left allmulticast mode [ 274.669563][T11336] bridge_slave_1: left promiscuous mode [ 274.676939][T11336] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.694289][T11336] bond0: (slave bond_slave_0): Releasing backup interface [ 274.711400][T11336] bond0: (slave bond_slave_1): Releasing backup interface [ 274.734752][T11336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.743286][T11336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.755675][T11336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.765440][T11336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.925266][T11336] netlink: 'syz.0.1512': attribute type 29 has an invalid length. [ 274.949839][T11336] netlink: 'syz.0.1512': attribute type 29 has an invalid length. [ 275.514513][T11381] netlink: 'syz.5.1524': attribute type 18 has an invalid length. [ 275.536987][T11381] __nla_validate_parse: 11 callbacks suppressed [ 275.537004][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1524'. [ 275.600566][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.635781][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.661302][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.679267][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.900439][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'. [ 275.932665][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1530'. [ 276.023982][T11407] netlink: 'syz.0.1530': attribute type 6 has an invalid length. [ 276.044903][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'. [ 276.054840][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1530'. [ 276.065665][T11407] netlink: 'syz.0.1530': attribute type 6 has an invalid length. [ 276.988114][T11452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1543'. [ 276.998907][T11452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1543'. [ 277.011085][T11459] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1542'. [ 277.015695][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 277.326438][T11472] netlink: 'syz.5.1548': attribute type 4 has an invalid length. [ 277.767620][T11455] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 277.941082][T11504] IPVS: set_ctl: invalid protocol: 136 172.20.20.48:20001 [ 278.258946][T11520] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1562'. [ 278.524232][T11529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.558301][T11529] batadv_slave_1: entered promiscuous mode [ 278.569942][T11536] xt_limit: Overflow, try lower: 604147548/4200216962 [ 278.586274][T11529] batadv_slave_1: entered allmulticast mode [ 278.758540][ T5982] hid-generic 0005:16C0:0009.0002: unknown main item tag 0x0 [ 278.778833][ T5982] hid-generic 0005:16C0:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 278.920890][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 279.016557][T11557] bridge0: port 1(vlan0) entered blocking state [ 279.024532][T11557] bridge0: port 1(vlan0) entered disabled state [ 279.031587][T11557] vlan0: entered allmulticast mode [ 279.036797][T11557] bridge0: entered allmulticast mode [ 279.045678][T11557] vlan0: left allmulticast mode [ 279.052041][T11557] bridge0: left allmulticast mode [ 279.325782][T11578] netlink: 'syz.0.1580': attribute type 6 has an invalid length. [ 279.576044][T11591] net_ratelimit: 14 callbacks suppressed [ 279.576063][T11591] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 279.680942][T11597] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 279.924009][T11606] syz.2.1588 (11606) used greatest stack depth: 15832 bytes left [ 280.217914][T11619] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 280.243883][T11619] bond1 (unregistering): Released all slaves [ 280.456924][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.469194][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.479143][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.496580][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.507442][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.614480][T11637] lo speed is unknown, defaulting to 1000 [ 280.933373][T11674] netlink: 'syz.2.1603': attribute type 1 has an invalid length. [ 280.957521][T11674] __nla_validate_parse: 10 callbacks suppressed [ 280.957540][T11674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1603'. [ 280.999160][T11674] nbd: nbd0 already in use [ 281.012429][T11637] chnl_net:caif_netlink_parms(): no params data found [ 281.076598][T11665] netlink: 'syz.2.1603': attribute type 1 has an invalid length. [ 281.325186][T11674] veth5: entered promiscuous mode [ 281.393811][T11683] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 281.410589][T11683] bond5 (unregistering): Released all slaves [ 281.659182][T11702] netlink: 'syz.2.1610': attribute type 26 has an invalid length. [ 281.733784][T11637] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.744185][T11637] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.752996][T11637] bridge_slave_0: entered allmulticast mode [ 281.766049][T11637] bridge_slave_0: entered promiscuous mode [ 281.815528][T11637] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.860491][T11637] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.892621][T11637] bridge_slave_1: entered allmulticast mode [ 281.916052][T11637] bridge_slave_1: entered promiscuous mode [ 282.066823][T11637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.071489][T11722] delete_channel: no stack [ 282.113926][T11637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.154684][T11730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1615'. [ 282.165071][T11727] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 282.378622][T11637] team0: Port device team_slave_0 added [ 282.406547][T11735] netlink: 'syz.2.1618': attribute type 10 has an invalid length. [ 282.428292][T11734] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 282.461412][T11637] team0: Port device team_slave_1 added [ 282.480773][T11735] bridge_slave_1: left allmulticast mode [ 282.487612][T11735] bridge_slave_1: left promiscuous mode [ 282.542460][T11735] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.568906][T11735] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 282.600336][ T5845] Bluetooth: hci6: command tx timeout [ 282.664875][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1618'. [ 282.677213][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1618'. [ 282.687504][T11744] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1618'. [ 282.819728][T11637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.867167][T11637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.896398][T11637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.941355][T11637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.951691][T11637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.036617][T11637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.096493][T11776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.246701][T11637] hsr_slave_0: entered promiscuous mode [ 283.264761][T11637] hsr_slave_1: entered promiscuous mode [ 283.272282][T11637] debugfs: 'hsr0' already exists in 'hsr' [ 283.307966][T11637] Cannot create hsr debugfs directory [ 283.452015][T11793] netlink: 'syz.0.1638': attribute type 2 has an invalid length. [ 283.470033][T11793] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1638'. [ 283.634276][T11802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.678467][T11799] tipc: Started in network mode [ 283.686215][T11799] tipc: Node identity 122dc009158c, cluster identity 4711 [ 283.713693][T11799] tipc: Enabled bearer , priority 0 [ 283.777640][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1644'. [ 283.835633][T11803] syzkaller0: entered promiscuous mode [ 283.848023][T11803] syzkaller0: entered allmulticast mode [ 283.898072][T11808] vlan5: entered allmulticast mode [ 283.903966][T11808] ip6gretap0: entered allmulticast mode [ 283.911265][T11808] bridge8: port 1(vlan5) entered blocking state [ 283.918273][T11808] bridge8: port 1(vlan5) entered disabled state [ 283.927910][T11808] vlan5: entered promiscuous mode [ 283.933703][T11808] ip6gretap0: entered promiscuous mode [ 284.023275][T11799] tipc: Resetting bearer [ 284.039863][T11821] raw_sendmsg: syz.2.1647 forgot to set AF_INET. Fix it! [ 284.047464][T11797] tipc: Resetting bearer [ 284.083796][T11797] tipc: Disabling bearer [ 284.131809][T11825] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1649'. [ 284.208525][T11637] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 284.255429][T11637] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 284.311937][T11831] netlink: 'syz.2.1651': attribute type 4 has an invalid length. [ 284.344908][T11637] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 284.370970][T11831] hsr0 speed is unknown, defaulting to 1000 [ 284.373560][T11637] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 284.402093][T11831] hsr0 speed is unknown, defaulting to 1000 [ 284.424347][T11836] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1653'. [ 284.448821][T11823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.472730][T11831] hsr0 speed is unknown, defaulting to 1000 [ 284.516638][T11831] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 284.643093][T11831] hsr0 speed is unknown, defaulting to 1000 [ 284.672088][ T5845] Bluetooth: hci6: command 0x041b tx timeout [ 284.680931][T11849] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1655'. [ 284.690590][T11831] hsr0 speed is unknown, defaulting to 1000 [ 284.692571][T11831] hsr0 speed is unknown, defaulting to 1000 [ 284.722474][T11831] hsr0 speed is unknown, defaulting to 1000 [ 284.734337][T11637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.951720][T11855] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 285.002475][T11831] hsr0 speed is unknown, defaulting to 1000 [ 285.038545][T11637] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.067784][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.075405][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.117563][T11831] hsr0 speed is unknown, defaulting to 1000 [ 285.156304][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.164190][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.204107][T11867] sctp: [Deprecated]: syz.3.1660 (pid 11867) Use of int in maxseg socket option. [ 285.204107][T11867] Use struct sctp_assoc_value instead [ 285.239128][T11831] hsr0 speed is unknown, defaulting to 1000 [ 285.268487][T11865] batadv_slave_1: left promiscuous mode [ 285.281375][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.333176][T11868] pimreg: entered allmulticast mode [ 285.355937][T11863] dvmrp0: entered allmulticast mode [ 285.377013][T11876] dvmrp0: left allmulticast mode [ 285.402322][T11876] pimreg: left allmulticast mode [ 285.753421][T11897] batadv1: entered allmulticast mode [ 285.894028][T11906] IPVS: Unknown mcast interface: veth1_to_team [ 286.028850][T11637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.105095][T11916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.112102][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.119191][T11914] __nla_validate_parse: 5 callbacks suppressed [ 286.119210][T11914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1673'. [ 286.133929][T11915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.163917][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.192152][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 286.643893][T11637] veth0_vlan: entered promiscuous mode [ 286.712979][T11637] veth1_vlan: entered promiscuous mode [ 286.759995][ T51] Bluetooth: hci6: command 0x041b tx timeout [ 286.827118][T11637] veth0_macvtap: entered promiscuous mode [ 286.851301][T11637] veth1_macvtap: entered promiscuous mode [ 286.876638][T11637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.912607][T11637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.954171][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.979291][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.021475][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.068531][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.176950][T11953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1682'. [ 287.196115][T11948] tipc: Enabled bearer , priority 0 [ 287.222919][T11956] syzkaller0: entered promiscuous mode [ 287.238644][T11956] syzkaller0: entered allmulticast mode [ 287.395203][T11948] tipc: Resetting bearer [ 287.404752][T11962] netem: incorrect ge model size [ 287.410079][T11962] netem: change failed [ 287.548110][T11947] tipc: Resetting bearer [ 287.631260][T11947] tipc: Disabling bearer [ 287.677041][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.691430][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.736249][T11978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1688'. [ 287.790683][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 287.868003][T11987] netlink: 'syz.2.1689': attribute type 1 has an invalid length. [ 287.883007][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.891686][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 287.892285][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.105865][T11994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1691'. [ 288.371272][T12006] syzkaller1: entered promiscuous mode [ 288.401695][T12006] syzkaller1: entered allmulticast mode [ 288.536519][T12018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.572095][T12016] syzkaller1: entered promiscuous mode [ 288.585839][T12016] syzkaller1: entered allmulticast mode [ 288.796981][T12025] 8021q: VLANs not supported on lo [ 288.840687][ T51] Bluetooth: hci6: command 0x041b tx timeout [ 289.134432][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1708'. [ 289.335047][T12052] netlink: 'syz.5.1709': attribute type 8 has an invalid length. [ 289.399680][T12061] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1713'. [ 289.814615][T12085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1720'. [ 289.834378][T12085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1720'. [ 289.999590][T12095] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1723'. [ 290.014297][T12093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.363958][T12111] netlink: 'syz.6.1729': attribute type 20 has an invalid length. [ 290.392764][T12111] netlink: 'syz.6.1729': attribute type 20 has an invalid length. [ 290.393831][ T9105] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.422317][ T9105] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.457538][ T9105] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.478481][ T9105] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.911083][ T51] Bluetooth: hci6: command 0x041b tx timeout [ 291.797618][T12193] __nla_validate_parse: 10 callbacks suppressed [ 291.797638][T12193] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1749'. [ 291.896247][T12193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1749'. [ 292.148417][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1753'. [ 292.165683][T12208] vlan2: entered allmulticast mode [ 292.177496][T12208] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 292.178604][T12212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1756'. [ 292.347881][T12226] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1759'. [ 292.476004][T12231] netlink: 'syz.6.1762': attribute type 2 has an invalid length. [ 292.485470][T12231] netlink: 'syz.6.1762': attribute type 8 has an invalid length. [ 292.494153][T12231] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1762'. [ 292.659067][T12238] netlink: 'syz.6.1764': attribute type 39 has an invalid length. [ 292.839206][T12243] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1767'. [ 292.855775][T12243] netlink: 'syz.5.1767': attribute type 1 has an invalid length. [ 292.865277][T12243] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1767'. [ 293.413823][T12269] netlink: 'syz.2.1778': attribute type 4 has an invalid length. [ 293.423435][T12269] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1778'. [ 293.437713][T12269] wlan1: mtu less than device minimum [ 293.631271][T12280] delete_channel: no stack [ 293.773798][T12288] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 293.957577][ T1158] wlan1: Trigger new scan to find an IBSS to join [ 294.454925][T12333] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1792'. [ 294.615576][T12338] netlink: 'syz.2.1795': attribute type 1 has an invalid length. [ 294.796189][T12345] netlink: 'syz.2.1796': attribute type 1 has an invalid length. [ 295.199987][T12373] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 295.261583][T12376] netlink: 'syz.2.1805': attribute type 10 has an invalid length. [ 295.604476][T12396] bridge_slave_1: left allmulticast mode [ 295.611453][T12396] bridge_slave_1: left promiscuous mode [ 295.639483][T12396] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.674235][T12396] bridge_slave_0: left allmulticast mode [ 295.703479][T12396] bridge_slave_0: left promiscuous mode [ 295.729478][T12396] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.931766][T12407] can: request_module (can-proto-5) failed. [ 296.169636][T12424] sctp: [Deprecated]: syz.0.1821 (pid 12424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.169636][T12424] Use struct sctp_sack_info instead [ 296.467286][T12445] netlink: 'syz.3.1826': attribute type 23 has an invalid length. [ 296.473045][T12446] netlink: 'syz.2.1827': attribute type 1 has an invalid length. [ 296.496191][T12447] netlink: 'syz.3.1826': attribute type 23 has an invalid length. [ 296.665822][T12452] bond5: (slave bridge10): making interface the new active one [ 296.696748][T12452] bond5: (slave bridge10): Enslaving as an active interface with an up link [ 296.835664][T12468] __nla_validate_parse: 3 callbacks suppressed [ 296.835684][T12468] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1834'. [ 296.903531][T12468] bond1: Invalid ad_actor_system MAC address. [ 296.909866][T12468] bond1: option ad_actor_system: invalid value (1) [ 296.957388][T12468] bond1 (unregistering): Released all slaves [ 296.990826][ T9107] wlan1: Trigger new scan to find an IBSS to join [ 297.228129][T12494] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1842'. [ 297.244196][T12485] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1837'. [ 297.261200][T12485] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1837'. [ 297.572487][T12513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.583202][T12515] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1848'. [ 297.608839][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1847'. [ 297.648243][T12517] netlink: 'syz.3.1849': attribute type 12 has an invalid length. [ 297.658964][T12517] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1849'. [ 297.714165][T12522] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 297.765256][T12522] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 297.875648][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1854'. [ 298.056295][T12539] netlink: 'syz.0.1856': attribute type 1 has an invalid length. [ 298.076924][ T8064] hid-generic 0005:0007:0008.0003: unknown main item tag 0x0 [ 298.101701][T12539] netlink: 'syz.0.1856': attribute type 2 has an invalid length. [ 298.123310][ T8064] hid-generic 0005:0007:0008.0003: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 298.389056][T12552] fido_id[12552]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci6/hci6:200/report_descriptor': No such file or directory [ 299.031526][T12588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.056261][T12590] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1872'. [ 299.070440][ T51] Bluetooth: hci6: command 0x041b tx timeout [ 299.130891][T12586] nbd1: detected capacity change from 0 to 127 [ 299.146498][ T51] block nbd1: Receive control failed (result -32) [ 299.156758][ T6309] block nbd1: Send control failed (result -32) [ 299.166677][ T6309] block nbd1: Request send failed, requeueing [ 299.178861][ T55] block nbd1: Dead connection, failed to find a fallback [ 299.189291][ T55] block nbd1: shutting down sockets [ 299.190090][T12593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.195774][ T55] blk_print_req_error: 138 callbacks suppressed [ 299.195794][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.231423][ T55] buffer_io_error: 138 callbacks suppressed [ 299.231444][ T55] Buffer I/O error on dev nbd1, logical block 0, async page read [ 299.247078][ T6309] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.256935][ T6309] Buffer I/O error on dev nbd1, logical block 1, async page read [ 299.261101][T12593] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1874'. [ 299.268013][ T6309] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.287314][ T6309] Buffer I/O error on dev nbd1, logical block 2, async page read [ 299.296749][ T6309] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.305919][ T6309] Buffer I/O error on dev nbd1, logical block 3, async page read [ 299.320393][ T6309] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.331906][ T6309] Buffer I/O error on dev nbd1, logical block 0, async page read [ 299.341993][ T6309] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.352964][ T6309] Buffer I/O error on dev nbd1, logical block 1, async page read [ 299.361567][ T6309] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.373320][ T6309] Buffer I/O error on dev nbd1, logical block 2, async page read [ 299.383479][ T6309] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.394826][ T6309] Buffer I/O error on dev nbd1, logical block 3, async page read [ 299.403162][ T6309] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.425411][ T6309] Buffer I/O error on dev nbd1, logical block 0, async page read [ 299.450804][ T6309] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.462162][ T6309] Buffer I/O error on dev nbd1, logical block 1, async page read [ 299.477888][ T6309] ldm_validate_partition_table(): Disk read failed. [ 299.487937][ T6309] Dev nbd1: unable to read RDB block 0 [ 299.502035][ T6309] nbd1: unable to read partition table [ 299.542056][ T6309] ldm_validate_partition_table(): Disk read failed. [ 299.565252][ T6309] Dev nbd1: unable to read RDB block 0 [ 299.587595][ T6309] nbd1: unable to read partition table [ 299.953154][ T9108] wlan1: Trigger new scan to find an IBSS to join [ 300.068714][T12616] tipc: Enabled bearer , priority 0 [ 300.098167][T12617] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 300.121550][T12616] syzkaller0: entered promiscuous mode [ 300.129408][T12616] syzkaller0: entered allmulticast mode [ 300.196958][T12617] tipc: Resetting bearer [ 300.250688][T12615] tipc: Resetting bearer [ 300.300744][T12615] tipc: Disabling bearer [ 300.384471][T12632] macvtap1: entered promiscuous mode [ 300.400035][T12632] vlan0: entered promiscuous mode [ 300.408436][T12632] macvtap1: entered allmulticast mode [ 300.415248][T12632] vlan0: entered allmulticast mode [ 300.435300][T12632] veth0_vlan: entered allmulticast mode [ 300.494710][T12638] macvtap2: entered promiscuous mode [ 300.508159][T12638] macvtap2: entered allmulticast mode [ 300.884792][ T12] wlan1: Creating new IBSS network, BSSID 8e:5a:14:d1:f5:3a [ 301.115404][T12667] validate_nla: 1 callbacks suppressed [ 301.115423][T12667] netlink: 'syz.6.1897': attribute type 33 has an invalid length. [ 301.286281][T12667] netlink: 'syz.6.1897': attribute type 33 has an invalid length. [ 301.296229][T12680] netlink: 'syz.5.1896': attribute type 10 has an invalid length. [ 301.326097][T12680] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 301.674418][T12695] netlink: 'syz.6.1902': attribute type 1 has an invalid length. [ 301.730335][T12695] netlink: 'syz.6.1902': attribute type 2 has an invalid length. [ 301.872314][T12701] tipc: Enabled bearer , priority 0 [ 301.883440][T12701] syzkaller0: entered promiscuous mode [ 301.889038][T12701] syzkaller0: entered allmulticast mode [ 301.990465][T12706] netlink: 'syz.0.1906': attribute type 12 has an invalid length. [ 302.010132][T12706] __nla_validate_parse: 7 callbacks suppressed [ 302.026659][T12706] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1906'. [ 302.053309][T12710] syzkaller0: mtu less than device minimum [ 302.100598][T12700] tipc: Resetting bearer [ 302.261632][T12700] tipc: Disabling bearer [ 302.296498][T12715] bridge2: entered allmulticast mode [ 302.382024][T12732] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 302.809651][T12757] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1918'. [ 303.025495][T12763] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1920'. [ 303.048758][T12764] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1921'. [ 303.131818][T12769] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1921'. [ 303.332585][T12779] netlink: 'syz.0.1924': attribute type 1 has an invalid length. [ 303.348827][T12779] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 303.460740][T12789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.616182][T12797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.739963][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1930'. [ 303.966085][T12814] netlink: 'syz.2.1932': attribute type 1 has an invalid length. [ 304.010697][T12814] netlink: 'syz.2.1932': attribute type 4 has an invalid length. [ 304.028485][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'. [ 304.039222][T12814] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1932'. [ 304.527348][T12852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1941'. [ 304.573865][T12852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1941'. [ 304.925377][T12868] tipc: Enabled bearer , priority 0 [ 305.127082][T12869] tipc: Disabling bearer [ 305.954538][T12929] netlink: 'syz.3.1962': attribute type 6 has an invalid length. [ 305.985774][T12929] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 305.998224][T12929] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 306.380919][T12955] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode [ 306.411753][T12955] tipc: Enabled bearer , priority 0 [ 306.426516][T12955] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 306.453892][T12955] tipc: Resetting bearer [ 307.252162][T12993] __nla_validate_parse: 8 callbacks suppressed [ 307.252183][T12993] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1979'. [ 307.293124][T12995] netlink: 'syz.3.1981': attribute type 11 has an invalid length. [ 307.302107][T12995] netlink: 'syz.3.1981': attribute type 11 has an invalid length. [ 307.316401][T12995] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1981'. [ 307.442949][ T24] tipc: Node number set to 128040969 [ 308.264120][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1996'. [ 308.291626][T13050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.536862][T13069] netlink: 'syz.2.2000': attribute type 29 has an invalid length. [ 308.556669][T13070] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2001'. [ 308.575214][T13069] netlink: 'syz.2.2000': attribute type 29 has an invalid length. [ 308.694762][T13074] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2003'. [ 308.740943][T13081] netlink: 'syz.2.2000': attribute type 29 has an invalid length. [ 308.928174][T13087] team_slave_0: entered promiscuous mode [ 308.933993][T13087] team_slave_1: entered promiscuous mode [ 308.954161][T13087] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 309.001054][T13097] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2007'. [ 309.278669][T13110] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2012'. [ 309.487764][T13121] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2014'. [ 309.911492][T13147] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2023'. [ 310.091658][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2025'. [ 310.139867][T13156] tipc: Started in network mode [ 310.146418][T13156] tipc: Node identity ce4f600d9616, cluster identity 4711 [ 310.156070][T13156] tipc: Enabled bearer , priority 0 [ 310.198345][T13153] veth3: entered promiscuous mode [ 310.289630][T13153] tipc: Disabling bearer [ 310.476072][T13180] netlink: 'syz.0.2030': attribute type 11 has an invalid length. [ 310.767066][T13180] netlink: 'syz.0.2030': attribute type 11 has an invalid length. [ 311.033604][T13198] team0: Device wireguard0 is of different type [ 311.226586][T13218] netlink: 'syz.2.2040': attribute type 21 has an invalid length. [ 311.247270][T13216] bond1: option xmit_hash_policy: invalid value (64) [ 311.261786][T13216] bond1 (unregistering): Released all slaves [ 311.366544][T13228] sctp: [Deprecated]: syz.0.2042 (pid 13228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.366544][T13228] Use struct sctp_sack_info instead [ 311.649649][T13237] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 311.665556][T13242] netlink: 'syz.5.2046': attribute type 58 has an invalid length. [ 311.729405][T13243] netem: incorrect gi model size [ 311.749462][T13243] netem: change failed [ 311.781467][T13245] netem: incorrect gi model size [ 311.830741][T13245] netem: change failed [ 311.930094][T13254] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 311.990563][T13259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.306888][T13276] macsec1: entered promiscuous mode [ 312.329904][T13276] bridge0: entered promiscuous mode [ 312.347488][T13276] macsec1: entered allmulticast mode [ 312.353356][T13276] bridge0: entered allmulticast mode [ 312.361856][T13276] bridge0: port 1(macsec1) entered blocking state [ 312.368611][T13276] bridge0: port 1(macsec1) entered disabled state [ 312.385085][T13276] bridge0: left allmulticast mode [ 312.394421][T13276] bridge0: left promiscuous mode [ 312.636276][T13301] __nla_validate_parse: 11 callbacks suppressed [ 312.636295][T13301] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2062'. [ 312.657809][T13309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2060'. [ 312.668283][T13306] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2064'. [ 312.885299][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2065'. [ 312.896481][T13317] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2065'. [ 312.941278][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2065'. [ 312.988175][T13317] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2065'. [ 313.499278][T13342] netlink: 788 bytes leftover after parsing attributes in process `syz.6.2072'. [ 313.920699][T13356] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2075'. [ 313.959146][T13356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2075'. [ 314.016645][T13361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.137911][T13368] netlink: 'syz.3.2078': attribute type 5 has an invalid length. [ 314.295725][T13371] netlink: 'syz.0.2080': attribute type 11 has an invalid length. [ 314.539968][T13390] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜z [ 314.596963][T13400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.448631][T13448] netlink: 'syz.5.2101': attribute type 1 has an invalid length. [ 315.466525][T13446] netlink: 'syz.5.2101': attribute type 1 has an invalid length. [ 315.602876][T13448] bond1: entered promiscuous mode [ 315.609032][T13448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.053158][T13484] syzkaller1: entered promiscuous mode [ 316.059372][T13484] syzkaller1: entered allmulticast mode [ 316.567238][T13512] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 317.054544][T13531] lo speed is unknown, defaulting to 1000 [ 317.364213][T13554] netlink: 'syz.3.2127': attribute type 1 has an invalid length. [ 317.504405][T13565] sock: sock_timestamping_bind_phc: sock not bind to device [ 317.682214][T13556] __nla_validate_parse: 11 callbacks suppressed [ 317.682233][T13556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2128'. [ 317.722077][T13556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2128'. [ 317.757062][T13556] syz_tun: entered promiscuous mode [ 317.808234][T13556] syz_tun: left promiscuous mode [ 318.127516][T13589] netlink: 'syz.5.2135': attribute type 10 has an invalid length. [ 318.142800][T13590] netlink: 'syz.0.2134': attribute type 1 has an invalid length. [ 318.199468][T13598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2134'. [ 318.358461][T13590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 318.413226][T13589] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 318.431658][T13611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.447960][T13604] tipc: Enabled bearer , priority 0 [ 318.456872][T13607] syzkaller0: entered promiscuous mode [ 318.463087][T13607] syzkaller0: entered allmulticast mode [ 318.495080][T13584] tipc: Resetting bearer [ 318.571103][T13614] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2139'. [ 318.619195][T13584] tipc: Disabling bearer [ 318.896139][T13632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2144'. [ 319.807646][T13689] netlink: 'syz.3.2160': attribute type 11 has an invalid length. [ 319.840538][T13689] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2160'. [ 320.291013][T13705] 8021q: adding VLAN 0 to HW filter on device bond2 [ 320.406528][T13712] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 320.555543][T13726] 8021q: VLANs not supported on lo [ 320.666826][T13723] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 320.674182][T13723] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 320.681490][T13723] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 320.687603][T13734] openvswitch: netlink: Message has 5380 unknown bytes. [ 320.689162][T13723] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 320.696469][T13734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.703406][T13723] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 320.703449][T13723] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 320.703480][T13723] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 320.703515][T13723] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 320.761694][T13734] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2173'. [ 320.824455][T13729] lo speed is unknown, defaulting to 1000 [ 320.825062][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2171'. [ 320.848172][T13729] hsr0 speed is unknown, defaulting to 1000 [ 321.245817][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 321.299855][T13753] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2178'. [ 321.687988][T13777] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 321.702574][T13785] netlink: 'syz.3.2186': attribute type 1 has an invalid length. [ 321.715996][T13777] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 321.730309][T13777] gretap1: entered promiscuous mode [ 321.743337][T13777] gretap1: entered allmulticast mode [ 322.182561][T13811] tipc: Failed to remove unknown binding: 66,1,1/128040969:3690663576/3690663578 [ 322.198764][T13811] tipc: Failed to remove unknown binding: 66,1,1/128040969:3690663576/3690663578 [ 322.334479][T13822] netlink: 'syz.6.2195': attribute type 1 has an invalid length. [ 322.751821][T13830] __nla_validate_parse: 3 callbacks suppressed [ 322.751844][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2195'. [ 323.061556][T13866] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 323.078633][T13867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'. [ 323.608482][T13893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2210'. [ 323.853184][ T8064] IPVS: starting estimator thread 0... [ 323.917474][T13913] netlink: 'syz.2.2214': attribute type 1 has an invalid length. [ 323.941210][T13909] IPVS: using max 28 ests per chain, 67200 per kthread [ 324.152682][T13921] bond7: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 324.203031][T13921] bond7 (unregistering): Released all slaves [ 324.267280][T13929] dvmrp0: left allmulticast mode [ 324.404920][T13942] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 324.555881][T13958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2223'. [ 324.690044][T13960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2225'. [ 324.791606][T13960] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2225'. [ 324.802682][T13960] nbd: illegal input index -8454144 [ 324.836391][T13968] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2229'. [ 325.031225][T13975] netlink: 'syz.3.2232': attribute type 10 has an invalid length. [ 325.041662][T13975] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2232'. [ 325.205098][T13981] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2235'. [ 325.216968][T13981] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2235'. [ 325.921731][T14026] netlink: 'syz.2.2251': attribute type 11 has an invalid length. [ 325.967730][T14026] netlink: 'syz.2.2251': attribute type 11 has an invalid length. [ 326.169033][T14047] netlink: 'syz.2.2254': attribute type 7 has an invalid length. [ 326.199799][T14041] syzkaller1: entered promiscuous mode [ 326.215262][T14041] syzkaller1: entered allmulticast mode [ 326.905017][T14090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.943509][T14090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.139229][T14104] batman_adv: batadv0: Adding interface: dummy0 [ 327.147812][T14104] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.177208][T14104] batman_adv: batadv0: Interface activated: dummy0 [ 327.198082][T14104] net_ratelimit: 3257 callbacks suppressed [ 327.198105][T14104] batadv0: mtu less than device minimum [ 327.212872][T14104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.224830][T14104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.236291][T14104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.249107][T14104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.261589][T14104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.273053][T14104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.284837][T14104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.296232][T14104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.307697][T14104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.777026][T14128] __nla_validate_parse: 6 callbacks suppressed [ 327.777046][T14128] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2279'. [ 328.213518][T14147] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2283'. [ 328.461322][T14162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2288'. [ 328.592828][T14174] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2290'. [ 328.604879][T14174] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2290'. [ 328.619292][T14174] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2290'. [ 328.633087][T14174] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2290'. [ 328.644815][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2289'. [ 328.645508][T14174] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2290'. [ 328.665601][T14173] tc_dump_action: action bad kind [ 328.675043][T14174] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2290'. [ 328.694274][T14173] IPVS: set_ctl: invalid protocol: 47 172.20.20.67:20001 [ 328.861453][T14183] netlink: 'syz.6.2291': attribute type 1 has an invalid length. [ 328.979692][T14189] veth5: entered promiscuous mode [ 328.990066][T14189] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 329.782698][T14206] siw: device registration error -23 [ 329.814836][T14210] veth0: entered promiscuous mode [ 329.964320][T14215] tipc: Enabling of bearer rejected, failed to enable media [ 330.665593][T14267] batadv0: entered promiscuous mode [ 330.675426][T14267] bond0: entered promiscuous mode [ 330.682017][T14267] bond_slave_0: entered promiscuous mode [ 330.688238][T14267] bond_slave_1: entered promiscuous mode [ 330.697248][T14267] hsr1: entered allmulticast mode [ 330.702880][T14267] batadv0: entered allmulticast mode [ 330.710772][T14267] bond0: entered allmulticast mode [ 330.716787][T14267] bond_slave_0: entered allmulticast mode [ 330.723351][T14267] bond_slave_1: entered allmulticast mode [ 330.730051][T14267] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 330.913794][ T9102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 331.416225][T14305] 8021q: VLANs not supported on ip6gre0 [ 331.527918][T14307] veth0: entered promiscuous mode [ 331.558893][T14308] netlink: 'syz.5.2324': attribute type 1 has an invalid length. [ 331.575960][T14308] netlink: 'syz.5.2324': attribute type 1 has an invalid length. [ 331.621555][T14306] veth0: left promiscuous mode [ 332.703101][T14345] netlink: 'syz.0.2334': attribute type 1 has an invalid length. [ 333.757392][T14371] __nla_validate_parse: 68 callbacks suppressed [ 333.757414][T14371] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2343'. [ 334.197684][T14394] netlink: 'syz.6.2349': attribute type 28 has an invalid length. [ 334.342360][T14400] net_ratelimit: 10 callbacks suppressed [ 334.342381][T14400] netlink: zone id is out of range [ 334.448168][T14400] netlink: set zone limit has 8 unknown bytes [ 334.530910][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2353'. [ 335.174453][T14457] netlink: 'syz.6.2361': attribute type 21 has an invalid length. [ 335.183616][T14457] netlink: 'syz.6.2361': attribute type 22 has an invalid length. [ 335.192936][T14457] netlink: 'syz.6.2361': attribute type 23 has an invalid length. [ 335.202468][T14457] netlink: 'syz.6.2361': attribute type 25 has an invalid length. [ 335.211158][T14457] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2361'. [ 335.228434][T14457] netlink: 'syz.6.2361': attribute type 1 has an invalid length. [ 335.238508][T14457] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2361'. [ 335.251288][T14465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2362'. [ 335.334392][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2364'. [ 335.387986][T14468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 335.397356][T14471] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2364'. [ 335.546028][T14477] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2366'. [ 336.008919][T14461] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 336.056090][T14507] netlink: 'syz.6.2372': attribute type 64 has an invalid length. [ 336.064248][T14507] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2372'. [ 336.127979][T14514] openvswitch: netlink: Message has 5372 unknown bytes. [ 336.164537][T14514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.468490][T14544] nbd: must specify an index to disconnect [ 336.491486][T14542] netem: change failed [ 336.572559][T14548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.771767][T14553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.037521][T14566] bond6: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 337.054726][T14566] bond6 (unregistering): Released all slaves [ 337.231709][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 337.435920][T14596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2393'. [ 337.772304][T14614] netlink: 'syz.2.2402': attribute type 6 has an invalid length. [ 338.883001][T14636] __nla_validate_parse: 3 callbacks suppressed [ 338.883020][T14636] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2408'. [ 339.116660][T14645] tipc: Enabled bearer , priority 0 [ 339.124928][T14645] syzkaller0: entered promiscuous mode [ 339.133502][T14645] syzkaller0: entered allmulticast mode [ 339.148472][T14645] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 339.211781][T14645] tipc: Resetting bearer [ 339.247531][T14644] tipc: Resetting bearer [ 339.294746][T14658] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2420'. [ 339.310637][T14644] tipc: Disabling bearer [ 339.331661][T14652] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 339.345562][T14652] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 339.355210][T14652] gretap1: entered promiscuous mode [ 339.362360][T14652] gretap1: entered allmulticast mode [ 339.561490][T14674] tipc: Failed to remove unknown binding: 66,1,1/0:2204705635/2204705637 [ 339.583295][T14674] tipc: Failed to remove unknown binding: 66,1,1/0:2204705635/2204705637 [ 339.955037][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2430'. [ 340.206038][T14710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2435'. [ 340.275708][T14715] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2436'. [ 340.327970][T14723] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2436'. [ 340.345776][T14715] bond4: (slave sit0): Device is not bonding slave [ 340.353984][T14715] bond4: option active_slave: invalid value (sit0) [ 340.361619][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2436'. [ 340.377870][T14715] bond4 (unregistering): Released all slaves [ 340.443229][T14726] netlink: 'syz.6.2439': attribute type 1 has an invalid length. [ 340.463295][T14726] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2439'. [ 340.848115][T14739] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 340.862676][T14744] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 340.893358][T14743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.901824][T14743] IPv6: NLM_F_CREATE should be set when creating new route [ 341.080399][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2446'. [ 341.115737][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2448'. [ 341.242249][T14762] sctp: [Deprecated]: syz.0.2449 (pid 14762) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.242249][T14762] Use struct sctp_sack_info instead [ 341.603224][T14788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.936011][T14805] netlink: 'syz.6.2463': attribute type 5 has an invalid length. [ 342.610341][T14816] vlan2: left allmulticast mode [ 342.615333][T14816] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 342.680551][T14816] veth3: left promiscuous mode [ 342.693703][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 342.701244][T14816] veth5: left allmulticast mode [ 342.732054][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 342.742892][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 342.761639][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 342.776544][T14816] bridge2: left allmulticast mode [ 342.782375][ T5845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 342.843056][ T9102] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.988570][ T9102] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.040229][ T9102] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.049747][ T9102] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.112146][T14823] netlink: 'syz.5.2469': attribute type 3 has an invalid length. [ 343.131499][ T9102] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.151111][ T9102] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.170994][ T9102] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.188613][ T9102] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.275538][T14820] lo speed is unknown, defaulting to 1000 [ 343.322936][T14820] hsr0 speed is unknown, defaulting to 1000 [ 343.426648][T14842] batadv1: entered allmulticast mode [ 343.883976][T14871] openvswitch: netlink: Unknown nsh attribute 0 [ 343.900748][T14871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.011891][T14875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.046146][T14884] __nla_validate_parse: 8 callbacks suppressed [ 344.046165][T14884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2485'. [ 344.055466][T14885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2486'. [ 344.087191][T14875] bond0: (slave rose0): Enslaving as an active interface with an up link [ 344.159540][T14820] chnl_net:caif_netlink_parms(): no params data found [ 344.520762][T14820] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.536781][T14820] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.551695][T14820] bridge_slave_0: entered allmulticast mode [ 344.560009][T14820] bridge_slave_0: entered promiscuous mode [ 344.613810][T14820] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.646437][T14820] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.681128][T14820] bridge_slave_1: entered allmulticast mode [ 344.702267][T14820] bridge_slave_1: entered promiscuous mode [ 344.859896][T14820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.910049][T14820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.919344][ T5845] Bluetooth: hci7: command tx timeout [ 345.014866][T14820] team0: Port device team_slave_0 added [ 345.034984][T14820] team0: Port device team_slave_1 added [ 345.076692][T14820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.091789][T14820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.123306][T14820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.137384][T14820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.153020][T14820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.196166][T14924] netlink: 'syz.2.2494': attribute type 23 has an invalid length. [ 345.233912][T14820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.389439][T14950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2497'. [ 345.416356][T14820] hsr_slave_0: entered promiscuous mode [ 345.451656][T14820] hsr_slave_1: entered promiscuous mode [ 345.459293][T14820] debugfs: 'hsr0' already exists in 'hsr' [ 345.486183][T14955] netlink: 'syz.0.2497': attribute type 1 has an invalid length. [ 345.500524][T14820] Cannot create hsr debugfs directory [ 345.541433][T14958] netlink: 'syz.2.2499': attribute type 3 has an invalid length. [ 345.662595][T14955] gretap1: entered promiscuous mode [ 345.674241][T14965] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2500'. [ 345.719600][T14965] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2500'. [ 345.954127][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2502'. [ 346.152358][T14985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2506'. [ 346.179783][T14985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2506'. [ 346.237296][T14820] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 346.256443][T14820] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 346.284501][T14820] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 346.315207][T14820] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 346.572732][T14820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.630691][T14820] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.651262][T15016] netlink: 'syz.0.2511': attribute type 10 has an invalid length. [ 346.669550][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.677138][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.718236][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.725735][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.952876][T15026] netlink: 'syz.2.2513': attribute type 1 has an invalid length. [ 346.983945][T15026] nbd: error processing sock list [ 346.997583][ T5845] Bluetooth: hci7: command tx timeout [ 347.014724][T15026] block nbd2: shutting down sockets [ 347.184368][T15035] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 347.235605][T15039] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20002 [ 347.245129][T15039] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2516'. [ 347.256180][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2516'. [ 347.458339][T14820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.647960][T15056] netlink: 'syz.6.2520': attribute type 1 has an invalid length. [ 347.774173][ T6001] IPVS: starting estimator thread 0... [ 347.808782][T15071] tipc: Enabled bearer , priority 10 [ 347.861635][T15073] IPVS: using max 31 ests per chain, 74400 per kthread [ 348.016181][T15084] veth0: entered promiscuous mode [ 348.138229][T15083] veth0: left promiscuous mode [ 348.146963][T15093] netlink: 'syz.6.2529': attribute type 1 has an invalid length. [ 348.155711][T15093] netlink: 'syz.6.2529': attribute type 1 has an invalid length. [ 348.645704][T14820] veth0_vlan: entered promiscuous mode [ 348.682869][T14820] veth1_vlan: entered promiscuous mode [ 348.776589][T14820] veth0_macvtap: entered promiscuous mode [ 348.813433][T14820] veth1_macvtap: entered promiscuous mode [ 348.851713][T15121] sctp: [Deprecated]: syz.2.2536 (pid 15121) Use of int in max_burst socket option. [ 348.851713][T15121] Use struct sctp_assoc_value instead [ 348.867127][T14820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.921457][ T6001] tipc: Node number set to 1512439315 [ 348.936796][T14820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.001502][ T9102] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.030568][ T9102] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.062881][ T9102] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.072933][ T5845] Bluetooth: hci7: command tx timeout [ 349.108839][ T9102] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.197615][T15134] sctp: [Deprecated]: syz.6.2539 (pid 15134) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.197615][T15134] Use struct sctp_sack_info instead [ 349.232424][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.244361][T15134] sctp: [Deprecated]: syz.6.2539 (pid 15134) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.244361][T15134] Use struct sctp_sack_info instead [ 349.265351][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.351262][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.361998][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.502153][T15149] netlink: 'syz.6.2543': attribute type 1 has an invalid length. [ 349.513752][T15149] __nla_validate_parse: 8 callbacks suppressed [ 349.513769][T15149] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2543'. [ 349.672365][T15158] netlink: 'syz.6.2546': attribute type 21 has an invalid length. [ 349.680661][T15158] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2546'. [ 349.947218][T15174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2553'. [ 350.139813][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2556'. [ 350.154798][T15191] bridge_slave_1: default FDB implementation only supports local addresses [ 350.241753][T15198] netlink: 'syz.0.2558': attribute type 3 has an invalid length. [ 350.280595][T15202] netlink: 'syz.0.2558': attribute type 3 has an invalid length. [ 350.609561][T15225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2562'. [ 350.868309][T15235] lo speed is unknown, defaulting to 1000 [ 350.879616][T15235] hsr0 speed is unknown, defaulting to 1000 [ 350.930344][T15241] sctp: [Deprecated]: syz.7.2566 (pid 15241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.930344][T15241] Use struct sctp_sack_info instead [ 350.956278][T15241] sctp: [Deprecated]: syz.7.2566 (pid 15241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.956278][T15241] Use struct sctp_sack_info instead [ 350.978129][T15241] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2566'. [ 351.152805][ T5845] Bluetooth: hci7: command tx timeout [ 351.643186][T15267] netlink: 'syz.7.2571': attribute type 4 has an invalid length. [ 351.675017][T15269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2572'. [ 351.733549][T15272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2573'. [ 352.168603][T15295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2580'. [ 352.181979][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2580'. [ 353.316407][T15323] bond4: option resend_igmp: invalid value (32767) [ 353.323385][T15323] bond4: option resend_igmp: allowed values 0 - 255 [ 353.342645][T15323] bond4 (unregistering): Released all slaves [ 353.717905][ T9108] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x35 [ 354.191227][ T5845] Bluetooth: hci7: command tx timeout [ 354.205498][T15382] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 354.223568][T15382] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 354.693795][T15407] openvswitch: netlink: ct_state flags 00000781 unsupported [ 354.715084][T15406] openvswitch: netlink: ct_state flags 00000781 unsupported [ 354.849735][T15412] __nla_validate_parse: 12 callbacks suppressed [ 354.849753][T15412] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2609'. [ 355.028186][T15417] lo speed is unknown, defaulting to 1000 [ 355.036549][T15417] hsr0 speed is unknown, defaulting to 1000 [ 355.332588][T15436] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2617'. [ 355.384355][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2616'. [ 355.716309][T15459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.994951][T15460] lo speed is unknown, defaulting to 1000 [ 356.032183][T15460] hsr0 speed is unknown, defaulting to 1000 [ 356.777121][T15499] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2633'. [ 356.861299][T15499] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2633'. [ 356.985328][T15517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2639'. [ 356.994963][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'. [ 357.055691][T15519] vlan0: default FDB implementation only supports local addresses [ 357.374049][T15545] sctp: [Deprecated]: syz.2.2642 (pid 15545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.374049][T15545] Use struct sctp_sack_info instead [ 357.613611][T15556] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 357.622536][T15556] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 357.633793][T15556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2646'. [ 357.682643][T15558] netlink: 'syz.0.2647': attribute type 10 has an invalid length. [ 357.691736][T15558] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2647'. [ 357.702209][T15558] dummy0: entered promiscuous mode [ 357.709842][T15558] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 357.942204][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2650'. [ 358.567832][T15587] sctp: [Deprecated]: syz.7.2654 (pid 15587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.567832][T15587] Use struct sctp_sack_info instead [ 359.039057][T15608] bond3: option lp_interval: invalid value (0) [ 359.068425][T15608] bond3: option lp_interval: allowed values 1 - 2147483647 [ 359.083543][T15608] bond3 (unregistering): Released all slaves [ 359.109846][T15615] bridge_slave_1: left allmulticast mode [ 359.118244][T15615] bridge_slave_1: left promiscuous mode [ 359.125353][T15615] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.139549][T15615] bridge_slave_0: left allmulticast mode [ 359.150544][T15615] bridge_slave_0: left promiscuous mode [ 359.196220][T15615] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.789156][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 359.822513][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 359.847060][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 359.876613][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 359.898087][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 360.085234][T15644] lo speed is unknown, defaulting to 1000 [ 360.089137][T15658] atomic_op ffff88807ac69998 conn xmit_atomic 0000000000000000 [ 360.103612][T15644] hsr0 speed is unknown, defaulting to 1000 [ 360.219707][T15661] __nla_validate_parse: 11 callbacks suppressed [ 360.219725][T15661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2676'. [ 360.302454][T15661] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2676'. [ 360.539335][T15682] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2682'. [ 360.625090][T15677] kthread_run failed with err -4 [ 360.815418][T15644] chnl_net:caif_netlink_parms(): no params data found [ 361.164850][ T24] IPVS: starting estimator thread 0... [ 361.178024][T15719] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2690'. [ 361.213555][T15714] veth5: entered allmulticast mode [ 361.263240][T15721] IPVS: using max 25 ests per chain, 60000 per kthread [ 361.406383][T15644] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.416634][T15644] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.449509][T15644] bridge_slave_0: entered allmulticast mode [ 361.451960][T15733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2692'. [ 361.486049][T15644] bridge_slave_0: entered promiscuous mode [ 361.504580][T15644] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.516951][T15644] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.528269][T15644] bridge_slave_1: entered allmulticast mode [ 361.541331][T15644] bridge_slave_1: entered promiscuous mode [ 361.624671][T15741] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2695'. [ 361.627781][T15644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.652435][T15644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.730644][T15741] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 361.748235][T15741] bond2 (unregistering): Released all slaves [ 361.788132][T15644] team0: Port device team_slave_0 added [ 361.803188][T15644] team0: Port device team_slave_1 added [ 361.882508][T15750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2697'. [ 361.913128][T15644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.932166][T15644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.964419][ T5845] Bluetooth: hci8: command tx timeout [ 362.074355][T15760] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2698'. [ 362.109837][T15644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.487222][T15760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.522351][T15787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2706'. [ 362.548668][T15760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.565217][T15760] bond0 (unregistering): Released all slaves [ 362.598779][T15644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.607085][T15644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.639939][T15644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.693267][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2707'. [ 362.781046][T15795] block nbd2: not configured, cannot reconfigure [ 362.806189][T15644] hsr_slave_0: entered promiscuous mode [ 362.813059][T15644] hsr_slave_1: entered promiscuous mode [ 362.819421][T15644] debugfs: 'hsr0' already exists in 'hsr' [ 362.825557][T15644] Cannot create hsr debugfs directory [ 363.559264][T15644] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 363.606659][T15644] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 363.622590][T15644] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 363.637096][T15831] sch_fq: defrate 0 ignored. [ 363.645356][T15644] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 363.887421][T15644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.998384][T15644] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.030790][ T5845] Bluetooth: hci8: command tx timeout [ 364.078946][ T9107] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.086439][ T9107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.134804][ T9107] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.142030][ T9107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.175842][T15869] veth1_to_bond: entered allmulticast mode [ 364.256843][T15870] bond0: (slave bond_slave_1): Releasing backup interface [ 364.285038][T15870] veth1_to_bond (unregistering): left allmulticast mode [ 364.326081][T15875] tipc: Started in network mode [ 364.332893][T15875] tipc: Node identity 72ef24ae9283, cluster identity 4711 [ 364.357512][T15875] tipc: Enabled bearer , priority 0 [ 364.413858][T15875] tipc: Resetting bearer [ 364.599132][T15874] tipc: Disabling bearer [ 364.629017][T15889] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 364.659380][T15888] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 364.689867][T15891] veth7: entered allmulticast mode [ 365.052874][T15644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.393459][T15931] __nla_validate_parse: 6 callbacks suppressed [ 365.393477][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2739'. [ 365.508957][T15933] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.561307][T15941] netlink: 'syz.0.2741': attribute type 3 has an invalid length. [ 365.773170][T15949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.797180][T15949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.895262][T15958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2747'. [ 365.912817][T15958] tipc: Enabled bearer , priority 0 [ 365.922882][T15958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2747'. [ 366.013756][T15958] syzkaller0: entered promiscuous mode [ 366.023472][T15958] syzkaller0: entered allmulticast mode [ 366.037339][T15958] tipc: Resetting bearer [ 366.106515][T15963] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 366.123008][ T5845] Bluetooth: hci8: command tx timeout [ 366.135203][T15966] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2749'. [ 366.135752][T15644] veth0_vlan: entered promiscuous mode [ 366.162622][T15644] veth1_vlan: entered promiscuous mode [ 366.170739][T15966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.179465][T15966] batadv0: mtu less than device minimum [ 366.189886][T15966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.202407][T15966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.213580][T15966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.225200][T15966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.236750][T15966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.248828][T15966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.322533][T15966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.445842][T15954] tipc: Resetting bearer [ 367.020503][ T24] tipc: Node number set to 2326114004 [ 368.076489][T15954] tipc: Disabling bearer [ 368.086997][T15644] veth0_macvtap: entered promiscuous mode [ 368.096081][T15973] netlink: 'syz.2.2750': attribute type 1 has an invalid length. [ 368.104228][T15973] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2750'. [ 368.128240][T15981] vxlan0: entered promiscuous mode [ 368.141750][T15981] vxlan0: entered allmulticast mode [ 368.155586][T15644] veth1_macvtap: entered promiscuous mode [ 368.190981][ T5845] Bluetooth: hci8: command tx timeout [ 368.203603][ T61] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.229284][ T61] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.292449][ T1158] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.326592][ T1158] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.379247][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2754'. [ 368.459722][T15644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.534127][T15644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.578108][T16001] syzkaller1: entered promiscuous mode [ 368.584284][T16001] syzkaller1: entered allmulticast mode [ 368.593678][T16009] netlink: 'syz.0.2759': attribute type 9 has an invalid length. [ 368.602647][T16001] batadv1: entered allmulticast mode [ 368.605131][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'. [ 368.631313][ T61] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.631503][T16005] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2758'. [ 368.640781][T16009] netlink: 'syz.0.2759': attribute type 9 has an invalid length. [ 368.659679][T16005] nftables ruleset with unbound chain [ 368.666291][ T61] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.687808][ T61] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.692752][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'. [ 368.828325][ T9098] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.830680][T16019] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2762'. [ 369.121022][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.147318][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.269726][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.305562][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.447251][T16052] ªªªªªª: renamed from vlan0 (while UP) [ 371.015434][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.026150][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.033253][T16117] netlink: 'syz.6.2783': attribute type 1 has an invalid length. [ 371.044617][T16113] __nla_validate_parse: 4 callbacks suppressed [ 371.044636][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2781'. [ 371.062305][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.063313][T16113] bridge_slave_1: default FDB implementation only supports local addresses [ 371.084264][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.104064][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.154212][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2784'. [ 371.167356][T16117] bond3: entered promiscuous mode [ 371.173223][T16117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 371.181219][T16118] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.2781'. [ 371.276533][T16120] 8021q: adding VLAN 0 to HW filter on device bond3 [ 371.299436][T16127] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2785'. [ 371.317752][T16120] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 371.376131][T16120] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 371.424147][T16120] bond3: (slave wireguard0): making interface the new active one [ 371.431845][T16133] netlink: 'syz.7.2788': attribute type 2 has an invalid length. [ 371.455519][T16120] wireguard0: entered promiscuous mode [ 371.474448][T16120] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 371.568670][T16112] lo speed is unknown, defaulting to 1000 [ 371.593249][T16112] hsr0 speed is unknown, defaulting to 1000 [ 371.686599][T16141] team0: No ports can be present during mode change [ 371.697069][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2791'. [ 371.708494][T16143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2790'. [ 371.999931][T16112] chnl_net:caif_netlink_parms(): no params data found [ 372.100197][T16159] tipc: Enabled bearer , priority 12 [ 372.201491][T16162] netlink: 'syz.0.2797': attribute type 8 has an invalid length. [ 372.214416][T16166] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2798'. [ 372.333539][T16112] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.371581][T16112] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.378878][T16112] bridge_slave_0: entered allmulticast mode [ 372.389652][T16112] bridge_slave_0: entered promiscuous mode [ 372.399442][T16112] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.407069][T16112] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.417135][T16112] bridge_slave_1: entered allmulticast mode [ 372.426076][T16112] bridge_slave_1: entered promiscuous mode [ 372.531767][T16112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.553022][T16112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.553984][T16182] netlink: 'syz.7.2803': attribute type 2 has an invalid length. [ 372.571310][T16182] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2803'. [ 372.725750][T16201] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2805'. [ 372.766793][T16112] team0: Port device team_slave_0 added [ 372.801883][T16112] team0: Port device team_slave_1 added [ 372.902751][T16209] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2807'. [ 372.961789][T16112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.969163][T16112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.996362][T16112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.041824][T16112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.049347][T16112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.160362][ T5845] Bluetooth: hci4: command tx timeout [ 373.220619][ T24] tipc: Node number set to 3765183662 [ 373.225368][T16112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.522680][T16112] hsr_slave_0: entered promiscuous mode [ 373.530059][T16112] hsr_slave_1: entered promiscuous mode [ 373.541655][T16112] debugfs: 'hsr0' already exists in 'hsr' [ 373.547718][T16112] Cannot create hsr debugfs directory [ 373.573481][T16235] macvlan2: entered promiscuous mode [ 373.578923][T16235] macvlan2: entered allmulticast mode [ 373.857663][T16112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.868959][T16112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.948641][T16112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.964310][T16112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.981207][T16250] syzkaller0: entered promiscuous mode [ 373.987443][T16250] syzkaller0: entered allmulticast mode [ 374.000159][T16250] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 374.050064][T16112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.061582][T16112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.144164][T16112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.155539][T16112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.513484][T16265] ip6gre0: Master is either lo or non-ether device [ 374.632480][T16270] dvmrp1: entered allmulticast mode [ 374.825065][ T24] hid-generic 0005:046D:0009.0004: unknown main item tag 0x0 [ 374.848673][ T24] hid-generic 0005:046D:0009.0004: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 374.915974][T16112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 375.019073][T16112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 375.111660][T16112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 375.135508][T16296] netlink: 'syz.6.2827': attribute type 1 has an invalid length. [ 375.201856][T16112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 375.230391][ T5845] Bluetooth: hci4: command tx timeout [ 375.243660][T16304] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 375.367734][T16305] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 375.396244][ T9096] net_ratelimit: 14 callbacks suppressed [ 375.396270][ T9096] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 375.419189][T16296] 8021q: adding VLAN 0 to HW filter on device bond4 [ 375.540338][ T1158] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 375.623683][T16112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.658830][T16322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.697495][T16112] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.738383][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.746073][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.806500][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.813914][ T9096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.061297][T16340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.078005][T16340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.400966][T16112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.459003][T16352] __nla_validate_parse: 11 callbacks suppressed [ 376.459026][T16352] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2840'. [ 376.534287][T16112] veth0_vlan: entered promiscuous mode [ 376.565913][T16112] veth1_vlan: entered promiscuous mode [ 376.624005][T16361] pim6reg: entered allmulticast mode [ 376.648010][T16362] pim6reg: left allmulticast mode [ 376.792456][T16112] veth0_macvtap: entered promiscuous mode [ 376.808799][T16370] netlink: 'syz.8.2846': attribute type 1 has an invalid length. [ 376.814516][T16112] veth1_macvtap: entered promiscuous mode [ 376.871927][T16370] netlink: 'syz.8.2846': attribute type 2 has an invalid length. [ 376.889303][T16112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.916198][T16112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.024947][T16377] tipc: Enabled bearer , priority 0 [ 377.061676][ T9098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.084703][ T9098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.109265][ T9098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.146652][ T9098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.194150][T16377] tipc: Disabling bearer [ 377.279493][T16397] netlink: 548 bytes leftover after parsing attributes in process `syz.0.2852'. [ 377.289566][T16389] netlink: 'syz.0.2852': attribute type 29 has an invalid length. [ 377.298717][T16393] netlink: 'syz.0.2852': attribute type 29 has an invalid length. [ 377.310707][ T5845] Bluetooth: hci4: command tx timeout [ 377.449196][T16401] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20004 [ 377.544835][ T9102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.562586][ T9102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.799876][T16409] tipc: Started in network mode [ 377.805359][T16409] tipc: Node identity a6aeeaa04d7f, cluster identity 4711 [ 377.816057][T16409] tipc: Enabled bearer , priority 0 [ 377.834295][ T9102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.839885][T16411] tipc: Resetting bearer [ 377.853894][ T9102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.894410][T16408] tipc: Disabling bearer [ 378.032195][ T9102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 378.141157][T16431] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2863'. [ 378.152946][T16431] netlink: 'syz.8.2863': attribute type 10 has an invalid length. [ 378.191836][T16431] team0: Device veth1_macvtap failed to register rx_handler [ 378.922136][T16439] 8021q: adding VLAN 0 to HW filter on device bond5 [ 379.042074][T16455] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2872'. [ 379.123257][T16445] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 379.167113][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 379.178086][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 379.188657][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 379.197184][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 379.207746][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 379.268593][T16460] lo speed is unknown, defaulting to 1000 [ 379.293133][T16460] hsr0 speed is unknown, defaulting to 1000 [ 379.318898][T16468] netlink: 'syz.7.2875': attribute type 3 has an invalid length. [ 379.390893][ T51] Bluetooth: hci4: command tx timeout [ 379.727078][T16460] chnl_net:caif_netlink_parms(): no params data found [ 379.848383][T16497] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2883'. [ 380.057169][T16460] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.079059][T16460] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.102447][T16460] bridge_slave_0: entered allmulticast mode [ 380.122144][T16460] bridge_slave_0: entered promiscuous mode [ 380.133221][T16511] nbd: must specify an index to disconnect [ 380.144498][T16460] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.155270][T16460] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.164341][T16460] bridge_slave_1: entered allmulticast mode [ 380.181080][T16460] bridge_slave_1: entered promiscuous mode [ 380.377912][T16524] netlink: 'syz.8.2887': attribute type 1 has an invalid length. [ 380.396187][T16460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.445569][T16460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.559632][T16524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.647086][T16525] veth3: entered promiscuous mode [ 380.656183][T16525] bond1: (slave veth3): Enslaving as an active interface with an up link [ 380.732971][T16542] tipc: Enabled bearer , priority 23 [ 380.814602][T16543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.875476][T16460] team0: Port device team_slave_0 added [ 380.901549][T16460] team0: Port device team_slave_1 added [ 380.971482][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2891'. [ 381.119027][T16460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.136720][T16558] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2896'. [ 381.137607][T16460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.160250][T16558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2896'. [ 381.182719][T16460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.235774][T16460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.270392][T16460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.312764][ T51] Bluetooth: hci9: command tx timeout [ 381.354918][T16460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.576430][T16572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.606305][T16584] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2899'. [ 381.740556][ T6001] tipc: Node number set to 1482252301 [ 381.833581][T16590] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2901'. [ 381.867152][T16590] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2901'. [ 381.913958][T16590] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2901'. [ 382.171337][T16584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.204011][T16584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.241503][T16584] bond0 (unregistering): Released all slaves [ 382.280470][T16460] hsr_slave_0: entered promiscuous mode [ 382.288694][T16460] hsr_slave_1: entered promiscuous mode [ 382.296874][T16460] debugfs: 'hsr0' already exists in 'hsr' [ 382.305018][T16460] Cannot create hsr debugfs directory [ 382.702227][T16619] netlink: 'syz.7.2911': attribute type 9 has an invalid length. [ 382.776299][T16619] netlink: 'syz.7.2911': attribute type 6 has an invalid length. [ 382.847382][T16619] netlink: 'syz.7.2911': attribute type 7 has an invalid length. [ 382.900766][T16619] netlink: 'syz.7.2911': attribute type 8 has an invalid length. [ 383.223356][T16651] sctp: [Deprecated]: syz.7.2918 (pid 16651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.223356][T16651] Use struct sctp_sack_info instead [ 383.347071][T16654] bridge0: port 3(syz_tun) entered blocking state [ 383.387063][T16654] bridge0: port 3(syz_tun) entered disabled state [ 383.394345][ T51] Bluetooth: hci9: command tx timeout [ 383.401549][T16654] syz_tun: entered allmulticast mode [ 383.412558][T16654] syz_tun: entered promiscuous mode [ 383.422068][T16654] bridge0: port 3(syz_tun) entered blocking state [ 383.429931][T16654] bridge0: port 3(syz_tun) entered forwarding state [ 383.481959][T16664] netlink: 'syz.6.2922': attribute type 1 has an invalid length. [ 383.539901][T16661] netlink: 'syz.7.2921': attribute type 1 has an invalid length. [ 383.558460][T16661] netlink: 392 bytes leftover after parsing attributes in process `syz.7.2921'. [ 383.668255][T16669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2924'. [ 383.728449][T16675] sctp: [Deprecated]: syz.7.2925 (pid 16675) Use of int in maxseg socket option. [ 383.728449][T16675] Use struct sctp_assoc_value instead [ 383.744279][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2925'. [ 383.755415][T16675] netlink: 'syz.7.2925': attribute type 5 has an invalid length. [ 383.764165][T16675] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2925'. [ 383.789841][T16675] geneve2: entered promiscuous mode [ 383.799383][T16675] geneve2: entered allmulticast mode [ 383.806623][T16671] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2926'. [ 383.880346][T16672] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2926'. [ 384.195421][ T9098] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 384.206251][ T9098] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 384.227643][ T9098] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 384.291986][ T9098] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 384.481551][T16706] netlink: 'syz.8.2934': attribute type 2 has an invalid length. [ 384.605365][T16706] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.707843][T16706] bridge_slave_1 (unregistering): left allmulticast mode [ 384.716746][T16706] bridge_slave_1 (unregistering): left promiscuous mode [ 384.726928][T16706] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.759368][T16713] veth1_to_bond: entered allmulticast mode [ 385.035800][T16731] pimreg: entered allmulticast mode [ 385.178889][T16460] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 385.207554][T16460] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 385.263565][T16460] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 385.327439][T16460] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 385.362868][T16739] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 385.470944][ T51] Bluetooth: hci9: command tx timeout [ 385.585460][T16460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.642793][T16460] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.711500][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.718918][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.766513][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.773833][ T9096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.071709][T16781] sch_fq: defrate 0 ignored. [ 386.362979][T16792] bridge_slave_0: left allmulticast mode [ 386.386059][T16792] bridge_slave_0: left promiscuous mode [ 386.419352][T16792] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.489789][T16792] bridge_slave_1: left allmulticast mode [ 386.498505][T16792] bridge_slave_1: left promiscuous mode [ 386.526527][T16792] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.585763][T16792] team0: Port device team_slave_0 removed [ 386.605983][T16792] team0: Port device team_slave_1 removed [ 386.614707][T16792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.624028][T16792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.642038][T16792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.672997][T16792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.691680][T16792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 386.736030][T16795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.892178][T16795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.902539][T16819] netlink: 'syz.6.2958': attribute type 1 has an invalid length. [ 387.136348][T16829] netlink: 'syz.8.2961': attribute type 16 has an invalid length. [ 387.155409][T16460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.229968][T16829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.551401][ T51] Bluetooth: hci9: command tx timeout [ 387.660520][T16854] __nla_validate_parse: 4 callbacks suppressed [ 387.660540][T16854] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2970'. [ 387.697787][T16460] veth0_vlan: entered promiscuous mode [ 387.885796][T16460] veth1_vlan: entered promiscuous mode [ 387.907727][T16869] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 387.935795][T16873] validate_nla: 1 callbacks suppressed [ 387.935813][T16873] netlink: 'syz.8.2974': attribute type 3 has an invalid length. [ 387.976992][T16460] veth0_macvtap: entered promiscuous mode [ 387.999489][T16460] veth1_macvtap: entered promiscuous mode [ 388.036796][T16460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.092846][T16460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.095865][T16875] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2975'. [ 388.143868][ T1158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.170918][ T1158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.209129][ T1158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.219691][ T1158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.372914][ T9098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.387692][ T9098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.460338][ T9108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.473387][ T9108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.350612][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 407.471138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.031507][ T31] INFO: task syz.4.1357:10817 blocked for more than 143 seconds. [ 410.039275][ T31] Not tainted syzkaller #0 [ 410.044786][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.054070][ T31] task:syz.4.1357 state:D stack:27272 pid:10817 tgid:10816 ppid:5840 task_flags:0x400040 flags:0x00080002 [ 410.066735][ T31] Call Trace: [ 410.071366][ T31] [ 410.074478][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 410.079038][ T31] ? __lock_acquire+0xab9/0xd20 [ 410.084203][ T31] ? __lock_acquire+0xab9/0xd20 [ 410.089740][ T31] ? __pfx___schedule+0x10/0x10 [ 410.094875][ T31] ? schedule+0x91/0x360 [ 410.099243][ T31] schedule+0x165/0x360 [ 410.103676][ T31] schedule_preempt_disabled+0x13/0x30 [ 410.109183][ T31] __mutex_lock+0x7e6/0x1350 [ 410.171146][ T31] ? __mutex_lock+0x5bb/0x1350 [ 410.176008][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 410.250299][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 410.255400][ T31] ? __nlmsg_put+0xef/0x1b0 [ 410.259939][ T31] ? genlmsg_put+0x137/0x2e0 [ 410.310233][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 410.315863][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 410.340448][ T31] ? __rcu_read_unlock+0x84/0xe0 [ 410.350353][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 410.355995][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 410.400236][ T31] ? stack_trace_save+0x9c/0xe0 [ 410.405424][ T31] genl_rcv_msg+0x60e/0x790 [ 410.410057][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.429033][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 410.451598][ T31] netlink_rcv_skb+0x205/0x470 [ 410.456777][ T31] ? __lock_acquire+0xab9/0xd20 [ 410.470271][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.475607][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.489600][ T31] ? down_read+0x1ad/0x2e0 [ 410.494963][ T31] genl_rcv+0x28/0x40 [ 410.498986][ T31] netlink_unicast+0x82c/0x9e0 [ 410.504537][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 410.510051][ T31] ? netlink_sendmsg+0x642/0xb30 [ 410.518174][ T31] ? skb_put+0x11b/0x210 [ 410.522899][ T31] netlink_sendmsg+0x805/0xb30 [ 410.527709][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.536454][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 410.543048][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.548515][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.555460][ T31] __sock_sendmsg+0x219/0x270 [ 410.561629][ T31] ____sys_sendmsg+0x505/0x830 [ 410.566729][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.573194][ T31] ? import_iovec+0x74/0xa0 [ 410.577823][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 410.584662][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.589964][ T31] ? __fget_files+0x2a/0x420 [ 410.595434][ T31] ? __fget_files+0x3a0/0x420 [ 410.600524][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 410.605704][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.613020][ T31] ? rcu_is_watching+0x15/0xb0 [ 410.617838][ T31] ? do_syscall_64+0xbe/0x3b0 [ 410.623349][ T31] do_syscall_64+0xfa/0x3b0 [ 410.627937][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.633850][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.640954][ T31] ? clear_bhb_loop+0x60/0xb0 [ 410.645683][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.653097][ T31] RIP: 0033:0x7f2df078eec9 [ 410.657628][ T31] RSP: 002b:00007f2df15c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.666217][ T31] RAX: ffffffffffffffda RBX: 00007f2df09e5fa0 RCX: 00007f2df078eec9 [ 410.675551][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 410.685403][ T31] RBP: 00007f2df0811f91 R08: 0000000000000000 R09: 0000000000000000 [ 410.693733][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.701800][ T31] R13: 00007f2df09e6038 R14: 00007f2df09e5fa0 R15: 00007ffcacc9b298 [ 410.709798][ T31] [ 410.713228][ T31] [ 410.713228][ T31] Showing all locks held in the system: [ 410.721321][ T31] 1 lock held by khungtaskd/31: [ 410.726354][ T31] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 410.740730][ T31] 2 locks held by getty/5596: [ 410.746104][ T31] #0: ffff88814e1250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 410.756774][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 410.767294][ T31] 2 locks held by kworker/1:3/5832: [ 410.773438][ T31] #0: ffff88801a081148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.785909][ T31] #1: ffffc90003f2fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.796410][ T31] 5 locks held by kworker/u8:15/9102: [ 410.802062][ T31] #0: ffff8880b8839fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 410.812322][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 410.821545][ T31] #2: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_change+0xd9/0x340 [ 410.831140][ T31] #3: ffff8880b8839fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 410.841314][ T31] #4: ffffffff997f7690 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 410.852450][ T31] 2 locks held by syz.1.998/9562: [ 410.858110][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 410.866784][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 410.877506][ T31] 2 locks held by syz.4.1357/10817: [ 410.882885][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 410.892114][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 410.902447][ T31] 2 locks held by syz.3.2267/14092: [ 410.907685][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 410.916232][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 410.926813][ T31] 2 locks held by syz.5.2484/14871: [ 410.932398][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 410.940750][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 410.951338][ T31] 5 locks held by syz-executor/15644: [ 410.956833][ T31] #0: ffff888026434dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 410.967002][ T31] #1: ffff8880264340b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 410.977047][ T31] #2: ffffffff8f2299e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 410.987591][ T31] #3: ffff88807d7e9b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 410.997766][ T31] #4: ffffffff8dd402f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 411.008980][ T31] 1 lock held by syz-executor/16112: [ 411.014596][ T31] #0: ffffffff8dd402f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 411.026238][ T31] [ 411.076250][ T31] ============================================= [ 411.076250][ T31] [ 411.134230][ T31] NMI backtrace for cpu 1 [ 411.134255][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 411.134278][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 411.134289][ T31] Call Trace: [ 411.134296][ T31] [ 411.134305][ T31] dump_stack_lvl+0x189/0x250 [ 411.134337][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.134360][ T31] ? __pfx__printk+0x10/0x10 [ 411.134401][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 411.134429][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 411.134459][ T31] ? __pfx__printk+0x10/0x10 [ 411.134492][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 411.134514][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 411.134544][ T31] watchdog+0xf93/0xfe0 [ 411.134568][ T31] ? watchdog+0x1de/0xfe0 [ 411.134592][ T31] kthread+0x711/0x8a0 [ 411.134619][ T31] ? __pfx_watchdog+0x10/0x10 [ 411.134636][ T31] ? __pfx_kthread+0x10/0x10 [ 411.134661][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.134689][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.134716][ T31] ? __pfx_kthread+0x10/0x10 [ 411.134742][ T31] ret_from_fork+0x436/0x7d0 [ 411.134765][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 411.134792][ T31] ? __switch_to_asm+0x39/0x70 [ 411.134816][ T31] ? __switch_to_asm+0x33/0x70 [ 411.134846][ T31] ? __pfx_kthread+0x10/0x10 [ 411.134872][ T31] ret_from_fork_asm+0x1a/0x30 [ 411.134914][ T31] [ 411.134921][ T31] Sending NMI from CPU 1 to CPUs 0: [ 411.288028][ C0] NMI backtrace for cpu 0 [ 411.288048][ C0] CPU: 0 UID: 0 PID: 5982 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 411.288069][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 411.288082][ C0] Workqueue: events drain_vmap_area_work [ 411.288113][ C0] RIP: 0010:bad_range+0x9e/0x2c0 [ 411.288133][ C0] Code: 44 24 28 4c 89 e8 48 c1 e8 03 48 89 44 24 20 4c 89 ff e8 25 06 00 00 48 bb 00 00 00 00 00 fc ff df 41 0f b6 04 1c 84 c0 75 5d <45> 8b 37 41 f6 c6 01 48 8b 6c 24 18 0f 85 90 00 00 00 48 8b 44 24 [ 411.288149][ C0] RSP: 0018:ffffc90004e5f488 EFLAGS: 00000046 [ 411.288163][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 794c06c389bef000 [ 411.288177][ C0] RDX: 0000000000000005 RSI: ffffffff8d6ef4b7 RDI: ffffffff8b9ec4e0 [ 411.288190][ C0] RBP: ffff88813fffbb80 R08: 0000000000000000 R09: ffffffff8216afeb [ 411.288202][ C0] R10: dffffc0000000000 R11: fffffbfff1eb70c7 R12: 1ffff11027fff78a [ 411.288216][ C0] R13: ffff88813fffbc20 R14: ffffea0001889840 R15: ffff88813fffbc50 [ 411.288230][ C0] FS: 0000000000000000(0000) GS:ffff88812639b000(0000) knlGS:0000000000000000 [ 411.288245][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.288257][ C0] CR2: 0000557e30ce9040 CR3: 000000000db36000 CR4: 00000000003526f0 [ 411.288273][ C0] Call Trace: [ 411.288280][ C0] [ 411.288294][ C0] __free_one_page+0xf4/0xbd0 [ 411.288322][ C0] free_pcppages_bulk+0x2da/0x4e0 [ 411.288359][ C0] free_frozen_page_commit+0x62c/0x1070 [ 411.288389][ C0] __free_frozen_pages+0x67f/0xd30 [ 411.288416][ C0] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 411.288437][ C0] __apply_to_page_range+0xb66/0x13d0 [ 411.288463][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 411.288486][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 411.288510][ C0] kasan_release_vmalloc+0xa2/0xd0 [ 411.288529][ C0] purge_vmap_node+0x214/0x8f0 [ 411.288562][ C0] ? __pfx_purge_vmap_node+0x10/0x10 [ 411.288589][ C0] ? flush_tlb_kernel_range+0x358/0x470 [ 411.288619][ C0] __purge_vmap_area_lazy+0x7a4/0xb40 [ 411.288647][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 411.288667][ C0] drain_vmap_area_work+0x27/0x40 [ 411.288690][ C0] process_scheduled_works+0xade/0x17b0 [ 411.288725][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 411.288753][ C0] worker_thread+0x8a0/0xda0 [ 411.288773][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 411.288805][ C0] ? __kthread_parkme+0x7b/0x200 [ 411.288830][ C0] kthread+0x711/0x8a0 [ 411.288854][ C0] ? __pfx_worker_thread+0x10/0x10 [ 411.288872][ C0] ? __pfx_kthread+0x10/0x10 [ 411.288895][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.288919][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.288944][ C0] ? __pfx_kthread+0x10/0x10 [ 411.288967][ C0] ret_from_fork+0x436/0x7d0 [ 411.288987][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 411.289008][ C0] ? __switch_to_asm+0x39/0x70 [ 411.289031][ C0] ? __switch_to_asm+0x33/0x70 [ 411.289053][ C0] ? __pfx_kthread+0x10/0x10 [ 411.289075][ C0] ret_from_fork_asm+0x1a/0x30 [ 411.289107][ C0] [ 411.720241][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 411.727232][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 411.736366][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 411.746442][ T31] Call Trace: [ 411.749737][ T31] [ 411.753029][ T31] dump_stack_lvl+0x99/0x250 [ 411.757646][ T31] ? __asan_memcpy+0x40/0x70 [ 411.762253][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.767469][ T31] ? __pfx__printk+0x10/0x10 [ 411.772103][ T31] vpanic+0x281/0x750 [ 411.776116][ T31] ? __pfx_vpanic+0x10/0x10 [ 411.780636][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 411.786199][ T31] ? preempt_schedule+0xae/0xc0 [ 411.791080][ T31] ? preempt_schedule_common+0x83/0xd0 [ 411.796571][ T31] panic+0xb9/0xc0 [ 411.800394][ T31] ? __pfx_panic+0x10/0x10 [ 411.804834][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 411.810267][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 411.816458][ T31] watchdog+0xfd2/0xfe0 [ 411.820643][ T31] ? watchdog+0x1de/0xfe0 [ 411.825082][ T31] kthread+0x711/0x8a0 [ 411.829176][ T31] ? __pfx_watchdog+0x10/0x10 [ 411.833876][ T31] ? __pfx_kthread+0x10/0x10 [ 411.838495][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.843819][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.849129][ T31] ? __pfx_kthread+0x10/0x10 [ 411.853748][ T31] ret_from_fork+0x436/0x7d0 [ 411.858482][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 411.863707][ T31] ? __switch_to_asm+0x39/0x70 [ 411.868677][ T31] ? __switch_to_asm+0x33/0x70 [ 411.873465][ T31] ? __pfx_kthread+0x10/0x10 [ 411.878072][ T31] ret_from_fork_asm+0x1a/0x30 [ 411.883231][ T31] [ 411.886607][ T31] Kernel Offset: disabled [ 411.890932][ T31] Rebooting in 86400 seconds..