last executing test programs: 2m17.709808602s ago: executing program 1 (id=3946): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000880) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m16.80575656s ago: executing program 3 (id=3952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20006490"], 0x9e) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r10}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000280)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=0x0) r14 = getgid() sendmsg$netlink(r0, &(0x7f0000000500)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)=[{&(0x7f0000000900)={0x2f4, 0x3b, 0x300, 0x70bd28, 0x25dfdbff, "", [@nested={0xc, 0x113, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @uid}]}, @typed={0x8, 0xa2, 0x0, 0x0, @ipv4=@loopback}, @nested={0x1c3, 0x9b, 0x0, 0x1, [@nested={0x4, 0x47}, @generic="79f5d4440bfe4136ad9cc423246f75d7a3bc00bae91c1ec90c6b976b8cf33ee4c6365a356de39b4e88992959afdd77d1d0106845f1cd158183d4d1c53b21368ca943e304f05b6f53689bef1c9c0802f83a2d2f70528dd805ddf127572dd23162e0fe4615666fb83c7ffa123069a6d0207bdabdb62ed08b8e226fcc74d73180eaedadc53fec84bdacb38b73c67f3076593a09870b791a35158a3992bd23f165ae2c2e11e1aba9255df97892969d4e687dbc4ec57e4af4856b9a087d3e5a1fc3eb826eddca361298294eb5c09c44c6edb39af3701f0110f4397d", @nested={0x4, 0x33}, @generic="a4132e47cf0c06a23786af183b94565ef73e215ea9fd6ee9406fbf0e1cced0a7ba7b589c102597035327fecfeb77524b3ddfa7f4f47f1af8dc36270af1f1d50395d42efa3a250154a1c97aae9b1379e1650eff8ddbaee6fa6ea031b0cd0821a283e1e4f1e336beb5c0b410c07e9abc8db831e3af2172d0d45cc1191118bdda8ee8059e16b672b479bb96b9e7773312b231c4b6e22074b4df4396287975bf5455b273d0f3", @generic="6108e8fe946eea8ac1c0a618f20f0f6aceb04e09f067ce662afc7efe6947938afd1a12f69528", @nested={0x4, 0x48}, @typed={0x8, 0xf3, 0x0, 0x0, @u32=0x82}, @nested={0x4, 0x12}, @nested={0x4, 0x12a}]}, @nested={0xf6, 0x8c, 0x0, 0x1, [@typed={0x8, 0xa5, 0x0, 0x0, @uid=r10}, @generic="a74bd9c8b45646f4146c86609e2826b8423cde86bd47e3643f98055a09e39a233f9440825ec2799fe645cd2fb8af44e7851482112b212c3a5f6232a5e10314806a08f07b45e886a110571bf33f59410c27926244a6a3d6145dac1b04e075eeb97bad39417ebb2b0eaf8deefba40fb9f61c28aa86ab2bdbfaeb11ae669d07e49f92939dff59ff664fbe93a3087de01f9870e053613e635d9ddf8001bdaffe2365c49e4d5e4ad4b7ec2b43ddfdfb5d9ada62414fccc82af53eedefeb65ce7d7acd7f13121eed84799b6bdb8fe2ae2d18aad1c511a666cb8818eb963b4bcab961d28636fff48f6eab9601a3"]}, @typed={0x5, 0x9, 0x0, 0x0, @str='\x00'}, @generic="297d53088d55e20724"]}, 0x2f4}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [r11, r4]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x50, 0x40040}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r16}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2m16.349845102s ago: executing program 3 (id=3958): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000003240)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @local, @private=0xa010101, 0x2, 0xfffffffd}}}, {{@arp={@multicast2, @remote, 0xff, 0xff000000, 0x7, 0xa, {@mac=@remote, {[0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x9, 0xabc8, 0x7, 0x5, 0x7, 0x8001, 'team_slave_0\x00', 'caif0\x00', {}, {0xff}, 0x0, 0x341}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @loopback, @broadcast, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60000000699b626d6bfa6a29e60a6efce1efa033b20fdb002651aeccdf5c96d3a7de5b23341e760c9e56cdb2ab07b4238b06f726b3a342f622a89cbc64a60bbe206b3f1752baf165a0252e9e00ce0039f54bee00db5637ef14753c6b414b309bd9924b7fc4cea5bd6668c292eb7d57f8fc79f0bec1772f513f1a10473572d2daaec1e5eafd61c183fed683de89d6f9c415c7cd9d850588758cacda1556b2d8c875b867b56c5a66810e99badf8f9c5e8749d0c6bec9b696372d57160795c1603bd92ea1a5ce006910033f68964ca7209a2e5c5c3adf8f6377db1ce440e615988f5baa9b8edef27b8da0049c6b2873d55f2b9dff9b0222572ba19f", @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b0000000000000800010002000000"], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000740)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket(0x1e, 0x4, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0x0, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x2, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 2m14.294387874s ago: executing program 0 (id=3971): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0xdc, 0xa}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112c9000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10) write(r3, &(0x7f0000000000)="2e000400010002", 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa693584", 0x35}], 0x2}], 0x1, 0x40800) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r6 = accept(r0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r7, &(0x7f0000000300), &(0x7f0000000000)=@tcp6=r6, 0x4}, 0x20) close(r6) 2m14.117877075s ago: executing program 0 (id=3972): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x22}, 0x80000001}, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e24, 0x7, @remote, 0x8}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xde}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @broadcast}], 0xc0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000000c0)={0x3, 0x1, 0x1f}) sendmsg$key(r0, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e20, @multicast1}}, @sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd2c, 0x103503}]}, 0x50}, 0x1, 0x7}, 0x0) 2m14.071235599s ago: executing program 1 (id=3973): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket(0x11, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x2000000009) (async) connect$bt_sco(r1, &(0x7f0000000040), 0x8) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) (async) r4 = socket(0x21, 0x2, 0x10000000000002) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) (async) connect$rxrpc(r4, &(0x7f0000000180)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) recvmmsg$unix(r7, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12040, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x66) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r9 = epoll_create1(0x0) epoll_wait(r9, &(0x7f000000affb)=[{}], 0x1, 0x7fff) 2m13.957494612s ago: executing program 0 (id=3974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='.\x00'/12, @ANYRES32, @ANYBLOB="b7ffd7d95d60144ad12e0e15b604135434033085ad76d40e3f3e9def3720e8d52f7d5a7f7c1ad565d594f2ca0dfaef5700158fe55846a66fe2d207d2a5a5293e2e95969c57e64e5e6881104584", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) close(0x3) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x24004840) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) 2m13.731062231s ago: executing program 2 (id=3976): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYRES64=r0], 0x10) 2m13.702436447s ago: executing program 1 (id=3977): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000014c0)="aeb3", 0x2}], 0x1, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x80}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a042, 0x41c23}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xffffff00, 0x5}}]}]}]}, 0x3c}}, 0x2000980c) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000140)=0x30) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='bbr', 0x3) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmmsg$inet(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f00000001c0)="bf647b7356fd575cb9041e24", 0xc}], 0x1}}], 0x1, 0x1) sendmsg$netlink(r2, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) r6 = socket$unix(0x1, 0x1, 0x0) close(r6) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r7 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0x80000000}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="5006baf9ea396413457cd777489660b3e2b08b7074bc422353fc5abb8b3e4fc733d4e755e93ef25a54b47d070fc3b349ba260868a439eb386eacc0bd4f0c313eff6a8a84effed1d169b6b68c7f61d13052181cf5ac7cb3203445d4", @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c000280050011000d000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2m13.497855218s ago: executing program 2 (id=3978): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000140), 0x4}, {0x0, 0x46}, {&(0x7f0000000380)=""/183, 0xb7}], 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}, 0x1, 0x0, 0x0, 0x44040}, 0x0) close(0x3) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000000c43ad295d0192194c9e7e8c04d127e655739e8", @ANYRES8=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f00000002c0)=0x40000000, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x2001, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r7 = accept(r0, &(0x7f0000000140)=@can, &(0x7f00000001c0)=0x80) sendto$l2tp(r7, &(0x7f0000000240)="3bda0ee6f25bf941af119531964f463f", 0x10, 0x0, &(0x7f0000000280)={0x2, 0x0, @multicast1, 0x3}, 0x10) 2m13.377527863s ago: executing program 3 (id=3979): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="080001009ce8dc2a635e60a33d9043663d93f8b6020e5674a152af4a8048d62f0849627c0f3d8c10d8be578a1bcc483aa5b161231080514376453b52bf344a828156bb7ec0d5f4", @ANYRES32=r2, @ANYBLOB="050006005a0000000500070000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) (async) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000040), 0xc) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0xae, "e2c4dd371892170041eb5a3db76d753c98e29b638cb5e14d9224c5a3047d57ea6dd33245c03af2edf6dba08c0f2adde2ee4cba2f129a3ee9a3eef10cfb02788ce4ac87a73caf563ec6559d3ccc201f1a044996d71253abb883ac10754e392774ded3780dc3a2c93994e9f16ed54757e05e98084ccac5cce5a7557a68aae83b9e339ee3c7dbdee0e42d91c5c790f38fe378c793cbb316fb3767bdca79cbe1f2598a37bf1cc079772daa67ebc7d02a"}, &(0x7f0000000180)=0xb6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x7f}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x4, 0x0, 0x80000008}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0xd94ac76b42879f9f}, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r9, &(0x7f0000000100), 0x0, 0x726, 0x7) (async) sendmsg$AUDIT_USER(r9, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0xf8, 0x3ed, 0x100, 0x70bd2d, 0x25dfdbfe, "0f772360d4ddad4f929e412f72f34d0a818fc426dc4560f5e3d113210528151e8c464be2a6089fa5f93a02e46cca23c18f58e5eb9b3cdf38e4232fa0f1de1cf7dca2b97ad1a37f0bb784238d06080d189bd1a3c5baaf0c759cf0867f420f9470f556397d60fad1623232d5e327354da1aa67c166208341fc2b2e65917827fec5b657f45260c0fefe254a5b82abe2a68b00286b9113e1700aa4db1112d19c829b56b2996d0958f939a884af5d11ca8e218f091e948b2a9ef4dec1d628bbc7ced191418feb1aac033f8dde4f48e478dbf5420f4156bd955f1be806b92bbd7a1cfbd04b6459d6f117", ["", "", "", "", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x81}, 0xc4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xe, '\x00', r2, r9, 0x2, 0x0, 0x5}, 0x50) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000000)="09000000e700140000007e7bfbf788a8b6fa0da27f79b379f46f9900aa999900", 0x20, 0x0, &(0x7f0000000300)={0x11, 0x7, r11, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={r6, 0xb0, 0x4}, &(0x7f0000000340)=0x8) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x24, r12, 0x1, 0xfffffffe, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x24}}, 0x8000) syz_emit_ethernet(0xa5, &(0x7f0000000380)={@remote, @link_local, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@llc_tr={0x11, {@llc={0x7e, 0xfc, ';', "a4d5ced13dc0f83dafaa93d83a0b7d79e60e86b42179c0a34c8c1262e4a6f55a7cdd71cde6d8fd287510c6bd8907b143de996e8bbee59bea3efb2b95e55d3056cab6ae95ae3507d26bf3694e80612b48c8632692cb261e3472cf9d8f7e68d5d51cbebf635ed59292612c164cdad87aa7b38f16dfe0e1fd79eafd39a7562a912d9f9ffca2c013a9da5cdd6f2c13fc3fa3"}}}}}, &(0x7f0000000440)={0x1, 0x3, [0xee6, 0x9e9, 0xe39, 0x416]}) setsockopt$inet_tcp_TLS_RX(r9, 0x11a, 0x2, &(0x7f0000000500)=@gcm_128={{0x303}, "dbef71eed5686d7f", "a4fbdd50a8e61411b0888beab30814f6", "d22612e1", "659391edc1825318"}, 0x28) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r13, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) 2m13.309689392s ago: executing program 0 (id=3980): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) (async) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x1, 0x20, 0x0, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty}}}}) syz_genetlink_get_family_id$l2tp(0x0, r1) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200)=0x10001, 0x12) sendfile(r4, r3, 0x0, 0xf03a0005) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000000)=0x2c, 0x4) (async) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r7, &(0x7f00000000c0), 0x9) (async) sendfile(r7, r5, 0x0, 0x10000) (async) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000280)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x10000, 'syz1\x00', @default, 0xfffffdb6, 0x2, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x4, 0x1, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x5, 0x6, 0x4, 0x6}, {0x2, 0x2, 0x73, 0xffffffff}, {0x3, 0xb, 0x80, 0x55dd}]}, 0x10) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f0004ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228ae7000fedbdf250f0000002c000180140002006d6163766c616e300000000000000000140002006e73e1f3760aabb93930000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x5) 2m13.153923906s ago: executing program 3 (id=3981): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x32600) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES64], 0x310) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r5, 0x29, 0xd0, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000006, 0x42073, 0xffffffffffffffff, 0x0) listen(r7, 0x800000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x7) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x20) listen(r9, 0x0) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES64], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x80) read(r11, &(0x7f0000000340)=""/209, 0xd1) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000600)={0x0, {{0xa, 0x4e20, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}}}, {{0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}}}, 0x108) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) 2m13.153535763s ago: executing program 0 (id=3982): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x9, 0x2, 0x4}) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x3, 0x1}, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) unshare(0x600) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netpci0\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x16, r3, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r4 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x32, &(0x7f00000006c0)=ANY=[@ANYBLOB="e90c610faca20180c2000025392cf6bbe54ccb3d4555b091020801450000240000e000006d000020000000b91d3c7400000057b6315c61fdde441672e05ce9150050fdf0c83f97fffdcf099b30"], 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x4e23, @private=0xa010101}, {0x306}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010102}, 'bond_slave_0\x00'}) socket$nl_rdma(0x10, 0x3, 0x14) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRES64=r0, @ANYRESDEC=r1, @ANYBLOB="c12512c93d9ccf5219c04d1d510842e19fc01331b3ac630729161ba03d17f09ea55fbfd6d12b1e8946ee65cbfe479315af9e8cdddcdee22fe26e2c3872620f778789e1caabb47267c83151497e383f07637f5369bb5b140879f726c061735db2ed4c04d2b4988a4be6e821ea2ddc79870489a30ff3674d1ada7acbd0836c990712370a44cb2bd047ebd7777e4b0ad367a8c8e927b0b6a05b24fad60298ad24dd5c70dcd5eba32fcc23d374c07420124ebf0bfe908ad6bd34e13268e13a"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000000c0)) r6 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r9, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmmsg$inet(r9, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x4000000) 2m12.74969493s ago: executing program 0 (id=3985): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x5, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000100)={0x6, 'ip6_vti0\x00', {}, 0x5374}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00040000009560f6d0b0c8397f00"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r4}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x10, 0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b0f, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000002700), &(0x7f0000002780)=0x80) sendmmsg$inet(r1, &(0x7f0000000700), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x70, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x840) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}], 0x1, 0x0) 2m12.737557889s ago: executing program 1 (id=3986): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000500), &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010102000000000000000002000000240002800c000280040001003a00000014000180080001007f000001080002"], 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000240)="94", 0x1) tee(r5, r7, 0x1, 0x10000000000000d) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000006910a000000000000400000000000000950000000000bfda4efaa7e20843c2fb0cc2050f4b9c0000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000100000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028005000e000900000014000300626f6e643000"/56], 0x50}}, 0x40) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r10, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r10, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x9180a87d42ee1ecc, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r9, &(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$SO_J1939_PROMISC(r11, 0x6b, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2m12.333123347s ago: executing program 2 (id=3987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, 0x0, 0x200, 0x0, 0x0, 0x3}, [@tmpl={0x84, 0x5, [{{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x2}, {{@in=@multicast2, 0x80000001, 0x2b}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x10, 0xe7, 0x7}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000b000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESOCT=0x0], 0x50) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0}, 0x4040090) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x4e24, 0x9a0d, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x124, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0xe0, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x1c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x54, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x14}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xd6f9}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_USERDATA={0x22, 0x7, 0x1, 0x0, "1a409299e5eb78999caf8a0053227477024deb4230a24094a9737c5ae6a5"}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x404, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14}}, 0x218}, 0x1, 0x0, 0x0, 0x10}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000001c00)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0x7}, 0xb, 0x2, 0x7f, 0x2, 0x23, 'syz0\x00', "641e53a490375dcecca4b7dbc86359506c8e907506837d0b3b625767532795cf", "392689aa6dc22a5711e256b8194c5cf8f3015e7e41d67e879ddc385bab98776b", [{0x200, 0xfff7, {0x0, 0xa4}}, {0xf33, 0x1373, {0x1, 0x101}}, {0xd8, 0x5, {0x0, 0x5}}, {0x1, 0x2, {0x2}}, {0x8, 0x7, {0x3}}, {0x100, 0x3, {0x2, 0xff}}, {0xf, 0x9, {0x2, 0x6}}, {0x4, 0xc, {0x0, 0x4}}, {0x1, 0xafdd, {0x3, 0x3}}, {0x7, 0x95, {0x2}}, {0x8, 0x6a2, {0x3, 0x1}}, {0x320f, 0x642f, {0x1, 0x4}}, {0xd, 0x2, {0x1, 0x5}}, {0x2, 0x7, {0x2, 0x6}}, {0x5, 0x6, {0x0, 0x1}}, {0xe, 0xe79f, {0x2, 0x7a}}, {0xfff, 0xc, {0x3, 0x26}}, {0x3, 0x5, {0x3, 0x7}}, {0x5, 0x80, {0x2, 0x1ec0}}, {0x0, 0x312, {0x1}}, {0xc, 0x1, {0x0, 0x7}}, {0xc2ab, 0x200, {0x1, 0x5c}}, {0xb, 0x40, {0x1, 0x4}}, {0x8, 0x9, {0x2}}, {0x1, 0x7c69, {0x2, 0x7fff}}, {0x3, 0x8, {0x1, 0xb1825e73}}, {0x0, 0x7, {0x3, 0x7}}, {0x900, 0x8, {0x0, 0xffffff01}}, {0xa2ba, 0x1, {0x3, 0x10001}}, {0x1, 0x5, {0x3, 0x2}}, {0x0, 0x1, {0x3, 0xc}}, {0x1, 0x81, {0x3, 0x7}}, {0x1, 0x269, {0x1, 0x2}}, {0x1, 0x9, {0x0, 0x1}}, {0x126, 0x3, {0x0, 0x5}}, {0x9, 0x3, {0x2, 0x800}}, {0xfffe, 0xff, {0x0, 0x6}}, {0xc, 0x2, {0x3, 0x6}}, {0x57, 0xb1, {0x2, 0xfffffffd}}, {0xfaa, 0x2, {0x3, 0x9}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000040) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x8c4}, 0x24000000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000580)={0x0, 0x39, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x4049000) 2m12.225203601s ago: executing program 3 (id=3989): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) (async, rerun: 32) r4 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) unshare(0x22020600) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r5, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0xfffffffffffffffd}}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmmsg$sock(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@phonet={0x23, 0x4, 0xce, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000680)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x18}}], 0x2, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r7, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200028bd7000fddbdf25420000000800383b", @ANYRES32=r8, @ANYRESDEC=r6], 0x34}, 0x1, 0x0, 0x0, 0x2000c011}, 0x40000081) (async) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x4000, 0xd8e0}) (async) splice(r0, 0x0, r3, 0x0, 0x1100000000f336, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c200000050a245d5cde0080045000028000000000002907800000000ffffffff110090780000000001010000000000000000000014752d50336cde3f3cc3e0506f7d85bc8969d68bd93c76d10889a855db8e8b53c670d4b0091173e63d3db38c466962e32bf2b59ba6b9965890b3125b823e77afbcfef6f9eb47b5b615b38d9b0ef56073defe0f0f75a6fe467afe1d3bca718d00bf36ca26a49ad98e5fb68b48b642b31492281da757f6518d105476425d7fa4b1cdeb957b2280cb7c1539810f4d5d9680c9b0a898548b190db2a6ee8db2de62d023768c6d87adb1cd0193d8abf4eed9c35955ba0194"], 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r13, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x439, 0x70bd29, 0x25dffbfb, {0x0, 0x0, 0x0, r14, 0x9801}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x3}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) (async) sendto$packet(r11, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r14, 0x1, 0x0, 0x6, @local}, 0x14) (async) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x802, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0xdca}}) 2m12.133578834s ago: executing program 1 (id=3990): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000e00000006001600090000000500120001000000060011000080000008000b0001000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000000008006001600060000000500120001000000060011000900000008000b00070000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000100000006001600080000000500120001000000060011000500000008000b00080000000e0001006e657464657673696d2b"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8801, 0x31863}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x38, r6, 0x1, 0x70bd2b, 0xfffffffd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x10}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4840}, 0x40000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0003000000009fe649551602c8e500"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r7, 0x58, &(0x7f0000000180)}, 0x10) 2m12.132910402s ago: executing program 2 (id=3991): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)={0x40002004}) r4 = accept4(r2, 0x0, 0x0, 0x800) splice(r4, 0x0, r1, 0x0, 0x9, 0x1200000000000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000300000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000797a30000000000900030073797a320000000008000a4000000003280004800800024000000012080001400000000014000300776c616e300000000000000000000000140000001100010000000000000000000000000a00"/164], 0xa4}}, 0x0) 2m11.949441303s ago: executing program 1 (id=3993): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000008c0)=""/182, &(0x7f0000000340)=0xb6) unshare(0x6a040000) socket$packet(0x11, 0x2, 0x300) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14) sendmsg(0xffffffffffffffff, 0x0, 0x844) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) getsockname$packet(r3, 0x0, 0x0) connect$rose(r3, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x7, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000180), &(0x7f0000000340)=r6}, 0x20) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 2m11.809765411s ago: executing program 3 (id=3995): socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500000000000300000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, @in6={0xa, 0x4e24, 0x1f, @empty, 0x7}, @in6={0xa, 0x4e20, 0xc, @loopback, 0x1}, @in={0x2, 0x4e20, @remote}]}, &(0x7f0000000180)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0xb7, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 64) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) epoll_create1(0x0) (async) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x0, {0xa, 0x4e21, 0x5, @private1, 0x3}}}, 0x32) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000008c0)={r5, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_buf(r7, 0x1, 0x4a, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000580)={r6, 0xb0, "f3663f226195d6a79015bb7b7734e7b5cd0fc5ae73f19549a5265d3f7c2a59f3fb838ee4d0db19a76405a931228efc4b93af18c6e336e5a45f297f041dd5ede1bdfe7bc61efad3ea56471ee3dad245d2d70ee8205fc9d7f6587693b9feac0f83e9d3fd5512fdb2fe2946983477dc88dcc14f570e427ecdf20f78715deb4abf1f0a99766f9cc11615a9eabcb77f2c56270cae48f1f9ab9b4bc26c1d1e1db331e246a97c555caf9d90a9d4c53d954970d3"}, &(0x7f0000000000)=0xb8) 2m11.69604392s ago: executing program 2 (id=3997): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) unshare(0x600) (async) unshare(0x600) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x1}}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x1}}) socket(0x11, 0x80000, 0x4) (async) r3 = socket(0x11, 0x80000, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008"], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) (async) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002fc0)={0x0, 0x0, 0x0}, &(0x7f0000003000)=0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='ext4_fc_commit_stop\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) r9 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r9, r8, 0x0, 0xf, &(0x7f00000001c0)='\x00'}, 0x11) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000003040)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000003140)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003180), &(0x7f00000031c0)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003180)={0x0, 0x0, 0x0}, &(0x7f00000031c0)=0xc) sendmsg$netlink(r3, &(0x7f0000003280)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc, &(0x7f0000002d80)=[{&(0x7f0000000340)={0xfc, 0x1f, 0x400, 0x70bd29, 0x25dfdbfd, "", [@nested={0x4d, 0x43, 0x0, 0x1, [@generic="ded1de1e4a889943efc6f583a0132b9726ebb1d34a3fd196b2a7dde937766cfe1c46d12aeabb4549039841226ae51ce2e3e6bd6f75f6e7ab12b9cede4a517d82453bb0d674", @nested={0x4, 0x1b}]}, @generic="46f54a5fb80a4244c49a52afd8cd3f108a9ceca7c8a8584e6eee5bcb23b685edb559d23426abb1e1986ada74257cfd9bce78e117d56684a9d691e81c1ac044b37c9c3391a7217babccf031a4b67cd6ddeb349cb7749cc06875a6757bf270567da9e64d07cb692a493614a7cadf6b1dec39b5076106d683f2aa1e8f31f0d1138403ef459bd9272f2da72351cdfcb42857aa318ad194e315f8", @typed={0x4, 0x77}]}, 0xfc}, {&(0x7f00000006c0)={0x2d0, 0x25, 0x100, 0x70bd26, 0x25dfdbfe, "", [@nested={0x8, 0x92, 0x0, 0x1, [@nested={0x4, 0x39}]}, @nested={0x14, 0x30, 0x0, 0x1, [@nested={0x4, 0x14b}, @typed={0x6, 0xcc, 0x0, 0x0, @str='&\x00'}, @nested={0x4, 0xc6}]}, @nested={0x9e, 0x11e, 0x0, 0x1, [@generic="8c63e38e9b090f31ee0637d128858a8cde0338d39ca1dd5160a1008adcc84fb54266d7de8487f8690f5c4a5f6526e54e7b965cd1e4f7ab5e5accabdf3b3c5960eee5a78f2871f6d57e6dddbcb75f3dd8db4edb3a3ce02c7c2f833bfc955afeaaab3b615f533e795c1d3079613b6bd5bae93da2af6ad7f56fd5552bfc6ddc80fddf59", @typed={0x5, 0xc, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x100, 0x0, 0x0, @str='\xbb\xbb\xbb\xbb\xbb\xbb'}, @nested={0x4, 0x1d}]}, @generic="b43c053e039bc784eb26ad2a3f76f144fdeb0e2d69950a259ef4ab2d7d4bb164112d53d95346480b5b0a805d0a8b0bb43996dd8219f6e59b27b9c1e72526b5b573cc57094f4f97532e10c6d19a79015fdae775983a72fb4d0fdd01bdb15fd0c3afcdc8ab7eecf6ef5e7c2db8d397435abc4e8a511ee618013615ce93d5a3346519ea221348bb1c", @generic="c5171ebf2b43c5f515dc263c70f8ad7b83ad7b4ce3fcdb8c703881c065c3d9", @nested={0x15c, 0x44, 0x0, 0x1, [@generic="edc2c4e709f8607892f5cc228c5236c5d7e850ed064c9422801e52561cce4ad1e583c25f06f9e17944b96b327c105839b34cc21e4db4b6bc6f7c6909ca6612d373e71f4fc0d5361bcf5cf655b6d73c67217908277c6f6ce285f2cbd5cc4f152c6e3042ead6b8236153962123cfce80f14361c43b655cfe6c0185963c1b55a891dd7ef21d579776f86003a13b312ae19777e7d23d97c48fb70c3b538cded616c4043603240cf3a12ef732669773e7442bcce78e38b23b70a67ca163bf51e95288c4dd8e55a7a54f221bb4900ef33822a364dbef873a84f7058395935fa8f8a34bbfea16e22177", @generic="a0afdc41f1326b90a221623e26e3e0e5fed947df6a277a47b3ae6cfbab6187fdc92bf66b811fa3c33e2266e793d429c7473833f96ad7bdbe41f7ac3865b1bb07cf99e8b3edb3417d44de8e0ae5351ed2a4a750d90b39ca3089ca30fc096c15f94757b8e404a2f2fff016a28bbc6b901a7a07"]}]}, 0x2d0}, {&(0x7f0000000a00)={0x1680, 0x25, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0xb6, 0x0, 0x0, @u32=0x5}, @nested={0x10fc, 0x68, 0x0, 0x1, [@nested={0x4, 0x44}, @generic="80d410baa837fd7ff2c208c9e314195fcbbaee4ab91de1a5e97763838114aec1d60c2c2d5d69edf12e0674eca5c3a5ce0de9e96028025aae2768caa5d0ba3c9a49771640fc6b1c2b394a062c0002f29b573e45f3e749be0574ff8ac4b68a6cde8cef303f3fe3943fb6c28915a715a6673da20ce82964351e4123e844f5d23e8adc40597cb527aacdfcad511d1c7e1f78dbdc6eccfd7dd07a33125fdec8c9da7ded3c8b0a8e92b06ab6a083dd4a43ba8a964da469fd7da962eb79053be6eb90b4c3d71f9aec34fd86e69c9383eddb0362316b9c8535002cf60a96f7d7c34da071e33d0b92f74c6bb84e83f28c60a575af01d986b1", @generic="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"]}, @generic="a8264a5101d971e7a9d17a4ffa9ffc88423852dc1cd58ead0f3d3d2607660b4113ad9b71a93f3a719b446ace6741cc467f50d60d846277f2242aed9fc8e4c11ca7b2dbe24eae61f25b6d29d78e63ca74200722a73908d302b0bd145909cb134d5cd543adb2f9385ffcaba1125d61a93542a9bfab99bcc4445d3a97cd28a15a64c794d1d6416f9c359a8c75b204a83a5722994e072f09c61ac016d7eb634c0042f618434f7beff7de20ec7ef2725ce451ee8ccd7df58df2a154ebff36a8e4e4fcad8be7dfb12500db5481d713db3ea038b515aa2cb317d5a3fa03974506bbd55059f3d049e888c2b20838b6657d2b6207869d387a90", @nested={0xf7, 0x95, 0x0, 0x1, [@typed={0xa, 0x65, 0x0, 0x0, @str='\xbb\xbb\xbb\xbb\xbb\xbb'}, @nested={0x4, 0x1f}, @typed={0x85, 0x3e, 0x0, 0x0, @binary="b94c0ec9c8de36a2d7172b0f5dce37db5e1db981fe36c0a50bc5e5e9cc3320005a6025220cb584ffbe733789640c90d4f7c4394c618259e2aea4d7d6caa7c5bab0ca91f0076e99b60ab1c561e9dab40ddfd475e6478d7d8d8954e1ac5315ac3a4937ad93f4282f110ea1eb5c747475b85b5f15890b98152422604c22a52bfd365c"}, @typed={0x4, 0x12e}, @generic="c0e904459cfd51f389833848ec53bb9ccc5f92a5dea31711d2b9626105f7bbc87c4171f745dfa19b546406469d8b5093e5aa9044d20ad41bcdd33aeb7a4d9b0bfc32901976f0d2ba135a46d64e9924", @nested={0x4, 0x52}, @nested={0x4, 0xa0}]}, @nested={0x24, 0xed, 0x0, 0x1, [@typed={0x8, 0x147, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0x94}, @typed={0x14, 0x4b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}}]}, @typed={0x8, 0xeb, 0x0, 0x0, @fd=r3}, @generic="52e9fd0c8ce6667eb57dd7f431b92b6d2bee61a9507eb520b828c1f857bb22789995fc1057bc0f0ae74c59feae6acf1d901c28933eadc4ebfdf4834ef9eeafed1a4c055904edb55b290d65a9d358f3b6167a6f0fc7d641e89dcefb62fc62a64632939d492fd204b09818d7632cbb473907dfa5a490a3d1a12c5654f1f4759f8037c435a36b365064a610aabd96f390d24dcb341122b5da722bbbf77b2403765a41c147e1d83b64403a7988f20d4b0ed3cfee06bc07cd59a8ebec9d9dca181d845e2aeb3c5abcb7177981584d952775d002a609", @typed={0x8, 0xad, 0x0, 0x0, @pid}, @typed={0x4, 0x7}, @nested={0x271, 0xd8, 0x0, 0x1, [@generic="661860cbdd6b3753ec822b2dd4a34a1a56ae45b45755ee1f4117f9a4074c7f62d17debe15e3486dd408756989af05d3579c8c58fe60acd3638cedbad6514edcd8b0f4644e0a22726d0b956b3d4fccfeaf4f524f5df18176e3442cd6b235a4484ad1dcf662b574f43a9b5bbf26cddd5f7c2c62c", @generic="794f892fbcafbf3b04b919af6ab75178b53e171bca7d6d21e950f45cae0c3b8af9e539bcaf6c19", @nested={0x4, 0x98}, @typed={0x8, 0xe3, 0x0, 0x0, @fd=r1}, @typed={0x14, 0xd8, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @typed={0x5, 0x122, 0x0, 0x0, @str='\x00'}, @generic="3249ecd07a435de7ac5786a1576bb34f63ae8ecab5fdbbba8a1a704672a8eda56752eec6cbcba2a25826ef77b1d95f6069b6ed85bc7241b53c9eb6812d8cf14f9dcf40cef7197fd448cce797cb4b9f90f0eb1351f8ad211b45337bb00a4917fddd7e88c73e58fc", @generic="a6392894fbe789279063845db2e04958726f3da1c59ea40b40b0e089b55173aaa2ccd349d09aa26ebcccccaac33aced6f72723af0b66214f51ef7d349106cdae7939a7d6e31ea7bfd9d8537ab27d05ad5e3a9f72a4ed04351782c625d7065085bc72e45d52d8f0d32adc28ac2e9bba907bbd4ea15e6708335beb1574522e", @generic="b56a06d6e026f6058a46380cefaef06bc659228533902f835456fb28d35cef19561cc2dd223a7f1421e19cf93759d8137e1d7c6e2aa9a570", @generic="3920fbc593f83880f4fc793641f482d399fc4a44128c157cf27ce4c8e0d9c1172ff9cdb6200ecec2b36620a0764a4064783c4fedf1c131a4be7b63a646ca37649f17ee98cf8073c1dc2970cf22383638a18a11cf7943baa5d83cfe7db6fa04f7c3cb401435dea6918d48c9d2e0e3fbfbdf64962702f7baf38ae7934675084c2f7c4025af352bae00ef92bcbae941"]}]}, 0x1680}, {&(0x7f0000000540)={0xa8, 0x1f, 0x60d, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x8, 0x119, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0xc, 0x74, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x145, 0x0, 0x0, @pid}, @generic="3b6eebe41bc4b87ade3e6ff1f870b555d552c83fd8cc6d14d16ce3225ed9e95da0e05d11bcac419ca98cea3a037b6fcb440f780179154cf8602ae5af0d70f08e9d4c2494d68f492ce5f3222af171fcc7f31e2a315edf42286167437b5e95ee04d8dafab000462a1d190541f2eb03736c45ad006af695636b97"]}, 0xa8}, {&(0x7f0000002080)={0x140, 0x3f, 0x400, 0x70bd28, 0x25dfdbfb, "", [@nested={0x119, 0x69, 0x0, 0x1, [@generic="c598", @typed={0x14, 0x124, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="028d77cc12391d", @typed={0xeb, 0x5f, 0x0, 0x0, @binary="28236248de8318f86c6474ea1d6d521304c7d48d783612d936c575ad09ba417e5768b79fe1561f853ed5169063ca15ad400b3ddc0f00a1daed6dfc82c1a5a8d7297b60d81359d94547a34de38629a704c7f0788d3773eab192da27e82022698f8e4e7c82066321dd1d19be58d16af4186c671acf320fd5836465c42e528c87d5a5fda754adc69b0f9dc79ac71d8a00131aefc45618c21d5de07abd5318c29dd4253ec38d5ca70f95e909d3c4c58a9c3e7bb68a0564251efd00cb8d54e13d75b61f16223ff07201d5e8211971d0d35584385a4420d40252ee6f9c347db8603cd3009b51b65063f0"}, @nested={0x4, 0x89}, @nested={0x4, 0x54}, @nested={0x4, 0x70}]}, @typed={0x14, 0x115, 0x0, 0x0, @ipv6=@loopback}]}, 0x140}, {&(0x7f00000021c0)={0x230, 0x3c, 0x1, 0x70bd28, 0x25dfdbff, "", [@generic="2ae314e4e1d78670116562933681496480a36e00f5414a3734e5a5a4ee68414486a49260c05f1cc1d9bcf102f04d68906878217424e9f39060fe9e9dc1dc2bb66296785a7999d692bd1f340b70540afebea88dfb72b9c0c15fcf8b050b019538501cf3dcc953f2bc326ae92e007f3f54a7b1b8a2fbe5e1eb04290633f9d0ed844290099a143ff4cbd6fec55004ad0d3b7de27f899a4af6a56c6cd6662400da931539c3f180b6973a86493569966ace322282913b368301e27cd369693231af1903f2034d0fad38f8b281f73d5b87385a2164deb6a69c1674470727b1231428", @nested={0x135, 0x44, 0x0, 0x1, [@typed={0x4, 0x17}, @nested={0x4, 0x6d}, @typed={0x8, 0x134, 0x0, 0x0, @u32=0xf35}, @typed={0x8, 0x68, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0xe1}, @generic="34aa390fceca39b5c3159923b99fcc8da19372b61e23db97f2bc1a2cab259a85d7b2a1bec10ff9dd508cbf64516524ee1a99d5b9a9d14caf4e79be79c3f7a4b9cb80f3a5559ac1dba72775c91a4830496264f1674ae350138e4555ad8421067c5ac4fee5d348b46a723c8d0a69542f97f24a523207e503eb9aa1b09f3ad60c6f7aee524867934a11", @generic="e520666175478f3e23e3ff533b0573de8d8e42c8c5373e5dd89ff53d26158c3c5eda95d6bdbe5665ba09fd99442e99e3ba776776c8ddce0e9a57ac4cdcf07662d68c52c183d609497e62d5", @generic="e40233bd2e6d716b8fbb1e8b993a392fb7c2af4656af27d26765d7d701d142b34ee51b5bab630270338af52aa852", @typed={0x14, 0xa2, 0x0, 0x0, @ipv6=@remote}]}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@private=0xa010102}]}, 0x230}, {&(0x7f0000002400)={0xc4, 0x11, 0x4, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x6f, 0x121, 0x0, 0x1, [@generic="0fa0963e3f3224dac3628f050cc07cc9f0dccd08febbdd0e17e432f1449dbe6830e41b05dc0eef59511ade3812e69924eabda47c032afe2bac583b7667128966cfd303871b4b42604bb84457dccf40c04803e828a382bd910d3c2328a4a24b62936fbbe874e0cc632ac23b"]}, @generic="d3a7acf71d0d0263184304ed161a0f12f9f311c3d6c26552dcb2e794078e0d31d60580cddba5691d10b25be6207294501ba166edf2c69b1a6e8d88fa16f9569a70c859c8"]}, 0xc4}, {&(0x7f0000002500)={0x184, 0x26, 0x10, 0x70bd2d, 0x25dfdbfe, "", [@generic="b5be26cf803c303fe58a4682e6a0b9a018d854193273b46a80b7858d5e4b023c067c196fe917ba56c815f7400c8b6bb3b40bb0e2fbac3f05325a360accd3b74c7a81b3e0", @generic="e31c88f3a383928fafd6a541eb21ee4b2895368029cb28892e0ac3af84c13513e264819b21bdf57f1f52aed63843b9b1db98ee4cb865aea7", @typed={0xe, 0xb9, 0x0, 0x0, @binary="2f1fdc818ff3106bdc0e"}, @nested={0x1d, 0x30, 0x0, 0x1, [@generic="981488e30d7eb86798fb55ab7fd74eff3f3c5af8195972381d"]}, @typed={0x96, 0x18, 0x0, 0x0, @binary="13e4c7f5b0a7990d36ffd0aff6363caab11d00d5778a213f45933a55e82fd09122e049a38ef3204654c245ec7034b37bfee2087e60aa89265fe10c6593a25d6344eb866341576108b0f3f2ef2be0f6a9b9071f77f0da255be5c29986dc63e88fce7e8c3130246ba88aaa1c89d8b87d08f219aa430a9e4ea79bd4c8c916161779502d4d66c91ba0b219cfd7122d15efc4797b"}, @generic="64bf7b57f97c2798f17707a9685ae913b50a31333f06f2e2379abc05faf4bf61aec95172d72d7edc3f720ae1b8"]}, 0x184}, {&(0x7f0000002740)={0x610, 0x15, 0x400, 0x70bd29, 0x25dfdbfe, "", [@nested={0x138, 0xd, 0x0, 0x1, [@nested={0x4, 0x10a}, @typed={0x9d, 0xee, 0x0, 0x0, @binary="690ae8cd9c817b8f5405d4e708c906242120ea1d554ae56fc96e8b976a16080ddcdf3bf5a58794178967e102df4cde9485f88da77c0a3a5667bb39fe340a76e151bebb65f4b2183490b712e5607e03cd62fc39bf2878d39c000f935519d3bd45d476ac00ebf11fb2803262e0a5a8facbd7b6d4049a88b78aa18efe7bd1e056c7f11880ee3dcf4cb2cdaa3cba08ef734495e30b8d989cdde258"}, @generic="7d1994800840d045e1cf4033dc87da729b2d7e83c2d84401cd0bd3462a7f127e4eeb4fc8b5dcf06ba1b3fbaba8e1fa51948cec8b9599b29b5c9d6aebd7a009589cdeca0b04d076f8e69fdba28bcd814690942ef4441a9d3dd01fe753c881cd9d37b39703675a2aa38a42a7feaa389b545deb1d0e10748cde02a54a8dde1628a688b3143056fa645f6d5f67489aae76e8"]}, @typed={0x8, 0x110, 0x0, 0x0, @fd}, @nested={0x90, 0xa6, 0x0, 0x1, [@generic="c77e6da0c4be19204f1c592ff391e79458ade15935aed26db005ca92c384da46a9ee36212b36b3ecd61a91b036cada157b44c724e1dc79cf8dff322f4ddf38d06f792b78642e2dbe323edf186b345ecbf82463eea14cd0d448e1424f5ab5979d91845a2e9cb5077b551d96c517a9f1275faea82e80cfacea94acfea8870498f92e596704", @typed={0x8, 0x62, 0x0, 0x0, @u32}]}, @generic="6583d44492f2aad6fddab862f6d51fb26673bd983d974f2e2e534702532659bb640538f4b892f726bcd86cdbb47e2c2915dbc667ccd61ef898452c65894813a423569aee76f9855f95dba6da6a0afeb8b6dc0c5158cf8564d7fba27bcccd850773da2a2f7a535f4ecfe258870fdf0939270592d36d941aef1b54131ef43724233617b2087e76022c3ea47841f84870e09ad161ba829f94beb642bf1aced8fade8fca50d3a322c1d15f384335098c333da62e31f78cd56ddd9098bfe5d0189e5e1b38965a04b8", @generic="3e4de0689dfa160ca0890e49926f4c4d4e353add36c23ebfe381a7fb644930e50a703ae8107ddfff4ff6b0791d9637503658eaa6371ab2339fe063ed7f4e43132d2520950949fd56e29c68c49a337a1bdfa9f896d25dfa2501a13b1b006f932ffb5e1b487ea66c39b2f187bd6d6ee7925d8c68875d60267aa967b2f2626fd194f5e3975060e91dfdbf3464fa7acafb577c7b817df5d780fe46703b469dea23a1a81b89ce954f53a5aa8dc232e1ad8af25924ff85ba17a58d84f0afe17d09a7ce1dfa", @nested={0x1fe, 0x108, 0x0, 0x1, [@generic="ab04df8a93f7e7c9bb959a63deb952dd5fe22d8f2d9441c469b4804b08193d1bd7e9a2099cfea0656eb3f876fa76329ca9b80f022a4792ef03cdee07e511828a95abfee5332fbe9be6e632fd80b49b82013b0b556fe7f8099af8fcecc3892b0c5fdafd3a1b40cabf38206629a495fb667ef58a28854f86e6916ad888506ef090e4026d02d858a4b2ee802eec", @typed={0x8, 0x42, 0x0, 0x0, @fd=r2}, @generic="c42fef62dbe6f3c746262e71d1ac1fe02471f372d2c6097b491ebb71fa8b59689a98ba9dff29933052274ea0d103c756a450c7d50fdf71569ca83df4bcdeaed295cb1876e9aa6eb02750b458de9f46542a0869635f35d97eb1e32c8054ebbd85ff75a2edfa8383a6bf7871a363ad41c1bd34064232866ee9884badc3d60ced6ae943914e7fdaaffa1435071cee992ed4ab57e820735ff98113d525a5f742208d90e99187b0c8ad46274e7daaa20b4c650a124f2702d6a4465614ca8ffca068d1913e6add421c09e44f4e76c3596d9c1fad95e9635094e38a6e58e7f9f030ad3c978225932564c5a3c7e3", @generic="ec6f91d52b302fdec46b0bfcee64443bfdc9c05c6b161e655d3835d86b575825bf246534f415fad216ce044426267e6782253d775bc229cbbc6d4195fc515b525d78d9b7deabe8c220bf9c794f7e313d39c862891f6ba77f087544b396ce3f95f8faae4128fb14d504f3ec57938a6749665cb4c3129ac7efc8bc37df"]}, @typed={0x96, 0x13, 0x0, 0x0, @binary="d4e48fdc7531d8c8a8bc8bb98c82beb30364c10949f33411528b550ce4396a09a9454a68dbb2aab1cb0f813549414473e4b399b863a996a7249d9638b7af810d74809574173c756a4421d5719efb2be161373e3ddd85249604478ae41bcac06fab37789112e077dab9a439ebb0c04cf29e80880fbd56ade9a6a7b2c91ecf4c3467f0eb59d36e8c6bf355a257b5c5dbdca99e"}, @typed={0x8, 0xd9, 0x0, 0x0, @pid}, @typed={0x8, 0x66, 0x0, 0x0, @pid}]}, 0x610}], 0x9, &(0x7f0000003200)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x60, 0x8804}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r14, 0xc0c89425, &(0x7f0000000200)={"836a437cd847a1f44166d99f9749755c", 0x0, 0x0, {0x8, 0x6}, {0x9, 0x10}, 0x6, [0xc, 0x5, 0x0, 0x3, 0xcb8c, 0x4, 0x55, 0x7f, 0x719, 0x80000001, 0x81, 0x5, 0x2, 0x1ff]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r14, 0xc0c89425, &(0x7f0000000200)={"836a437cd847a1f44166d99f9749755c", 0x0, 0x0, {0x8, 0x6}, {0x9, 0x10}, 0x6, [0xc, 0x5, 0x0, 0x3, 0xcb8c, 0x4, 0x55, 0x7f, 0x719, 0x80000001, 0x81, 0x5, 0x2, 0x1ff]}) ioctl$BTRFS_IOC_WAIT_SYNC(r13, 0x40089416, &(0x7f0000000080)=r15) 2m11.319929518s ago: executing program 2 (id=3999): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) (async) write$tun(0xffffffffffffffff, 0x0, 0x3e) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xedc}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) writev(r3, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="e8", 0x1}], 0x1}}], 0x1, 0x40800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000100)=0xe71, 0x4) shutdown(r3, 0x1) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300030b0000000007000000000000010009000000030003000600000000000200000000000000000000000000000002000100000000000000ff0da89873705c00000000030005000000000002000000ac0fe1e3c48114000000000000000000"], 0x58}, 0x1, 0x7}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x77}, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}], 0x2c) (async) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0xfe0d, 0x0}, 0x40000102) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe4}}, 0x20000010) (async, rerun: 64) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40804) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) 1m55.780076324s ago: executing program 32 (id=3985): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x5, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000100)={0x6, 'ip6_vti0\x00', {}, 0x5374}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00040000009560f6d0b0c8397f00"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r4}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x10, 0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b0f, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000002700), &(0x7f0000002780)=0x80) sendmmsg$inet(r1, &(0x7f0000000700), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x70, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x840) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}], 0x1, 0x0) 1m52.791298066s ago: executing program 33 (id=3993): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000008c0)=""/182, &(0x7f0000000340)=0xb6) unshare(0x6a040000) socket$packet(0x11, 0x2, 0x300) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14) sendmsg(0xffffffffffffffff, 0x0, 0x844) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) getsockname$packet(r3, 0x0, 0x0) connect$rose(r3, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x7, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000180), &(0x7f0000000340)=r6}, 0x20) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 1m51.251490994s ago: executing program 34 (id=3999): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) (async) write$tun(0xffffffffffffffff, 0x0, 0x3e) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xedc}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) writev(r3, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="e8", 0x1}], 0x1}}], 0x1, 0x40800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000100)=0xe71, 0x4) shutdown(r3, 0x1) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300030b0000000007000000000000010009000000030003000600000000000200000000000000000000000000000002000100000000000000ff0da89873705c00000000030005000000000002000000ac0fe1e3c48114000000000000000000"], 0x58}, 0x1, 0x7}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x77}, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}], 0x2c) (async) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0xfe0d, 0x0}, 0x40000102) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe4}}, 0x20000010) (async, rerun: 64) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40804) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) 1m49.929731166s ago: executing program 35 (id=3995): socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500000000000300000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, @in6={0xa, 0x4e24, 0x1f, @empty, 0x7}, @in6={0xa, 0x4e20, 0xc, @loopback, 0x1}, @in={0x2, 0x4e20, @remote}]}, &(0x7f0000000180)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0xb7, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 64) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) epoll_create1(0x0) (async) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x0, {0xa, 0x4e21, 0x5, @private1, 0x3}}}, 0x32) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000008c0)={r5, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_buf(r7, 0x1, 0x4a, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000580)={r6, 0xb0, "f3663f226195d6a79015bb7b7734e7b5cd0fc5ae73f19549a5265d3f7c2a59f3fb838ee4d0db19a76405a931228efc4b93af18c6e336e5a45f297f041dd5ede1bdfe7bc61efad3ea56471ee3dad245d2d70ee8205fc9d7f6587693b9feac0f83e9d3fd5512fdb2fe2946983477dc88dcc14f570e427ecdf20f78715deb4abf1f0a99766f9cc11615a9eabcb77f2c56270cae48f1f9ab9b4bc26c1d1e1db331e246a97c555caf9d90a9d4c53d954970d3"}, &(0x7f0000000000)=0xb8) 1m12.069719014s ago: executing program 4 (id=4009): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="d64d8e5f6b8b2b426005fff641e9729d1ea7b9cfdca343113f6d9cbadb5e68b168e6e4c6d18c44c6a93ce912ec493fb42ad08b6f4c5ebfd1209ee6e4ab47f4514fe6e2056090b83d2cfa1088f152b2d999d6f4899ec20f3b41a91420c95e875dc32f48cb6774d7ca042e5f0ab5b674c312e9a4c5b8f1f42aca937e4ceed22b4bc23941b5a1807bc62b2414d7e8cba505e35dafc21ed1654987cb97ed679f7316bccb2363ed161c361d5e4cd24bd5ac461f0e5eeddb12529b1e79284b9690efa2bf28fcd7adee8a77ec6f0db3341e0fe80a27aaed07134b66ca10b971606fc2ecae1fdb3d648482d2ccf3b8f6e0f41ace25b8faf6425f", 0xf6}, {&(0x7f0000000140)="789a3c6e85a3d85738d2ac51ff0eff731dfd369118f80810d4dd9c1ba8b59220074ee1443e1f8315c3e35852bbb9542ee95d893044f5d96ecb23a27a15f0125a0a280fef90042b9b6e0b66dd9435bead49fbecdc3b18ac5700005989ef79e4fa6f8f1bc966138d4db47c5410f497ea21a76bb6c1e7ccf5297c53fbe7512fd9c7503d2277cafc8bb46b5aee3964e139b9d8cc750d8f1659e7c1fb9e377d6a4c895bc8ef3dc5781ba9357968725deb3b7cb3d093aa5db9fcc8c0c1cd1e1b", 0xbd}, {&(0x7f0000000200)="2a54c6b021482b33c2f4cf2b8e59ee1b174c9eda9baa586713b3271d619405006c714f399baf", 0x26}, {&(0x7f0000000240)="753d79d32d9c5613c33e9b0f071f2269cf8ae570a802a9f6ba9000ecebaa835c8c4b47d85d3922548b0444225365c078347c795f07f6600e2d5e40fdf6b545fb10154335b535ff3b7416f0c5fc6a31c4a6b946b31a8ed03fb7d3fbda7a14db01a933e62a5c70fc84ba541b62f1a48db638b636260d166dd7d9d1104231effae55f6be5b432d9e9f965d1053c043234068459f75306d657be614615299934dc0e4225882b18d916b0632a6bb67f265c3f", 0xb0}, {&(0x7f0000000300)="f83501d8a0bd77bd01e06540c9c65c2eefba964699e3ba41f09f12f29ebf182a81982ce590d39af231bb7d2c118c2942f6e59e5086350a7c24e55a14d887adc120b823829a633a7006e76d92", 0x4c}, {&(0x7f0000000380)="a89828bf2a14445a1adea092c4c873930ede1cb567ed002bde0e26c4ea45ccbda101a6c661f5c90666ac330ab9e24a675d99747cb34aa0229533c4128dbc4fe26a03d6f3666ec1617c50e601ddefe817288f9c7f46", 0x55}, {&(0x7f0000000400)="85b3b1aa8a0c010b3dc886e682883697c715a8a0ccd6f7ec92758719e897c028d9bf3a49dd5f6389b5442680336b0e6bea094b41c4d7827a149a4653e137daaa1025bf19f5185fd614b1a834c0b447928b0b03080000b1bd3b793e73e33ebf52bb70e21a9467a6b83b81b7e24bd38d99b2d6ae376540234f4ba7d4b506d6b5ad21557decc76ff2d00cc16bbad351469581be27e5f9800c737b72cfacee8ea8acd578b099c66fc6c011a35a72fc4e0f71c9865fce2e8d4601d212e4b11bf204821f93fa4ac83e31e6f0f91998683881aa89970bee85", 0xd5}], 0x7, 0x1) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000600)={&(0x7f00000005c0)="41e46d44ff09d760d8bdfbfc2cb6ffb1522c61eb562bf39309f747e58dd2d3145a97e67be6cb", 0x26}, 0x1, 0x0, 0x0, 0x498d1}, 0xc0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'gretap0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x10, 0x1, 0x1000, 0x0, {{0x1d, 0x4, 0x0, 0x30, 0x74, 0x65, 0x0, 0x1, 0x2f, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x8, 0xbe, 0x0, 0x2, [0x2]}, @timestamp={0x44, 0x14, 0x40, 0x0, 0x5, [0xb36, 0x80000000, 0xfffffffc, 0x8]}, @ra={0x94, 0x4}, @cipso={0x86, 0xd, 0x1, [{0x5, 0x7, "544d4916fe"}]}, @timestamp={0x44, 0xc, 0xd9, 0x0, 0x0, [0x1, 0x8]}, @ssrr={0x89, 0x7, 0xcc, [@broadcast]}, @ssrr={0x89, 0x1f, 0x7f, [@dev={0xac, 0x14, 0x14, 0x29}, @broadcast, @multicast2, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010101, @private=0xa010101]}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0x62, &(0x7f0000000880)=[{}], 0x8, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000b80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)=@mpls_newroute={0x74, 0x18, 0x1, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x10, 0x20, 0x9, 0x0, 0x4, 0xff, 0x5}, [@RTA_DST={0x8, 0x1, {0x9}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0xa, 0x20, 0x5, r3}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_VIA={0x14, 0x12, {0x15, "7f5a52946f2af007a05278a321e1"}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x20, 0x2, r4}}, @RTA_VIA={0x14, 0x12, {0x8, "699eea1dd925f027526ad4e886b9"}}]}, 0x74}}, 0x841) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000bc0)={0x1, 0x3, 0x8, 0x6a40, 0x8}) (async) r5 = socket(0x25, 0x3, 0x5) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) ioctl$int_in(r0, 0x73, &(0x7f0000000d00)=0x7fff) setsockopt(r2, 0x4, 0x40, &(0x7f0000000d40), 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x3, &(0x7f0000000dc0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x81, 0x3, 0xc, 0x2, 0xffff1f02}, @ldst={0x1, 0x1, 0x1, 0xa, 0x0, 0xfffffffffffffff8}], &(0x7f0000000e00)='GPL\x00', 0x4, 0x6c, &(0x7f0000000e40)=""/108, 0x41100, 0x4, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000f00)={0x0, 0x9, 0x5, 0xfffff801}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000d80)='ext4_read_block_bitmap_load\x00', r6, 0x0, 0x100000001}, 0x18) ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0xf517, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r7, 0x50009401, &(0x7f0000001040)={{r2}, "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"}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x3c855268d3e7783b}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x1c, r10, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40850) (async) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000002180)=[{0x1, 0x0, {0x0, 0x1}, {0x1, 0xff, 0x1}, 0xfd, 0xfd}, {0x3, 0x2, {0x0, 0xff, 0x3}, {0x0, 0x1, 0x2}, 0x0, 0xfe}, {0x0, 0x3, {0x2, 0x1, 0x4}, {0x2, 0x1, 0x4}, 0x2, 0xff}, {0x0, 0x2, {0x2, 0x0, 0x2}, {0x0, 0xff}, 0xff, 0xfe}], 0x80) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x38, 0x1404, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8015}, 0x2000c015) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000002300)={0x0, 0xff, 0x0, [0x0, 0x27696a44, 0x3, 0x1, 0x9], [0x8000000000000000, 0xfff, 0xc, 0x2, 0x7, 0x7f21, 0x8, 0x40, 0x5, 0x5, 0x1, 0x5, 0x9, 0x1, 0x0, 0x2, 0x8, 0x5, 0x6, 0x5, 0x4, 0x8, 0x4, 0x8001, 0x8, 0xffffffff, 0x100000001, 0xf7, 0x832, 0xe36, 0x6, 0x4980000000000, 0x9, 0x7, 0x3, 0x0, 0x0, 0x3, 0x9, 0x81, 0x0, 0x1, 0x800, 0x7, 0x9, 0x1, 0x5880000000000000, 0x8000, 0xc00000000000, 0x7, 0x4, 0xffffffffffffffff, 0xf6a2, 0x0, 0x9, 0x5, 0x6, 0x6, 0x6, 0x1, 0x10000, 0x1, 0x5, 0x1, 0x1, 0xfb00000000000, 0x0, 0x1000, 0x83, 0x3, 0x1, 0x3, 0x3, 0x1ff, 0x400, 0x8, 0x7ff, 0x6, 0x2, 0x6, 0x62000, 0x0, 0x6, 0x1, 0x3, 0x3, 0x3, 0x5, 0x8000000000000000, 0x893, 0x3, 0x4, 0x5, 0x750, 0x10, 0x1ff, 0x3, 0x1, 0x61, 0x5, 0xdcd, 0x8, 0x0, 0xfff, 0x0, 0x7, 0x7fffffffffffffff, 0x9, 0xd, 0x200, 0xfffffffffffff000, 0x9, 0x6, 0x0, 0xf, 0x8a, 0x7fff, 0x6, 0x2, 0x6, 0xffffffffffffffff]}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000002740)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000002b40)={0x0, 0x1, 0xc2}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000002f40)={0x0, 0x3, {0xa71a, @struct={0x5, 0x7ff}, r11, 0xfffffffffffffff7, 0x0, 0x3, 0x3, 0x9, 0x421, @struct={0x7, 0x18}, 0x2, 0x9, [0x1, 0x8, 0x1, 0x7, 0x1000, 0x3]}, {0x7b92, @struct={0x9, 0xd}, r12, 0x86, 0x7, 0x1, 0x6, 0xf6, 0x2, @usage=0x9, 0x2, 0xffff8001, [0x10001, 0x1ff, 0x8, 0x7fffffff, 0x6, 0x3]}, {0xfffffffffffffff7, @usage=0x1, r13, 0x2, 0x5, 0x7, 0x4, 0x80, 0x462, @struct={0xffffffff, 0x6f}, 0x1, 0x4, [0x1ff, 0x9, 0x80, 0xe, 0x0, 0x6]}, {0x5, 0x4, 0x7}}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f00000034c0)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003480)={&(0x7f0000003380)={0x100, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40040}, 0x40080) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000003540)={0x10001, 0x18, '\x00', 0x1, &(0x7f0000003500)=[0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f0000003740)={{r2}, 0x0, 0x2, @inherit={0x98, &(0x7f0000003680)={0x1, 0xa, 0x1, 0x2, {0x0, 0x7fffffffffffffff, 0x7, 0x3ff, 0x7}, [0x2, 0x9, 0x0, 0xf, 0x7, 0x4, 0x100000001, 0x9, 0x1a, 0x4]}}, @devid=r13}) 1m1.010497213s ago: executing program 4 (id=4010): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000050000"], 0x28}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f00000000c0)="ebe3a0e90073060000000080e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e03b2052579c5084df41f536aca738f025335caf900b1a5c6871", 0x3e}, {&(0x7f00000002c0)="c9aaa55250", 0x5}, {&(0x7f0000000380)="a14683f1d43d42ad737924eea86ea553ff3f0ac4b59f590698fef20cb0c42f9265bacb24321214d61daed6cb8f271d9bb17927449ec6dbeec65de7880602c4b6b3dea3372e19dadc9f254db225875ea58e8017c30561eeaaebfb13bf43f344298e42f90c22bbba499c", 0x69}, {&(0x7f0000000600)="375041da359017a2111a8463be2be8eab58df397ea45ebc71e30923517ccd87ca912f58b0db60dd9bade", 0x2a}], 0x5}], 0x1, 0x40800) recvmsg$can_j1939(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000400)=""/205, 0xcd}], 0x2}, 0x40010160) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="5c00000013006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000000010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@deltfilter={0x48, 0x2d, 0x20, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0x6, 0x5}, {0x9}}, [@TCA_RATE={0x6, 0x5, {0x37, 0xb}}, @filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x48}}, 0x0) socket(0x80000000000000a, 0x2, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}, 0x108) close(0x3) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@deltclass={0xa4, 0x29, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff5}, {0x1, 0xfffd}, {0xffe0, 0x6}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x74, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x7fff, 0x5}}, @TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x3, 0x2}}, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x6, 0xff}}, @TCA_HFSC_FSC={0x10, 0x2, {0x721, 0x887c, 0xfffffd8c}}, @TCA_HFSC_RSC={0x10, 0x1, {0x200, 0x7, 0x3}}, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0xffffff4e, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x8b53, 0x58}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r3) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r9, 0x400, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4090) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000000b00)=ANY=[@ANYRES16=r4, @ANYRES64=r4, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f723a"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 48.485009398s ago: executing program 4 (id=4011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0xf0b, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0) splice(r3, 0x0, r2, 0x0, 0x4, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r5, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)=ANY=[@ANYBLOB="78a0af26", @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf2509000000280003800800010001000000140002006272696467655f736c6176655f3000000800030000000000"], 0x3c}}, 0x48040) 40.339115362s ago: executing program 4 (id=4012): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) close(0x3) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) shutdown(r2, 0x1) connect$pppl2tp(r0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}]}, 0x34}, 0x1, 0x0, 0x0, 0x48054}, 0xa000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000020801010000e60000e1000073797a3100000000"], 0x20}}, 0x20000000) getsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f00000003c0), &(0x7f0000002000)=0x4) 26.940082416s ago: executing program 4 (id=4013): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x20040040) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x20040040) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0xe4, 0x0, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}]}, 0xe4}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0xe4, 0x0, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}]}, 0xe4}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000012000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xb}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000008000100ac141400080005000a0101020c0016"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000008000100ac141400080005000a0101020c0016"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=ANY=[@ANYRES8=r7, @ANYRES16=r4], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 16.141216448s ago: executing program 4 (id=4014): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x224, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1f4, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x118, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xdd13}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x54, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0xcc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x20}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa44a}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xa4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x27, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4000086}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x75}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x400}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r6, 0x0, 0xf3a, 0x5) socket$igmp(0x2, 0x3, 0x2) write(r6, &(0x7f0000003300)="ac", 0x1) write(r0, 0x0, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) write$tun(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="580000000101010200000000000000000a0000000c0019800800020005010000380002802c00018014000300fe800000000000001f000000000000bb14000400fe880000000000000000000000000001060001"], 0x58}}, 0x4) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r10 = socket(0x10, 0x803, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x14) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 36 (id=4014): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x224, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1f4, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x118, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xdd13}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x54, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0xcc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x20}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa44a}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xa4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x27, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4000086}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x75}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x400}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r6, 0x0, 0xf3a, 0x5) socket$igmp(0x2, 0x3, 0x2) write(r6, &(0x7f0000003300)="ac", 0x1) write(r0, 0x0, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) write$tun(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="580000000101010200000000000000000a0000000c0019800800020005010000380002802c00018014000300fe800000000000001f000000000000bb14000400fe880000000000000000000000000001060001"], 0x58}}, 0x4) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r10 = socket(0x10, 0x803, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x14) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): vsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.206615][T17431] netlink: 'syz.0.2866': attribute type 8 has an invalid length. [ 464.216354][T17431] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2866'. [ 464.269954][T17459] tipc: Enabling of bearer rejected, already enabled [ 464.372124][T17462] tipc: Resetting bearer [ 464.817214][T17481] netlink: 'syz.1.2885': attribute type 2 has an invalid length. [ 464.851275][T17485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2887'. [ 464.874192][T17481] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2885'. [ 464.884625][T17483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2887'. [ 464.911171][T17483] vlan0: entered promiscuous mode [ 464.917793][T17483] bridge_slave_1: entered promiscuous mode [ 464.990040][T17485] vlan0: entered promiscuous mode [ 465.173805][T17481] lo speed is unknown, defaulting to 1000 [ 465.415173][T17510] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.471932][T17515] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 465.641310][T17510] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.734908][T17508] syzkaller0: entered promiscuous mode [ 465.740829][T17508] syzkaller0: entered allmulticast mode [ 466.358227][T17535] netlink: 'syz.4.2897': attribute type 1 has an invalid length. [ 466.540164][T17538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2897'. [ 466.549321][T17538] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2897'. [ 467.693950][T17535] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 467.725106][T17510] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.797463][T17541] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2898'. [ 467.859576][T17510] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.888164][T17542] netlink: 'syz.3.2898': attribute type 5 has an invalid length. [ 467.896615][T17541] netlink: 'syz.3.2898': attribute type 5 has an invalid length. [ 467.905457][T17541] netlink: 'syz.3.2898': attribute type 5 has an invalid length. [ 467.998193][T17542] netlink: 'syz.3.2898': attribute type 5 has an invalid length. [ 468.096378][T17556] netlink: 'syz.0.2902': attribute type 23 has an invalid length. [ 468.252648][ T6879] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.296807][ T6879] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.410765][ T6867] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.457718][ T6879] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.811608][T17586] __nla_validate_parse: 9 callbacks suppressed [ 468.811630][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2911'. [ 468.839405][T17592] batadv_slave_1: entered promiscuous mode [ 468.884270][T17588] lo speed is unknown, defaulting to 1000 [ 469.254322][T17592] bond0 (unregistering): (slave team0): Releasing backup interface [ 469.263116][T17592] team0: left promiscuous mode [ 469.268296][T17592] bridge0: left promiscuous mode [ 469.281385][T17592] bond0 (unregistering): Released all slaves [ 469.299404][T17596] lo speed is unknown, defaulting to 1000 [ 469.315303][T17603] xfrm0: entered allmulticast mode [ 469.353483][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2915'. [ 469.712893][T17589] batadv_slave_1: left promiscuous mode [ 469.923120][T17618] netlink: 'syz.2.2919': attribute type 10 has an invalid length. [ 469.965922][T17618] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2919'. [ 469.991672][T17618] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 470.032087][T17623] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 470.453880][T17629] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2924'. [ 470.821547][T17640] lo speed is unknown, defaulting to 1000 [ 471.406953][T17653] sch_tbf: burst 19872 is lower than device lo mtu (61420) ! [ 471.428758][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 471.443572][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 471.449280][T17657] xt_TCPMSS: Only works on TCP SYN packets [ 471.459964][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 471.469065][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 471.477759][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 471.557028][T17651] siw: device registration error -23 [ 471.558055][T17654] lo speed is unknown, defaulting to 1000 [ 471.711313][ T6879] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.746216][ T6879] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.777932][ T6879] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 472.160522][ T6879] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.196045][ T6879] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.196131][T17666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2934'. [ 472.215937][ T6879] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 472.376489][ T6879] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.413086][ T6879] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.434168][ T6879] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 472.561975][ T6879] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.575459][ T6879] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.589531][ T6879] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 473.154420][ T6879] veth3: left allmulticast mode [ 473.174712][ T6879] veth3: left promiscuous mode [ 473.185720][ T6879] bridge1: port 1(veth3) entered disabled state [ 473.270298][ T6879] tipc: Resetting bearer [ 473.504421][T17710] unsupported nla_type 52263 [ 473.561757][T17712] x_tables: duplicate underflow at hook 1 [ 473.660000][ T6879] bond8 (unregistering): (slave geneve2): Releasing active interface [ 473.764692][ T6879] `: Port device bridge2 removed [ 473.827680][ T6879] tipc: Disabling bearer [ 474.273783][ T6879] bond2 (unregistering): (slave macvlan3): Releasing backup interface [ 474.304129][ T6879] bond0 (unregistering): Released all slaves [ 474.426632][ T6879] bond1 (unregistering): Released all slaves [ 474.546675][ T6879] bond2 (unregistering): Released all slaves [ 474.673284][ T6879] bond3 (unregistering): Released all slaves [ 474.687150][ T6879] bond4 (unregistering): Released all slaves [ 474.814339][ T6879] bond5 (unregistering): Released all slaves [ 474.828363][ T6879] bond6 (unregistering): Released all slaves [ 474.842305][ T6879] bond7 (unregistering): Released all slaves [ 474.968559][ T6879] bond8 (unregistering): Released all slaves [ 474.981866][T17697] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2941'. [ 475.006805][T17654] chnl_net:caif_netlink_parms(): no params data found [ 475.215562][ T6879] tipc: Disabling bearer [ 475.304315][ T6879] tipc: Left network mode [ 475.638802][T17654] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.648109][T17654] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.655632][T17654] bridge_slave_0: entered allmulticast mode [ 475.663684][T17654] bridge_slave_0: entered promiscuous mode [ 475.672911][T17654] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.680789][T17654] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.688927][T17654] bridge_slave_1: entered allmulticast mode [ 475.696389][T17654] bridge_slave_1: entered promiscuous mode [ 475.805645][T17654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.832404][T17654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.942641][T17654] team0: Port device team_slave_0 added [ 475.951641][T17750] tipc: Enabled bearer , priority 0 [ 475.965193][T17654] team0: Port device team_slave_1 added [ 475.975221][T17750] syzkaller0: entered promiscuous mode [ 475.981548][T17750] syzkaller0: entered allmulticast mode [ 476.066951][T17654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.074041][T17654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.102740][T17654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.123183][T17654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.130831][T17654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.158304][T17654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.186710][T17758] tipc: Resetting bearer [ 476.193788][T17758] syzkaller0: tun_net_xmit 90 [ 476.206879][T17760] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2955'. [ 476.213384][T17755] lo speed is unknown, defaulting to 1000 [ 476.216759][T17760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2955'. [ 476.233656][T17760] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2955'. [ 476.244005][T17760] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2955'. [ 476.260232][T17748] tipc: Resetting bearer [ 476.278008][T17748] tipc: Disabling bearer [ 476.422583][T17762] netlink: 'syz.1.2956': attribute type 15 has an invalid length. [ 476.431634][T17762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2956'. [ 476.466956][T17762] syzkaller0: left promiscuous mode [ 476.482501][T17762] syzkaller0: left allmulticast mode [ 476.501586][T17762] tipc: Resetting bearer [ 476.548958][T17654] hsr_slave_0: entered promiscuous mode [ 476.600022][T17654] hsr_slave_1: entered promiscuous mode [ 476.635570][T17654] debugfs: 'hsr0' already exists in 'hsr' [ 476.659568][T17654] Cannot create hsr debugfs directory [ 477.048285][ T6879] hsr_slave_0: left promiscuous mode [ 477.054349][ T6879] hsr_slave_1: left promiscuous mode [ 477.061240][ T6879] batman_adv: batadv0: Removing interface: virt_wifi0 [ 477.123328][ T6879] pim6reg (unregistering): left allmulticast mode [ 478.121585][T17786] lo speed is unknown, defaulting to 1000 [ 478.439563][T17800] netlink: 'syz.0.2963': attribute type 13 has an invalid length. [ 478.455724][T17800] netlink: 'syz.0.2963': attribute type 17 has an invalid length. [ 478.629275][T17800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.665433][T17807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2964'. [ 478.684574][T17800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 478.757941][ T6879] IPVS: stop unused estimator thread 0... [ 478.764483][T17800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.854495][T17800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.868939][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2964'. [ 478.878595][T17803] lo speed is unknown, defaulting to 1000 [ 479.220187][T17654] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 479.230967][T17812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2966'. [ 479.255676][T17654] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 479.297101][T17654] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 479.319976][T17654] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 479.328862][T17816] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2967'. [ 479.675532][T17825] bond9: option broadcast_neighbor: invalid value (5) [ 479.705137][T17825] bond9 (unregistering): Released all slaves [ 479.952283][T17654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.041197][T17654] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.061058][T17830] bond0: (slave gre0): Error: Device type is different from other slaves [ 480.105381][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.113045][ T6875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.142693][T17830] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 480.163424][T17832] tipc: Enabling of bearer rejected, already enabled [ 480.195161][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.202419][ T6858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.230022][T17832] syzkaller0: entered promiscuous mode [ 480.236596][T17832] syzkaller0: entered allmulticast mode [ 480.242735][T17832] tipc: Resetting bearer [ 480.309410][T17832] tipc: Resetting bearer [ 481.039985][T17654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.339131][T17877] __nla_validate_parse: 2 callbacks suppressed [ 481.339153][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2981'. [ 481.779749][T17654] veth0_vlan: entered promiscuous mode [ 481.856758][T17654] veth1_vlan: entered promiscuous mode [ 481.943413][T17893] lo speed is unknown, defaulting to 1000 [ 481.949519][T17654] veth0_macvtap: entered promiscuous mode [ 481.978597][T17654] veth1_macvtap: entered promiscuous mode [ 482.137423][T17654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.165039][T17654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.194258][ T6875] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.205669][ T6875] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.228576][ T6875] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.254842][ T6875] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.275620][T17907] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2989'. [ 482.296427][T17912] ipt_REJECT: ECHOREPLY no longer supported. [ 482.558910][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.576603][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.679574][ T6858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.709057][ T6858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.841439][T17946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2996'. [ 482.935085][T17942] tipc: Enabled bearer , priority 0 [ 482.944565][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2996'. [ 482.976521][T17937] syzkaller0: entered promiscuous mode [ 482.982074][T17937] syzkaller0: entered allmulticast mode [ 483.169798][T17942] tipc: Resetting bearer [ 483.189893][T17936] tipc: Resetting bearer [ 483.513857][T17936] tipc: Disabling bearer [ 483.703395][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3002'. [ 483.852936][T17972] netlink: 91 bytes leftover after parsing attributes in process `syz.1.3001'. [ 484.025136][T17976] netlink: 'syz.0.3004': attribute type 21 has an invalid length. [ 484.068305][T17976] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3004'. [ 484.223265][ T5146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 484.244034][ T5146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 484.252576][ T5146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 484.353242][ T5146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 484.375697][ T5146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 484.487113][T17984] lo speed is unknown, defaulting to 1000 [ 484.533176][T17993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3009'. [ 484.748610][T17998] team_slave_0: entered promiscuous mode [ 484.754684][T17998] team_slave_1: entered promiscuous mode [ 484.764261][T17998] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 484.772329][T17996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3010'. [ 484.805669][T18001] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 484.970699][T18003] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3012'. [ 485.351568][T17984] chnl_net:caif_netlink_parms(): no params data found [ 485.733500][T17984] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.751305][T17984] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.771625][T17984] bridge_slave_0: entered allmulticast mode [ 485.789990][T17984] bridge_slave_0: entered promiscuous mode [ 485.804220][T17984] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.812173][T17984] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.819852][T17984] bridge_slave_1: entered allmulticast mode [ 485.833747][T18039] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 485.834851][T17984] bridge_slave_1: entered promiscuous mode [ 485.967404][T17984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.981266][T17984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.029150][T18044] lo speed is unknown, defaulting to 1000 [ 486.428497][T17984] team0: Port device team_slave_0 added [ 486.479683][ T5832] Bluetooth: hci5: command tx timeout [ 486.481494][T17984] team0: Port device team_slave_1 added [ 486.488418][T18068] netlink: 'syz.0.3027': attribute type 9 has an invalid length. [ 486.507883][T18068] xt_policy: output policy not valid in PREROUTING and INPUT [ 486.542947][T18070] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 486.592881][T17984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.600390][T17984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.626778][T17984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.644721][T17984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.673784][T17984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.724883][T17984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.764528][T18065] lo speed is unknown, defaulting to 1000 [ 486.854827][T18080] __nla_validate_parse: 5 callbacks suppressed [ 486.854849][T18080] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3030'. [ 486.967397][T18084] netlink: 'syz.1.3031': attribute type 1 has an invalid length. [ 487.041237][T18088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3032'. [ 487.058549][T18084] 8021q: adding VLAN 0 to HW filter on device bond15 [ 487.107759][T18084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 487.311234][T18084] bond15 (unregistering): Released all slaves [ 487.375488][T17984] hsr_slave_0: entered promiscuous mode [ 487.383921][T17984] hsr_slave_1: entered promiscuous mode [ 487.390810][T17984] debugfs: 'hsr0' already exists in 'hsr' [ 487.406961][T17984] Cannot create hsr debugfs directory [ 487.438547][T18089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3032'. [ 487.493303][T18091] netlink: 'syz.1.3033': attribute type 2 has an invalid length. [ 487.560476][T18091] tipc: Enabling of bearer rejected, already enabled [ 487.690373][T18091] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 488.021254][T18114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'. [ 488.115512][T18116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3039'. [ 488.126706][T18118] netlink: 'syz.2.3040': attribute type 10 has an invalid length. [ 488.188625][T18114] bond15: Invalid ad_actor_system MAC address. [ 488.195143][T18114] bond15: option ad_actor_system: invalid value (7) [ 488.204547][T18114] bond15 (unregistering): Released all slaves [ 488.565853][ T5832] Bluetooth: hci5: command tx timeout [ 489.165481][T17984] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 489.208460][T17984] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 489.221358][T17984] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 489.244239][T17984] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 489.474963][T17984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.541281][T17984] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.562951][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.570201][ T6875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.624521][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.631784][ T6875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.682443][T18173] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 489.780776][T18175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3051'. [ 489.833857][T18182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3051'. [ 490.133175][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3056'. [ 490.143409][T18187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3056'. [ 490.155093][T18187] netlink: 'syz.1.3056': attribute type 11 has an invalid length. [ 490.369059][T17984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.456714][T17984] veth0_vlan: entered promiscuous mode [ 490.492679][T17984] veth1_vlan: entered promiscuous mode [ 490.555670][T17984] veth0_macvtap: entered promiscuous mode [ 490.568130][T18206] lo speed is unknown, defaulting to 1000 [ 490.580787][T17984] veth1_macvtap: entered promiscuous mode [ 490.615526][T17984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.636119][ T5146] Bluetooth: hci5: command tx timeout [ 490.643223][T17984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.664519][ T6867] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.683936][ T6867] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.704803][ T6867] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.748231][ T6867] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.822909][ T6867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.832606][ T6867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.889304][ T6858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.899141][ T6858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.109884][T18217] netlink: 'syz.3.3064': attribute type 1 has an invalid length. [ 491.647428][T18228] tipc: New replicast peer: 255.255.255.255 [ 491.654410][T18228] tipc: Enabled bearer , priority 10 [ 491.701451][T18233] netlink: 'syz.3.3069': attribute type 1 has an invalid length. [ 491.899578][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 491.910598][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 491.920504][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 491.930084][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 491.948293][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.127416][T18240] syzkaller1: entered promiscuous mode [ 492.132950][T18240] syzkaller1: entered allmulticast mode [ 492.197399][T18240] tipc: Resetting bearer [ 492.203560][T18240] tipc: Resetting bearer [ 492.225185][T18250] __nla_validate_parse: 4 callbacks suppressed [ 492.225205][T18250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3072'. [ 492.262952][T18245] lo speed is unknown, defaulting to 1000 [ 492.285582][T18237] lo speed is unknown, defaulting to 1000 [ 492.532534][T18259] netlink: 'syz.3.3075': attribute type 5 has an invalid length. [ 492.540756][T18259] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3075'. [ 492.718089][ T5146] Bluetooth: hci5: command 0x0419 tx timeout [ 492.837875][T18268] netlink: 'syz.3.3078': attribute type 2 has an invalid length. [ 492.855800][T18268] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3078'. [ 493.994104][T18237] chnl_net:caif_netlink_parms(): no params data found [ 494.076557][ T5832] Bluetooth: hci1: command tx timeout [ 494.250416][T18296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3083'. [ 494.320540][T18237] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.330034][T18237] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.337774][T18237] bridge_slave_0: entered allmulticast mode [ 494.345136][T18237] bridge_slave_0: entered promiscuous mode [ 494.353884][T18294] syzkaller0: left promiscuous mode [ 494.359358][T18294] syzkaller0: left allmulticast mode [ 494.365021][T18294] tipc: Resetting bearer [ 494.371746][T18290] lo speed is unknown, defaulting to 1000 [ 494.390729][T18237] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.396894][T18302] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3085'. [ 494.398304][T18237] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.414643][T18237] bridge_slave_1: entered allmulticast mode [ 494.422544][T18237] bridge_slave_1: entered promiscuous mode [ 494.502365][T18302] netlink: 'syz.3.3085': attribute type 10 has an invalid length. [ 494.507889][T18237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.548159][T18302] team0: Cannot enslave team device to itself [ 494.562114][T18237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.739604][T18237] team0: Port device team_slave_0 added [ 494.764106][T18237] team0: Port device team_slave_1 added [ 494.797951][ T5832] Bluetooth: hci5: command 0x0419 tx timeout [ 494.892156][T18237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.900601][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.928227][T18237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.964010][T18237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.971357][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.997976][T18237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.103339][T18322] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3090'. [ 495.113274][T18322] ip6gretap0: entered promiscuous mode [ 495.124502][T18237] hsr_slave_0: entered promiscuous mode [ 495.131248][T18237] hsr_slave_1: entered promiscuous mode [ 495.137550][T18237] debugfs: 'hsr0' already exists in 'hsr' [ 495.143314][T18237] Cannot create hsr debugfs directory [ 495.150119][T18323] lo speed is unknown, defaulting to 1000 [ 495.150139][T18322] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3090'. [ 496.157072][ T5832] Bluetooth: hci1: command tx timeout [ 496.693230][T18237] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 496.715708][T18237] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 496.770189][T18237] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 496.809326][T18237] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 496.871330][T18364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3098'. [ 496.903386][ T30] audit: type=1107 audit(1762784216.790:10): pid=18354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 497.002146][T18237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.013371][T18366] netlink: 'syz.2.3099': attribute type 2 has an invalid length. [ 497.030564][T18366] veth1_virt_wifi: entered promiscuous mode [ 497.041372][T18366] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3099'. [ 497.050776][T18366] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 497.077006][T18368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3100'. [ 497.094437][T18237] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.113696][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.121046][ T6867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.168853][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.176223][ T6875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.371363][T18376] syz_tun: entered allmulticast mode [ 497.402337][T18375] syz_tun: left allmulticast mode [ 497.713826][T18402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3108'. [ 497.811767][T18404] lo speed is unknown, defaulting to 1000 [ 497.932361][T18411] netlink: 508 bytes leftover after parsing attributes in process `syz.4.3110'. [ 498.101905][T18237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.233273][T18237] veth0_vlan: entered promiscuous mode [ 498.236994][ T5832] Bluetooth: hci1: command tx timeout [ 498.251330][T18237] veth1_vlan: entered promiscuous mode [ 498.293910][T18237] veth0_macvtap: entered promiscuous mode [ 498.307375][T18237] veth1_macvtap: entered promiscuous mode [ 498.334723][T18237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.357287][T18237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.373521][ T6875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.383420][ T6875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.393910][ T6875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.405070][ T6875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.481521][ T6879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.493227][ T6879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.532804][ T6869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.541654][ T6869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.316919][ T5832] Bluetooth: hci1: command tx timeout [ 505.745863][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3116'. [ 505.946357][T18444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.029877][T18449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.254245][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 506.276618][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 506.304774][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 506.319017][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 506.328565][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 506.393913][T18460] netlink: 624 bytes leftover after parsing attributes in process `syz.4.3123'. [ 506.407415][T18456] lo speed is unknown, defaulting to 1000 [ 506.691472][T18466] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3125'. [ 506.964371][T18471] tipc: Started in network mode [ 506.969889][T18471] tipc: Node identity ee8d13290cc4, cluster identity 4711 [ 506.982622][T18471] tipc: Enabled bearer , priority 0 [ 507.072806][T18471] syzkaller0: entered promiscuous mode [ 507.082579][T18471] syzkaller0: entered allmulticast mode [ 507.151884][T18471] tipc: Resetting bearer [ 507.169868][T18470] tipc: Resetting bearer [ 507.224055][T18470] tipc: Disabling bearer [ 507.232097][T18482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3130'. [ 507.233375][T18480] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3129'. [ 507.271930][T18480] 0ªX¹¦À: renamed from caif0 [ 507.292235][T18480] 0ªX¹¦À: entered allmulticast mode [ 507.315886][T18480] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 507.381087][T18485] netlink: 304 bytes leftover after parsing attributes in process `syz.3.3131'. [ 507.416328][T18489] netlink: 'syz.4.3133': attribute type 4 has an invalid length. [ 507.449928][T18480] 0ªX¹¦À: left allmulticast mode [ 507.455267][T18480] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 507.737464][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3135'. [ 507.764059][T18456] chnl_net:caif_netlink_parms(): no params data found [ 507.917999][T18456] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.925455][T18456] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.933990][T18456] bridge_slave_0: entered allmulticast mode [ 507.943080][T18456] bridge_slave_0: entered promiscuous mode [ 507.965144][T18513] IPVS: Error connecting to the multicast addr [ 507.974090][T18456] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.981821][T18456] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.990049][T18456] bridge_slave_1: entered allmulticast mode [ 507.998779][T18456] bridge_slave_1: entered promiscuous mode [ 508.061240][T18456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.078402][T18456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.159709][T18456] team0: Port device team_slave_0 added [ 508.171237][T18456] team0: Port device team_slave_1 added [ 508.232659][T18456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.248110][T18456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.277015][T18456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.292025][T18456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.299745][T18456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.327743][T18456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.396150][ T5832] Bluetooth: hci2: command tx timeout [ 508.444169][T18456] hsr_slave_0: entered promiscuous mode [ 508.469522][T18456] hsr_slave_1: entered promiscuous mode [ 508.505037][T18456] debugfs: 'hsr0' already exists in 'hsr' [ 508.521161][T18456] Cannot create hsr debugfs directory [ 508.589387][ T919] IPVS: starting estimator thread 0... [ 508.628793][T18526] : entered promiscuous mode [ 508.707867][T18531] IPVS: using max 24 ests per chain, 57600 per kthread [ 508.837071][T18543] netlink: 'syz.0.3147': attribute type 5 has an invalid length. [ 508.868524][T18546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3148'. [ 508.876731][T18543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3147'. [ 508.913638][T18540] lo speed is unknown, defaulting to 1000 [ 508.935037][T18546] vlan2: entered promiscuous mode [ 508.940235][T18546] geneve1: entered promiscuous mode [ 508.945691][T18546] vlan2: entered allmulticast mode [ 508.990713][T18546] geneve1: entered allmulticast mode [ 509.157552][T18456] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.179241][T18456] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 509.184451][T18559] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 509.211157][T18456] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 509.403320][T18456] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.425578][T18456] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 509.452006][T18456] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 509.585271][T18456] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.615894][T18456] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 509.659202][T18456] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 509.746463][T18589] netlink: 'syz.2.3157': attribute type 21 has an invalid length. [ 509.758452][T18589] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3157'. [ 509.772910][T18456] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.789889][T18456] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 509.817151][T18456] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 509.891425][T18593] team_slave_0: left promiscuous mode [ 509.902757][T18593] team_slave_1: left promiscuous mode [ 510.000897][T18595] can: request_module (can-proto-0) failed. [ 510.283058][T18593] team0 (unregistering): Port device team_slave_0 removed [ 510.298590][T18593] team0 (unregistering): Port device team_slave_1 removed [ 510.334858][T18607] ip6tnl1: entered promiscuous mode [ 510.340685][T18607] ip6tnl1: entered allmulticast mode [ 510.475954][ T5832] Bluetooth: hci2: command tx timeout [ 510.633498][T18616] lo speed is unknown, defaulting to 1000 [ 510.670325][T18614] raw_sendmsg: syz.2.3166 forgot to set AF_INET. Fix it! [ 511.052543][T18617] delete_channel: no stack [ 511.102474][T18456] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 511.149895][T18456] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 511.175649][T18456] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 511.201047][T18456] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 511.461002][T18642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3172'. [ 511.543221][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3172'. [ 511.548528][T18643] bond1: option resend_igmp: invalid value (2878) [ 511.611438][T18643] bond1: option resend_igmp: allowed values 0 - 255 [ 511.925157][T18643] bond1 (unregistering): Released all slaves [ 512.097073][T18456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.359025][T18456] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.408188][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.415800][ T6867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.472892][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.480519][ T6875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.560142][ T5832] Bluetooth: hci2: command tx timeout [ 512.749574][T18656] delete_channel: no stack [ 512.968371][T18678] netlink: 'syz.4.3180': attribute type 30 has an invalid length. [ 513.044391][T18674] netlink: 'syz.2.3179': attribute type 33 has an invalid length. [ 513.052658][T18674] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3179'. [ 513.109964][T18674] lo speed is unknown, defaulting to 1000 [ 513.122871][T18456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.232751][T18456] veth0_vlan: entered promiscuous mode [ 513.283767][T18456] veth1_vlan: entered promiscuous mode [ 513.298214][T18682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3181'. [ 513.337501][T18685] veth1_macvtap: left promiscuous mode [ 513.343334][T18685] macsec0: entered allmulticast mode [ 513.358580][T18682] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3181'. [ 513.422435][T18685] veth1_macvtap: entered promiscuous mode [ 513.437316][T18685] veth1_macvtap: entered allmulticast mode [ 513.445687][T18685] macsec0: left allmulticast mode [ 513.472596][T18685] veth1_macvtap: left allmulticast mode [ 513.536762][T18456] veth0_macvtap: entered promiscuous mode [ 513.558629][T18685] syzkaller0: entered promiscuous mode [ 513.564191][T18685] syzkaller0: entered allmulticast mode [ 513.644799][T18456] veth1_macvtap: entered promiscuous mode [ 513.674146][T18693] pim6reg1: entered promiscuous mode [ 513.693331][T18693] pim6reg1: entered allmulticast mode [ 513.764437][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3184'. [ 513.775546][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3184'. [ 513.816355][T18695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3185'. [ 513.825186][T18456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.837184][T18674] tipc: can't start tipc receive workqueue [ 513.871206][T18456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.995549][ T6858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.027164][ T6858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.096263][ T6858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.122020][T18700] lo speed is unknown, defaulting to 1000 [ 514.122061][ T6858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.355970][T18714] netlink: 'syz.3.3190': attribute type 2 has an invalid length. [ 514.408953][ T6869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.437486][ T6869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.636130][ T5832] Bluetooth: hci2: command tx timeout [ 514.649215][ T6869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.680035][ T6869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.972824][T18728] lo speed is unknown, defaulting to 1000 [ 515.984472][T18753] bridge0: entered promiscuous mode [ 515.990285][T18753] vlan2: entered promiscuous mode [ 516.132904][ T5146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 516.145044][ T5146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 516.156527][ T5146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 516.176507][ T5146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 516.184927][ T5146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 516.186855][T18754] lo speed is unknown, defaulting to 1000 [ 516.550093][T18755] lo speed is unknown, defaulting to 1000 [ 516.629382][T18768] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3205'. [ 516.677198][T18760] lo speed is unknown, defaulting to 1000 [ 517.323570][T18777] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3207'. [ 517.440014][T18783] openvswitch: netlink: Message has 4 unknown bytes. [ 517.457651][T18783] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3208'. [ 517.505564][T18777] warn_alloc: 1 callbacks suppressed [ 517.505584][T18777] syz.3.3207: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 517.529419][T18779] vlan3: entered allmulticast mode [ 517.534795][T18779] macvtap0: entered allmulticast mode [ 517.559636][T18777] CPU: 0 UID: 0 PID: 18777 Comm: syz.3.3207 Not tainted syzkaller #0 PREEMPT(full) [ 517.559665][T18777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 517.559677][T18777] Call Trace: [ 517.559686][T18777] [ 517.559695][T18777] dump_stack_lvl+0x189/0x250 [ 517.559734][T18777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.559772][T18777] ? __pfx__printk+0x10/0x10 [ 517.559794][T18777] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 517.559822][T18777] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 517.559852][T18777] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 517.559884][T18777] warn_alloc+0x214/0x310 [ 517.559914][T18777] ? stack_depot_save_flags+0x40/0x860 [ 517.559944][T18777] ? __cgroup_account_cputime+0xe5/0x120 [ 517.559971][T18777] ? __pfx_warn_alloc+0x10/0x10 [ 517.560003][T18777] ? kasan_save_track+0x3e/0x80 [ 517.560029][T18777] ? __kasan_kmalloc+0x93/0xb0 [ 517.560057][T18777] ? xsk_setsockopt+0x4dc/0x8d0 [ 517.560082][T18777] ? do_sock_setsockopt+0x17c/0x1b0 [ 517.560099][T18777] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 517.560117][T18777] ? do_syscall_64+0xfa/0xfa0 [ 517.560142][T18777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.560174][T18777] __vmalloc_node_range_noprof+0x125/0x12d0 [ 517.560240][T18777] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 517.560274][T18777] ? __kasan_kmalloc+0x93/0xb0 [ 517.560310][T18777] vmalloc_user_noprof+0xad/0xf0 [ 517.560338][T18777] ? xskq_create+0xbf/0x170 [ 517.560367][T18777] xskq_create+0xbf/0x170 [ 517.560398][T18777] xsk_init_queue+0xb0/0x110 [ 517.560429][T18777] xsk_setsockopt+0x4dc/0x8d0 [ 517.560458][T18777] ? __pfx_xsk_setsockopt+0x10/0x10 [ 517.560488][T18777] ? __pfx_aa_sk_perm+0x10/0x10 [ 517.560519][T18777] ? aa_sock_opt_perm+0xff/0x1b0 [ 517.560551][T18777] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 517.560570][T18777] ? __pfx_xsk_setsockopt+0x10/0x10 [ 517.560597][T18777] do_sock_setsockopt+0x17c/0x1b0 [ 517.560625][T18777] __x64_sys_setsockopt+0x13f/0x1b0 [ 517.560654][T18777] do_syscall_64+0xfa/0xfa0 [ 517.560683][T18777] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.560713][T18777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.560732][T18777] ? clear_bhb_loop+0x60/0xb0 [ 517.560778][T18777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.560798][T18777] RIP: 0033:0x7f327eb8f6c9 [ 517.560817][T18777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.560834][T18777] RSP: 002b:00007f327fa32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 517.560857][T18777] RAX: ffffffffffffffda RBX: 00007f327ede6090 RCX: 00007f327eb8f6c9 [ 517.560873][T18777] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 517.560885][T18777] RBP: 00007f327ec11f91 R08: 0000000000000004 R09: 0000000000000000 [ 517.560897][T18777] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.560910][T18777] R13: 00007f327ede6128 R14: 00007f327ede6090 R15: 00007ffc37855198 [ 517.560949][T18777] [ 517.560957][T18777] Mem-Info: [ 517.628688][T18779] veth0_macvtap: entered allmulticast mode [ 517.679599][T18777] active_anon:6760 inactive_anon:0 isolated_anon:0 [ 517.679599][T18777] active_file:3269 inactive_file:40053 isolated_file:0 [ 517.679599][T18777] unevictable:768 dirty:182 writeback:0 [ 517.679599][T18777] slab_reclaimable:12432 slab_unreclaimable:166292 [ 517.679599][T18777] mapped:32018 shmem:4229 pagetables:962 [ 517.679599][T18777] sec_pagetables:0 bounce:0 [ 517.679599][T18777] kernel_misc_reclaimable:0 [ 517.679599][T18777] free:1257688 free_pcp:10620 free_cma:0 [ 517.679661][T18777] Node 0 active_anon:27040kB inactive_anon:0kB active_file:13076kB inactive_file:160012kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128072kB dirty:728kB writeback:0kB shmem:15380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14356kB pagetables:3688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 517.679714][T18777] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 517.679773][T18777] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.679837][T18777] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 517.679887][T18777] Node 0 DMA32 free:1125540kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27040kB inactive_anon:0kB active_file:13076kB inactive_file:160012kB unevictable:1536kB writepending:728kB zspages:0kB present:3129332kB managed:2565132kB mlocked:0kB bounce:0kB free_pcp:24228kB local_pcp:13892kB free_cma:0kB [ 517.679950][T18777] lowmem_reserve[]: 0 0 0 0 0 [ 517.679997][T18777] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.680050][T18777] lowmem_reserve[]: 0 0 0 0 0 [ 517.680098][T18777] Node 1 Normal free:3889852kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18252kB local_pcp:6724kB free_cma:0kB [ 517.680159][T18777] lowmem_reserve[]: 0 0 0 0 0 [ 517.680206][T18777] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 518.227481][T18777] Node 0 DMA32: 3*4kB (UME) 131*8kB (UM) 291*16kB (UME) 113*32kB (ME) 38*64kB (UME) 16*128kB (M) 57*256kB (UM) 89*512kB (UME) 36*1024kB (UME) 9*2048kB (UM) 243*4096kB (UM) = 1124596kB [ 518.278556][T18777] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 518.327170][ T5832] Bluetooth: hci3: command tx timeout [ 518.373594][T18777] Node 1 Normal: 175*4kB (U) 50*8kB (UME) 35*16kB (UME) 88*32kB (UME) 21*64kB (UME) 10*128kB (UME) 7*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 0*2048kB 946*4096kB (M) = 3889852kB [ 518.434958][T18777] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 518.446564][T18777] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 518.456244][T18777] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 518.472073][T18777] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 518.483734][T18777] 47556 total pagecache pages [ 518.489184][T18777] 0 pages in swap cache [ 518.494446][T18777] Free swap = 124996kB [ 518.499098][T18777] Total swap = 124996kB [ 518.506362][T18777] 2097051 pages RAM [ 518.510208][T18777] 0 pages HighMem/MovableOnly [ 518.515302][T18777] 424126 pages reserved [ 518.519722][T18777] 0 pages cma reserved [ 518.870790][T18799] tipc: Enabling of bearer rejected, failed to enable media [ 518.876553][T18796] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3214'. [ 518.912809][T18801] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3215'. [ 519.310942][T18755] chnl_net:caif_netlink_parms(): no params data found [ 519.407448][T18812] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.415819][T18812] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.511768][T18812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.527095][T18812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.726430][ T6858] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.736694][ T6858] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.747866][ T6858] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.902520][ T6858] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.933172][T18816] lo speed is unknown, defaulting to 1000 [ 520.025537][T18824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.078271][T18820] lo speed is unknown, defaulting to 1000 [ 520.138607][T18824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.164480][T18755] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.174433][T18755] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.182191][T18755] bridge_slave_0: entered allmulticast mode [ 520.197466][T18755] bridge_slave_0: entered promiscuous mode [ 520.207442][T18755] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.214988][T18755] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.222966][T18755] bridge_slave_1: entered allmulticast mode [ 520.231609][T18755] bridge_slave_1: entered promiscuous mode [ 520.272634][T18824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.381424][T18755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.396429][ T5832] Bluetooth: hci3: command tx timeout [ 520.428287][T18824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.466214][T18755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.649100][T18755] team0: Port device team_slave_0 added [ 520.691862][T18755] team0: Port device team_slave_1 added [ 520.947660][ T6858] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.974823][T18755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.989482][T18755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.016611][T18755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.033419][T18755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.042820][T18755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.071031][T18755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.122260][ T6869] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.194490][ T6869] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.223597][T18755] hsr_slave_0: entered promiscuous mode [ 521.241073][T18755] hsr_slave_1: entered promiscuous mode [ 521.248401][T18755] debugfs: 'hsr0' already exists in 'hsr' [ 521.254166][T18755] Cannot create hsr debugfs directory [ 521.360472][ T6858] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.524372][T18841] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.610201][T18841] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.703090][T18841] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.799733][T18841] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.847733][T18755] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.952590][T18755] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.993056][T18851] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3227'. [ 522.039064][T18755] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.123858][T18755] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.229170][T18866] ipvlan0: entered allmulticast mode [ 522.239142][T18866] veth0_vlan: entered allmulticast mode [ 522.328688][T18755] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 522.353979][T18755] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 522.367579][T18755] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 522.380409][T18755] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 522.477578][ T5832] Bluetooth: hci3: command tx timeout [ 522.530730][T18755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.564846][T18755] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.579817][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.587172][ T6879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.610850][T18880] netlink: 'syz.4.3232': attribute type 4 has an invalid length. [ 522.637051][ T6856] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.644351][ T6856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.732491][T18883] syzkaller0: entered promiscuous mode [ 522.756850][T18883] syzkaller0: entered allmulticast mode [ 523.169821][T18904] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3237'. [ 523.263643][T18905] ip6_vti0 speed is unknown, defaulting to 1000 [ 523.291129][T18910] netlink: 'syz.4.3239': attribute type 10 has an invalid length. [ 523.320740][T18905] ip6_vti0 speed is unknown, defaulting to 1000 [ 523.347404][T18910] bridge0: port 3(macsec0) entered blocking state [ 523.364923][T18911] netlink: 'syz.1.3237': attribute type 83 has an invalid length. [ 523.385363][T18910] bridge0: port 3(macsec0) entered disabled state [ 523.392971][T18910] macsec0: entered allmulticast mode [ 523.417877][T18910] veth1_macvtap: entered allmulticast mode [ 523.427211][T18910] macsec0: entered promiscuous mode [ 523.433893][T18910] bridge0: port 3(macsec0) entered blocking state [ 523.440605][T18910] bridge0: port 3(macsec0) entered forwarding state [ 523.451311][T18905] ip6_vti0 speed is unknown, defaulting to 1000 [ 523.517847][T18755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.618543][T18755] veth0_vlan: entered promiscuous mode [ 523.638010][T18755] veth1_vlan: entered promiscuous mode [ 523.662682][T18914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3240'. [ 523.673829][T18914] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3240'. [ 523.691398][T18755] veth0_macvtap: entered promiscuous mode [ 523.743707][T18914] bond1: option primary_reselect: invalid value (255) [ 523.754691][T18914] bond1 (unregistering): Released all slaves [ 523.802319][T18755] veth1_macvtap: entered promiscuous mode [ 523.851096][T18905] infiniband syz2: set down [ 523.855977][T18905] infiniband syz2: added ip6_vti0 [ 523.914855][T18905] RDS/IB: syz2: added [ 523.935040][T18905] smc: adding ib device syz2 with port count 1 [ 523.941722][T18905] smc: ib device syz2 port 1 has no pnetid [ 523.952695][ T897] ip6_vti0 speed is unknown, defaulting to 1000 [ 523.960166][ T897] ip6_vti0 speed is unknown, defaulting to 1000 [ 523.968441][T18905] ip6_vti0 speed is unknown, defaulting to 1000 [ 524.024109][T18755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.072498][T18755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.122818][ T6856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.148933][ T6856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.176642][ T6856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.200336][ T6856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.291545][T18929] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20004 [ 524.344473][T18928] lo speed is unknown, defaulting to 1000 [ 524.383632][T18922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3242'. [ 524.544121][ T6856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.555376][ T6856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.564947][ T5832] Bluetooth: hci3: command tx timeout [ 524.603950][T18905] ip6_vti0 speed is unknown, defaulting to 1000 [ 524.648028][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3244'. [ 524.655242][ T6856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.666824][ T6856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.679356][T18934] nbd: must specify at least one socket [ 524.689382][T18934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3244'. [ 524.702419][T18934] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3244'. [ 524.977681][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3197'. [ 525.004138][T18940] lo speed is unknown, defaulting to 1000 [ 525.026106][ T6879] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.107288][ T6879] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.129500][ T6879] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.167914][ T6869] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.250249][T18905] ip6_vti0 speed is unknown, defaulting to 1000 [ 525.557795][T18948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3247'. [ 525.858557][T18928] ip6_vti0 speed is unknown, defaulting to 1000 [ 525.947590][T18954] Bluetooth: MGMT ver 1.23 [ 526.204133][T18940] ip6_vti0 speed is unknown, defaulting to 1000 [ 526.361700][T18968] sctp: [Deprecated]: syz.0.3255 (pid 18968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 526.361700][T18968] Use struct sctp_sack_info instead [ 526.513512][T18968] lo speed is unknown, defaulting to 1000 [ 526.553314][T18971] lo speed is unknown, defaulting to 1000 [ 526.733607][T18905] ip6_vti0 speed is unknown, defaulting to 1000 [ 527.350448][T18905] ip6_vti0 speed is unknown, defaulting to 1000 [ 527.699298][T18997] bridge0: entered promiscuous mode [ 527.705337][T18997] macsec1: entered promiscuous mode [ 527.715388][T18997] bridge0: port 4(macsec1) entered blocking state [ 527.722902][T18997] bridge0: port 4(macsec1) entered disabled state [ 527.730128][T18997] macsec1: entered allmulticast mode [ 527.735556][T18997] bridge0: entered allmulticast mode [ 527.753136][T18997] macsec1: left allmulticast mode [ 527.771167][T18997] bridge0: left allmulticast mode [ 527.789340][T18997] bridge0: left promiscuous mode [ 527.876068][T18998] bridge0: entered promiscuous mode [ 527.881525][T18998] macsec1: entered promiscuous mode [ 527.903970][T18998] bridge0: port 4(macsec1) entered blocking state [ 527.914852][T18998] bridge0: port 4(macsec1) entered disabled state [ 527.932505][T18998] macsec1: entered allmulticast mode [ 527.938166][T18998] bridge0: entered allmulticast mode [ 527.954516][T18998] macsec1: left allmulticast mode [ 527.960756][T18998] bridge0: left allmulticast mode [ 527.968838][T18998] bridge0: left promiscuous mode [ 528.005606][T19002] svc: failed to register nfsdv3 RPC service (errno 111). [ 528.019152][T19002] svc: failed to register nfsaclv3 RPC service (errno 111). [ 528.028040][T18905] ip6_vti0 speed is unknown, defaulting to 1000 [ 528.135066][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3264'. [ 528.313493][T18905] ip6_vti0 speed is unknown, defaulting to 1000 [ 528.439029][T19014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3267'. [ 528.617830][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3268'. [ 528.638077][T18905] ip6_vti0 speed is unknown, defaulting to 1000 [ 528.755039][T19025] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 529.064596][T18905] ip6_vti0 speed is unknown, defaulting to 1000 [ 529.097684][T19030] syz_tun: entered allmulticast mode [ 529.119517][T19029] syz_tun: left allmulticast mode [ 529.577015][T18905] ip6_vti0 speed is unknown, defaulting to 1000 [ 530.016694][T18905] ip6_vti0 speed is unknown, defaulting to 1000 [ 530.107662][T19040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3275'. [ 530.714367][T19053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3280'. [ 530.869143][T19062] openvswitch: netlink: Actions may not be safe on all matching packets [ 531.047619][T19064] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3282'. [ 531.396259][T19068] lo speed is unknown, defaulting to 1000 [ 531.451775][T19077] netlink: 'syz.4.3284': attribute type 1 has an invalid length. [ 531.652493][T19077] 8021q: adding VLAN 0 to HW filter on device bond2 [ 532.616300][T19103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3291'. [ 532.750595][T19104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3291'. [ 532.963246][T19068] ip6_vti0 speed is unknown, defaulting to 1000 [ 533.311593][ T919] IPVS: starting estimator thread 0... [ 533.324803][T19113] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 533.407085][T19114] IPVS: using max 25 ests per chain, 60000 per kthread [ 533.795155][ T6875] bond2 (unregistering): (slave gretap1): Releasing active interface [ 534.403106][ T6875] bond1 (unregistering): Released all slaves [ 534.417786][ T6875] bond2 (unregistering): Released all slaves [ 534.538617][ T6875] bond3 (unregistering): Released all slaves [ 534.664715][ T6875] bond4 (unregistering): Released all slaves [ 534.679157][ T6875] bond0 (unregistering): (slave bond6): Releasing active interface [ 534.688450][ T6875] bond0 (unregistering): Released all slaves [ 534.703130][ T6875] bond5 (unregistering): Released all slaves [ 534.837716][ T6875] bond6 (unregistering): Released all slaves [ 534.967134][ T6875] bond7 (unregistering): Released all slaves [ 535.093103][ T6875] bond8 (unregistering): (slave veth11): Releasing backup interface [ 535.104294][ T6875] bond8 (unregistering): Released all slaves [ 535.125129][T19089] lo speed is unknown, defaulting to 1000 [ 535.341490][ T6875] : left promiscuous mode [ 535.366096][ T5832] Bluetooth: hci0: command tx timeout [ 535.399666][T19127] netlink: 'syz.2.3296': attribute type 15 has an invalid length. [ 535.538818][ T6875] [†’Ì: left promiscuous mode [ 535.646549][ T6875] tipc: Disabling bearer [ 535.656001][ T6875] tipc: Left network mode [ 535.707240][T19137] tipc: Enabling of bearer rejected, failed to enable media [ 535.875910][T19089] ip6_vti0 speed is unknown, defaulting to 1000 [ 536.264933][T19137] syzkaller0: entered promiscuous mode [ 536.273644][T19137] syzkaller0: entered allmulticast mode [ 536.288989][T19161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3302'. [ 536.299274][ T7177] IPVS: starting estimator thread 0... [ 536.386259][T19163] IPVS: using max 27 ests per chain, 64800 per kthread [ 538.829888][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3305'. [ 538.843424][T19172] bridge_slave_1: left allmulticast mode [ 538.851803][T19172] bridge_slave_1: left promiscuous mode [ 538.857973][T19172] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.871965][T19172] bridge_slave_0: left allmulticast mode [ 538.882338][T19172] bridge_slave_0: left promiscuous mode [ 538.889198][T19172] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.870130][T19216] openvswitch: netlink: Message has 20 unknown bytes. [ 539.887940][T19208] lo speed is unknown, defaulting to 1000 [ 540.069481][T19216] openvswitch: netlink: Message has 20 unknown bytes. [ 540.083997][ T7177] IPVS: starting estimator thread 0... [ 540.112332][T19221] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3317'. [ 540.181180][T19224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3317'. [ 540.190957][T19221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3317'. [ 540.200425][T19222] IPVS: using max 24 ests per chain, 57600 per kthread [ 540.673071][ T6875] hsr_slave_0: left promiscuous mode [ 540.689106][ T6875] hsr_slave_1: left promiscuous mode [ 540.714484][T19242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3320'. [ 540.979184][ T6875] pimreg3 (unregistering): left allmulticast mode [ 541.025455][ T6875] pimreg (unregistering): left allmulticast mode [ 541.684295][T19257] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3324'. [ 541.884320][T19208] ip6_vti0 speed is unknown, defaulting to 1000 [ 542.435294][T19275] pimreg: entered allmulticast mode [ 542.441716][T19275] pimreg: left allmulticast mode [ 542.507260][ T6869] smc: removing ib device syz0 [ 542.774404][T19287] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 542.836444][T19287] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 542.867181][T19287] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 543.372211][T19299] syz_tun: entered allmulticast mode [ 543.651132][T19307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3338'. [ 543.697406][T19309] IPVS: length: 141 != 8 [ 544.091351][T19317] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 544.754873][T19330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3344'. [ 545.249346][T19334] lo speed is unknown, defaulting to 1000 [ 545.323790][T19334] ip6_vti0 speed is unknown, defaulting to 1000 [ 545.574421][T19345] syzkaller0: entered promiscuous mode [ 545.590652][T19345] syzkaller0: entered allmulticast mode [ 545.965026][T19354] bond0: (slave gre0): Error: Device type is different from other slaves [ 546.008088][T19354] netlink: 'syz.1.3351': attribute type 39 has an invalid length. [ 546.784551][T19363] kthread_run failed with err -4 [ 547.172307][ T6875] IPVS: stop unused estimator thread 0... [ 547.367105][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'. [ 547.382821][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'. [ 547.403554][T19376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3357'. [ 548.059909][T19385] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3359'. [ 548.066184][T19386] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3359'. [ 548.373330][T19397] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3360'. [ 548.411212][T19397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3360'. [ 548.422775][T19401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3362'. [ 548.432056][T19401] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3362'. [ 548.518207][T19393] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 548.610964][T19393] bond1 (unregistering): Released all slaves [ 548.707877][T19398] lo speed is unknown, defaulting to 1000 [ 548.719440][T19398] ip6_vti0 speed is unknown, defaulting to 1000 [ 550.077134][T19450] netlink: 'syz.1.3374': attribute type 12 has an invalid length. [ 550.381173][T19452] xt_policy: neither incoming nor outgoing policy selected [ 550.466468][T19454] netlink: 416 bytes leftover after parsing attributes in process `syz.4.3377'. [ 550.697670][T19465] nftables ruleset with unbound set [ 550.833557][T19471] [†’Ì: entered promiscuous mode [ 551.107191][T19488] tipc: Started in network mode [ 551.112424][T19488] tipc: Node identity 36d50dc0069c, cluster identity 4711 [ 551.121028][T19488] tipc: Enabled bearer , priority 0 [ 551.193591][T19488] syzkaller0: entered promiscuous mode [ 551.199463][T19488] syzkaller0: entered allmulticast mode [ 551.205852][T19488] tipc: Resetting bearer [ 551.215966][T19487] tipc: Resetting bearer [ 552.230925][ T897] tipc: Node number set to 810094016 [ 553.180541][T19487] tipc: Disabling bearer [ 553.283557][T19514] sctp: [Deprecated]: syz.3.3392 (pid 19514) Use of int in max_burst socket option. [ 553.283557][T19514] Use struct sctp_assoc_value instead [ 553.428740][T19518] __nla_validate_parse: 3 callbacks suppressed [ 553.428763][T19518] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3394'. [ 553.480559][T19518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.499493][T19521] sctp: [Deprecated]: syz.3.3397 (pid 19521) Use of struct sctp_assoc_value in delayed_ack socket option. [ 553.499493][T19521] Use struct sctp_sack_info instead [ 553.558113][T19518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3394'. [ 553.572328][T19518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.584484][T19527] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3399'. [ 553.640046][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3400'. [ 554.024680][T19556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3407'. [ 554.160546][T19564] sctp: [Deprecated]: syz.2.3410 (pid 19564) Use of int in maxseg socket option. [ 554.160546][T19564] Use struct sctp_assoc_value instead [ 554.271627][T19568] syz_tun: entered allmulticast mode [ 554.287298][T19563] syz_tun: left allmulticast mode [ 554.516903][T19582] smc: net device bond0 applied user defined pnetid SYZ0 [ 554.670166][T19595] xt_TCPMSS: Only works on TCP SYN packets [ 554.713785][T19594] lo speed is unknown, defaulting to 1000 [ 554.735103][T19594] ip6_vti0 speed is unknown, defaulting to 1000 [ 554.822776][T19602] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3418'. [ 555.053520][T19611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.111926][T19612] tipc: Started in network mode [ 555.125826][T19612] tipc: Node identity 8e2aa1af9392, cluster identity 4711 [ 555.150394][T19612] tipc: Enabled bearer , priority 0 [ 555.182430][T19614] syzkaller0: entered promiscuous mode [ 555.213749][T19614] syzkaller0: entered allmulticast mode [ 555.357264][T19612] tipc: Resetting bearer [ 555.789076][T19620] tipc: Started in network mode [ 555.794207][T19620] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 555.805569][T19620] tipc: Enabling of bearer rejected, failed to enable media [ 555.845558][T19608] tipc: Resetting bearer [ 555.871768][T19608] tipc: Disabling bearer [ 556.336068][T19637] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3426'. [ 556.480533][T19639] netlink: 'syz.3.3428': attribute type 32 has an invalid length. [ 556.496404][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3428'. [ 556.620953][T19639] bond2: option coupled_control: invalid value (12) [ 556.652188][T19639] bond2 (unregistering): Released all slaves [ 557.179231][T19650] lo speed is unknown, defaulting to 1000 [ 557.225020][T19650] ip6_vti0 speed is unknown, defaulting to 1000 [ 557.283300][T19659] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3434'. [ 557.302188][T19659] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3434'. [ 557.661127][T19669] tipc: Started in network mode [ 557.667380][T19669] tipc: Node identity 0e64c0bef5a3, cluster identity 4711 [ 557.686357][T19669] tipc: Enabled bearer , priority 0 [ 557.711518][T19669] syzkaller0: entered promiscuous mode [ 557.727408][T19669] syzkaller0: entered allmulticast mode [ 557.757595][T19669] tipc: Resetting bearer [ 557.799385][T19668] tipc: Resetting bearer [ 557.852316][T19668] tipc: Disabling bearer [ 557.915445][T19675] lo speed is unknown, defaulting to 1000 [ 558.030893][T19675] ip6_vti0 speed is unknown, defaulting to 1000 [ 558.296965][T19691] netlink: 'syz.0.3441': attribute type 21 has an invalid length. [ 558.492526][T19697] __nla_validate_parse: 2 callbacks suppressed [ 558.492548][T19697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3444'. [ 558.530119][T19698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3445'. [ 558.555156][T19697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.562649][T19697] IPv6: NLM_F_CREATE should be set when creating new route [ 558.800465][T19707] netlink: 'syz.2.3447': attribute type 1 has an invalid length. [ 559.038167][T19707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 559.086363][T19709] bond1: (slave gretap1): making interface the new active one [ 559.101183][T19709] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 559.285415][T19719] tipc: Enabled bearer , priority 0 [ 559.308140][T19719] syzkaller0: entered promiscuous mode [ 559.335806][T19719] syzkaller0: entered allmulticast mode [ 559.503416][T19722] lo speed is unknown, defaulting to 1000 [ 559.534359][T19722] ip6_vti0 speed is unknown, defaulting to 1000 [ 559.865370][T19717] tipc: Resetting bearer [ 559.959500][T19717] tipc: Disabling bearer [ 560.013677][T19737] lo speed is unknown, defaulting to 1000 [ 560.167938][T19750] vlan2: entered promiscuous mode [ 560.173210][T19750] gretap0: entered promiscuous mode [ 560.498372][T19737] ip6_vti0 speed is unknown, defaulting to 1000 [ 560.534703][T19755] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 560.570073][T19744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3457'. [ 560.656842][T19764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3457'. [ 560.763512][T19744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3457'. [ 560.766487][T19764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3457'. [ 560.773317][T19774] bridge: RTM_NEWNEIGH with invalid ether address [ 560.792605][ T6867] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.808712][ T6867] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.822080][ T6867] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.846266][ T6867] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.126870][T19785] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 561.361368][T19766] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 561.372167][T19766] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 561.430793][T19789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3470'. [ 561.449236][T19789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3470'. [ 561.449927][T19791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3469'. [ 561.465172][T19789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3470'. [ 561.574717][T19766] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 561.591492][T19766] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 561.724025][T19766] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 561.747285][T19766] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 561.817928][T19766] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 561.840691][T19766] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 562.073184][T19802] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 562.172296][T19807] lo speed is unknown, defaulting to 1000 [ 562.217988][T19807] ip6_vti0 speed is unknown, defaulting to 1000 [ 562.243694][T19809] netlink: 'syz.2.3475': attribute type 1 has an invalid length. [ 562.306202][T19809] bond2: entered promiscuous mode [ 562.311956][T19809] bond2: entered allmulticast mode [ 562.335621][T19818] bond2: (slave ip6gretap1): making interface the new active one [ 562.344518][T19818] ip6gretap1: entered promiscuous mode [ 562.350588][T19818] ip6gretap1: entered allmulticast mode [ 562.358179][T19818] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 562.695206][T19828] sctp: [Deprecated]: syz.0.3480 (pid 19828) Use of int in max_burst socket option. [ 562.695206][T19828] Use struct sctp_assoc_value instead [ 563.386482][T19860] syzkaller0: entered promiscuous mode [ 563.406070][T19860] syzkaller0: entered allmulticast mode [ 563.453522][T19863] x_tables: duplicate underflow at hook 4 [ 563.791730][T19875] __nla_validate_parse: 7 callbacks suppressed [ 563.791754][T19875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3494'. [ 563.930017][T19883] netlink: 'syz.2.3496': attribute type 1 has an invalid length. [ 564.073288][T19884] netlink: 'syz.2.3496': attribute type 1 has an invalid length. [ 564.096820][T19892] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3495'. [ 564.270012][T19883] 8021q: adding VLAN 0 to HW filter on device bond3 [ 564.308708][T19887] macvlan2: entered promiscuous mode [ 564.324429][T19887] macvlan2: entered allmulticast mode [ 564.355660][T19887] bond1: (slave macvlan2): Opening slave failed [ 564.438377][T19898] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 564.473338][T19896] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3497'. [ 565.311105][T19919] lo speed is unknown, defaulting to 1000 [ 565.379722][T19930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3508'. [ 565.524418][T19926] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.3506'. [ 565.549638][T19919] ip6_vti0 speed is unknown, defaulting to 1000 [ 566.127651][T19939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3509'. [ 566.151582][T19939] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3509'. [ 566.502681][T19957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3512'. [ 566.559520][T19964] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 566.570503][ T13] bond0: (slave bond_slave_0): interface is now down [ 566.603050][ T13] bond0: (slave bond_slave_1): interface is now down [ 566.626866][ T6867] bond0: (slave bond_slave_0): interface is now down [ 566.640771][ T6867] bond0: (slave bond_slave_1): interface is now down [ 566.694518][ T6867] bond0: (slave bond_slave_0): interface is now down [ 566.720965][ T6867] bond0: (slave bond_slave_1): interface is now down [ 566.766735][ T6879] bond0: (slave bond_slave_0): interface is now down [ 566.783341][ T6879] bond0: (slave bond_slave_1): interface is now down [ 566.788096][T19957] netlink: 'syz.2.3512': attribute type 3 has an invalid length. [ 566.828494][T19957] netlink: 'syz.2.3512': attribute type 1 has an invalid length. [ 566.836811][ T6858] bond0: (slave bond_slave_0): interface is now down [ 566.843820][ T6858] bond0: (slave bond_slave_1): interface is now down [ 566.885203][ T13] bond0: (slave bond_slave_0): interface is now down [ 566.896612][ T13] bond0: (slave bond_slave_1): interface is now down [ 566.905369][T19957] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3512'. [ 566.946846][ T13] bond0: (slave bond_slave_0): interface is now down [ 566.975912][ T13] bond0: (slave bond_slave_1): interface is now down [ 566.995852][ T13] bond0: (slave bond_slave_0): interface is now down [ 567.002844][ T13] bond0: (slave bond_slave_1): interface is now down [ 567.046682][ T13] bond0: (slave bond_slave_0): interface is now down [ 567.053525][ T13] bond0: (slave bond_slave_1): interface is now down [ 567.089091][ T13] bond0: now running without any active interface! [ 567.234965][T19982] C: renamed from lo (while UP) [ 567.287938][T19982] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 568.069105][T20001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3523'. [ 568.172595][T20001] syz_tun: entered promiscuous mode [ 568.184869][T20001] macvtap1: entered promiscuous mode [ 568.191644][T20001] macvtap1: entered allmulticast mode [ 568.288568][T20003] syz_tun: left promiscuous mode [ 568.304118][T20004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.648002][T20014] netlink: 'syz.1.3527': attribute type 32 has an invalid length. [ 568.735293][T20014] bond2: Setting coupled_control to off (0) [ 568.828363][T20019] __nla_validate_parse: 2 callbacks suppressed [ 568.828385][T20019] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3529'. [ 569.397496][T20030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3532'. [ 569.502472][T20039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3534'. [ 569.511780][T20039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3534'. [ 569.891470][T20043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3535'. [ 569.969892][T20043] veth3: entered promiscuous mode [ 570.201768][T20058] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3539'. [ 570.268583][T20057] lo speed is unknown, defaulting to 1000 [ 570.350023][T20057] ip6_vti0 speed is unknown, defaulting to 1000 [ 571.739157][T20086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3547'. [ 571.761586][T20086] bridge_slave_1: left allmulticast mode [ 571.773872][T20086] bridge_slave_1: left promiscuous mode [ 571.784784][T20086] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.802763][T20086] bridge_slave_0: left allmulticast mode [ 571.809382][T20086] bridge_slave_0: left promiscuous mode [ 571.817079][T20086] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.031314][T20082] lo speed is unknown, defaulting to 1000 [ 572.052247][T20082] ip6_vti0 speed is unknown, defaulting to 1000 [ 572.774379][T20110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3553'. [ 572.949392][T20120] netlink: 'syz.2.3554': attribute type 2 has an invalid length. [ 573.072535][T20126] Bluetooth: MGMT ver 1.23 [ 574.727931][T20150] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3559'. [ 574.751483][T20150] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 575.152029][T19987] Set syz1 is full, maxelem 65536 reached [ 575.468620][T20161] netlink: 'syz.0.3562': attribute type 21 has an invalid length. [ 575.496093][T20161] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3562'. [ 575.553085][T20161] netlink: 'syz.0.3562': attribute type 4 has an invalid length. [ 575.565313][T20161] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3562'. [ 575.728255][T20174] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3565'. [ 575.768886][T20174] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3565'. [ 575.808560][T20179] netlink: 'syz.2.3567': attribute type 33 has an invalid length. [ 575.825542][T20179] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3567'. [ 575.862718][T20181] netlink: 'syz.2.3567': attribute type 1 has an invalid length. [ 576.056333][T20181] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3567'. [ 576.187036][T20189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 576.194908][T20193] 8021q: VLANs not supported on gre0 [ 576.432406][T20200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3571'. [ 576.674036][T20205] lo speed is unknown, defaulting to 1000 [ 576.728572][T20205] ip6_vti0 speed is unknown, defaulting to 1000 [ 577.764656][T20235] lo speed is unknown, defaulting to 1000 [ 577.771274][T20235] lo speed is unknown, defaulting to 1000 [ 577.786169][T20235] lo speed is unknown, defaulting to 1000 [ 577.819668][T20235] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 577.862908][T20235] lo speed is unknown, defaulting to 1000 [ 577.873148][T20235] lo speed is unknown, defaulting to 1000 [ 577.917799][T20235] lo speed is unknown, defaulting to 1000 [ 577.938808][T20235] lo speed is unknown, defaulting to 1000 [ 577.959327][T20235] lo speed is unknown, defaulting to 1000 [ 578.070086][T20235] lo speed is unknown, defaulting to 1000 [ 578.101863][T20235] lo speed is unknown, defaulting to 1000 [ 578.114461][T20235] lo speed is unknown, defaulting to 1000 [ 578.130171][T20235] lo speed is unknown, defaulting to 1000 [ 578.671372][T20274] lo speed is unknown, defaulting to 1000 [ 578.723311][T20274] ip6_vti0 speed is unknown, defaulting to 1000 [ 578.789727][T20283] tipc: Enabled bearer , priority 0 [ 578.828152][T20282] tipc: Enabling of bearer rejected, already enabled [ 578.871634][T20283] syzkaller0: entered promiscuous mode [ 578.889529][T20283] syzkaller0: entered allmulticast mode [ 578.984725][T20283] tipc: Resetting bearer [ 578.998536][T20278] tipc: Resetting bearer [ 579.057329][T20278] tipc: Disabling bearer [ 579.349623][T20289] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 579.388465][T20274] lo speed is unknown, defaulting to 1000 [ 579.421975][T20292] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3593'. [ 579.546507][T20299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3593'. [ 579.649126][T20299] bridge_slave_1: left allmulticast mode [ 579.659678][T20299] bridge_slave_1: left promiscuous mode [ 579.676304][T20299] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.690246][T20299] bridge_slave_0: left allmulticast mode [ 579.705485][T20299] bridge_slave_0: left promiscuous mode [ 579.718437][T20299] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.851427][T20303] __nla_validate_parse: 1 callbacks suppressed [ 579.851617][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3596'. [ 579.891504][T20303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3596'. [ 579.901665][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3596'. [ 579.936910][T20303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3596'. [ 579.953062][T20311] tipc: Enabled bearer , priority 0 [ 579.975000][T20312] macvlan1: entered promiscuous mode [ 579.992623][T20312] macvlan1: entered allmulticast mode [ 579.998275][T20312] veth1_vlan: entered allmulticast mode [ 580.029273][T20309] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 580.040097][T20309] tipc: Resetting bearer [ 580.073298][T20308] tipc: Disabling bearer [ 580.464341][T20337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3604'. [ 580.510890][T20333] syzkaller0: entered promiscuous mode [ 580.516755][T20333] syzkaller0: entered allmulticast mode [ 581.018588][T20357] netlink: 'syz.1.3610': attribute type 1 has an invalid length. [ 581.051237][T20357] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 581.745095][T20385] netlink: 'syz.4.3615': attribute type 21 has an invalid length. [ 582.128157][T20398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3619'. [ 582.191858][T20402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3618'. [ 582.226927][T20404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3621'. [ 582.237721][T20402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3618'. [ 582.445075][T20413] netlink: 'syz.4.3617': attribute type 11 has an invalid length. [ 582.474086][T20413] netlink: 'syz.4.3617': attribute type 11 has an invalid length. [ 582.514660][T20413] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3617'. [ 582.852936][T20391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.217193][T20430] vlan3: entered promiscuous mode [ 583.222703][T20430] vlan3: entered allmulticast mode [ 583.246484][T20430] hsr_slave_1: entered allmulticast mode [ 583.273289][T20432] vlan2: entered promiscuous mode [ 583.282408][T20432] bond0: entered promiscuous mode [ 583.298848][T20432] bond_slave_0: entered promiscuous mode [ 583.326503][T20432] bond_slave_1: entered promiscuous mode [ 583.346900][T20432] vlan2: entered allmulticast mode [ 583.358201][T20432] bond0: entered allmulticast mode [ 583.386743][T20432] bond_slave_0: entered allmulticast mode [ 583.406922][T20432] bond_slave_1: entered allmulticast mode [ 583.533714][T20430] lo speed is unknown, defaulting to 1000 [ 583.559389][T20430] ip6_vti0 speed is unknown, defaulting to 1000 [ 583.639188][T20449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.924210][T20468] netlink: 'syz.1.3632': attribute type 39 has an invalid length. [ 583.977259][T20468] veth0_macvtap: left promiscuous mode [ 584.150919][T20430] lo speed is unknown, defaulting to 1000 [ 584.185257][T20477] netlink: 'syz.2.3636': attribute type 2 has an invalid length. [ 584.239248][T20477] : entered promiscuous mode [ 584.272624][T20479] lo speed is unknown, defaulting to 1000 [ 584.329982][T20479] ip6_vti0 speed is unknown, defaulting to 1000 [ 584.934344][T20479] lo speed is unknown, defaulting to 1000 [ 584.951333][T20501] lo speed is unknown, defaulting to 1000 [ 584.989669][T20501] ip6_vti0 speed is unknown, defaulting to 1000 [ 585.274284][T20501] lo speed is unknown, defaulting to 1000 [ 592.400848][T20520] lo speed is unknown, defaulting to 1000 [ 592.424637][T20520] ip6_vti0 speed is unknown, defaulting to 1000 [ 592.447391][T20531] __nla_validate_parse: 23 callbacks suppressed [ 592.447411][T20531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3647'. [ 592.623737][T20536] lo speed is unknown, defaulting to 1000 [ 593.165524][T20520] lo speed is unknown, defaulting to 1000 [ 593.185126][T20536] ip6_vti0 speed is unknown, defaulting to 1000 [ 593.771870][T20536] lo speed is unknown, defaulting to 1000 [ 594.100965][ T30] audit: type=1804 audit(1762784313.990:11): pid=20590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3664" name="/newroot/136/cgroup.controllers" dev="tmpfs" ino=720 res=1 errno=0 [ 594.202894][ T30] audit: type=1800 audit(1762784314.010:12): pid=20590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3664" name="cgroup.controllers" dev="tmpfs" ino=720 res=0 errno=0 [ 594.271606][T20583] syzkaller0: entered promiscuous mode [ 594.284605][T20583] syzkaller0: entered allmulticast mode [ 595.019687][T20602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3668'. [ 596.610063][T20598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3666'. [ 596.619189][T20598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3666'. [ 596.919825][T20610] tipc: Enabling of bearer rejected, failed to enable media [ 596.949798][T20615] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3671'. [ 597.123612][T20621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3673'. [ 597.174364][T20621] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 597.352696][T20627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3677'. [ 597.381108][T20627] tipc: Enabling of bearer rejected, failed to enable media [ 597.738876][T20641] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3681'. [ 597.780131][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3681'. [ 597.819536][T20647] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 598.101142][T20645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.117368][T20645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.248242][T20672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3687'. [ 598.283494][ T7190] lo speed is unknown, defaulting to 1000 [ 598.290767][ T7190] syz0: Port: 1 Link DOWN [ 598.359928][T20670] veth4: entered allmulticast mode [ 598.438819][ T6858] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.498486][ T6858] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.515943][ T6858] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.557468][ T6858] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.991191][T20707] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3693'. [ 599.016871][T20707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3693'. [ 599.212654][T20718] syz_tun: entered allmulticast mode [ 599.243100][T20718] syz_tun: left allmulticast mode [ 599.405497][T20720] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 599.943020][T20737] tipc: Enabled bearer , priority 0 [ 600.041903][T20737] tipc: Disabling bearer [ 600.154492][T20746] block nbd3: Unsupported socket: should be TCP or UNIX. [ 600.197851][T20748] tipc: Enabled bearer , priority 0 [ 600.376590][T20748] tipc: Disabling bearer [ 600.763511][T20785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3720'. [ 600.813295][T20783] lo speed is unknown, defaulting to 1000 [ 600.828654][T20783] ip6_vti0 speed is unknown, defaulting to 1000 [ 600.837229][T20775] lo speed is unknown, defaulting to 1000 [ 601.001560][T20794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3723'. [ 601.080511][T20794] bond2: entered promiscuous mode [ 601.089513][T20794] 8021q: adding VLAN 0 to HW filter on device bond2 [ 601.112165][T20799] netlink: 308 bytes leftover after parsing attributes in process `syz.4.3725'. [ 601.153019][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3725'. [ 601.572434][T20794] bond2 (unregistering): Released all slaves [ 601.604448][T20797] tipc: Enabled bearer , priority 10 [ 601.623067][T20783] lo speed is unknown, defaulting to 1000 [ 601.623187][T20775] ip6_vti0 speed is unknown, defaulting to 1000 [ 602.167691][T20877] tipc: Enabled bearer , priority 0 [ 602.177822][T20877] netlink: 'syz.0.3730': attribute type 1 has an invalid length. [ 602.185648][T20877] netlink: 'syz.0.3730': attribute type 7 has an invalid length. [ 602.193791][T20877] netlink: 'syz.0.3730': attribute type 8 has an invalid length. [ 602.212486][T20877] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3730'. [ 602.248122][T20881] tipc: Enabled bearer , priority 10 [ 602.265245][T20877] tipc: Resetting bearer [ 602.297820][T20775] lo speed is unknown, defaulting to 1000 [ 602.315352][T20876] tipc: Disabling bearer [ 602.339568][T20886] netlink: 'syz.4.3734': attribute type 1 has an invalid length. [ 602.604393][T20887] bond4 (unregistering): Released all slaves [ 602.860595][T20913] __nla_validate_parse: 1 callbacks suppressed [ 602.860619][T20913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3740'. [ 602.905078][T20916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3741'. [ 602.916653][T20913] bridge: RTM_NEWNEIGH with invalid ether address [ 602.925366][T20916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3741'. [ 602.960351][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3741'. [ 602.989983][T20899] lo speed is unknown, defaulting to 1000 [ 603.029240][T20913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3740'. [ 603.081276][T20899] ip6_vti0 speed is unknown, defaulting to 1000 [ 603.099492][T20923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3743'. [ 603.277205][T20934] netlink: 'syz.4.3745': attribute type 10 has an invalid length. [ 603.296856][T20859] tipc: Node number set to 4224172222 [ 603.448819][T20942] netlink: 'syz.4.3745': attribute type 10 has an invalid length. [ 603.466186][T20943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3747'. [ 603.554873][T20911] netlink: 'syz.3.3735': attribute type 6 has an invalid length. [ 603.776377][T20899] lo speed is unknown, defaulting to 1000 [ 604.129984][T20958] tipc: Enabling of bearer rejected, failed to enable media [ 604.317166][T20962] xt_cgroup: invalid path, errno=-2 [ 604.785434][T20974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3756'. [ 604.892886][T20977] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 604.905630][T20977] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3758'. [ 604.918661][T20977] netlink: 'syz.2.3758': attribute type 5 has an invalid length. [ 605.054081][T20979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3759'. [ 605.167344][T20988] netlink: 'syz.1.3762': attribute type 2 has an invalid length. [ 605.238762][T20990] netlink: 'syz.2.3763': attribute type 1 has an invalid length. [ 605.366801][T20990] 8021q: adding VLAN 0 to HW filter on device bond4 [ 605.988988][T21028] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 605.989445][T21027] openvswitch: netlink: IP tunnel dst address not specified [ 606.055489][T21029] [†’Ì: entered promiscuous mode [ 606.268060][T21036] can: request_module (can-proto-5) failed. [ 606.885168][T21045] lo speed is unknown, defaulting to 1000 [ 606.931215][T21045] ip6_vti0 speed is unknown, defaulting to 1000 [ 609.435067][T21045] lo speed is unknown, defaulting to 1000 [ 609.674456][T21109] __nla_validate_parse: 6 callbacks suppressed [ 609.674476][T21109] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3789'. [ 609.709572][T21114] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3791'. [ 609.717651][T21113] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3791'. [ 609.720550][T21114] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3791'. [ 609.748596][T21114] unsupported nlmsg_type 40 [ 609.922151][T21113] lo speed is unknown, defaulting to 1000 [ 609.954674][T21127] validate_nla: 2 callbacks suppressed [ 609.954697][T21127] netlink: 'syz.3.3794': attribute type 13 has an invalid length. [ 610.022468][T21113] ip6_vti0 speed is unknown, defaulting to 1000 [ 610.292348][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3796'. [ 610.309705][T21133] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 610.400176][T21137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.433411][T21135] syzkaller0: entered promiscuous mode [ 610.440802][T21135] syzkaller0: entered allmulticast mode [ 610.472271][T21135] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3797'. [ 610.571943][T21142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3800'. [ 610.993069][T21142] veth1_macvtap (unregistering): left allmulticast mode [ 611.005591][T21142] bridge0: port 3(macsec0) entered disabled state [ 611.028315][T21142] macsec0 (unregistering): left allmulticast mode [ 611.035391][T21142] macsec0 (unregistering): left promiscuous mode [ 611.050298][T21142] bridge0: port 3(macsec0) entered disabled state [ 611.090961][T21142] veth0_macvtap (unregistering): left allmulticast mode [ 611.122681][T21113] lo speed is unknown, defaulting to 1000 [ 611.439984][T21183] netlink: 'syz.3.3809': attribute type 1 has an invalid length. [ 611.484594][T21183] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3809'. [ 611.711229][T21193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3811'. [ 611.780874][T21190] netlink: 'syz.2.3810': attribute type 6 has an invalid length. [ 611.936930][T21199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3814'. [ 612.213547][T21216] netlink: 'syz.0.3818': attribute type 2 has an invalid length. [ 612.868509][T21252] netlink: 'syz.3.3831': attribute type 9 has an invalid length. [ 613.307633][T21283] netlink: 'syz.2.3838': attribute type 24 has an invalid length. [ 613.844811][T21303] netlink: 'syz.4.3845': attribute type 27 has an invalid length. [ 613.922844][T21308] lo speed is unknown, defaulting to 1000 [ 613.931923][T21308] ip6_vti0 speed is unknown, defaulting to 1000 [ 614.138711][T21312] syzkaller0: entered promiscuous mode [ 614.144339][T21312] syzkaller0: entered allmulticast mode [ 614.262642][T21331] netlink: 'syz.0.3851': attribute type 13 has an invalid length. [ 616.690219][T21331] gretap0: refused to change device tx_queue_len [ 616.698004][T21331] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 616.722646][T21332] __nla_validate_parse: 3 callbacks suppressed [ 616.722666][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 616.740253][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 616.753096][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 616.764017][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 616.775124][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 616.787783][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 616.800896][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 616.814812][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 616.827256][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 616.839007][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 616.853875][T21332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.863722][T21332] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.872903][T21332] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 616.895890][T21308] lo speed is unknown, defaulting to 1000 [ 616.919663][T20859] lo speed is unknown, defaulting to 1000 [ 616.956322][T20859] syz0: Port: 1 Link ACTIVE [ 617.208690][T21363] netlink: 'syz.4.3857': attribute type 1 has an invalid length. [ 617.243754][T21367] netlink: 'syz.1.3860': attribute type 2 has an invalid length. [ 617.349193][T21355] lo speed is unknown, defaulting to 1000 [ 617.384003][T21355] ip6_vti0 speed is unknown, defaulting to 1000 [ 617.403557][T21369] : entered promiscuous mode [ 617.799458][T21390] tipc: Enabling of bearer rejected, already enabled [ 618.174291][T21381] lo speed is unknown, defaulting to 1000 [ 618.191106][T21381] ip6_vti0 speed is unknown, defaulting to 1000 [ 618.202455][T21355] lo speed is unknown, defaulting to 1000 [ 618.657875][T21423] sctp: [Deprecated]: syz.1.3875 (pid 21423) Use of int in maxseg socket option. [ 618.657875][T21423] Use struct sctp_assoc_value instead [ 618.677932][T21424] sctp: [Deprecated]: syz.1.3875 (pid 21424) Use of int in maxseg socket option. [ 618.677932][T21424] Use struct sctp_assoc_value instead [ 618.763252][T21420] bond5: option ad_user_port_key: invalid value (65535) [ 618.771606][T21420] bond5: option ad_user_port_key: allowed values 0 - 1023 [ 618.784063][T21420] bond5 (unregistering): Released all slaves [ 618.998694][T21381] lo speed is unknown, defaulting to 1000 [ 620.260435][T21491] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 620.452431][T21497] bond0: entered promiscuous mode [ 620.467663][T21497] bond_slave_0: entered promiscuous mode [ 620.482282][T21497] bond_slave_1: entered promiscuous mode [ 620.500963][T21497] batadv0: entered promiscuous mode [ 620.518658][T21497] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 620.529338][T21497] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 620.540811][T21497] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 620.549456][T21497] bond0: left promiscuous mode [ 620.554406][T21497] bond_slave_0: left promiscuous mode [ 620.560621][T21497] bond_slave_1: left promiscuous mode [ 620.567448][T21497] batadv0: left promiscuous mode [ 620.602977][T21498] lo speed is unknown, defaulting to 1000 [ 620.610826][T21506] tipc: Enabled bearer , priority 0 [ 620.618359][T21498] ip6_vti0 speed is unknown, defaulting to 1000 [ 620.619066][T21506] syzkaller0: entered promiscuous mode [ 620.633018][T21506] syzkaller0: entered allmulticast mode [ 620.694870][T21506] tipc: Resetting bearer [ 620.790330][T21510] bridge: RTM_NEWNEIGH with invalid ether address [ 620.901973][T21498] lo speed is unknown, defaulting to 1000 [ 620.911372][T21512] lo speed is unknown, defaulting to 1000 [ 620.924975][T21512] ip6_vti0 speed is unknown, defaulting to 1000 [ 620.943923][T21513] netlink: 'syz.3.3896': attribute type 1 has an invalid length. [ 621.407107][T21512] lo speed is unknown, defaulting to 1000 [ 621.828109][T21534] __nla_validate_parse: 51 callbacks suppressed [ 621.828134][T21534] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3900'. [ 621.908904][T21534] sch_tbf: peakrate 4 is lower than or equals to rate 127 ! [ 622.135342][T21538] netlink: 'syz.3.3902': attribute type 3 has an invalid length. [ 622.833990][T21553] geneve2: entered promiscuous mode [ 622.842026][T21559] netlink: 'syz.3.3909': attribute type 33 has an invalid length. [ 622.848098][T21553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3908'. [ 622.860568][T21559] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3909'. [ 623.086207][T21568] lo speed is unknown, defaulting to 1000 [ 623.095627][T21568] ip6_vti0 speed is unknown, defaulting to 1000 [ 623.218436][T21574] lo speed is unknown, defaulting to 1000 [ 623.239622][T21576] netlink: 'syz.4.3912': attribute type 10 has an invalid length. [ 623.278338][T21576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.313667][T21576] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 623.351719][T21571] netlink: 'syz.4.3912': attribute type 10 has an invalid length. [ 623.366984][T21571] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3912'. [ 623.388054][T21571] batadv0: entered promiscuous mode [ 623.404781][T21571] batadv0: entered allmulticast mode [ 623.442907][T21571] bond0: (slave batadv0): Releasing backup interface [ 623.480144][T21571] bridge0: port 3(batadv0) entered blocking state [ 623.506020][T21571] bridge0: port 3(batadv0) entered disabled state [ 623.556587][T21504] tipc: Resetting bearer [ 623.651838][T21504] tipc: Disabling bearer [ 623.678729][T21568] lo speed is unknown, defaulting to 1000 [ 623.684617][T21574] ip6_vti0 speed is unknown, defaulting to 1000 [ 623.866773][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 623.876437][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 624.189047][T21585] netlink: 'syz.2.3914': attribute type 32 has an invalid length. [ 624.487700][T21600] netlink: 'syz.2.3917': attribute type 1 has an invalid length. [ 624.565592][T21605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3917'. [ 624.836844][T21600] bond5: entered promiscuous mode [ 624.867572][T21600] 8021q: adding VLAN 0 to HW filter on device bond5 [ 624.995794][T21574] lo speed is unknown, defaulting to 1000 [ 625.826932][T21626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3925'. [ 625.947204][T21627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3925'. [ 626.545524][T21641] lo speed is unknown, defaulting to 1000 [ 626.554436][T21641] ip6_vti0 speed is unknown, defaulting to 1000 [ 626.700559][T21653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'. [ 626.727048][T21653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3932'. [ 626.750992][T21653] netlink: 'syz.2.3932': attribute type 12 has an invalid length. [ 626.773305][T21653] netlink: 'syz.2.3932': attribute type 13 has an invalid length. [ 626.814120][T21659] netlink: 'syz.4.3934': attribute type 1 has an invalid length. [ 626.984157][T21661] bond4: entered promiscuous mode [ 627.002403][T21661] bond4: entered allmulticast mode [ 627.008768][T21661] 8021q: adding VLAN 0 to HW filter on device bond4 [ 627.043692][T21641] lo speed is unknown, defaulting to 1000 [ 627.208260][T21673] netlink: 'syz.4.3936': attribute type 10 has an invalid length. [ 627.302019][T21678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3937'. [ 627.703581][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3941'. [ 627.978298][T21711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3945'. [ 628.018334][T21711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3945'. [ 628.211549][T21720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3946'. [ 628.235575][T21715] lo speed is unknown, defaulting to 1000 [ 628.274291][T21717] tipc: Resetting bearer [ 628.316731][T21728] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3949'. [ 628.729826][T20861] lo speed is unknown, defaulting to 1000 [ 628.731410][T21720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3946'. [ 628.735643][T20861] syz0: Port: 1 Link DOWN [ 628.735957][T21715] ip6_vti0 speed is unknown, defaulting to 1000 [ 629.004005][T21739] netlink: 'syz.3.3952': attribute type 4 has an invalid length. [ 629.072278][T21744] ipt_REJECT: ECHOREPLY no longer supported. [ 629.087922][T21743] netlink: 'syz.0.3954': attribute type 8 has an invalid length. [ 629.109350][T21743] sch_fq: defrate 0 ignored. [ 629.231958][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3956'. [ 629.245631][T21743] nbd: must specify at least one socket [ 629.281409][T21751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3956'. [ 629.308521][T21751] netlink: 'syz.4.3956': attribute type 5 has an invalid length. [ 629.340938][T21753] netlink: 'syz.4.3956': attribute type 39 has an invalid length. [ 629.350848][T21715] lo speed is unknown, defaulting to 1000 [ 629.354267][T21749] syzkaller1: entered promiscuous mode [ 629.362315][T21755] x_tables: duplicate underflow at hook 1 [ 629.375873][T21749] syzkaller1: entered allmulticast mode [ 629.377606][T21751] netlink: 'syz.4.3956': attribute type 6 has an invalid length. [ 629.405782][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3958'. [ 629.563483][T21758] lo speed is unknown, defaulting to 1000 [ 629.594941][T21758] ip6_vti0 speed is unknown, defaulting to 1000 [ 629.754928][T21774] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 630.221254][T21786] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20003 [ 630.496681][T21758] lo speed is unknown, defaulting to 1000 [ 631.447606][T21803] lo speed is unknown, defaulting to 1000 [ 631.552519][T21803] ip6_vti0 speed is unknown, defaulting to 1000 [ 631.561260][T21814] nbd: must specify a size in bytes for the device [ 632.006206][T21832] netlink: 'syz.0.3974': attribute type 13 has an invalid length. [ 632.176824][T21838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 632.367208][T21846] __nla_validate_parse: 9 callbacks suppressed [ 632.367226][T21846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3979'. [ 632.411876][T21846] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3979'. [ 632.423896][T21846] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3979'. [ 632.433277][T21846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3979'. [ 632.444312][T21803] lo speed is unknown, defaulting to 1000 [ 633.014563][T21879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3986'. [ 633.044918][T21879] netlink: 'syz.1.3986': attribute type 1 has an invalid length. [ 633.166918][T21883] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3986'. [ 633.191180][T21883] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 633.296835][T21885] netlink: 'syz.0.3985': attribute type 2 has an invalid length. [ 633.344509][T21881] lo speed is unknown, defaulting to 1000 [ 633.356980][T21885] netlink: 'syz.0.3985': attribute type 1 has an invalid length. [ 633.403235][T21881] ip6_vti0 speed is unknown, defaulting to 1000 [ 633.418428][T21888] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3988'. [ 633.619867][T21896] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3990'. [ 633.790793][T21905] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3994'. [ 633.792268][T21901] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3991'. [ 633.981648][T21908] lo speed is unknown, defaulting to 1000 [ 634.057684][T21912] lo speed is unknown, defaulting to 1000 [ 634.119636][T21908] ip6_vti0 speed is unknown, defaulting to 1000 [ 634.136129][T21881] lo speed is unknown, defaulting to 1000 [ 647.113821][T21946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4000'. [ 647.442196][T21946] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4000'. [ 648.032937][T21946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4000'. [ 650.224052][T21938] lo speed is unknown, defaulting to 1000 [ 659.013899][T21912] ip6_vti0 speed is unknown, defaulting to 1000 [ 670.403067][T21955] netlink: 'syz.4.4006': attribute type 83 has an invalid length. [ 674.133384][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 674.392754][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 674.693448][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 674.732742][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 674.944857][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 675.265521][T21964] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 675.435009][T21963] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 675.663221][T21963] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 675.842987][T21963] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 675.974452][T21963] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 676.033967][T21963] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 676.123136][T21963] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 676.455396][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 676.754136][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 677.182055][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 677.474640][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 677.752936][T21964] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 677.913589][T21964] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 678.464342][ T5832] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 678.564735][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 678.763412][ T5832] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 678.782677][ T6869] batadv0: left allmulticast mode [ 678.853756][ T5832] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 679.072998][ T6869] batadv0: left promiscuous mode [ 679.162721][ T6869] bridge0: port 1(batadv0) entered disabled state [ 679.354283][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 679.582553][ T5832] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 680.172435][ T5845] Bluetooth: hci6: command tx timeout [ 680.182027][ T5832] Bluetooth: hci7: command tx timeout [ 680.294566][ T5845] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 682.253346][ T5845] Bluetooth: hci7: command tx timeout [ 682.284578][ T5845] Bluetooth: hci6: command tx timeout [ 682.302857][ T5845] Bluetooth: hci4: command tx timeout [ 683.215265][ T5832] Bluetooth: hci8: command tx timeout [ 684.333220][ T5832] Bluetooth: hci6: command tx timeout [ 684.333527][ T5845] Bluetooth: hci7: command tx timeout [ 684.412520][ T5845] Bluetooth: hci4: command tx timeout [ 685.294866][ T5845] Bluetooth: hci8: command tx timeout [ 686.421986][ T5845] Bluetooth: hci7: command tx timeout [ 686.455154][ T5832] Bluetooth: hci6: command tx timeout [ 686.492661][ T5832] Bluetooth: hci4: command tx timeout [ 687.382757][ T5832] Bluetooth: hci8: command tx timeout [ 688.572328][ T5832] Bluetooth: hci4: command tx timeout [ 689.442582][ T5832] Bluetooth: hci8: command tx timeout [ 702.083630][ T6869] bond6 (unregistering): (slave gretap1): Releasing active interface [ 716.675615][ T6869] team0: Port device bridge0 removed [ 723.292878][ T6869] bond4 (unregistering): (slave bridge4): Releasing active interface [ 732.284932][ T6869] bond1 (unregistering): Released all slaves [ 732.965491][ T5845] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 733.163869][ T5845] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 733.273368][ T5845] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 733.973590][ T5845] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 734.184690][ T5845] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 734.643284][ T5845] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 734.742935][ T5146] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 734.905522][ T5845] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 735.433938][ T5845] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 735.784927][ T5845] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 736.883400][ T5845] Bluetooth: hci9: command tx timeout [ 738.262206][ T5832] Bluetooth: hci10: command tx timeout [ 738.664813][ T5832] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 738.753654][ T5832] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 738.933700][ T5832] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 738.963012][ T5146] Bluetooth: hci9: command tx timeout [ 739.752484][ T5832] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 739.903822][T21967] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 740.014627][T21967] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 740.183671][T21967] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 740.292976][T21967] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 740.331914][T21967] Bluetooth: hci10: command tx timeout [ 740.682972][T21967] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 740.844641][T21967] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 741.062958][ T5845] Bluetooth: hci9: command tx timeout [ 742.414328][ T5832] Bluetooth: hci10: command tx timeout [ 743.125098][ T5832] Bluetooth: hci9: command tx timeout [ 743.683562][ T5832] Bluetooth: hci11: command tx timeout [ 743.922728][ T5832] Bluetooth: hci12: command tx timeout [ 744.425416][ T6869] bond2 (unregistering): Released all slaves [ 744.513002][ T5832] Bluetooth: hci10: command tx timeout [ 745.773492][ T5832] Bluetooth: hci11: command tx timeout [ 745.843342][ T6869] bond3 (unregistering): Released all slaves [ 746.004208][ T5832] Bluetooth: hci12: command tx timeout [ 746.682877][ T6869] bond4 (unregistering): Released all slaves [ 747.842262][ T5832] Bluetooth: hci11: command tx timeout [ 748.084153][ T5832] Bluetooth: hci12: command tx timeout [ 749.934212][ T5832] Bluetooth: hci11: command tx timeout [ 750.174819][ T5832] Bluetooth: hci12: command tx timeout [ 757.853707][ T6869] bond5 (unregistering): Released all slaves [ 760.133946][ T6869] bond6 (unregistering): Released all slaves [ 770.174860][ T6869] bond7 (unregistering): Released all slaves [ 771.422866][ T6869] bond8 (unregistering): (slave veth7): Releasing active interface [ 771.745555][ T6869] bond8 (unregistering): Released all slaves [ 772.854049][ T6869] bond9 (unregistering): Released all slaves [ 773.664503][ T6869] bond10 (unregistering): Released all slaves [ 775.424152][T21938] ip6_vti0 speed is unknown, defaulting to 1000 [ 781.812962][ T6869] tipc: Left network mode [ 788.223228][ T5146] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 788.513758][ T5146] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 788.842494][ T5146] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 789.453998][ T5146] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 789.792384][ T5146] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 792.412584][ T5146] Bluetooth: hci13: command tx timeout [ 794.484103][ T5146] Bluetooth: hci13: command tx timeout [ 796.564351][ T5146] Bluetooth: hci13: command tx timeout [ 798.122196][ T31] INFO: task syz.0.3985:21881 blocked for more than 143 seconds. [ 798.474333][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 798.653347][ T5146] Bluetooth: hci13: command tx timeout [ 798.692634][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 798.842031][ T31] task:syz.0.3985 state:D stack:24328 pid:21881 tgid:21873 ppid:18237 task_flags:0x400140 flags:0x00080003 [ 799.124473][ T31] Call Trace: [ 799.263958][ T31] [ 799.352827][ T31] __schedule+0x1798/0x4cc0 [ 799.502962][ T31] ? __lock_acquire+0xab9/0xd20 [ 799.633581][ T31] ? __lock_acquire+0xab9/0xd20 [ 799.812789][ T31] ? __pfx___schedule+0x10/0x10 [ 799.952748][ T31] ? schedule+0x91/0x360 [ 800.103057][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 800.212436][ T31] schedule+0x165/0x360 [ 800.373947][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 800.394714][ T31] schedule_preempt_disabled+0x13/0x30 [ 800.514653][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 800.600259][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 800.609847][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 800.618395][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 800.624765][ T31] ? __lock_acquire+0xab9/0xd20 [ 800.632523][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 800.743160][ T31] down_write+0x1ab/0x1f0 [ 800.972643][ T31] ? __pfx_down_write+0x10/0x10 [ 801.105249][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 801.192972][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 801.365060][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 801.374327][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 801.382166][ T31] rdma_dev_exit_net+0x8c/0x340 [ 801.389930][ T31] ? __pfx___might_resched+0x10/0x10 [ 801.395270][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 801.414453][ T31] ? net_generic+0x1e/0x240 [ 801.454002][ T31] ? mutex_is_locked+0x17/0x50 [ 801.482731][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 801.560828][ T31] ? rtnl_is_locked+0x15/0x20 [ 801.583016][ T31] ops_undo_list+0x49a/0x990 [ 801.590793][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 801.599614][ T31] ? ops_init+0x469/0x5c0 [ 801.604005][ T31] setup_net+0x2d6/0x320 [ 801.610855][ T31] ? __pfx_setup_net+0x10/0x10 [ 801.922849][ T31] ? copy_net_ns+0x337/0x4e0 [ 802.044024][ T31] ? down_read_killable+0x1d1/0x350 [ 802.232419][ T31] ? preinit_net+0x47d/0x780 [ 802.302165][ T31] copy_net_ns+0x34e/0x4e0 [ 802.453330][ T31] create_new_namespaces+0x3f3/0x720 [ 802.702066][ T31] ? security_capable+0x7e/0x2e0 [ 802.973819][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 803.183007][ T31] ksys_unshare+0x4c8/0x8c0 [ 803.332887][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 803.624086][ T31] __x64_sys_unshare+0x38/0x50 [ 803.882915][ T31] do_syscall_64+0xfa/0xfa0 [ 804.005439][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 804.103296][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.262245][ T31] ? clear_bhb_loop+0x60/0xb0 [ 804.392499][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.522560][ T31] RIP: 0033:0x7f13b318f6c9 [ 804.633275][ T31] RSP: 002b:00007f13b401b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 804.802515][ T31] RAX: ffffffffffffffda RBX: 00007f13b33e6090 RCX: 00007f13b318f6c9 [ 804.941910][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 805.124203][ T31] RBP: 00007f13b3211f91 R08: 0000000000000000 R09: 0000000000000000 [ 805.313465][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.463883][ T31] R13: 00007f13b33e6128 R14: 00007f13b33e6090 R15: 00007fff87c39958 [ 805.693377][ T31] [ 805.824910][ T31] [ 805.824910][ T31] Showing all locks held in the system: [ 806.172068][ T31] 1 lock held by pool_workqueue_/3: [ 806.673828][ T31] 8 locks held by kworker/u8:1/13: [ 806.784002][ T31] 1 lock held by khungtaskd/31: [ 806.953166][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 807.204291][ T31] 2 locks held by kworker/u8:2/36: [ 807.313004][ T31] 2 locks held by getty/5588: [ 807.412015][ T31] #0: ffff88814da0d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 807.591685][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 807.812455][ T31] 4 locks held by kworker/u9:3/5832: [ 807.974691][ T31] #0: ffff88807d5f6948 ((wq_completion)hci7#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0