last executing test programs: 1m11.858779792s ago: executing program 1 (id=3302): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000084000000000000001fc7"], 0x18, 0x48060}], 0x1, 0x200000d0) accept4$inet(r4, 0x0, 0x0, 0x80000) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1m10.107159266s ago: executing program 3 (id=3316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b00000000001010400000000000000000a"], 0xb0}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={r0, 0x9, 0x4000, 0x3}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001080)=ANY=[@ANYRES32, @ANYBLOB="880000000000d90000000000000ef177dbbdec4869c00f2edd04630000000000517b33c38bac151cbdfeec2de107", @ANYRES64], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000f80)=ANY=[@ANYRES32], 0x20) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r8, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f00000000c0)) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1m9.986137112s ago: executing program 3 (id=3317): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x1, 0x7ffffd, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x24048800) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000003ec0)=[{{&(0x7f0000001180)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{&(0x7f0000001340)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001380)="7ca4c180", 0x4}, {0x0}], 0x2}}], 0x2, 0x80) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 1m9.734276558s ago: executing program 3 (id=3320): r0 = socket$rds(0x15, 0x5, 0x0) connect(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x80) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) (async) getpid() (async) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x10, r1}, 0x18) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001600)) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001640)) getuid() (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0x2004}, 0x50) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xfff1, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x44080) (async) bind$inet(r2, &(0x7f0000002980)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 1m9.646896763s ago: executing program 2 (id=3321): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) accept4(r0, 0x0, &(0x7f0000000040)=0xfffffffffffffde8, 0x80800) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYRES32=r3, @ANYRES16=r3, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x5822063364ccb978) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xd, 0x0, &(0x7f0000000200)="df33c9f7b9a600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fedbdf2508000000180002801400038010000180"], 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c"], 0x28}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) close(r8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r7, 0x0, 0x0}, 0x10) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 1m9.501043002s ago: executing program 4 (id=3322): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x20, 0x40844}}], 0x1, 0x1) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/cgroup\x00') r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="007bd47342"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000036090100fffffff8950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x20}, 0x94) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@null={0x40, 0x8}) 1m9.398994725s ago: executing program 2 (id=3324): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c00028005000100000000002c00018006000340000100000c00028004e6010088000000140001800800010064010102080002"], 0x88}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x4, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x40020}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r7, 0x3282, 0x6000}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_MTU={0x8, 0x4, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 1m9.398184286s ago: executing program 3 (id=3325): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x3, 0x7, 0x0, 0x100}, 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x4, 0x7, 0x1a}) (async, rerun: 64) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0xc) (rerun: 64) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xea2, 0x0, 0x5, 0x6, 0x8, r2}, 0x20) getsockname$ax25(r1, &(0x7f0000000140)={{0x3, @bcast}, [@bcast, @rose, @remote, @netrom, @netrom, @default, @default, @netrom]}, &(0x7f00000001c0)=0x48) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000200)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={r2, 0x94, &(0x7f0000000240)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0x2, @private1, 0x1}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x9, @remote, 0x2}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x7, @local, 0x2}]}, &(0x7f0000000340)=0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000800}, 0x8050) (async) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000004c0), 0x4) (async) socket$rds(0x15, 0x5, 0x0) r5 = socket(0x1e, 0x6, 0x80000000) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x1, &(0x7f0000000500)=""/220, &(0x7f0000000600)=0xdc) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x13, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000006c0)={r1, r6}, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000700)) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r5) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0xdb1a75f5199d1dd0}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r7, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1d98ff7b}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x840) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000880)={r3, 0x1000, "78e484aa3d131168a11e13b4c7c1f3bd712ccaae41c3fd80295d1cef4e04a96bd60b9856d27626a32675ad3960ebcb27f45bef90f94c05b88e5f31169719d0af4959d54abd481b2988ca2146a95a560ff38fbd2ee85a43269d5491cfe7f29fcb5d7d97e3f7463a1ccaed6cbdd1a55e686566c4ee355af135ea8e73cb988a62c16ac07de6f2d8375db99c20d4eed0f808bd407b9bc7206a61726e1c14fb48d24197abca65f691d9bf282f4ac89277d0bdbb401db929cbda8582e67594702647392307047828f8504dd0e3f2028f9ee3e74067d8c9b93388873aea9e14db44575586d6cf7e9ef41185c2d51bc59fb92cab3f92d3c125516f133b7b43655eae1a1e0add1edb61c8239760fb5797cf5d1e78fd4c47de22f61f80252ff71ffebcd7b31ca62e0a7574649849ad406ea05a3de8dd9a0fa9543eae0413930a92b1679cc2476b3bdece3219136416abb3a636ee0347bf457454c26a6770a8224c10239fe9cbf3f518992f417de5d9662fff8069533d455836c59e616823d42453d4fc9a3cb606b7e1de6aa1ceb7caa7888595c478030196fa2f8173b0f618809076c3c14f506286d34b3183ce4e73e6334154a15f5d46583bd8d9ced71f60fa171ef05a1b50ccd6bf3a2116a4b8134cae7146861b3990bee98fe611d454b445685dca8c871ae6492b56fbaffe70b7df11fc27a0eace4cb947937f7d8d2388117a47c9858698ba5aa952b1f79f12fe8ebf158e11c20c2fa194d2b5b5ec4b7712895c2628811d28c2272fa2b6f7204dfd3662acd13047b4161f191044d6f95fd251933da855c5d1378c87305fa4c857954c3c7e411fc6c857bb3306aeaade87b9daee7a9166e7cb698387652b0b85845ce90e03e0101596a237dc97af6bdb02c8b433a9eb405fd59b2aadeb4188ded00e853ea0238f98a597b02ee4232f2de9e13ea255450ed2d94c54424aabfc7a175f2aebcdd3b5df0e906f2d8e582123df43ce26e120ffddf429508112f699c58b1eccbc7d58c08115ba0b192b5700332bdee539d408f1dbb677b0c1c744cb707589333955d24ac89681114bc05d226c8dccda5acf69389698b2afd96d3fa5bd6d50a4f2188641c7b57384752d3779868893fee55cc734ca11a7c98d230286d03e79a2283f0d68e9f6f17b5bb82af1e1bf61d87ab90157061733b5142b9606ac1524720bbfe9e8e898925dddf6439b1f0bbcf4fb569d4cfce4a4b883579e0ea6361f88380cf28fb22ea98c7aa7e5513b7da35ba5e5b6fdb644a117ac402ff9191b71690f7191c9da6e7ff0685bf0541be962c0ecdb626bfad48465e348f88745d99c887590598ccd174da016acb11ba49c646f4d8ab69fa8d4272a9e6f0b3dfa8a0f424e90345d44352beeeee37a196eeadef2c856ba0fc739f79975bbf90ecbdab4637afe4d0bf372b1a63235783ae4f10600f7faa523ac4e69cd42cf8fab9553c00d2efb2ec77eeed38a89a8455e06b8846f944d33d70d9d75ada68bd1f08cd23705456c7801c488fa37b09ef8573b15a7d66db4c7284e322248760bb69aa8c1d05e001ba4cfa4bf5fc73591b9b98ebd906c3b904681a24342e50fd5965699adcbd1820c19aa7b9e79776e3943e986b9bf7baf608e10b77555d92e309e069e39b306087715fdb1cd63ba28f0172858eb6c04a6b7c7569a12fa0720c700b8acb0369e3f2efa2933528fb76b91f3d60effb38a0207f74058379bd50541b8379f018672722e9acc354a0b03c24edbe640c23e43eb3ad09433e05fd8da2f6b59e97d6f1d93ece552b55ee9267d98ea27f8ac1856b9c00c1fe43fc6f3f1dd32f252431bf1cdcab084323dbd975b9bf0b38bd921e6ee4ffb0cbca83e559c7f420ae9248441eded0db5edc7a88fd9fe8c051c6ab771d94d5d54b83b38bbfff46a69ccc448e02c40fe8fbed0436e08d42d2327759b2b2d6a533b68566f383474377627df628284c2d10d3615c7b712464e1cdf2dacb02e4a40e3bb2368069b70bf1428005ce8bbbcc87707a9f0b091582180c6ff112ec009ce1b14e58377e5bef7c33d7d5d77c4909fafef2d6fd8fe646320c469a431f5dc7bf70ed80a130e09a0990c2e88eb97f596aa6f02c3157ceb92f4b4435d2c57292b5010d662b744f148f401b12b4eb47c03aa02b3d0c734cb8487424b3d5bf8f657e02639c3cc6e7520300094358ee7124dda3731e0dda0a3f9d78fb7b2697b8369585859685c0767d9ea3d9a1b707623ad4041e7972d381798b0f4c8174d97a7fcd4eee4601e4ad20d57dfd0ce326f275851c669e26bf1772e4e5ad2c53fdbd164abde279d863d9880c377e782ca275c31d22a3ce1f9e179d33e2fac4ff6cfb89adfabacc36e43e436dbef1632f21da64c056cb55b18a593c7fa29cfd6c99d82e416aa29f167bb48f3ca42975e124965d973db74acb8099e788681cde998080b1141f332137ead94bbfdce8f3a273e0f87f6958750784c52f32653cca9374c26054e1fc5dbf2461bf2302e684a65a36d26dd1e74908aa85b1aa0df6eb6d2057bd39ebcfdbaf18f3484313878ea7c8af31f8b32b5f02f5e614c2f30b41f3796de53a512d207e61e59da98d8162a2597154f9ea3645d2aabe24e19ad7cdd06aa47b7e020a1c0725da470812e63e6ab397df9b233d80bddb735fa0504f82787f37c463d918d5cd349236a819176c3920a8b5596e89cbff9222e4b0b9c99ce71192268ed7b69927e792384bc62b4ed3ce3dc6d87a6543b9c6ccfe95246a7880c3f7afa0441a5715a0c0ffc93bf71af03099b12a2e7ee97fa3be96b1a3fddc28c7c9da142c94aace12d40159f65e3506e5bda194857bae926c5fcb19a2a7a4068717ff3421afd8debe90c661b27afb565f4149d0cf70f766d4b679cb8303f960b6f72883bc2a1ec75499f1f581e3ce67a62a52bc2cc2cd6b856f254489adcaadf5905ea2d643dc9ff39fefb595db9a0b62c2c89c2a7d6e883d1b14e8fdc3642824ec3666075051ca21bf3d650cad9ca9283aef1ba94f068f43de12bb2cd6bbfdfa1915d20ebf7a57953d866fa9939860f9940567e6f716afc7742faf93943df3e1674e4aef051f9c660fb1889a6b7094595c762aad41396ca9611d479857a0184e4e0b15c6c0773856f7927c92314daf73398ccc16e231063d13b5d576685b18bd46d47f0ca8475d592bbace302c2a8e9e8ad70cb7eab448e5a007e444bb5da1f26f5b9c4f41b292d0afbd7a1b15d6d5d0fbd845ff87516327fb10790ebfd7952e8d82b4836e97632b53e32de4f8e52e07049e564af6e5af514c125a02608d5ee8674e71ef4e0ab844d11f022d8d404e8efe0fc80b4b4b615522c254e2507f1ecdc327ba88883c82e9ec4e27cf7269ce6ef75a084d40590c4fe3694b6be80acd00d564daeb84ee2f829c113632bb7e84ad2c01c90d5dc2603db9f0796afb9711ceeece568507657895652dad30f63697753661387124e7ba4a8af15c60584beb48d4da7824b9485f36f069302dd6b263b02dd92e53577e52abb697e2bc14b9bcd737ad65d4fcaf759873bbdeecd2917bb162a04308d897e9703dec7487cd134c20b519aeb341129bdb1dfbde1f838f2befc947c601830b895fcf44e1d483a69acd80ac2c5046acf22417b45c7019a0182eefa7b1236cee3b11b215971bc111ace7d118bafaf5c50873629608b84767630c99fbc3fd9de067080feac1a9d183d7668e223167e429f9f22b9484cfedb6ce5017a3e72b7fef014963b7c12bc8e310b5878b16226c17bd9641d8fb2f3a4fb0e7538191adb8e0738eb7d0aad40d596424fbded81cd9fdc6001d6f86550506f9d4977af8d3e39fa293aa4e1b70a52e5b83ab9c6888c2ff096977fffe09fcf1641627f083c73b389c3d59ab9606e9c4ac7cc60fd7edcdaf0380321641865485a350ecaf845ceb9c76e9b8235f632ad672e2ffad8f4818650df931c686d008517c9896efb6ffecbdbbfcf8658425cfabdd69eaef0e8678bb5280f24bd713223319d45a4cb30e915cea15e9fd3ab4cb326d5f035eb4697aba3766cc7045c3364fa037ceddd0a5af3eaaa87b56eab405e959c268263b15a020b116c589f5e780a764d34ec411c8c94741e512949334a772d54be2cc2745c2e30a652c819cba10e6ea2553ddc61d180b68f9a8abdb5bac89381835c560efa87125449dba0e38244be85224b3da23583b52f8d27251e6c413d4ccfc41f3710076899ed1c20d9dda638d52ddb3e9b8e1cf3eecd2b35be614b9f2497b02ec08a55acb285e8fee51857e71d87e9f0d35a03ddcbd80ab714d1d6654822f33249bc25421dc0765645599c25bb944382eb42fc2af88ea8e26df2bf39a41731f0460484be4ac6638935ae8235c0b33193265f4cb670918e4f7ebccef1a5171b011afbe06f55dd1b8da1d4636e3cfff46578d01543a7553310802d6826065416d9111b83b19c89449667e4321c9230a2e27ce112970805bb76e898e1b74e57f6b246865cb7b69a96f04bce4bfa1b4f3a3ef94240df4cc7ac3ad5ddbbdcecb4e0ec8bbd2108edb9fa15412c31f95c20409b2fec01f89252f6f63efbc0bb26684662bce4d523d7e8d57324f9d9263ec70e37d736011bfed4692fdc670fb2914ddf3e645d09f6580b5cde28625c5a155db1cb094e928d973090953ebaaf9936da746abe723663dfa2d06f08644174aec0d2817182b64f7dc1a22e60973f545f745bcb0e1a3293c1788d89813d09009c231f6d64fa8d4894e580c4f7d2f9490220b1af6f005085b991f6a6b5c61703ff6f1061d0d4c24f0bd71211c04f3c919e37d8e9e7ff20f4d6c3bda111064432af744f86d8dcf7438022e287f361a209bb40218b4a08973aa72cc22ca80bca7ffdf323279b5c55fd15566e413cfef421eb513a80d5a4e6b64c14cc086e39d8bf59d991eb467fa8cc90a227a656a0c2cd1fdf84f1f632f81265ebf1546e48720def12a962ee5059f474013209be9c262ee56b8a83930567a86ec7ed35d0ead5b107ce2a4010e5149990e2c91298f1f6dedd72b4bfc59160e6d773d07318837835bc821816a0412866f006c8eedc49a28e4473df0a9278ea4f3c9ae17b0b07d014823ab3f7592b0e2160edad4ceacddd2d984d51dff8b9a63fcd7ce465dc4fb917d1eb11850a73de1b5dc4490a788b2b6026f2a2591df617e00f822e576a5c74f726e1b9c32ce32919837fa62b93d040e949e165968a5c9b4209e3ab1836769762bcedd347ea96be08cc357c41e977fc6f9718f53e227ccbaada30e31016a06d3121e0b7b351ebe78e0c80244d36d660de1370b3a307ca304456d5398e8b89bd54fec2c100d309ca00172061daed4f00c165e6c5f0e94a080f8f0af17ed80997427d1fa983c6d3e5b36f1a01c3138cc7c166e8bab6fe32ee01528bf70b3ecaea53ff1d0de3abc689f338ce690e6fd83e9e9d02e4d5fb7565ff4ec67aece8b570e05652abb7409493e924a6c9bee21bb96161617918546221662cbdcbd5af4727f28b49185b2e8a473e6f5e12221f8be8f0f14656cff841d6bdbe2e33526fba00da20f87413dbd34594a2b1b08eefa9b0d46c81adc8de5f77eb91110828689dd1dd0c694ec99118a42f288aa8a3ea2fc099836e9d43483a1c789ac2db3108007bfbdfa77ac512e5cbd782ed41a45f52320c68f9c99eb272dfbe52ca2236537a08105363f68b7ffe0db167395c2cf02d927894204d0b086a43712dda4c0ae5b7cffdb4880d614c3e481d66fd4c2e7dcd2b8293b8a07f27ad8a32c73c236ffdeb4b209bf7d40135a6fe7ea37a324eab00970a32830f0415"}, &(0x7f00000018c0)=0x1008) (async) clock_gettime(0x0, &(0x7f00000041c0)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000004080)=[{{&(0x7f0000001900)=@nfc_llcp, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001980)=""/57, 0x39}, {&(0x7f00000019c0)=""/228, 0xe4}, {&(0x7f0000001ac0)=""/224, 0xe0}, {&(0x7f0000001bc0)=""/188, 0xbc}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/219, 0xdb}, {&(0x7f0000002d80)=""/184, 0xb8}, {&(0x7f0000002e40)=""/48, 0x30}], 0x8, &(0x7f0000002f00)=""/253, 0xfd}, 0xffffe580}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003000)=""/222, 0xde}, {&(0x7f0000003100)=""/112, 0x70}, {&(0x7f0000003180)=""/64, 0x40}, {&(0x7f00000031c0)=""/166, 0xa6}, {&(0x7f0000003280)=""/164, 0xa4}, {&(0x7f0000003340)=""/93, 0x5d}, {&(0x7f00000033c0)=""/32, 0x20}, {&(0x7f0000003400)=""/196, 0xc4}, {&(0x7f0000003500)=""/16, 0x10}, {&(0x7f0000003540)=""/73, 0x49}], 0xa}, 0x9}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003680)=""/131, 0x83}, {&(0x7f0000003740)=""/149, 0x95}], 0x2, &(0x7f0000003840)=""/15, 0xf}, 0xe9b}, {{&(0x7f0000003880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003900)=""/72, 0x48}, {&(0x7f0000003980)=""/56, 0x38}, {&(0x7f00000039c0)=""/172, 0xac}, {&(0x7f0000003a80)=""/132, 0x84}, {&(0x7f0000003b40)=""/70, 0x46}, {&(0x7f0000003bc0)=""/148, 0x94}, {&(0x7f0000003c80)=""/182, 0xb6}], 0x7, &(0x7f0000003dc0)=""/60, 0x3c}, 0x4}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003e00)=""/187, 0xbb}, {&(0x7f0000003ec0)=""/219, 0xdb}, {&(0x7f0000003fc0)=""/68, 0x44}], 0x3}, 0xfffffbff}], 0x5, 0x0, &(0x7f0000004200)={r8, r9+60000000}) (async, rerun: 64) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004300)={&(0x7f0000004240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x57, 0x57, 0x3, [@datasec={0xf, 0x6, 0x0, 0xf, 0x3, [{0x4, 0x9, 0xc}, {0x1, 0x5}, {0x1, 0xa, 0xfffffffe}, {0x4, 0x1, 0x6}, {0x3, 0x0, 0x79463083}, {0x4, 0x5, 0xc}], "37cd69"}]}, {0x0, [0x30]}}, &(0x7f00000042c0)=""/12, 0x73, 0xc, 0x1, 0x9, 0x10000, @value=r1}, 0x28) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000004340)=@bloom_filter={0x1e, 0x6, 0x2, 0xe9, 0x4, r1, 0xe, '\x00', r10, r12, 0x0, 0x5, 0x5, 0x6}, 0x50) sendmsg$nl_route(r5, &(0x7f0000004480)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd26, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x6, 0x10, 0x0, 0x0, 0x8, 0x10}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000045}, 0x4000000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000046c0)={'sit0\x00', &(0x7f0000004600)={'sit0\x00', r10, 0x10, 0x7800, 0x6, 0x1, {{0x1e, 0x4, 0x0, 0x3d, 0x78, 0x65, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@rr={0x7, 0x1b, 0xf, [@rand_addr=0x64010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote]}, @generic={0x89, 0xe, "35870e7198682fa4cf2163c5"}, @ssrr={0x89, 0x7, 0xd2, [@empty]}, @timestamp_prespec={0x44, 0x24, 0xe3, 0x3, 0x9, [{@broadcast, 0x80000000}, {@remote, 0x9}, {@loopback, 0x8}, {@empty, 0x40}]}, @generic={0x82, 0x5, "d7ba3d"}, @ssrr={0x89, 0xb, 0x6a, [@loopback, @multicast1]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004840)={0x18, 0x15, &(0x7f00000044c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@call={0x85, 0x0, 0x0, 0xcc}, @map_idx_val={0x18, 0xc, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000004580)='GPL\x00', 0x7f, 0x7, &(0x7f00000045c0)=""/7, 0x41000, 0x10, '\x00', r14, 0x0, r1, 0x8, &(0x7f0000004700)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000004740)={0x0, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000004780)=[r1, r13], &(0x7f00000047c0)=[{0x1, 0x5, 0xe, 0x9}, {0x0, 0x2, 0xa, 0x8}, {0x3, 0x2, 0x5, 0x1}, {0x4, 0x5, 0x4, 0x5}, {0x1, 0x5, 0xc, 0xa}, {0x4, 0x3, 0x9, 0x6}, {0x5, 0x2, 0x7, 0xa}, {0x3, 0x5, 0x10, 0xc}], 0x10, 0x6}, 0x94) (async) writev(r11, &(0x7f0000005c40)=[{&(0x7f0000004900)="47a3047c86005482a72342637aa66df92c3e5bc49ad599418b22aeae2fcb18327da782a08a882251254b37646af289bd59fd427e785e255d0a934e79fa24abc5fd1004473827f45da58d9a11bdd650f3656066777f77249b7544e3d500ef66f0b4494d45640252879f5ad67299ede85ac1a557fc974eb0ff144e", 0x7a}, {&(0x7f0000004980)="7eb3a14d978c3f9e32f3c0102237614e2160b78fd86cbd1ca19eeffe5f391aefcefb255cf0e3c37eabf48807da1e7277dc169e3071f80cbac791e44451954b9851a6d568e35bcff45b8d0c09c9b5f289980a4efac80cf827b08fd15e4ae8735f75481c2746fc19b35914d8c2115da2c55ea02f73d41af1a6d0841c63f726c357ca3c86d739559b8dc123c849078692a51854913626d22cdaaa8e936ed2aa244c8971b4d86d35f61ad2b69d83ddf858935c95b65894dcfadf97a92d4601cd9ea9dbcffbf03771375e00d97e2d444c1e319fc47e497252d0c845c3884b606c7bfee5b3364bcd799ea69e60b7c7", 0xec}, {&(0x7f0000004a80)="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", 0x1000}, {&(0x7f0000005a80)="7bea792ac1d09b7ecf28074e9a6906bf78a83fd466776577658b4eec62d65b4b47dc72aaf1d29e19d40cda9a661c9591f173dfb5c6eeb3f4d702472b121247dd6c5e3f153b392ded612e16451a0fd501", 0x50}, {&(0x7f0000005b00)="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", 0xff}, {&(0x7f0000005c00)="53bdc0730b5821ac22e532f4b12d2e2578ae42af63a1c253bfc02d9bbee75e8ad8", 0x21}], 0x6) (async) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000005ec0)={&(0x7f0000005cc0)={0x10, 0x0, 0x0, 0x40118000}, 0xc, &(0x7f0000005e80)={&(0x7f0000005d40)={0x110, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7ff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x401}, @NFC_ATTR_VENDOR_DATA={0xda, 0x1f, "b3c3534a897deec6d30c8525da243db12ecb70d3c6e6e2f79c611c36f9e1819d2595d4cc4fca36609700a44f459be094e9a10599b1a9481c271749960249a00b626e09abd0ea8245bc622e39c493efccb9510df04ea29048976ba2880ca0b45ab3e4e9b372a6d77b560ee97cbdf9ae909d5d70bcd28ce87b5af28ab3e25eda338593a58bef14cefe4f0499af0a080a0d69d83129f161f4c3dff33f2b43d3013671cb37f269ac26ad0debe39778f60778d62b9e02da7ac1bfd01f887dedc46a92965e6bc3e6e7bc8335d5d476fe6633d99da01b26db56"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2d}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}]}, 0x110}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) 1m9.252370626s ago: executing program 4 (id=3327): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/126, 0x7e}, {&(0x7f0000000140)=""/158, 0x9e}], 0x2, &(0x7f0000000240)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x10000) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000002c0)) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044880}, 0x80) r5 = accept(r4, &(0x7f0000000400)=@rc, &(0x7f0000000480)=0x80) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000004c0)={0x18, 0x0, {0x1, @empty, 'pimreg\x00'}}) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x94, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ':\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x401) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r8, 0x601, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x28}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0xc044) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000009c0)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r7, &(0x7f0000000a80)={&(0x7f0000000940), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r9, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '*'}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '#}('}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000ac0)={0x0, r3}, 0x8) sendfile(r0, r11, &(0x7f0000000b00)=0x4, 0x2c1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={r2, 0xffffffffffffffff}, 0x4) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)=0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000dc0)={0x6, 0x0}, 0x8) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@bloom_filter={0x1e, 0x80000000, 0xffffffff, 0x9c, 0x44400, r3, 0x7fffffff, '\x00', 0x0, r3, 0x2, 0x0, 0x3, 0xf}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f40)={{r1, 0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)='%-5lx \x00'}, 0x20) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x14, 0x4, 0xfffffff9, 0x528, 0x800, 0x1, 0x10000, '\x00', 0x0, r2, 0x1, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x7, 0x14, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}]}, &(0x7f0000000c40)='syzkaller\x00', 0x2, 0x5d, &(0x7f0000000c80)=""/93, 0x40f00, 0x10, '\x00', r13, @fallback=0x56b3562742b278cf, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x2, 0x5, 0x9, 0x7f}, 0x10, r14, r2, 0x5, &(0x7f0000001000)=[r15, r16, r1, r2, r17, r18], &(0x7f0000001040)=[{0x1, 0x1, 0xe, 0x2}, {0x1, 0x1, 0xf, 0x3}, {0x1, 0x1, 0xd, 0x8}, {0x3, 0x4, 0x9, 0x6}, {0x0, 0x2, 0x10, 0xc}], 0x10, 0x6}, 0x94) connect$tipc(r1, &(0x7f0000001180)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x3}}, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000011c0)={'wg1\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000001300)=@buf={0xe1, &(0x7f0000001200)="334682ab5c760e227b0af502e9830a015868b2fa543c3ed20d4eb0927cf0087bf75f8af43d5e29a42937b7c1cfc362dd513bcd22a88310a896204d46331a0aa4ff2f781f9ca72a7cd3b2ba9eeedf2e7c43160cda14d0f432bfbd27f55eb4300c6214d52647410ec4c1a1ec29a6df95642e59f67329d0f371e3c29d00febbb39466b6f869d0ac965c5433e441efc791e0703991e0f4d3e87fb1eba42ee9e23571d76fd4958f6de73d76c69ff6efb2fb32fd06b14ec8821f2d6848215f47ddad8bfb664fb37acfa0803c839ff69acab69c7c7c9fccad863eb928cbe82adf3cb72fc6"}) 1m9.066846709s ago: executing program 4 (id=3328): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000140087f9919fd81cfe4301000000000000000000028831000100fd2929bf64daedcfeb488e63463d8554db65006e87f783980a4d1634c6450559443c29240956451306cf"], 0x48}}, 0x0) 1m9.042635538s ago: executing program 3 (id=3329): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1c}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x88}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1c}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x88}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x40000c0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x40000c0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000caf42ea4d8ab98252134dc7955a29be000a4dc8896121863172418357c1f596ad0a786d1402d9d8677571f05aabd682df52d76cd5f1d7049bfba95e92bcec63c7b0df794b23390cb98e932e1016091a7b61e816e3a21c2ef2d225b1bf49dcec3cea98aeeebe1f6751c56595700caec92b6ff89739109463a538f79184a0b2c6c4ee57fa967be2c8a860de4402046828733b1f738de646604", @ANYRES16=r5, @ANYBLOB="010026bd7000ffdbdf250c0000000800060000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0), 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100), 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000340)=0x40, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000280)={0x0, 0x8}) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x407ab}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x7f}]}}}]}, 0x40}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1100000040000000090000000400000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000500"/28], 0x50) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) 1m9.035591492s ago: executing program 2 (id=3330): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="d800000018008106bc65f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400100004c230000fab94dcf5c04e04bcb726f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdfd809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97010000000000000000", 0xd8}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0) 1m8.855172335s ago: executing program 4 (id=3332): r0 = socket(0x2a, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2, 0x7, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xfffffcd5) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRESOCT, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@delqdisc={0x2dc, 0x25, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf, 0xfff2}, {0x7, 0x5}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x40}, @TCA_CODEL_INTERVAL={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x1}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_DIRECT_QLEN={0x8}]}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x18, 0x530, 0x6, 0x1, 0x7f, 0xbb, 0x4}}, {0xc, 0x2, [0xffff, 0x2, 0x3, 0x6]}}, {{0x1c, 0x1, {0x1, 0x8, 0x1, 0x0, 0x3, 0x1, 0x8, 0x5}}, {0xe, 0x2, [0x7fff, 0xffff, 0x40, 0x2, 0x7fff]}}, {{0x1c, 0x1, {0x4, 0x1, 0x0, 0xeeb2, 0x0, 0x7, 0x2, 0x4}}, {0xc, 0x2, [0x7, 0xa, 0x10, 0xce6]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2ce}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x1, 0x1, 0xc, 0x0, 0x5, 0x9, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x1, 0x60, 0x8, 0x3, 0x0, 0x4, 0x8, 0xa}}, {0x18, 0x2, [0x7fff, 0x9, 0x2, 0x4, 0x8, 0x8, 0x401, 0x7fff, 0x9, 0x7]}}, {{0x1c, 0x1, {0xa, 0x94, 0x40, 0x58, 0x1, 0x0, 0x4, 0x7}}, {0x12, 0x2, [0x8001, 0xa, 0x2, 0x5, 0x8, 0x4000, 0x1]}}]}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xf3, 0x2c00, 0x7ff, 0x1, 0x40, 0x3, 0x6}}, {0x10, 0x2, [0x7c4b, 0x9, 0x8, 0x2f, 0xff, 0x5]}}, {{0x1c, 0x1, {0x2, 0x3, 0x2, 0xe, 0x1, 0x8, 0x7c, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x7, 0x6, 0x9, 0xd, 0x1, 0x3, 0x7, 0x4}}, {0xc, 0x2, [0x7, 0x2, 0xfd2c, 0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x977}, @TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x5, 0x1, 0xff, 0x0, 0xffffffff, 0x0, 0x3}}, {0xa, 0x2, [0x7, 0x7, 0xffff]}}, {{0x1c, 0x1, {0xc, 0x5, 0x4, 0xfffffff8, 0x0, 0x0, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x81, 0x7, 0x5, 0x1, 0xf5, 0x4, 0x2}}, {0x8, 0x2, [0x0, 0x7]}}, {{0x1c, 0x1, {0x5, 0x5a, 0x5, 0x3, 0x0, 0xd5e612aa, 0x59, 0x6}}, {0x10, 0x2, [0x4, 0x7, 0x9, 0x3f, 0x5, 0x8]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x3, 0x80, 0x6, 0x1, 0xffffffff, 0x7fffffff, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0x2dc}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff1, 0x4}}}, 0x24}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000001cdf79397e0750ed4e0f5d67343d166e643eb15f73043914ff26b2f9b6008d91ec6220d33c8225bb10aeb71c04343ed8d6e6e178df79f629fe54a6557eece49a859d6ba3db0a0c696116a35734cc05157d459cb7fc32e8e8f7763c76c48878a49ba2f6b128e89466104c035d1677df0c73bfe66605aa523ab797bdd5706f693c8c348f08b98ef743f26cb9bca3e438d68ccb27c31212342a0f47d497f5adcbd1428426e702f1c9cc862a2e996e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1m8.834190477s ago: executing program 2 (id=3333): syz_emit_ethernet(0xf1, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) 1m8.76854001s ago: executing program 2 (id=3335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000010"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="53fb7bdc0f56297e8d81469a615db4192f58aa8c358d9957d4f84ba90ec0a5bfe9ec59611f", 0x25}], 0x1}}], 0x1, 0x60040d1) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xa, 0xfe, 0x8001}]}) write$ppp(r1, &(0x7f0000000000)="2cd6", 0x2) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000, 0x0, 0x1}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) 1m8.727287094s ago: executing program 3 (id=3336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @none, 0xfffe}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x9}, {0x6, 0x5, 0x0, 0xfffffe}]}, 0x10) (async) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d000f80b6aa883c187282c63edaa1b302338fad461472d9973f4b900698029295938e3a20c23a798bb88410e2247554e77adbc729a361e05fb3477db89e064fa08f0bc302dedd15b1829ca0af"], 0x64}}, 0x0) (async, rerun: 64) writev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)="e710d350b3", 0x5}], 0x1) (async, rerun: 64) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="e8", 0x1}], 0x1}}], 0x1, 0x40800) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61, 0x5f, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0xf}, 0x28) (async, rerun: 32) shutdown(r1, 0x1) (rerun: 32) 1m8.313600182s ago: executing program 0 (id=3337): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00fbdaac2060d96c0000008a65273939128a37095130cce41fc3b44acb60fa0bf6578e8d6a8635b9b124afa6fb2ac70bf001a385ee44ac5d509eadbbdf83552b2282d8d397f51022b18f75ff6094ea42df5a4a7740ba885088e8adc106fee9f82cb26e80bd9d7465d86feadaf8812c2c86d57d2715d21f31d1e5e940d4693c437140a0a2c1088d7edc8e2534ad6f9852a691a5c76987758ec8e01f9ac885b3c6ad9e3123fcb85e024932f7a9da4997751abe189023e84efc17dc34edee9b4308ba30ef4f58fb00000000000000000000000000000000c3b4dd444ce71dd073a57fe5decd3974119bebc2db122a8e38cbc2b0279c11940c4c8283591ace8217c51d9e69a2369ea619a8a7d1508c33849facac9d3229b53f0cdf98d00cb19762ec3852a58f68359854a194722f5b93caf1a95d1e8f576868a7a6989d6848e612806e58faba3227da756344997034d2e1c0e53f12c934401ef90cb4d42a33d05f598777cb43576092407806c6613cc2b2daf8033478893b792d07ed32c2eccacd5efb78c6a064a80b2ecdafd1d5a01d885980f3b2d04b64c551c41b7d99d8efb6ced4d48656ce8f7cac8b302aaae7e347b0ee83370ddc53361a62bb25e686cb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRESDEC, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gretap0\x00'}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x4) socket$kcm(0x10, 0x3, 0x10) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x10000000368}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x20000014}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x10012, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000008100000000000600000004000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0xc085) 1m3.420285341s ago: executing program 1 (id=3338): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x18}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0xfffffdef}, {{&(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x40) 58.284078755s ago: executing program 2 (id=3339): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="030000000000000007000040000000fa0a000000000004"]) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000001d80)={'bond_slave_1\x00', &(0x7f0000001d40)=@ethtool_cmd={0x15, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 57.313700216s ago: executing program 0 (id=3340): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792432a4fa650c512aee994a56462712cb064ecce5e7a9ce0a575a4f7952cb768637e60bd5d2e4b5992de991371274fdf535e001022e25659a7c85615c1b88bc894123c090014e8fb87efecdcb73858479526222b22ff81971ef49b2cb0dcebea6d90e9c1677fbefd35893d883a2c559b7af8db8b2d89fcc8af461b2a74af360eace66cec40d927006bd666c8122217c27902b3933106d0cc5bf6fec345ae9606c3c1a3000c94df67ae600900ffa2f49ec035883e27b1a9e9dff3e8bfc7d1be00f1a0820102b19000000000000000009095601e090012086dee84efd375f0642ed261765d3b9efdfbed9b430bcf04060000bdff1c8bcfc00300000000000000ab5d5f299354997c8bef9ca55841a57eddff9220c67c9e17bee524c3dc74c0271124cf9e4e2d23f7062351edf77c7129eb89085967722da6cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd36d486e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6ee4830d87a347d448b0737e852306b4713e5ce6cac6a27e29f164b9f16d6f045271b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b5e45a209d48d6dc2389d7f34cb9c02cf517c8ee8a9b6159ce895101c2ccff2bde95aa860ed9b8b6d6b8fcab7663d9bd8415e6f90fdb007b8f3e0ffe3a638c4fd88d20d235173720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a900e1d8cf81bcb1d2620bee688eb0a284040000005cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b550a13d0dd35092250b7d00ff03d5314fa8d37932055bb6d30d0000cad2375a34c7f15c3096f31e6aa6887864f62760ae35214552982bba84d92b1261251330dde4cf97b7cc6b2349e4f7a56003f7303d210fccd2efe6cda2595aacc36db66ff83af576b56dfbd40b15d569244d7d6e1182c4fa829c3f86acd17082bfed73ab9ef37705f9d2734801899e248e1a7155e28f000000000000000fce52263e3953a6f8560f852602ca905b58a9e2dbf16dd0322d0bb3ceb1b01752230bcbbf731701b2b1768aabb9a002090c09ab606e91ad9d88e7205464594add8691b62d55127cd891b8abe4358697e1b5f038773c0aa220cdce78b9346adbd72b293e66ef1a04905aaf6bd31e8d40d425d21232956ee45935d7adb2bf9fb37ff145472c58dbc8db58d0cde99df77d86ed71070000000000006d5cf959fb84c9f8ec46ec9af313d13d1bd85d57f598c00eb7bb8b6b4ff5875a50e2ea3287cf0f838bffdbf985fdce1fb66979b51cc6d6d6661354f33986f7acee499e25e3b70db6f15d7f2bfc0000000000000000ff7f00009eeb78c3d2e83f5e0eaf5cec82f45884cb0394271826ac2d5cc0afc4e784b515c659901c5c6a8573436be7b0f64c6176ef37db239a1ee9839436e951aef4196798d518a4820a241cec1b3e4923dae4c87d460900000000000000de7b13645fc6921a759e2c23153f432a3e5167628a94aacd0f40543049d8ef9787b56006227f143ce5554837675b93eeced66fe71bbe2c055660d23af1c9a83b78d0fde1f9dd526858a320563807a1ef41829913ce0b280010dca0cb3a98a8986e8e656dcaa6ae4ee6717a29e50450688763f1b17c156b860ba0d5a121d00ceac30ef5e104c43d76074c3884cb8fa504ebc94f7c83e90b6cad8d2a02df007bd585f4472cfb004cd9f09995000000000021000002cfceb7feffffffffffffffb1a6c40ac666744ca6c8fbba8452b686fd9b6250edd7d86ebc35898637dd88540e40d5799c11ee9883be26229eeee3941494fcd4389af9b755843126338c346b4d50a5b8684ad74bad46f4ffd86292d72a933fcb7304aef4b4a4bf6e054fea3549e08c0dd2334f485da9382887c16306176f73f029e2f9f8145360cfd5ffd66ae82d51e683ff364981b358a5f48af10059a0716951942eed021e41ba076d486cd095ffcefc3e8b8ead226c5a640b06fc13311826d024248f14b62a7fb0f9b95c9e23e7d29aca69e77db40dd00c0b20e43e300b1a46e243e2a8321dbb1270a22d9a2368de08d625566f253f0760abb44c11583fa5b914ab298ade422e4c0ddc7b17dd2aa8ac94d93d6b590000000000000000000000009b90eb1db265c18521667d305886e9c47ad357a76be0c9ce899bdd80a51a2017190a590d092bc500ea71b338098d1007517c1d6e785d5e0975ca2c2edf221b30377e61fce8bf47e7b93da593d154caca75b1ef1273aa501807005593ba45d219d7c656be0fb900000000004093461ceec5fce099368e07060c21cabb846f2447fc7223731787bda817113489be9925b2f568b15e5d22c8fabbfd3edac460c70a5619a043ada38fea3b104f9c1a473b7820faecfbb40b5e0d3681013c0cb2b8acc1ceb5f790210a3be07b2727c4e5a5d20468b3ed35f9a71519904c6dd76dee5738dcdac1f4358bb65c1aca8eb0a65aacbaaca92cc7cc553b1c5181d81c15ff4eaea3bcbfc4e0d06bd8d2e2d941924f860f2aba2253b9038e6923b026b7ece3e9fcdf6aa14a65bd6cd7e78457dac1fb3cdc421d6059e17d44e378189035c2fe489e5b7a87c23ec952e2affbc7a4c707312b17a5f428527cb42a8cbd072490eae617e6ea32ee7d3055bfc9b1128553cb963d3873115296a8bd2efb7368ea2727b294d6eceee49ad9093738a3b1bbfa163a917380953fdc3a443a6585925ee14a817390a655c1988632a414b304d688116d79693efd80b293ddc89bb27529c34f4f8ee3ddbaf1c13a4e15186353efd0ced475794ff5f9b0580f2fb996928f0ca6d1a9f4bda1fe9c1bc2e657448c00ca6afb2e5b1c336d657c87f2634db46e2e8e82366a2de4dd41ca0a26ab49d5d357e5a8af73d9504af230513acadd2f0d9d99c4b6e4ebf68582cf8dc4dac990b216a6a216b0cae87a2339fda14e546b224857f758cb64ca2dcdf32b5420ad9f33dbaeb36b7466c5129508d57329f57ac682757e398c4d2a6f93fb1dfc2c840e06bd6c0d7ceedc3721b19c7c9fc1645cf32d79807c4d3e0898ae2a829df5c03834bc2558aeed652399a9cf9e5c859d3c5c5341b329fea445d2e040562a813c35ed1c1afab50aeb12eea9456adf21953947413c03af836bc339355250daeaca253f809493c75c9dcdbae3a76753d593623348e82b1e9c5480fd099b6322b6c6158ebe8ecba0ab364ce4a58e244b76d16b81905878c4caaad1f54cc11df97a50356638016a7e50a92ee55af3c64ae2b95653373d3471c0f26119e18426fae7739a9031618635a257cf58b1e9b8264b6543d6c1c372b66d9a5f96198ae01beeb398744ac4b6f26b568cd7b792039ac4e10f9307b1a8dc268a5d2af3dbce55fdac6d1a158a2243c679261aa080acdf0d55753d3163664df7e4129f12f850c694dc140cf9380687da9914be848a01bc7f5278eb3c3210664b62743887b822814c58a3304b392c7e2a6e64576248af87c0f995af921be86e8102d8343c0de8cda3512f84c894ed6c0206e41443c456467c42ff9ddad36e882cc5287394aedd8d413a061a2894f2ef5fc3072fc8a0c5c2a9f94954278c3d67a0b0fa6e002ce0840e3405d166f037a6e678ce1af6ed9c6e7023f8663d294f4bee1effc148e096d2eb91903c482548c0c5b135a31ae6903a9cb9a40a89155ce15dbe3e373a7ac4c7b4d391bdac5268b2d419f13aeb86f68725a4633eb883417bc23243a302ccc919e0b141ae8aeb7457264f8cad663255db96efda704cef9428ffeb16acd3295a36b1e514ecf65944d5c754e02410075714612e7841e6c7e1e2366bd6ccf335ac9dd35332ee78aaa2ff6950c81fd53db93dcebe8b9c42aeefaf63150d649bd1542014ac64daaec18e82854454967e37a6dccea142f2504a6aba4dd44594c230101a4574d56a1ff4f5b7dd246f7d607ff6f8bebf4fd7e709122f3129bec4dd5b4129829d15d1d3b1fb82e341a325f7863c5035a6568b35327a8364d98bdf516e27b57976af232128856692b491469c525eb2a48d4794459dae9213bd0088206f364f8c2c727e3e1d1a3ca9f1b40fea92bfea26189d3bf91e92c1e8795334cc268e0b31cd354701eff8adfa247b848b0ae203f78380b818c0afbe01efec884ff0a6cecfb726886bbdaf78ed3ebc40556b434d0fd81799d96cf302e1115c8cda0b4c7f27c8b4ad1a5808f6b908816ca7483f94fbb8391e6533833470c9c3352d70ae03bc8479e64caf16d5fabe77519aa196fcfb4e480620ef153a09e1dd59490ffab33976fba5b3126dc509e4cbc94bd59f745319efc4523e1f0387968be039a920a0abc8aef753f82ca796055bf28affa706df1312a898162454ff9010ee5fa95d56fa608ab283481c20d0fa2b3149a54c268d2b77ad6ce63f97e10bf3baa14dc7a4492587ae1e26237787231d000000000000000000000000003ef8cbcd3ffe8d35974cbb469c41e8ad0b58c5376c4fa943d02a4bd12dab3cab9ef4e62cb10820de0d87ddd79f820879e4ad8868f81cf931760d5c6b9c7337e8efcaa4e63eed8e3eb668f104cf1fa53fb300acb4bd61371d6f12165e9814d2517cba3403530d06737da5cb6ca5996af9a16cca9853430842bdf0995c53681e4a2b0bd1fdaeb0e7839669aed97a6f6f25f7de9ba0ea23384b85957faf49d62dba00af3c7e3c817e13e63c487fc167f2aff6e5a250937bb43b0a8e9d12ff551e6cc2d304aec2a5d843ea327c0a3379594726b92b1919367f3b1711087f160503b3b37170579ce2a664b21d86aca4cf19c1f36d264b0b7ba3de1e020601418d981c6f596e48d5cebe4ff0fb8046e87a5c4d95c079350000008a27cfe092f2b6b3f29599c2fb70e4ff3b6406006f07985f711ffbac75353a4dd0485de8728ce21b970a69815cc9573bf823ac81cb5492fdb730d65febcc86fa51e69972400147308c9e1d4245519934af03cecad1281994e50fff10b517b8a4af87e2cfa0bda85534b381e26c6d0129a0331c4989de36a7ce1fd38038e435d28ea4301eedc52ca3395de54498a4ed8f7d9b777b482da2b69161db7996e196e172e594b5673e3f4c607f570daebc30e0a5fbeb25a0aeb3c6e875aff6aeb6c6865eef373bce286a5557f55e28c290c1780690f3f63e6fedb4d942ddc4182e335e52d0dfe0a26108234b51d77073ce17415ead4cd526952e38353834f71cf0afff05ca8239aab1927ac1453201dd18caa4316814554fca8f579a721476946beae9d9b763b2e42dc69658a0c5d67045028aeb1135e3fabf7b7aa76ec475a06a771bb914188f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000c4000007008209", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="70f400000200000016000300686173683a6e65742c706f72742c6e657400000005000400000000000900020073797a3100000000200007800c0001800800014000000000080008000000000008001340fffffffe05000500020000000500040000000000ca25e1df9cffcda26153d70acf18951ea08254822503463875d603a22df3e19ab1bf29360947d5607361254a1840943c45f2f9217bd8561786f8bad4b0a7ec801f8ee8baccb15464798eb4e819e4a7954218a88d9ee89bbffe75706f67aa1a"], 0x70}}, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0bffb05f", @ANYRES16=0x0, @ANYBLOB="000325bd70000008000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xc, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x33, 0x2004c040) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) (async) recvmmsg(r7, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002300)=""/4067, 0xfe3}], 0x1, 0x0, 0x8}, 0xffffffff}], 0x1, 0x0, 0x0) 56.264017722s ago: executing program 4 (id=3341): setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2d0, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x4ff, 0x18}}}}, [@NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x5}, {0x7}, {0x5, 0x8}, {0x4, 0xa}, {0x3, 0xa}, {0x2, 0x4}, {0x0, 0x8}, {0x3, 0x8}, {0x7, 0x1}, {0x7, 0x2}, {0x1, 0x5}, {0x0, 0x3}, {0x2, 0x7}, {0x7, 0xa}, {0x0, 0x2}, {0x5, 0x1}, {0x1, 0x3}, {0x3, 0x2}, {0x6, 0xa}, {0x3, 0x7}, {0x1, 0x7}, {0x5, 0x3}, {0x4, 0x6}, {0x2, 0x4}, {0x6, 0x3}, {0x6, 0xa}, {0x6, 0x9}, {0x7, 0x1}, {0x4, 0x3}, {0x0, 0x7}, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0x7}, {0x3, 0x3}, {0x0, 0x3}, {0x0, 0x2}, {0x5}, {0x3}, {0x5, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x1, 0x6}, {0x6, 0x3}, {0x6, 0x8}, {0x4, 0x7}, {0x7}, {0x6}, {0x6, 0xa}, {0x5, 0x9}, {0x4, 0x4}, {0x2, 0x1}, {0x3, 0x8}, {0x3, 0x8}, {0x4, 0x2}, {0x5, 0x4}, {0x0, 0x2}, {0x1, 0x4}, {0x3, 0x3}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x5, 0x9}, {0x2, 0xa}, {0x6, 0x1}, {0x5, 0x7}, {0x7, 0x2}, {0x4, 0x2}, {0x1}, {0x2, 0x5}, {0x5, 0x2}, {0x4, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x81, 0x6, 0x200, 0x7a00, 0x1, 0xa3e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xec, 0x2, 0x7fff, 0x10, 0x5, 0x490a, 0x0, 0xff]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x7, 0x9}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x178, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x5, 0x4, 0x2, 0x7, 0x8, 0x5e]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x7}, {0x3, 0x1}, {0x0, 0x3}, {0x7, 0x9}, {0x2, 0x4}, {0x7, 0x3}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x8}, {0x7, 0x4}, {0x3, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x2, 0x8, 0x2, 0x7, 0x6, 0x7]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x9}, {0x3, 0x1}, {0x0, 0xa}, {0x4, 0x5}, {0x1, 0x7}, {0x2, 0x6}, {0x6, 0x9}, {0x4, 0x2}, {0x6, 0xa}, {0x5}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x1}, {0x0, 0x4}, {0x6, 0x7}, {0x1, 0x8}, {0x5, 0x1}, {0x3, 0x2}, {0x0, 0x6}, {0x0, 0x6}, {0x3, 0x4}, {0x3, 0xa}, {0x7, 0xa}, {0x2, 0xa}, {0x4, 0x6}, {0x3, 0x1}, {0x5, 0x3}, {0x4, 0x6}, {0x1, 0x3}, {}, {0x6, 0xa}, {0x5, 0x4}, {0x7, 0x5}, {0x5, 0x4}, {0x4, 0x6}, {0x7, 0x9}, {0x5, 0x1}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x6, 0x6, 0xff, 0x6, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x1b, 0x2, 0x5, 0x6, 0x6c, 0x2, 0xc, 0x48, 0x4, 0x36, 0x60, 0x4, 0xb, 0x5, 0x12, 0x48, 0x18, 0x5, 0xb, 0x44, 0x5]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xeb, 0x5, 0xfffa, 0x8, 0x81, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x3, 0x1}, {0x1, 0x9}, {0x3, 0x9}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x3}, {0x0, 0x6}, {0x3, 0x2}, {0x1, 0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x2, 0x3}, {0x3}, {0x5, 0x6}, {0x4, 0x2}, {}, {0x1, 0x3}, {0x5, 0x2}, {0x4, 0x7}, {0x7, 0x9}, {0x3, 0x5}, {0x1, 0x3}, {0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x2, 0x6}, {0x6, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x6}, {0x1, 0x2}, {0x6, 0x2}, {0x4, 0x7}, {0x4, 0x4}, {0x1, 0xa}, {0x7, 0x8}, {0x6, 0x2}]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x6, 0x1}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x2, 0x8}, {0x4, 0xa}, {0x5, 0x5}, {0x4, 0x2}, {0x2, 0x5}, {0x2, 0x3}, {0x1, 0xa}, {0x2, 0x6}, {0x2, 0x5}, {0x0, 0x5}, {0x6, 0xa}, {0x4}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0xa}, {0x2, 0x3}, {0x2, 0x4}, {0x4, 0x5}, {0x0, 0x6}, {0x1, 0x7}, {0x5, 0x1}, {0x7}, {0x5, 0x4}, {0x7, 0x4}, {0x0, 0x9}, {0x4, 0x3}, {0x7, 0x1}, {0x2, 0x2}, {0x2, 0x1}, {}, {0x4}, {0x5, 0x8}, {0x0, 0xa}, {0x0, 0x9}, {0x3, 0x6}, {0x1, 0x7}, {0x4, 0x9}, {0x0, 0x1}, {0x0, 0xa}, {}, {0x1, 0x7}, {0x1, 0x9}, {0x6, 0x2}, {0x6, 0x6}, {0x1}, {0x0, 0x6}, {0x5, 0x6}, {0x6, 0x6}, {0x2, 0x8}, {}, {0x7, 0x6}, {}, {0x7, 0x7}, {0x7, 0x3}, {0x4, 0x2}, {}, {0x4, 0x9}, {0x1, 0x2}, {0x3, 0x5}, {0x3, 0x6}, {0x6, 0x7}, {0x5, 0x9}, {0x3, 0x1}, {0x5, 0x7}, {0x2, 0xa}, {0x7, 0x1}, {0x7, 0x9}, {0x7, 0x7}, {0x3, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x9, 0x6, 0x6, 0x7, 0xb17, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x2}, {0x2, 0x9}, {0x0, 0x5}, {0x0, 0x4}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x7}, {0x5, 0x4}, {0x0, 0x9}, {0x1, 0x4}, {0x5, 0x4}, {0x1, 0x6}, {0x4, 0x9}, {0x3, 0x5}, {0x0, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x3, 0x7}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0x4}, {0x1, 0x9}, {0x2}, {0x3, 0xa}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x9}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x4}, {0x5}, {0x6, 0x2}, {0x7, 0x6}, {0x0, 0x1}, {0x2, 0x9}, {}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x9}, {0x3, 0x6}, {0x4, 0x7}, {0x1, 0x1}, {0x5, 0x1}, {0x7, 0x5}, {0x6}, {0x7, 0x2}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0xa}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x3}, {0x4, 0x8}, {0x4, 0x6}, {0x6}, {0x4, 0x3}, {0x5, 0x1}, {0x7, 0xa}, {0x2, 0x4}, {0x4, 0x6}, {0x1, 0x6}, {0x3}, {0x1, 0x9}, {0x3, 0x9}, {0x6, 0x6}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0xa}, {0x7, 0x1}, {0x2, 0x3}, {0x0, 0x2}, {0x3, 0x7}, {0x1, 0x7}, {0x1}, {0x3, 0x9}, {0x6}, {0x1, 0x7}, {0x7, 0x7}, {0x0, 0x7}, {0x3, 0x3}, {0x5}]}]}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x8000}, 0x20040040) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000000680)=""/20, 0x14, 0x0, &(0x7f00000006c0)=""/216, 0xd8}}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x2a, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0xa, 0x9, 0x4, 0x80, 0xfffffffffffffff4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @jmp={0x5, 0x0, 0xb, 0x3, 0x4, 0xfffffffffffffff0, 0x1}, @exit, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf68}, @printk={@lu}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='syzkaller\x00', 0x2, 0xac, &(0x7f0000000a00)=""/172, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x2, 0xe, 0x65, 0xd26}, 0x10, 0x29a75, 0xffffffffffffffff, 0x1, &(0x7f0000000b00)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x2, 0x4, 0x4, 0xb}], 0x10, 0x3ff}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xc, 0x6, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x9f, &(0x7f00000004c0)=""/159, 0x40f00, 0x32, '\x00', r1, @fallback=0x31, r2, 0x8, &(0x7f0000000600)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0xe, 0x613}, 0x10, r3, r4, 0x2, &(0x7f0000000cc0)=[r5], &(0x7f0000000d00)=[{0x2, 0x5, 0x0, 0x2}, {0x4, 0x3, 0x5, 0xa}], 0x10, 0xffff}, 0x94) bind$unix(r2, &(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$unix(r2, &(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000e80), &(0x7f0000000ec0)=0x10) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000f00)={0xffffffffffffffff, 0x1, 0x1b, r1, 0x2}, 0xc) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000001040), 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001080)=r3, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r2, 0x6, '\x00', r1, r7, 0x1, 0x0, 0x2}, 0x50) openat$cgroup_ro(r2, &(0x7f0000001140)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async) r9 = openat$cgroup_ro(r2, &(0x7f0000001140)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x5c, 0x1, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xe}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) (async) sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x5c, 0x1, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xe}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001300), r9) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001300), r9) sendmsg$TIPC_CMD_SET_NETID(r9, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x24, r10, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x100}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001400)={0x2, [0x0, 0x0]}, &(0x7f0000001440)=0xc) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001400)={0x2, [0x0, 0x0]}, &(0x7f0000001440)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001480)={r11, 0x9, 0x80}, &(0x7f00000014c0)=0x8) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001480)={r11, 0x9, 0x80}, &(0x7f00000014c0)=0x8) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000001500)={r9, 0x3, 0x1, 0xf7db}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000001540)) (async) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000001540)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r8, 0x40089416, &(0x7f0000001580)=r13) preadv(r9, &(0x7f00000016c0)=[{&(0x7f00000015c0)=""/158, 0x9e}, {&(0x7f0000001680)=""/45, 0x2d}], 0x2, 0x7fffffff, 0x8) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000001700)={0xf2b, 0x5, 0x1, 0x4, 0x3, [0xf, 0xfd73, 0x9, 0x46b]}) accept$inet(r12, &(0x7f0000001740)={0x2, 0x0, @multicast1}, &(0x7f0000001780)=0x10) 51.083243275s ago: executing program 32 (id=3336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @none, 0xfffe}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x9}, {0x6, 0x5, 0x0, 0xfffffe}]}, 0x10) (async) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d000f80b6aa883c187282c63edaa1b302338fad461472d9973f4b900698029295938e3a20c23a798bb88410e2247554e77adbc729a361e05fb3477db89e064fa08f0bc302dedd15b1829ca0af"], 0x64}}, 0x0) (async, rerun: 64) writev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)="e710d350b3", 0x5}], 0x1) (async, rerun: 64) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="e8", 0x1}], 0x1}}], 0x1, 0x40800) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61, 0x5f, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0xf}, 0x28) (async, rerun: 32) shutdown(r1, 0x1) (rerun: 32) 50.334176751s ago: executing program 1 (id=3343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x5, [@restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @const={0xe, 0x0, 0x0, 0xa, 0x2}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @enum={0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x7fff}}, @func={0x1, 0x0, 0x0, 0xc, 0x5}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x53, 0x0, 0x2e, 0xa}, @struct={0xb, 0xa, 0x0, 0x4, 0x0, 0x1a5a, [{0x3, 0x5, 0x9}, {0x1, 0x0, 0x93dc}, {0x0, 0x4, 0x7fffffff}, {0x0, 0x0, 0x3}, {0x0, 0x3, 0x7}, {0xb, 0x3, 0x8}, {0xa, 0x2, 0x3}, {0x7, 0x0, 0x4}, {0x1, 0x4, 0x9}, {0x6, 0x5, 0x3}]}]}, {0x0, [0x5f, 0x0, 0x61]}}, &(0x7f0000000180)=""/120, 0x105, 0x78, 0x0, 0x8}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) 48.682644979s ago: executing program 0 (id=3344): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x28e}], 0x1}, 0x9fc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept(r4, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f00000006c0)=r2}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x8, 0x1, 0x0, 0x9ed, {{0x12, 0x4, 0x2, 0x38, 0x48, 0x64, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop, @end, @timestamp={0x44, 0x28, 0xfa, 0x0, 0x1, [0xffffffff, 0x5, 0x10000, 0x2, 0xe2a3, 0x8, 0x0, 0x8, 0x6]}]}}}}}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0xb, [@float={0xe, 0x0, 0x0, 0x10, 0xc}, @float={0xc, 0x0, 0x0, 0x10, 0x1c}, @float={0x1, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x3, 0x5}, @struct={0xf, 0x5, 0x0, 0x4, 0x0, 0xb3d9, [{0x5, 0x3, 0x5}, {0x5, 0x0, 0x2}, {0x6, 0x1, 0x81}, {0xa, 0x0, 0x400}, {0xb, 0x0, 0x1}]}]}, {0x0, [0x0, 0x30, 0x5f, 0x30, 0x30, 0x0, 0x1e, 0x2e, 0x61]}}, &(0x7f0000000ac0)=""/249, 0x9f, 0xf9, 0x0, 0x9, 0x10000}, 0x28) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c40)={0xffffffffffffffff, 0x3}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000800)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], &(0x7f0000000880)='GPL\x00', 0x4, 0x6b, &(0x7f00000008c0)=""/107, 0x41000, 0x1c, '\x00', r9, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x0, 0x6, 0x7, 0x2031}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000c80)=[r1, r1, r0, r1, 0xffffffffffffffff, r1, r0, r11], &(0x7f0000000cc0)=[{0x2, 0x5, 0x5, 0x4}, {0x4, 0x3}, {0x2, 0x5, 0x1, 0x3}, {0x2, 0x3, 0xc, 0x2}], 0x10, 0x1}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900010073797a30000000001400038008000140000000000800024000000003090002e072797a3000000000000000001100010000000000000016000000000aae01cf4cafd742a384ac10b0033606e2d5d2f5fe5dc0331906c5ddc7b4eba9cba52346ce14e007597fb2b9e6b4e5d9e82d0fb199"], 0x68}}, 0x800) sendmsg$NFT_BATCH(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}]}], {0x14}}, 0x60}}, 0x24040884) write$tun(r6, &(0x7f0000000300)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@udp={{0x11, 0x4, 0x2, 0x9, 0x9b, 0xe8, 0x0, 0x9, 0x11, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@lsrr={0x83, 0xb, 0xda, [@rand_addr=0x10000, @local]}, @end, @ssrr={0x89, 0x23, 0x93, [@multicast1, @empty, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @rand_addr=0x64010100, @local]}]}}, {0x4e22, 0x4e21, 0x57, 0x0, @opaque="8af8d80d995b8e9fd58a7542edc625a739fe23ad81e9659fa90896eaf230108e385989aa099b5c220df3db48d29588d2d614088b8ff9724ada7cd1fee16a13ac7b5db9d59ce1922880cfd0f5b14a47"}}}}, 0xa9) 48.290566435s ago: executing program 4 (id=3345): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], 0x0, 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0, 0x0, 0x1000000}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xe498}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r7 = accept4(r6, 0x0, 0x0, 0x80000) write(r7, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r7, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}]}}]}, 0x50}}, 0x20040054) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) 41.533102807s ago: executing program 33 (id=3339): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="030000000000000007000040000000fa0a000000000004"]) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000001d80)={'bond_slave_1\x00', &(0x7f0000001d40)=@ethtool_cmd={0x15, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 40.542139973s ago: executing program 1 (id=3347): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x803, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x610}]}, 0x34}}, 0x0) r9 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8954, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000140)={r2, 0x5, 0x1c0000000, 0x7ff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r2, 0x8, 0x1, 0x6}) socket(0x10, 0x3, 0x0) (async) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000940)=[{&(0x7f0000000040)="1333", 0x2}], 0x1, 0x0) (async) vmsplice(r13, &(0x7f0000000940)=[{&(0x7f0000000040)="1333", 0x2}], 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x110, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SOCKETS={0x7c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd83}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x84}, 0x40010) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\b', @ANYRES16=r1, @ANYBLOB="000307000000000000000300000008000100000000000c00030009000000000000000c00060001000000000000000c00060001000000000000000c000800ce070000000000000c0003000c000000000000000c0004000500000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r16, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0xdc, 0x1, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x11b}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffa}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xffff5d0f}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x3c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xf}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xe}]}}, @CTA_TUPLE_ORIG={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x16}, 0x400d0) 37.636060296s ago: executing program 0 (id=3348): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000140), 0x40f00, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x0, 0x2e01, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r0, 0x1, 0x1], 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='netfs_rreq\x00', r1, 0x0, 0xb9b}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4, 0x1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$sock_proto_private(r7, 0x89e0, &(0x7f0000000040)="9bc892") bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r5, 0x10, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000400)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r6}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f00000003c0)=0x560, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000080)={r11, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000040)={r11, @in6={{0xa, 0x4e20, 0xd, @mcast1, 0x2}}, 0x9, 0x3cbb}, &(0x7f0000000140)=0x90) unshare(0x68040200) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 31.652391717s ago: executing program 34 (id=3345): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], 0x0, 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0, 0x0, 0x1000000}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xe498}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r7 = accept4(r6, 0x0, 0x0, 0x80000) write(r7, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r7, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}]}}]}, 0x50}}, 0x20040054) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) 29.657054511s ago: executing program 1 (id=3350): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) (async) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) socket$inet(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) (async) shutdown(r1, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0x3, 0x5, 0x2}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x41, 0xff9, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0x3, 0x5, 0x2}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x41, 0xff9, 0x1}, 0x28) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x5c, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0x6c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0x6c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 27.543095628s ago: executing program 0 (id=3351): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="010000002100000000000000000000008580000075220000a500000023000000a9"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='afs_call_state\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98) write(r4, 0x0, 0x0) close(r6) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r8 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001840)=@mangle={'mangle\x00', 0x44, 0x6, 0x448, 0x138, 0x98, 0x138, 0x138, 0x98, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x0, 0x0, [0x22, 0x31, 0x4, 0x1d, 0x4, 0x38, 0x3c, 0x1c, 0x18, 0x11, 0x1b, 0x28, 0x3, 0x1e, 0xe, 0x1], 0x2, 0x7, 0x382}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newlink={0xa8, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, 0xa1}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x54, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @multicast}]}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x5}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @random="ed3b0500"}, {0xa, 0x4, @random='\x00\x00\x00\x00\x00 '}]}]}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}]}, 0xa8}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$NFT_BATCH(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68af5f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005800800014008000008080002"], 0x1ec}}, 0x0) 22.086920698s ago: executing program 1 (id=3352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c076f2c6014f5d219221d80481aed108a2cb749a807133ed7a80ffe0090f000060000000a2bcb503ca00000f7f8900000020000000", 0x48}], 0x1) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xa}, {}, {0xc, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1000, 0x0, 0x2}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x200008e2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x566bbd09cdf31405, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040084}, 0x4000084) 17.761867477s ago: executing program 0 (id=3353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x800}) r1 = socket$packet(0x11, 0x3, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) listen(r3, 0x6) (async, rerun: 32) close(0x3) (async, rerun: 32) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async, rerun: 64) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x0, 0x0) (rerun: 64) bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) (async, rerun: 64) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000dc0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000009900000008cebe3ad8d945dd2121006416f16410c957bd374b539841a0cdb32b9feb2ba87cef503f431f6cd9edca7c02be332aeb8fc49f6f6cff04ab0d66135671910b6ac5fa0bba686c864313492bdfbac12d28078930e3007c52ba0c43895456a9da82f83c6dc3b610e6c1e46e5e5435fcc772d84d4d6db608bbd32f18a3e9f8b749104bb50f5cfc4bf8fba9a6e72e928f0c41edf2dce24cbbc449790b916c55d7d1bdbf6934308b9ae86f6e9b068e8dca6ff9e83703d9ecc9000000000000"], &(0x7f0000000480)=0xbd) (async) socket$can_raw(0x1d, 0x3, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"/686, @ANYBLOB="b2f393c5ce11736a8769a320aa1fde87ae25c804cdff34", @ANYRES16, @ANYRES64=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8, @ANYBLOB="0100000000000000006e0100ff010000050001000012080004000000000105000658ea0f2d0008000300ffffffffffffffface0b15dbbfc51e947dbafe15b97b1e93bcfccfdb5bf8592f5baab9f77f67"], 0x34}}, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @empty}]}, &(0x7f0000000380)=0x10) (async, rerun: 32) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ce1d7c67b9f26f9583700efad870901f4bf3bd20fef7d0d518def0b76ceef8bcf4df7f2b03a9e3bfc763c1831b2a2f39a45576bfcdabc6f996d7b0a6821a96", @ANYRES16=r11, @ANYBLOB="010000000000000000000100000018000400020000000800000054080000ff0100008000000005000600070000000800030001000000"], 0x3c}}, 0x0) 4.552109762s ago: executing program 35 (id=3352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c076f2c6014f5d219221d80481aed108a2cb749a807133ed7a80ffe0090f000060000000a2bcb503ca00000f7f8900000020000000", 0x48}], 0x1) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xa}, {}, {0xc, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1000, 0x0, 0x2}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x200008e2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x566bbd09cdf31405, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040084}, 0x4000084) 0s ago: executing program 36 (id=3353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x800}) r1 = socket$packet(0x11, 0x3, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) listen(r3, 0x6) (async, rerun: 32) close(0x3) (async, rerun: 32) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async, rerun: 64) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x0, 0x0) (rerun: 64) bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) (async, rerun: 64) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000dc0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000009900000008cebe3ad8d945dd2121006416f16410c957bd374b539841a0cdb32b9feb2ba87cef503f431f6cd9edca7c02be332aeb8fc49f6f6cff04ab0d66135671910b6ac5fa0bba686c864313492bdfbac12d28078930e3007c52ba0c43895456a9da82f83c6dc3b610e6c1e46e5e5435fcc772d84d4d6db608bbd32f18a3e9f8b749104bb50f5cfc4bf8fba9a6e72e928f0c41edf2dce24cbbc449790b916c55d7d1bdbf6934308b9ae86f6e9b068e8dca6ff9e83703d9ecc9000000000000"], &(0x7f0000000480)=0xbd) (async) socket$can_raw(0x1d, 0x3, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"/686, @ANYBLOB="b2f393c5ce11736a8769a320aa1fde87ae25c804cdff34", @ANYRES16, @ANYRES64=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8, @ANYBLOB="0100000000000000006e0100ff010000050001000012080004000000000105000658ea0f2d0008000300ffffffffffffffface0b15dbbfc51e947dbafe15b97b1e93bcfccfdb5bf8592f5baab9f77f67"], 0x34}}, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @empty}]}, &(0x7f0000000380)=0x10) (async, rerun: 32) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ce1d7c67b9f26f9583700efad870901f4bf3bd20fef7d0d518def0b76ceef8bcf4df7f2b03a9e3bfc763c1831b2a2f39a45576bfcdabc6f996d7b0a6821a96", @ANYRES16=r11, @ANYBLOB="010000000000000000000100000018000400020000000800000054080000ff0100008000000005000600070000000800030001000000"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): (slave vxcan1): The slave device specified does not support setting the MAC address [ 306.610624][T13945] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 306.649949][T13947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2146'. [ 306.773989][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2146'. [ 306.800559][T13948] bond5: (slave bridge6): Enslaving as an active interface with a down link [ 306.837194][T13942] netlink: 'syz.4.2142': attribute type 29 has an invalid length. [ 307.092909][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 307.390429][T13957] lo speed is unknown, defaulting to 1000 [ 307.569280][T13980] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 307.813887][T13992] tipc: Enabled bearer , priority 0 [ 307.949786][T13995] bridge0: entered promiscuous mode [ 307.971577][T13995] bridge0: entered allmulticast mode [ 308.082633][T13995] tipc: Resetting bearer [ 308.175698][T14004] netlink: 'syz.0.2160': attribute type 1 has an invalid length. [ 308.183744][T14004] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2160'. [ 308.486478][T14021] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2166'. [ 308.495782][T14021] tc_dump_action: action bad kind [ 308.541355][T13987] tipc: Disabling bearer [ 308.588945][T14024] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2167'. [ 308.708882][T14028] IPVS: set_ctl: invalid protocol: 135 172.30.1.4:20001 [ 308.721970][T14029] IPVS: set_ctl: invalid protocol: 135 172.30.1.4:20001 [ 308.784272][T14030] 8021q: adding VLAN 0 to HW filter on device bond6 [ 308.803374][T14037] netlink: 'syz.3.2171': attribute type 2 has an invalid length. [ 308.820010][T14035] 8021q: adding VLAN 0 to HW filter on device bond6 [ 308.827136][T14035] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 308.838764][T14035] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 308.979570][T14041] syzkaller0: entered promiscuous mode [ 308.989288][T14041] syzkaller0: entered allmulticast mode [ 310.493434][T14049] tipc: Enabling of bearer rejected, already enabled [ 310.505354][T14074] netlink: 'syz.2.2177': attribute type 3 has an invalid length. [ 310.799047][T14094] tipc: Enabled bearer , priority 0 [ 310.888628][T14100] tipc: Enabled bearer , priority 0 [ 310.908829][T14094] syzkaller0: entered promiscuous mode [ 310.916729][T14094] syzkaller0: entered allmulticast mode [ 310.940734][T14111] syzkaller0: entered promiscuous mode [ 310.948918][T14111] syzkaller0: entered allmulticast mode [ 311.166155][T14096] tipc: Resetting bearer [ 311.244221][T14096] tipc: Disabling bearer [ 311.266347][T14092] tipc: Resetting bearer [ 311.303369][T14092] tipc: Disabling bearer [ 311.330059][T14133] dvmrp8: entered allmulticast mode [ 311.558810][T14144] netem: change failed [ 311.681813][T14147] __nla_validate_parse: 1 callbacks suppressed [ 311.681832][T14147] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2198'. [ 311.729441][T14152] syzkaller1: entered promiscuous mode [ 311.736672][T14152] syzkaller1: entered allmulticast mode [ 312.002148][T14159] bridge7: entered allmulticast mode [ 312.024907][T14126] lo speed is unknown, defaulting to 1000 [ 312.096585][T14141] dvmrp8: left allmulticast mode [ 312.289595][T14175] netlink: 'syz.2.2205': attribute type 21 has an invalid length. [ 312.312526][T14170] vlan2: entered allmulticast mode [ 312.394864][T14175] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2205'. [ 312.527267][T14182] xt_TCPMSS: Only works on TCP SYN packets [ 312.851859][T14206] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2214'. [ 312.862926][T14208] netlink: 'syz.2.2213': attribute type 1 has an invalid length. [ 312.928321][T14208] 8021q: adding VLAN 0 to HW filter on device bond6 [ 312.973564][T14155] lo speed is unknown, defaulting to 1000 [ 313.023950][T14212] bond6: (slave ip6gretap2): making interface the new active one [ 313.033482][T14212] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 313.234335][T14228] batadv_slave_0: entered promiscuous mode [ 313.246690][T14228] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2218'. [ 314.290024][T14265] netlink: 'syz.0.2226': attribute type 49 has an invalid length. [ 314.421000][T14265] netlink: 'syz.0.2226': attribute type 49 has an invalid length. [ 314.767799][T14277] netlink: 'syz.4.2229': attribute type 1 has an invalid length. [ 314.911655][T14286] bond6: (slave bridge1): Enslaving as a backup interface with an up link [ 315.007016][T14283] bond6: entered promiscuous mode [ 315.012095][T14283] bridge1: entered promiscuous mode [ 315.032563][T14262] lo speed is unknown, defaulting to 1000 [ 315.424301][T14304] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2232'. [ 315.443659][T14304] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 315.943483][T14332] netlink: 'syz.0.2237': attribute type 1 has an invalid length. [ 315.959596][T14332] netlink: 'syz.0.2237': attribute type 1 has an invalid length. [ 316.297043][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2244'. [ 316.385888][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2244'. [ 316.422090][T14359] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.2246'. [ 316.455429][T14361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2243'. [ 316.734242][T14359] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.2246'. [ 316.856670][T14370] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2249'. [ 316.870343][T14359] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.2246'. [ 316.949486][T14372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2248'. [ 316.959911][T14359] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.2246'. [ 317.064690][T14359] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.2246'. [ 317.122905][T14359] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.2246'. [ 317.160500][T14359] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.2246'. [ 317.199810][T14359] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.2246'. [ 317.284785][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.291317][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.310519][T14358] lo speed is unknown, defaulting to 1000 [ 317.642448][T14397] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2254'. [ 318.076108][T14376] lo speed is unknown, defaulting to 1000 [ 318.134988][T14419] tun0: tun_chr_ioctl cmd 3224933435 [ 318.153033][T14419] tun0: tun_chr_ioctl cmd 1074812117 [ 319.863045][T14477] !: renamed from dummy0 (while UP) [ 320.172240][T14497] macsec2: entered promiscuous mode [ 320.198607][T14497] team0: entered promiscuous mode [ 320.225805][T14497] macsec2: entered allmulticast mode [ 320.253629][T14497] team0: entered allmulticast mode [ 320.285370][T14497] team0: Device macsec2 is already an upper device of the team interface [ 320.297177][T14497] team0: left allmulticast mode [ 320.302332][T14497] team0: left promiscuous mode [ 320.987314][T14550] netlink: 'syz.3.2294': attribute type 1 has an invalid length. [ 321.401850][T14547] lo speed is unknown, defaulting to 1000 [ 321.743664][T14580] __nla_validate_parse: 5 callbacks suppressed [ 321.743683][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2303'. [ 321.811554][T14585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2303'. [ 321.823389][T14585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2303'. [ 322.153720][T14595] 8021q: adding VLAN 0 to HW filter on device bond7 [ 322.190445][T14599] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 322.295058][T14603] syzkaller0: entered promiscuous mode [ 322.304959][T14603] syzkaller0: entered allmulticast mode [ 322.316794][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2307'. [ 322.346217][T14605] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2311'. [ 322.512816][T14605] rdma_rxe: rxe_newlink: failed to add lo [ 322.891101][T14624] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2316'. [ 322.918835][T14626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2317'. [ 322.928360][T14628] netlink: 'syz.1.2318': attribute type 1 has an invalid length. [ 322.992984][T14628] 8021q: adding VLAN 0 to HW filter on device bond6 [ 323.038678][T14639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2320'. [ 323.062448][T14637] veth9: entered promiscuous mode [ 323.075324][T14637] bond6: (slave veth9): Enslaving as an active interface with an up link [ 323.095369][T14639] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 323.235507][T14648] x_tables: duplicate underflow at hook 2 [ 323.315458][T14633] lo speed is unknown, defaulting to 1000 [ 323.352007][T14648] netlink: 'syz.2.2323': attribute type 12 has an invalid length. [ 323.538011][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2327'. [ 323.585913][T14660] netlink: 'syz.2.2326': attribute type 13 has an invalid length. [ 323.718646][T14671] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2331'. [ 324.301908][T14660] veth1_vlan: left allmulticast mode [ 324.375078][T14683] netlink: 'syz.3.2329': attribute type 16 has an invalid length. [ 324.805386][ T9836] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.824612][ T9836] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.861475][ T9836] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.891538][ T9836] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.085384][T14710] tipc: Enabling of bearer rejected, failed to enable media [ 325.553842][T14719] bond7: Removing last arp target with arp_interval on [ 326.090291][T14736] lo speed is unknown, defaulting to 1000 [ 326.758114][T14763] __nla_validate_parse: 12 callbacks suppressed [ 326.758134][T14763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2354'. [ 326.883899][T14770] Cannot find del_set index 2 as target [ 327.189131][T14785] pim6reg: entered allmulticast mode [ 327.996694][T14819] netlink: 'syz.2.2370': attribute type 1 has an invalid length. [ 328.037691][T14819] 8021q: adding VLAN 0 to HW filter on device bond7 [ 328.165624][T14823] 8021q: adding VLAN 0 to HW filter on device bond7 [ 328.197406][T14823] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 328.255417][T14823] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 328.502839][T14825] bond7: option arp_validate: invalid value (18446744073491447809) [ 328.516382][T14825] bond7 (unregistering): Released all slaves [ 328.853823][T14844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2371'. [ 328.864991][T14835] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2372'. [ 329.034972][T14849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2374'. [ 330.225388][T14888] netlink: 'syz.2.2384': attribute type 1 has an invalid length. [ 330.228937][T14890] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2386'. [ 330.311357][T14888] bond8: entered promiscuous mode [ 330.317224][T14888] 8021q: adding VLAN 0 to HW filter on device bond8 [ 330.361596][T14888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2384'. [ 330.592066][T14908] ip6gre3: entered promiscuous mode [ 330.613514][T14904] netlink: 'syz.4.2388': attribute type 12 has an invalid length. [ 330.693928][T14909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.703030][T14909] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.773566][T14909] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 330.811910][T14886] lo speed is unknown, defaulting to 1000 [ 331.353111][T14906] lo speed is unknown, defaulting to 1000 [ 331.721671][T14904] lo speed is unknown, defaulting to 1000 [ 331.991063][T14908] SET target dimension over the limit! [ 332.278321][T14779] Set syz1 is full, maxelem 65536 reached [ 333.369786][T14944] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2396'. [ 333.640229][T14951] SET target dimension over the limit! [ 333.662725][T14954] SET target dimension over the limit! [ 333.772281][T14959] 8021q: adding VLAN 0 to HW filter on device bond9 [ 333.772488][T14964] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2398'. [ 333.797204][T14959] bond0: (slave bond9): Enslaving as an active interface with an up link [ 334.361186][T14964] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 334.379156][T14964] bond0 (unregistering): (slave 0!): Releasing backup interface [ 334.405424][T14964] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 334.434895][T14964] bond0 (unregistering): (slave bond9): Releasing backup interface [ 334.458378][T14964] bond0 (unregistering): Released all slaves [ 334.652341][T14995] tipc: Enabling of bearer rejected, already enabled [ 334.710891][T14997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2407'. [ 334.804971][T15008] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 334.829799][T15010] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 334.966143][T15014] netlink: 'syz.4.2413': attribute type 4 has an invalid length. [ 335.024164][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2415'. [ 335.238721][T15035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2418'. [ 335.248794][T15037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2419'. [ 335.255730][T15035] vlan4: entered promiscuous mode [ 335.268740][T15035] bond0: entered promiscuous mode [ 335.273965][T15035] bond_slave_0: entered promiscuous mode [ 335.281471][T15035] bond_slave_1: entered promiscuous mode [ 335.296551][T15035] netlink: 'syz.4.2418': attribute type 14 has an invalid length. [ 335.360855][T15042] netlink: 'syz.2.2419': attribute type 10 has an invalid length. [ 335.370560][T15042] batadv_slave_0: left promiscuous mode [ 335.581557][T15050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2421'. [ 335.925327][T15069] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 336.545319][T15102] IPv6: sit1: Disabled Multicast RS [ 336.575617][T15102] sit1: entered allmulticast mode [ 336.847231][T15114] bond0: Caught tx_queue_len zero misconfig [ 336.920615][T15118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2440'. [ 337.002257][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2441'. [ 337.024937][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2441'. [ 337.071530][T15127] ip6tnl0: Caught tx_queue_len zero misconfig [ 337.301377][T15134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.315056][T15134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.460017][T15134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.470752][T15134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.717941][T15134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.760142][T15134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.811131][T15149] lo speed is unknown, defaulting to 1000 [ 337.980105][T15134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.015168][T15134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.447481][ T3520] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.456252][ T3520] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.505416][ T3520] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.524011][ T3520] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.623490][ T3520] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.643239][ T3520] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.791688][ T754] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.825625][ T754] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.947234][T15184] team_slave_0: entered promiscuous mode [ 338.949045][T15185] __nla_validate_parse: 4 callbacks suppressed [ 338.949062][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'. [ 338.953698][T15184] team_slave_0: entered allmulticast mode [ 339.006638][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2455'. [ 339.025053][T15187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'. [ 339.042333][T15187] netlink: 'syz.0.2455': attribute type 18 has an invalid length. [ 339.085460][T15148] lo speed is unknown, defaulting to 1000 [ 339.968892][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2461'. [ 340.047764][T15198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.086594][T15205] x_tables: duplicate underflow at hook 1 [ 340.092446][T15198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.154298][T15198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.196434][T15198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.335294][T15212] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 340.365933][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'. [ 340.375959][T15212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2463'. [ 340.385779][T15213] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.2463'. [ 341.356510][T15196] lo speed is unknown, defaulting to 1000 [ 341.445522][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2472'. [ 341.702857][T15254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2475'. [ 341.723028][T15254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2475'. [ 341.919401][T15227] lo speed is unknown, defaulting to 1000 [ 343.120778][T15297] netlink: 'syz.3.2487': attribute type 13 has an invalid length. [ 343.131876][T15297] netlink: 'syz.3.2487': attribute type 17 has an invalid length. [ 343.281380][T15297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.292307][T15297] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.307047][T15297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.486553][T15322] bridge3: entered promiscuous mode [ 343.492085][T15322] bridge3: entered allmulticast mode [ 343.849379][T15330] lo speed is unknown, defaulting to 1000 [ 344.286270][T15348] pim6reg1: entered promiscuous mode [ 344.295369][T15348] pim6reg1: entered allmulticast mode [ 344.330029][T15348] __nla_validate_parse: 7 callbacks suppressed [ 344.330048][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'. [ 344.352263][T15348] netlink: 'syz.1.2500': attribute type 1 has an invalid length. [ 344.370503][T15355] vlan5: entered promiscuous mode [ 344.415369][T15353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2500'. [ 344.433986][T15348] 8021q: adding VLAN 0 to HW filter on device bond9 [ 344.778104][T15371] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2505'. [ 345.043287][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2509'. [ 345.493435][T15396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2511'. [ 345.505644][T15387] bridge0: left promiscuous mode [ 345.511802][T15387] bridge0: left allmulticast mode [ 345.568236][T15387] macvlan1: left allmulticast mode [ 345.577005][T15387] veth0_macvtap: left promiscuous mode [ 345.583452][T15387] macsec1: left promiscuous mode [ 345.588973][T15387] macsec1: left allmulticast mode [ 345.594255][T15387] gre1: left promiscuous mode [ 345.599588][T15387] gre1: left allmulticast mode [ 345.605450][T15387] batadv2: left allmulticast mode [ 345.611005][T15387] geneve2: left promiscuous mode [ 345.616574][T15387] geneve2: left allmulticast mode [ 345.622546][T15387] bond4: left promiscuous mode [ 345.627982][T15387] bridge4: left promiscuous mode [ 345.635501][T15387] bridge7: left allmulticast mode [ 345.650983][T15387] bond8: left promiscuous mode [ 345.690287][T15363] lo speed is unknown, defaulting to 1000 [ 346.453883][T15414] lo speed is unknown, defaulting to 1000 [ 346.886796][T15451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2524'. [ 347.167571][T15460] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2527'. [ 347.817526][T15471] netlink: 'syz.0.2529': attribute type 6 has an invalid length. [ 347.830599][T15471] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2529'. [ 348.075684][T15481] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000 [ 348.115319][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 348.482404][T15500] tipc: Enabling of bearer rejected, failed to enable media [ 348.822365][T15521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2547'. [ 349.078513][T15508] lo speed is unknown, defaulting to 1000 [ 349.209008][T15546] tipc: Enabled bearer , priority 0 [ 349.227481][T15547] syzkaller0: entered promiscuous mode [ 349.246449][T15547] syzkaller0: entered allmulticast mode [ 349.305249][T15547] tipc: Resetting bearer [ 349.359700][T15547] tipc: Disabling bearer [ 349.504166][T15562] __nla_validate_parse: 1 callbacks suppressed [ 349.504185][T15562] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2558'. [ 349.896196][T15585] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2564'. [ 350.086609][T15595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2566'. [ 350.091342][T15591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2565'. [ 350.107122][T15591] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2565'. [ 350.124479][T15591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2565'. [ 350.238230][T15601] vlan2: entered promiscuous mode [ 350.243388][T15601] hsr0: entered promiscuous mode [ 350.250059][T15601] vlan2: entered allmulticast mode [ 350.259346][T15601] hsr0: entered allmulticast mode [ 350.275063][T15601] hsr_slave_0: entered allmulticast mode [ 350.281662][T15601] hsr_slave_1: entered allmulticast mode [ 350.312009][T15602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2568'. [ 350.336043][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2569'. [ 350.346470][T15604] IPVS: length: 24 != 119185342488 [ 350.463829][ T30] audit: type=1800 audit(1760230000.099:11): pid=15610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2571" name="memory.events" dev="tmpfs" ino=2765 res=0 errno=0 [ 350.510394][T15609] lo: entered promiscuous mode [ 350.516090][T15609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.568589][T15565] lo speed is unknown, defaulting to 1000 [ 350.721925][T15618] netlink: 64691 bytes leftover after parsing attributes in process `syz.2.2573'. [ 350.939738][T15625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2574'. [ 351.153813][T15566] lo speed is unknown, defaulting to 1000 [ 351.357502][T15637] batadv4: entered promiscuous mode [ 351.362860][T15637] batadv4: entered allmulticast mode [ 351.385842][T15637] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 351.596937][T15595] lo speed is unknown, defaulting to 1000 [ 352.195371][T15655] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 353.607027][T15697] SET target dimension over the limit! [ 354.058423][T15672] lo speed is unknown, defaulting to 1000 [ 354.740526][T15734] __nla_validate_parse: 5 callbacks suppressed [ 354.740544][T15734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2602'. [ 354.789669][T15734] sch_fq: defrate 0 ignored. [ 355.269431][T15743] lo speed is unknown, defaulting to 1000 [ 355.547982][T15767] netlink: 'syz.3.2609': attribute type 21 has an invalid length. [ 355.603547][T15770] netlink: 'syz.3.2609': attribute type 4 has an invalid length. [ 355.611520][T15770] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2609'. [ 355.723108][T15773] netlink: 'syz.3.2609': attribute type 11 has an invalid length. [ 355.752763][T15767] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2609'. [ 356.216426][T15782] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2616'. [ 356.819264][T15763] lo speed is unknown, defaulting to 1000 [ 356.906837][T15792] geneve0: entered promiscuous mode [ 356.928646][T15792] macvtap1: entered promiscuous mode [ 356.962642][T15792] macvtap1: entered allmulticast mode [ 356.968242][T15792] geneve0: entered allmulticast mode [ 357.131377][T15800] tipc: Enabled bearer , priority 0 [ 357.139412][T15800] syzkaller0: entered promiscuous mode [ 357.145048][T15800] syzkaller0: entered allmulticast mode [ 357.201333][T15800] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2619'. [ 357.222447][T15800] tipc: Resetting bearer [ 357.273399][T15800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2619'. [ 357.304553][T15800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2619'. [ 357.355913][T15800] bond0: entered promiscuous mode [ 357.362374][T15800] bond0: left promiscuous mode [ 357.415851][T15799] tipc: Resetting bearer [ 357.444867][T15799] tipc: Disabling bearer [ 357.497479][T15814] tipc: Cannot configure node identity twice [ 357.504370][T15815] : renamed from bond_slave_0 [ 357.829455][T15823] vlan1: entered promiscuous mode [ 357.851750][T15823] geneve1: entered promiscuous mode [ 357.875967][T15823] vlan1: entered allmulticast mode [ 357.891375][T15823] geneve1: entered allmulticast mode [ 358.038557][T15828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2628'. [ 358.089321][T15812] lo speed is unknown, defaulting to 1000 [ 358.337575][T15839] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2631'. [ 358.449732][T15842] No such timeout policy "syz1" [ 358.771680][T15854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2634'. [ 358.983879][T15815] lo speed is unknown, defaulting to 1000 [ 359.628941][T15855] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 359.635622][T15855] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 359.646232][T15871] netlink: 'syz.1.2640': attribute type 5 has an invalid length. [ 359.672418][T15855] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 359.679206][T15855] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 359.687198][T15850] lo speed is unknown, defaulting to 1000 [ 359.731532][T15855] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 359.741627][T15855] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 359.786187][T15855] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 359.792322][T15855] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 360.035191][T15881] __nla_validate_parse: 2 callbacks suppressed [ 360.035209][T15881] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2642'. [ 360.333545][T15887] netlink: 'syz.2.2643': attribute type 13 has an invalid length. [ 360.346847][T15887] netlink: 'syz.2.2643': attribute type 17 has an invalid length. [ 360.357695][T15887] lo: left promiscuous mode [ 360.497063][T15887] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.531299][T15887] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 360.606542][T15893] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2645'. [ 360.755586][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2646'. [ 361.544203][T15880] lo speed is unknown, defaulting to 1000 [ 361.728571][T15911] netlink: 'syz.4.2652': attribute type 21 has an invalid length. [ 361.781464][T15911] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2652'. [ 361.808646][T15911] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2652'. [ 361.985344][T15915] FAULT_INJECTION: forcing a failure. [ 361.985344][T15915] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 362.018983][T15915] CPU: 0 UID: 0 PID: 15915 Comm: syz.4.2653 Not tainted syzkaller #0 PREEMPT(full) [ 362.019031][T15915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 362.019060][T15915] Call Trace: [ 362.019068][T15915] [ 362.019078][T15915] dump_stack_lvl+0x189/0x250 [ 362.019108][T15915] ? __pfx____ratelimit+0x10/0x10 [ 362.019131][T15915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.019151][T15915] ? __pfx__printk+0x10/0x10 [ 362.019171][T15915] ? __might_fault+0xb0/0x130 [ 362.019209][T15915] should_fail_ex+0x414/0x560 [ 362.019237][T15915] _copy_from_user+0x2d/0xb0 [ 362.019257][T15915] mctp_ioctl+0x19d/0x8f0 [ 362.019289][T15915] ? __pfx_mctp_ioctl+0x10/0x10 [ 362.019318][T15915] ? do_vfs_ioctl+0xbe8/0x1430 [ 362.019341][T15915] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 362.019370][T15915] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 362.019402][T15915] sock_do_ioctl+0xd9/0x300 [ 362.019431][T15915] ? __pfx_sock_do_ioctl+0x10/0x10 [ 362.019472][T15915] sock_ioctl+0x576/0x790 [ 362.019500][T15915] ? __pfx_sock_ioctl+0x10/0x10 [ 362.019527][T15915] ? __fget_files+0x3a0/0x420 [ 362.019544][T15915] ? __fget_files+0x2a/0x420 [ 362.019564][T15915] ? bpf_lsm_file_ioctl+0x9/0x20 [ 362.019586][T15915] ? __pfx_sock_ioctl+0x10/0x10 [ 362.019611][T15915] __se_sys_ioctl+0xfc/0x170 [ 362.019637][T15915] do_syscall_64+0xfa/0xfa0 [ 362.019660][T15915] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.019683][T15915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.019701][T15915] ? clear_bhb_loop+0x60/0xb0 [ 362.019725][T15915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.019744][T15915] RIP: 0033:0x7f2061d8eec9 [ 362.019762][T15915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.019780][T15915] RSP: 002b:00007f2062be4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.019801][T15915] RAX: ffffffffffffffda RBX: 00007f2061fe5fa0 RCX: 00007f2061d8eec9 [ 362.019816][T15915] RDX: 0000200000000180 RSI: 00000000000089e3 RDI: 0000000000000003 [ 362.019828][T15915] RBP: 00007f2062be4090 R08: 0000000000000000 R09: 0000000000000000 [ 362.019840][T15915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.019852][T15915] R13: 00007f2061fe6038 R14: 00007f2061fe5fa0 R15: 00007ffd5f86f628 [ 362.019884][T15915] [ 362.477091][T15888] lo speed is unknown, defaulting to 1000 [ 362.596678][T15917] ªªªªªª: renamed from wg2 [ 362.729739][T15921] bond8: option arp_interval: invalid value (18446744073709551615) [ 362.738639][T15921] bond8: option arp_interval: allowed values 0 - 2147483647 [ 362.757727][T15921] bond8 (unregistering): Released all slaves [ 363.603088][T15961] FAULT_INJECTION: forcing a failure. [ 363.603088][T15961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.628666][T15961] CPU: 1 UID: 0 PID: 15961 Comm: syz.0.2665 Not tainted syzkaller #0 PREEMPT(full) [ 363.628693][T15961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 363.628709][T15961] Call Trace: [ 363.628717][T15961] [ 363.628726][T15961] dump_stack_lvl+0x189/0x250 [ 363.628752][T15961] ? __pfx____ratelimit+0x10/0x10 [ 363.628775][T15961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.628796][T15961] ? __pfx__printk+0x10/0x10 [ 363.628830][T15961] should_fail_ex+0x414/0x560 [ 363.628858][T15961] _copy_to_user+0x31/0xb0 [ 363.628880][T15961] simple_read_from_buffer+0xe1/0x170 [ 363.628914][T15961] proc_fail_nth_read+0x1b3/0x220 [ 363.628941][T15961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 363.628968][T15961] ? rw_verify_area+0x2a6/0x4d0 [ 363.628992][T15961] ? __lock_acquire+0xab9/0xd20 [ 363.629009][T15961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 363.629034][T15961] vfs_read+0x200/0xa30 [ 363.629057][T15961] ? fdget_pos+0x247/0x320 [ 363.629079][T15961] ? __pfx___mutex_lock+0x10/0x10 [ 363.629105][T15961] ? __pfx_vfs_read+0x10/0x10 [ 363.629131][T15961] ? __fget_files+0x2a/0x420 [ 363.629153][T15961] ? __fget_files+0x3a0/0x420 [ 363.629169][T15961] ? __fget_files+0x2a/0x420 [ 363.629196][T15961] ksys_read+0x145/0x250 [ 363.629221][T15961] ? __fget_files+0x2a/0x420 [ 363.629240][T15961] ? __pfx_ksys_read+0x10/0x10 [ 363.629268][T15961] ? do_syscall_64+0xbe/0xfa0 [ 363.629300][T15961] do_syscall_64+0xfa/0xfa0 [ 363.629321][T15961] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.629344][T15961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.629362][T15961] ? clear_bhb_loop+0x60/0xb0 [ 363.629386][T15961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.629407][T15961] RIP: 0033:0x7f72f718d8dc [ 363.629424][T15961] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 363.629440][T15961] RSP: 002b:00007f72f8000030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 363.629460][T15961] RAX: ffffffffffffffda RBX: 00007f72f73e5fa0 RCX: 00007f72f718d8dc [ 363.629474][T15961] RDX: 000000000000000f RSI: 00007f72f80000a0 RDI: 0000000000000005 [ 363.629486][T15961] RBP: 00007f72f8000090 R08: 0000000000000000 R09: 0000000000000000 [ 363.629499][T15961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.629509][T15961] R13: 00007f72f73e6038 R14: 00007f72f73e5fa0 R15: 00007ffe42664228 [ 363.629543][T15961] [ 363.969224][T15967] netlink: 'syz.4.2664': attribute type 23 has an invalid length. [ 364.054952][T15967] bond7: (slave team0): Device is not bonding slave [ 364.109172][T15967] bond7: option active_slave: invalid value (team0) [ 364.143073][T15967] bond7 (unregistering): Released all slaves [ 364.416524][T15980] netlink: 'syz.3.2669': attribute type 5 has an invalid length. [ 364.562254][T15982] tipc: Enabled bearer , priority 0 [ 364.575586][T15982] syzkaller0: entered promiscuous mode [ 364.581092][T15982] syzkaller0: entered allmulticast mode [ 364.640955][T15989] geneve3: entered promiscuous mode [ 364.656396][T15982] tipc: Resetting bearer [ 364.707714][T15982] tipc: Disabling bearer [ 364.749964][T15987] netlink: 'syz.3.2672': attribute type 13 has an invalid length. [ 364.758489][T15987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2672'. [ 364.782289][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2673'. [ 364.797232][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2673'. [ 364.843001][T15995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.865227][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2673'. [ 364.899003][T15972] lo speed is unknown, defaulting to 1000 [ 365.095228][T16007] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2678'. [ 365.750638][T16035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2687'. [ 365.755370][T16036] netlink: 'syz.1.2686': attribute type 1 has an invalid length. [ 365.780153][T16036] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2686'. [ 365.898392][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2687'. [ 365.908292][T16040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2687'. [ 365.972494][ T9837] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.991427][ T9837] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.880652][T16058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2691'. [ 368.443368][ T9837] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.452899][ T9837] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.574317][T16061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2692'. [ 368.682810][T16065] netlink: 'syz.2.2694': attribute type 6 has an invalid length. [ 368.747973][T16068] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2692'. [ 368.777066][T16068] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 368.858305][T16069] netlink: 'syz.2.2694': attribute type 12 has an invalid length. [ 368.881716][T16069] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2694'. [ 369.093141][T16049] lo speed is unknown, defaulting to 1000 [ 369.490422][T16102] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 369.694940][T16112] sctp: [Deprecated]: syz.4.2703 (pid 16112) Use of int in max_burst socket option. [ 369.694940][T16112] Use struct sctp_assoc_value instead [ 370.008096][T16126] tipc: Enabling of bearer rejected, failed to enable media [ 370.065598][T16128] netlink: 'syz.4.2706': attribute type 1 has an invalid length. [ 370.596706][T16138] lo speed is unknown, defaulting to 1000 [ 371.409810][T16172] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2720'. [ 371.861205][T16160] lo speed is unknown, defaulting to 1000 [ 372.304035][T16182] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2723'. [ 372.347674][T16182] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2723'. [ 372.479203][T16161] lo speed is unknown, defaulting to 1000 [ 372.855450][T16191] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2725'. [ 373.174579][T16198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2728'. [ 373.183598][T16198] nbd: socks must be embedded in a SOCK_ITEM attr [ 373.273258][T16201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2729'. [ 373.301625][T16201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2729'. [ 373.318363][T16201] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 373.719107][T16219] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2732'. [ 373.885876][T16227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2734'. [ 374.033270][T16230] netlink: 'syz.0.2735': attribute type 11 has an invalid length. [ 374.252421][T16240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2737'. [ 375.123049][T16236] lo speed is unknown, defaulting to 1000 [ 375.791377][T16249] lo speed is unknown, defaulting to 1000 [ 376.558129][T16285] __nla_validate_parse: 62 callbacks suppressed [ 376.558150][T16285] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2746'. [ 376.849625][T16272] lo speed is unknown, defaulting to 1000 [ 376.908480][T16295] xt_l2tp: wrong L2TP version: 1 [ 377.158053][T16307] netlink: 'syz.1.2751': attribute type 27 has an invalid length. [ 377.179520][T16312] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2752'. [ 377.270833][T16313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2752'. [ 377.440560][T16312] vlan3: entered promiscuous mode [ 377.482105][T16259] lo speed is unknown, defaulting to 1000 [ 377.488561][T16319] bridge0: entered allmulticast mode [ 377.501769][T16321] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 377.513560][T16321] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 377.524088][T16321] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 377.874837][T16335] netlink: 'syz.2.2759': attribute type 4 has an invalid length. [ 378.427236][T16365] netlink: 'syz.2.2767': attribute type 4 has an invalid length. [ 378.453384][T16367] block nbd3: not configured, cannot reconfigure [ 378.493209][T16371] netlink: 'syz.2.2767': attribute type 4 has an invalid length. [ 378.497434][T16372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2769'. [ 378.721356][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.953440][T16394] netlink: 'syz.1.2774': attribute type 4 has an invalid length. [ 379.393240][T16408] netlink: 'syz.1.2774': attribute type 4 has an invalid length. [ 379.455380][T16408] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2774'. [ 379.504303][T16419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2778'. [ 379.726262][T16421] syzkaller1: entered promiscuous mode [ 379.731824][T16421] syzkaller1: entered allmulticast mode [ 379.875361][T16421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2779'. [ 379.884618][T16421] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2779'. [ 380.020544][T16436] bond0: (slave 30): Releasing backup interface [ 380.056979][T16436] : left promiscuous mode [ 380.101658][T16436] bond0: (slave bond_slave_1): Releasing backup interface [ 380.109693][T16443] netlink: 'syz.4.2783': attribute type 10 has an invalid length. [ 380.137734][T16436] bond_slave_1: left promiscuous mode [ 380.147820][T16441] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2785'. [ 380.176414][T16436] team0: Port device team_slave_0 removed [ 380.193525][T16436] team0: Port device team_slave_1 removed [ 380.203769][T16436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.214028][T16436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.227308][T16436] bond2: (slave geneve2): Releasing active interface [ 380.242776][T16436] bond3: (slave gretap2): Releasing active interface [ 380.347262][T16436] bond6: (slave bridge1): Releasing backup interface [ 380.365651][T16436] bridge1: left promiscuous mode [ 380.593149][T16443] bond0: (slave wlan1): refused to change device type [ 380.618881][ T9839] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 380.660663][T16450] ipip0: entered allmulticast mode [ 380.781099][ T9839] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 380.800873][ T9839] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 380.841326][ T9839] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 380.918930][T16469] block nbd2: Unsupported socket: should be TCP or UNIX. [ 380.966661][T16464] xt_CT: You must specify a L4 protocol and not use inversions on it [ 381.256029][T16484] tap0: tun_chr_ioctl cmd 1074025680 [ 381.285654][T16484] tipc: Enabling of bearer rejected, failed to enable media [ 381.320479][T16484] tap0: tun_chr_ioctl cmd 3288372251 [ 381.537978][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2801'. [ 381.975633][T16491] lo speed is unknown, defaulting to 1000 [ 382.064287][T16518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2806'. [ 382.315885][T16525] netlink: 'syz.2.2808': attribute type 4 has an invalid length. [ 382.398252][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.409640][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.418489][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.426662][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.436280][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.505189][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.512680][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.520881][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.530001][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.537998][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.713800][T16537] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2811'. [ 382.744279][T16537] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2811'. [ 382.764309][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2811'. [ 382.782837][T16533] netlink: 'syz.2.2810': attribute type 15 has an invalid length. [ 382.906079][T16543] netlink: 428 bytes leftover after parsing attributes in process `syz.4.2813'. [ 382.917333][T16543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2813'. [ 383.085506][T16554] netlink: 'syz.3.2815': attribute type 13 has an invalid length. [ 383.107806][T16554] netlink: 'syz.3.2815': attribute type 17 has an invalid length. [ 383.110258][T16528] lo speed is unknown, defaulting to 1000 [ 383.172789][T16554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.241185][T16528] chnl_net:caif_netlink_parms(): no params data found [ 384.345631][T16556] lo speed is unknown, defaulting to 1000 [ 384.487629][T16528] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.525318][T16528] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.532593][T16528] bridge_slave_0: entered allmulticast mode [ 384.555218][ T5835] Bluetooth: hci1: command tx timeout [ 384.588085][T16528] bridge_slave_0: entered promiscuous mode [ 384.626174][T16528] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.633348][T16528] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.642937][T16592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2823'. [ 384.678923][T16528] bridge_slave_1: entered allmulticast mode [ 384.708238][T16528] bridge_slave_1: entered promiscuous mode [ 384.780770][ T9754] IPVS: starting estimator thread 0... [ 384.842728][T16528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.878141][T16528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.887674][T16598] IPVS: using max 28 ests per chain, 67200 per kthread [ 385.026740][T16528] team0: Port device team_slave_0 added [ 385.050142][T16568] lo speed is unknown, defaulting to 1000 [ 385.057422][T16528] team0: Port device team_slave_1 added [ 385.188196][T16528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.204696][T16528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.232135][T16528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.260007][T16528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.272077][T16528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.321064][T16528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.501869][T16528] hsr_slave_0: entered promiscuous mode [ 385.508971][T16528] hsr_slave_1: entered promiscuous mode [ 385.540096][T16528] debugfs: 'hsr0' already exists in 'hsr' [ 385.547262][T16528] Cannot create hsr debugfs directory [ 385.867611][T16624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2830'. [ 386.503258][T16644] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2833'. [ 386.639177][ T5835] Bluetooth: hci1: command tx timeout [ 386.735349][T16653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2837'. [ 386.750853][T16528] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.767410][T16528] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.856873][T16528] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.871339][T16528] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.949677][T16528] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.976631][T16528] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.061302][T16528] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.081369][T16528] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.272818][T16528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 387.285104][T16528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 387.297846][T16528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 387.309422][T16528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 387.379458][T16528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.398491][T16528] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.412293][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.419479][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.435658][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.442876][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.626912][T16528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.669307][T16528] veth0_vlan: entered promiscuous mode [ 387.682478][T16528] veth1_vlan: entered promiscuous mode [ 387.713157][T16528] veth0_macvtap: entered promiscuous mode [ 387.722454][T16528] veth1_macvtap: entered promiscuous mode [ 387.741274][T16528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.757941][T16528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.771930][ T9837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.781393][ T9837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.793192][ T9837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.802437][ T9837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.881797][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.895386][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.919949][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.929684][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.982411][T16684] Cannot find set identified by id 65534 to match [ 388.206567][T16698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2846'. [ 388.277800][T16697] gretap1: entered promiscuous mode [ 388.295949][T16697] gretap1: entered allmulticast mode [ 388.566379][T16714] tipc: Enabling of bearer rejected, already enabled [ 388.581785][T16714] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 388.716572][ T5835] Bluetooth: hci1: command tx timeout [ 389.012976][T16750] xfrm1: entered allmulticast mode [ 389.041928][T16752] x_tables: duplicate underflow at hook 2 [ 389.148937][T16753] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2859'. [ 389.191041][T16753] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2859'. [ 389.208386][T16756] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2859'. [ 389.218708][T16755] netlink: 'syz.4.2863': attribute type 12 has an invalid length. [ 389.261233][T16758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2864'. [ 389.374986][T16765] macvtap2: entered promiscuous mode [ 389.387120][T16765] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 389.480675][T16761] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.2865'. [ 389.516017][T16761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2865'. [ 389.538079][T16761] netlink: 'syz.0.2865': attribute type 10 has an invalid length. [ 389.577054][T16761] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 389.836495][T16783] syzkaller1: entered allmulticast mode [ 390.008100][T16789] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2872'. [ 390.236553][T16797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2874'. [ 390.621062][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 390.632294][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 390.642335][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 390.651284][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 390.659656][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 390.807293][ T5147] Bluetooth: hci1: command tx timeout [ 391.360613][T16818] lo speed is unknown, defaulting to 1000 [ 392.092427][T16852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.360259][T16818] chnl_net:caif_netlink_parms(): no params data found [ 392.517060][T16852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.709512][T16852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.715186][ T5147] Bluetooth: hci2: command tx timeout [ 392.930489][T16852] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.028251][T16818] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.055200][T16818] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.062672][T16818] bridge_slave_0: entered allmulticast mode [ 393.078148][T16818] bridge_slave_0: entered promiscuous mode [ 393.092384][T16847] lo speed is unknown, defaulting to 1000 [ 393.099234][T16818] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.119129][T16818] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.134866][T16818] bridge_slave_1: entered allmulticast mode [ 393.153166][T16818] bridge_slave_1: entered promiscuous mode [ 393.318717][ T3520] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.339334][T16818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.396235][T16818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.447443][ T754] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.613815][T16818] team0: Port device team_slave_0 added [ 393.646110][T16818] team0: Port device team_slave_1 added [ 393.738705][ T3520] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.753002][T16858] lo speed is unknown, defaulting to 1000 [ 393.828789][ T9837] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.855536][T16818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.862516][T16818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.897822][T16818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.936794][T16818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.944840][T16818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.971845][T16818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.384869][T16818] hsr_slave_0: entered promiscuous mode [ 394.391823][T16818] hsr_slave_1: entered promiscuous mode [ 394.411563][T16818] debugfs: 'hsr0' already exists in 'hsr' [ 394.421734][T16818] Cannot create hsr debugfs directory [ 394.489931][T16866] sch_fq: defrate 0 ignored. [ 394.725881][T16868] tipc: Started in network mode [ 394.730789][T16868] tipc: Node identity 427ef64932b7, cluster identity 4711 [ 394.748651][T16868] tipc: Enabled bearer , priority 0 [ 394.765910][T16868] team_slave_1: entered promiscuous mode [ 394.781900][T16868] team_slave_1: entered allmulticast mode [ 394.795914][ T5147] Bluetooth: hci2: command tx timeout [ 394.973420][T16867] tipc: Disabling bearer [ 395.433677][T16818] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.551928][T16818] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.621153][T16879] xt_CT: You must specify a L4 protocol and not use inversions on it [ 395.631124][T16796] Set syz1 is full, maxelem 65536 reached [ 395.639738][T16879] netlink: 'syz.3.2897': attribute type 1 has an invalid length. [ 395.669359][T16878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 395.674945][T16818] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.773265][T16880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2897'. [ 395.799789][T16887] x_tables: duplicate underflow at hook 2 [ 395.831701][T16878] bond6: (slave veth9): Enslaving as an active interface with a down link [ 395.846115][T16880] 8021q: adding VLAN 0 to HW filter on device bond6 [ 395.916576][T16818] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.931807][T16893] netlink: 'syz.1.2898': attribute type 1 has an invalid length. [ 396.014065][T16893] 8021q: adding VLAN 0 to HW filter on device bond10 [ 396.063469][T16889] veth13: entered promiscuous mode [ 396.177557][T16906] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2904'. [ 396.413582][T16818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 396.441486][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2907'. [ 396.472380][T16918] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2908'. [ 396.508851][T16918] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 396.590956][T16818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 396.614003][T16818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 396.638386][T16818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 396.652180][T16925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2909'. [ 396.669179][T16902] lo speed is unknown, defaulting to 1000 [ 396.851090][T16818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.875752][ T5147] Bluetooth: hci2: command tx timeout [ 396.928792][T16818] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.973136][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.980419][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.994308][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2911'. [ 397.016454][ T9839] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.023638][ T9839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.466766][T16946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2914'. [ 397.749258][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2916'. [ 397.977691][T16818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.163752][T16818] veth0_vlan: entered promiscuous mode [ 398.255955][T16818] veth1_vlan: entered promiscuous mode [ 398.362421][T16818] veth0_macvtap: entered promiscuous mode [ 398.389663][T16818] veth1_macvtap: entered promiscuous mode [ 398.436036][T16818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.464192][T16818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.513752][ T9839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.524280][ T9839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.553281][ T9839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.568661][ T9839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.589209][T16994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2927'. [ 398.596086][T16995] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2926'. [ 398.854603][T16994] bridge: RTM_NEWNEIGH with invalid ether address [ 398.954641][ T5147] Bluetooth: hci2: command tx timeout [ 398.979975][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.109098][T17001] bridge0: entered allmulticast mode [ 399.135571][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.143906][T17001] pim6reg: entered allmulticast mode [ 399.155952][T16995] lo speed is unknown, defaulting to 1000 [ 399.251009][T17005] netlink: 'syz.1.2929': attribute type 1 has an invalid length. [ 399.411246][T17005] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 399.487229][ T754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.505092][ T754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.753575][T17028] Unsupported ieee802154 address type: 0 [ 399.901448][T17014] bond7: entered promiscuous mode [ 399.907624][T17014] 8021q: adding VLAN 0 to HW filter on device bond7 [ 400.169133][T17023] 8021q: adding VLAN 0 to HW filter on device bond7 [ 400.184184][T17023] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 400.197074][T17023] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 400.516296][T17009] lo speed is unknown, defaulting to 1000 [ 400.867226][T17054] __nla_validate_parse: 5 callbacks suppressed [ 400.867245][T17054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2937'. [ 400.935247][T17053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2937'. [ 400.971175][T17058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2939'. [ 401.011967][T17062] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2938'. [ 401.021446][T17062] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2938'. [ 401.044491][T17062] netlink: 'syz.0.2938': attribute type 5 has an invalid length. [ 401.074550][T17062] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2938'. [ 401.111743][T17062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'. [ 401.122994][T17060] pim6reg: entered allmulticast mode [ 401.123246][T17060] pim6reg: left allmulticast mode [ 401.237757][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 401.255163][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 401.264186][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 401.295003][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 401.303884][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 401.439564][ T754] smc: removing ib device syz1 [ 401.463955][T17075] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 401.477460][ T5841] syz1: Port: 1 Link DOWN [ 401.509820][T17073] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 402.008347][T17067] lo speed is unknown, defaulting to 1000 [ 402.775256][T17097] netlink: 'syz.4.2946': attribute type 1 has an invalid length. [ 402.920502][T17102] gretap1: entered allmulticast mode [ 403.054696][T17102] bond1: (slave gretap1): making interface the new active one [ 403.064364][T17102] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 403.184509][T17101] lo speed is unknown, defaulting to 1000 [ 403.364819][ T5147] Bluetooth: hci5: command tx timeout [ 403.917380][T17111] netlink: 'syz.2.2949': attribute type 21 has an invalid length. [ 403.964293][T17110] netlink: 'syz.2.2949': attribute type 21 has an invalid length. [ 404.002801][T17111] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2949'. [ 404.055114][T17110] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2949'. [ 404.424243][T17067] chnl_net:caif_netlink_parms(): no params data found [ 404.733476][T17135] sctp: [Deprecated]: syz.0.2957 (pid 17135) Use of int in max_burst socket option deprecated. [ 404.733476][T17135] Use struct sctp_assoc_value instead [ 404.770835][T17135] xt_ecn: cannot match TCP bits for non-tcp packets [ 405.102321][ T3520] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.125688][ T3520] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 512 - 0 [ 405.152406][ T3520] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.191179][T17067] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.200239][T17067] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.208160][T17067] bridge_slave_0: entered allmulticast mode [ 405.217214][T17067] bridge_slave_0: entered promiscuous mode [ 405.253748][ T3520] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.265319][ T3520] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 512 - 0 [ 405.275258][ T3520] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.300059][T17067] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.307464][T17067] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.315061][T17067] bridge_slave_1: entered allmulticast mode [ 405.322196][T17067] bridge_slave_1: entered promiscuous mode [ 405.380216][T17067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.391311][T17143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2959'. [ 405.394843][ T3520] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.412584][ T3520] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 512 - 0 [ 405.422946][ T3520] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.436775][ T5147] Bluetooth: hci5: command tx timeout [ 405.454231][T17067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.517668][ T3520] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.543308][ T3520] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 512 - 0 [ 405.585354][ T3520] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.622836][T17150] siw: device registration error -23 [ 405.699870][T17067] team0: Port device team_slave_0 added [ 405.718561][T17067] team0: Port device team_slave_1 added [ 405.806214][T17067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.813188][T17067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.856313][T17067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.890388][T17067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.902780][T17067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.930143][T17067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.993614][T17146] lo speed is unknown, defaulting to 1000 [ 406.061428][T17166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2965'. [ 406.180093][T17067] hsr_slave_0: entered promiscuous mode [ 406.196834][T17067] hsr_slave_1: entered promiscuous mode [ 406.231183][T17067] debugfs: 'hsr0' already exists in 'hsr' [ 406.265191][T17067] Cannot create hsr debugfs directory [ 406.725348][T17186] xt_hashlimit: invalid rate [ 406.852978][T17201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2973'. [ 406.866009][ T3520] dvmrp0 (unregistering): left allmulticast mode [ 406.934164][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2974'. [ 406.946839][T17204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2974'. [ 406.981938][ T3520] geneve0 (unregistering): left allmulticast mode [ 407.269138][ T3520] bond0 (unregistering): Released all slaves [ 407.378772][ T3520] bond1 (unregistering): Released all slaves [ 407.391477][ T3520] bond2 (unregistering): Released all slaves [ 407.497400][ T3520] bond3 (unregistering): (slave bond4): Releasing backup interface [ 407.506318][ T3520] bond4 (unregistering): left promiscuous mode [ 407.512758][ T3520] bond3 (unregistering): Released all slaves [ 407.524671][ T5147] Bluetooth: hci5: command tx timeout [ 407.633199][ T3520] bond4 (unregistering): Released all slaves [ 407.646377][ T3520] bond5 (unregistering): Released all slaves [ 407.753538][ T3520] bond6 (unregistering): (slave veth9): Releasing backup interface [ 407.766290][ T3520] bond6 (unregistering): Released all slaves [ 407.780109][ T3520] bond7 (unregistering): Released all slaves [ 407.793547][ T3520] bond8 (unregistering): Released all slaves [ 407.902172][ T3520] bond9 (unregistering): Released all slaves [ 408.007396][ T3520] bond10 (unregistering): Released all slaves [ 408.146132][T17182] lo speed is unknown, defaulting to 1000 [ 408.239440][ T3520] tipc: Disabling bearer [ 408.272089][ T3520] tipc: Left network mode [ 408.781422][T17231] netlink: 'syz.4.2979': attribute type 1 has an invalid length. [ 408.820317][T17231] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2979'. [ 409.593178][T17238] lo speed is unknown, defaulting to 1000 [ 409.605267][ T5147] Bluetooth: hci5: command tx timeout [ 409.713363][T17067] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 409.776310][T17067] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 409.813138][T17067] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 409.899227][T17067] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 410.310201][T17270] netlink: 'syz.4.2990': attribute type 10 has an invalid length. [ 410.342887][T17270] dummy0: entered promiscuous mode [ 410.351166][T17270] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 410.506578][T17276] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 410.830229][T17067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.861470][T17067] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.891750][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.899023][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.929744][ T3520] veth1_macvtap: left promiscuous mode [ 410.936683][ T3520] veth0_macvtap: left promiscuous mode [ 411.010312][T17287] netlink: 'syz.4.2995': attribute type 1 has an invalid length. [ 411.019194][T17287] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2995'. [ 411.029948][T17287] netlink: 'syz.4.2995': attribute type 1 has an invalid length. [ 411.164548][ T3520] pim6reg (unregistering): left allmulticast mode [ 411.805378][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.812520][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.136879][T17312] netlink: 'syz.2.3000': attribute type 25 has an invalid length. [ 412.559702][T17067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.653306][ T3520] IPVS: stop unused estimator thread 0... [ 412.661624][T17324] netlink: 'syz.2.3004': attribute type 2 has an invalid length. [ 412.746658][T17067] veth0_vlan: entered promiscuous mode [ 412.788819][T17067] veth1_vlan: entered promiscuous mode [ 412.909145][T17067] veth0_macvtap: entered promiscuous mode [ 412.947703][T17067] veth1_macvtap: entered promiscuous mode [ 412.978797][T17320] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.041713][T17327] lo speed is unknown, defaulting to 1000 [ 413.058262][T17067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.121211][T17320] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.161942][T17333] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 413.172624][T17067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.204214][T17338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3008'. [ 413.238076][T17338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3008'. [ 413.284037][T17320] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.327624][ T754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.382443][ T754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.408032][ T754] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.441256][T17320] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.481215][ T754] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.512707][T17344] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3009'. [ 413.642759][T17330] lo speed is unknown, defaulting to 1000 [ 413.710540][T17352] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3011'. [ 413.790233][ T3520] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.811657][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.835680][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.866556][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3013'. [ 413.878890][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3013'. [ 413.888646][T17359] netlink: 'syz.4.3013': attribute type 18 has an invalid length. [ 413.912379][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.041851][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.049934][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.060017][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.068004][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.215972][T17365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3015'. [ 414.340782][T17365] lo speed is unknown, defaulting to 1000 [ 414.345065][T17368] netlink: 'syz.1.2935': attribute type 4 has an invalid length. [ 414.411374][T17370] netlink: 'syz.1.2935': attribute type 4 has an invalid length. [ 414.713223][T17376] 8021q: VLANs not supported on wg1 [ 414.943439][T17390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3021'. [ 415.203426][T17399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3025'. [ 415.468602][T17366] lo speed is unknown, defaulting to 1000 [ 415.800578][T17408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3027'. [ 415.954904][T17411] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 416.590648][T17424] ip6tnl0: mtu less than device minimum [ 416.761068][T17427] netlink: 'syz.3.3032': attribute type 16 has an invalid length. [ 416.769148][T17427] netlink: 'syz.3.3032': attribute type 17 has an invalid length. [ 416.803533][T17427] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.841105][T17427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.969163][T17439] lo speed is unknown, defaulting to 1000 [ 417.051724][T17443] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20001 [ 417.550369][T17455] geneve3: entered promiscuous mode [ 417.592346][ T9837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.626897][ T9837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.667973][ T9837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.684989][ T9837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.554291][T17504] __nla_validate_parse: 2 callbacks suppressed [ 418.554310][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3052'. [ 418.582489][T17502] lo speed is unknown, defaulting to 1000 [ 418.611502][T17504] gtp0: entered promiscuous mode [ 418.654476][T17504] gtp0: entered allmulticast mode [ 419.156902][T17526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3058'. [ 419.459538][T17541] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 419.485718][T17541] CPU: 1 UID: 0 PID: 17541 Comm: syz.1.3061 Not tainted syzkaller #0 PREEMPT(full) [ 419.485747][T17541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 419.485761][T17541] Call Trace: [ 419.485769][T17541] [ 419.485778][T17541] dump_stack_lvl+0x189/0x250 [ 419.485809][T17541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.485831][T17541] ? __pfx__printk+0x10/0x10 [ 419.485858][T17541] ? kernfs_path_from_node+0x2f/0x290 [ 419.485883][T17541] ? kernfs_path_from_node+0x250/0x290 [ 419.485905][T17541] ? kernfs_path_from_node+0x2f/0x290 [ 419.485932][T17541] sysfs_warn_dup+0x8e/0xa0 [ 419.485952][T17541] sysfs_do_create_link_sd+0xc0/0x110 [ 419.485975][T17541] device_add_class_symlinks+0x1cf/0x240 [ 419.486005][T17541] device_add+0x475/0xb50 [ 419.486034][T17541] wiphy_register+0x1c81/0x2aa0 [ 419.486073][T17541] ? __pfx_wiphy_register+0x10/0x10 [ 419.486094][T17541] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 419.486117][T17541] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 419.486150][T17541] ieee80211_register_hw+0x3473/0x40d0 [ 419.486187][T17541] ? ieee80211_register_hw+0x14a1/0x40d0 [ 419.486215][T17541] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 419.486230][T17541] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 419.486254][T17541] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 419.486273][T17541] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 419.486300][T17541] ? __hrtimer_setup+0x187/0x210 [ 419.486317][T17541] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 419.486344][T17541] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 419.486393][T17541] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 419.486412][T17541] ? trace_kmalloc+0x1f/0xd0 [ 419.486433][T17541] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 419.486458][T17541] ? kstrndup+0xbf/0x160 [ 419.486485][T17541] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 419.486511][T17541] ? __pfx___nla_validate_parse+0x10/0x10 [ 419.486549][T17541] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 419.486576][T17541] ? rcu_is_watching+0x15/0xb0 [ 419.486600][T17541] ? __nla_parse+0x40/0x60 [ 419.486626][T17541] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 419.486658][T17541] genl_family_rcv_msg_doit+0x212/0x300 [ 419.486688][T17541] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 419.486723][T17541] ? bpf_lsm_capable+0x9/0x20 [ 419.486744][T17541] ? security_capable+0x7e/0x2e0 [ 419.486773][T17541] genl_rcv_msg+0x60e/0x790 [ 419.486801][T17541] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.486823][T17541] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 419.486857][T17541] netlink_rcv_skb+0x205/0x470 [ 419.486873][T17541] ? __lock_acquire+0xab9/0xd20 [ 419.486891][T17541] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.486915][T17541] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.486952][T17541] ? down_read+0x1ad/0x2e0 [ 419.486980][T17541] genl_rcv+0x28/0x40 [ 419.486999][T17541] netlink_unicast+0x82f/0x9e0 [ 419.487035][T17541] ? __pfx_netlink_unicast+0x10/0x10 [ 419.487062][T17541] ? netlink_sendmsg+0x642/0xb30 [ 419.487079][T17541] ? skb_put+0x11b/0x210 [ 419.487100][T17541] netlink_sendmsg+0x805/0xb30 [ 419.487128][T17541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.487150][T17541] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.487179][T17541] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.487195][T17541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.487214][T17541] __sock_sendmsg+0x21c/0x270 [ 419.487242][T17541] ____sys_sendmsg+0x505/0x830 [ 419.487268][T17541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.487298][T17541] ? import_iovec+0x74/0xa0 [ 419.487318][T17541] ___sys_sendmsg+0x21f/0x2a0 [ 419.487342][T17541] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.487398][T17541] ? __fget_files+0x2a/0x420 [ 419.487413][T17541] ? __fget_files+0x3a0/0x420 [ 419.487439][T17541] __x64_sys_sendmsg+0x19b/0x260 [ 419.487462][T17541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.487499][T17541] ? do_syscall_64+0xbe/0xfa0 [ 419.487523][T17541] do_syscall_64+0xfa/0xfa0 [ 419.487542][T17541] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.487562][T17541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.487579][T17541] ? clear_bhb_loop+0x60/0xb0 [ 419.487600][T17541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.487616][T17541] RIP: 0033:0x7f7ff2b8eec9 [ 419.487633][T17541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.487649][T17541] RSP: 002b:00007f7ff3a54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.487669][T17541] RAX: ffffffffffffffda RBX: 00007f7ff2de5fa0 RCX: 00007f7ff2b8eec9 [ 419.487682][T17541] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 419.487693][T17541] RBP: 00007f7ff2c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 419.487704][T17541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.487714][T17541] R13: 00007f7ff2de6038 R14: 00007f7ff2de5fa0 R15: 00007ffc03e8b698 [ 419.487745][T17541] [ 419.981483][T17545] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3062'. [ 420.003285][T17550] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3063'. [ 420.425880][T17568] netlink: 'syz.2.3069': attribute type 1 has an invalid length. [ 420.450956][T17568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3069'. [ 420.494824][T17574] netlink: 'syz.2.3069': attribute type 1 has an invalid length. [ 420.677467][T17574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 420.766569][T17570] lo speed is unknown, defaulting to 1000 [ 420.868766][T17562] veth5: entered promiscuous mode [ 420.902092][T17568] erspan0: entered allmulticast mode [ 420.971753][T17599] wg1: entered promiscuous mode [ 420.977969][T17599] wg1: entered allmulticast mode [ 420.990303][T17599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3076'. [ 421.129852][T17607] rdma_op ffff888056dc71f0 conn xmit_rdma 0000000000000000 [ 421.278577][T17612] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3080'. [ 421.306481][T17612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3080'. [ 421.318401][T17613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3079'. [ 421.520624][T17620] xt_l2tp: unknown flags: 51 [ 421.662002][T17624] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3083'. [ 421.822501][T17626] lo speed is unknown, defaulting to 1000 [ 422.241113][T17642] vxcan1: entered allmulticast mode [ 422.591642][T17660] Bluetooth: MGMT ver 1.23 [ 422.888884][ T9770] IPVS: starting estimator thread 0... [ 422.900246][T17665] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 422.918298][T17665] netlink: 'syz.0.3095': attribute type 10 has an invalid length. [ 423.006330][T17666] IPVS: using max 26 ests per chain, 62400 per kthread [ 423.035803][T17665] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 423.679475][T17702] __nla_validate_parse: 34 callbacks suppressed [ 423.679495][T17702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3104'. [ 423.959347][T17722] tipc: Cannot configure node identity twice [ 423.972245][T17724] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3111'. [ 424.006430][T17722] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3110'. [ 424.383652][T17736] lo speed is unknown, defaulting to 1000 [ 424.702533][T17745] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 424.807272][T17745] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 424.860129][T17747] veth1_to_hsr: entered promiscuous mode [ 424.876450][T17747] macvtap1: entered promiscuous mode [ 424.882270][T17747] macvtap1: entered allmulticast mode [ 424.903230][T17747] veth1_to_hsr: entered allmulticast mode [ 425.038339][T17753] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 425.085521][T17749] lo speed is unknown, defaulting to 1000 [ 425.963270][T17782] dvmrp0: entered allmulticast mode [ 426.176169][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3130'. [ 426.350070][T17803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3131'. [ 426.392660][T17798] 8021q: adding VLAN 0 to HW filter on device bond8 [ 426.434070][T17801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 426.458796][T17804] bond8: (slave macsec1): Error -34 calling dev_set_mtu [ 426.491078][T17794] lo speed is unknown, defaulting to 1000 [ 426.661160][T17814] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3133'. [ 427.008893][T17825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3136'. [ 427.032233][T17825] netlink: 'syz.2.3136': attribute type 1 has an invalid length. [ 427.067898][T17825] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.079122][T17829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3137'. [ 427.140328][T17829] nbd: socks must be embedded in a SOCK_ITEM attr [ 427.167511][T17825] bond2: (slave gretap1): making interface the new active one [ 427.189427][T17825] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 427.439203][T17833] lo speed is unknown, defaulting to 1000 [ 427.487815][T17837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3138'. [ 427.513750][T17837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3138'. [ 427.741891][T17843] team1: entered promiscuous mode [ 427.747734][T17843] team1: entered allmulticast mode [ 428.862108][T17874] siw: device registration error -23 [ 428.873511][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 428.884047][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 428.893103][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 428.901947][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 428.910538][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 428.993801][T17875] lo speed is unknown, defaulting to 1000 [ 428.996380][T17878] __nla_validate_parse: 2 callbacks suppressed [ 428.996397][T17878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'. [ 429.189567][T17884] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 429.426819][T17880] lo speed is unknown, defaulting to 1000 [ 429.546949][T17885] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3151'. [ 430.033806][T17875] chnl_net:caif_netlink_parms(): no params data found [ 430.426105][T17916] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3158'. [ 430.436790][T17916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3158'. [ 430.446413][T17916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3158'. [ 430.553326][T17875] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.573536][T17875] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.587607][T17875] bridge_slave_0: entered allmulticast mode [ 430.598430][T17875] bridge_slave_0: entered promiscuous mode [ 430.612934][T17875] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.621420][T17918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3159'. [ 430.621472][T17875] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.638442][T17875] bridge_slave_1: entered allmulticast mode [ 430.647230][T17875] bridge_slave_1: entered promiscuous mode [ 430.813539][T17875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.827697][T17875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.919603][T17875] team0: Port device team_slave_0 added [ 430.930260][T17923] tipc: Started in network mode [ 430.936872][T17923] tipc: Node identity 1eddeabd7c19, cluster identity 4711 [ 430.946705][T17923] tipc: Enabled bearer , priority 0 [ 430.955578][ T5147] Bluetooth: hci0: command tx timeout [ 430.967481][T17875] team0: Port device team_slave_1 added [ 431.003152][T17923] syzkaller0: entered promiscuous mode [ 431.009624][T17923] syzkaller0: entered allmulticast mode [ 431.074747][T17875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.105225][T17875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.153477][T17875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.200342][T17875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.214138][T17875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.243100][T17875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.282297][T17924] tipc: Resetting bearer [ 431.668875][T17875] hsr_slave_0: entered promiscuous mode [ 431.686130][T17875] hsr_slave_1: entered promiscuous mode [ 431.692699][T17875] debugfs: 'hsr0' already exists in 'hsr' [ 431.698691][T17875] Cannot create hsr debugfs directory [ 431.704313][T17928] lo speed is unknown, defaulting to 1000 [ 431.996843][ T9770] tipc: Node number set to 1657072317 [ 432.095695][T17950] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3166'. [ 432.143632][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3168'. [ 432.199735][T17953] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 432.219515][T17953] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 432.230310][T17953] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 432.324118][T17958] lo speed is unknown, defaulting to 1000 [ 432.813611][T17875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 432.833321][T17875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 432.872042][T17875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 432.902889][T17875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 432.943901][T17975] lo speed is unknown, defaulting to 1000 [ 433.036477][ T5147] Bluetooth: hci0: command tx timeout [ 433.240559][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3177'. [ 433.284119][T17996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3177'. [ 433.519806][T17875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.573326][T17875] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.607772][ T754] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.614953][ T754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.664407][ T754] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.671619][ T754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.772395][T18013] vlan2: entered promiscuous mode [ 433.778932][T18013] gretap0: entered promiscuous mode [ 434.094058][T18027] syz_tun: entered allmulticast mode [ 434.107267][T18022] lo speed is unknown, defaulting to 1000 [ 434.163848][T18027] dvmrp1: entered allmulticast mode [ 434.282567][T17875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.305451][T18043] __nla_validate_parse: 2 callbacks suppressed [ 434.305470][T18043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3188'. [ 434.400126][T17875] veth0_vlan: entered promiscuous mode [ 434.429322][T17875] veth1_vlan: entered promiscuous mode [ 434.496520][T17875] veth0_macvtap: entered promiscuous mode [ 434.516932][T17875] veth1_macvtap: entered promiscuous mode [ 434.589544][T17875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.621793][T17875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.739795][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.779614][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.821053][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.858284][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.974227][T18038] lo speed is unknown, defaulting to 1000 [ 435.126251][ T5147] Bluetooth: hci0: command tx timeout [ 435.188946][T18069] netlink: 'syz.1.3195': attribute type 11 has an invalid length. [ 435.382535][ T9837] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.403769][ T9837] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.458327][ T9837] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.486042][ T9837] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.613285][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.623433][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.882705][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3200'. [ 435.917813][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.936032][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.949955][T18088] bridge_slave_1: left allmulticast mode [ 435.957429][T18088] bridge_slave_1: left promiscuous mode [ 435.972948][T18088] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.029517][T18088] bridge_slave_0: left allmulticast mode [ 436.056719][T18088] bridge_slave_0: left promiscuous mode [ 436.082968][T18088] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.153832][T18097] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3203'. [ 436.472938][T18107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3205'. [ 437.071248][T18038] syz_tun: left allmulticast mode [ 437.147107][T18142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3213'. [ 437.169997][T18144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3215'. [ 437.189795][T18142] vlan5: entered promiscuous mode [ 437.196454][ T5147] Bluetooth: hci0: command tx timeout [ 437.564268][T18177] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3224'. [ 437.919060][T18191] siw: device registration error -23 [ 437.925277][T18196] siw: device registration error -23 [ 438.049281][T18201] lo speed is unknown, defaulting to 1000 [ 438.189515][T18205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3229'. [ 438.287365][T18213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3232'. [ 438.296804][T18213] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3232'. [ 438.498546][T18223] netlink: 'syz.2.3234': attribute type 1 has an invalid length. [ 438.644312][T18224] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 438.678707][T18224] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 438.744273][T18224] bond3: (slave vti0): making interface the new active one [ 438.775853][T18224] bond3: (slave vti0): Enslaving as an active interface with an up link [ 438.802098][T18212] lo speed is unknown, defaulting to 1000 [ 439.081722][T18237] bond4: entered promiscuous mode [ 439.087411][T18237] bond4: entered allmulticast mode [ 439.093270][T18237] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.370920][T18240] lo speed is unknown, defaulting to 1000 [ 440.142246][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 440.152032][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 440.165348][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.172027][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 440.180584][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 440.191491][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 440.531395][T18252] lo speed is unknown, defaulting to 1000 [ 440.629154][T18272] __nla_validate_parse: 4 callbacks suppressed [ 440.629171][T18272] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3245'. [ 440.698062][T18273] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 441.695675][T18252] chnl_net:caif_netlink_parms(): no params data found [ 442.072749][T18316] sctp: [Deprecated]: syz.2.3255 (pid 18316) Use of int in max_burst socket option deprecated. [ 442.072749][T18316] Use struct sctp_assoc_value instead [ 442.234639][ T5147] Bluetooth: hci4: command tx timeout [ 442.305227][T18252] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.325506][T18252] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.347413][T18252] bridge_slave_0: entered allmulticast mode [ 442.368405][T18252] bridge_slave_0: entered promiscuous mode [ 442.397003][T18326] lo speed is unknown, defaulting to 1000 [ 442.414160][T18252] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.421728][T18252] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.437310][T18252] bridge_slave_1: entered allmulticast mode [ 442.449148][T18252] bridge_slave_1: entered promiscuous mode [ 442.576409][T18336] veth0_to_bond: entered allmulticast mode [ 442.609431][T18252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.659133][T18252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.797822][T18252] team0: Port device team_slave_0 added [ 442.808746][T18252] team0: Port device team_slave_1 added [ 442.895213][T18252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.902525][T18252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.930433][ T1318] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 442.931579][T18252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.964565][T18353] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 442.975228][T18353] bridge1: entered promiscuous mode [ 442.992697][T18252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.000803][T18252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.027626][T18252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.149320][T18252] hsr_slave_0: entered promiscuous mode [ 443.160048][T18252] hsr_slave_1: entered promiscuous mode [ 443.167791][T18252] debugfs: 'hsr0' already exists in 'hsr' [ 443.173554][T18252] Cannot create hsr debugfs directory [ 443.263042][T18361] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 443.554548][T18252] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.567657][T18252] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.710425][T18252] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.730554][T18252] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.798405][T18367] tun0: tun_chr_ioctl cmd 1074025681 [ 443.877105][T18252] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.895712][T18252] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.077314][T18252] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.088704][T18252] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.315442][ T5147] Bluetooth: hci4: command tx timeout [ 444.364165][T18399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3275'. [ 444.373524][T18399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3275'. [ 446.046771][T18252] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 446.078380][T18252] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 446.118841][T18252] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 446.169102][T18252] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 446.395253][ T5147] Bluetooth: hci4: command tx timeout [ 446.513588][T18252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.812172][T18432] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3282'. [ 446.908553][T18252] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.936192][ T9837] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.943386][ T9837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.114319][T18434] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.171803][ T9837] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.179029][ T9837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.263177][T18434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.362503][T18441] macvlan2: entered promiscuous mode [ 447.369985][T18441] syz_tun: entered promiscuous mode [ 447.379269][T18441] team0: Port device macvlan2 added [ 447.470270][T18434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.543732][T18457] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3289'. [ 447.642312][T18434] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.703277][T18464] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3292'. [ 447.770200][T18464] 8021q: VLANs not supported on ipvlan1 [ 447.812496][T18468] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3293'. [ 447.829438][ T9838] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.850307][T18464] macsec1: entered promiscuous mode [ 447.860617][T18464] macsec1: entered allmulticast mode [ 447.980448][ T3480] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.028066][ T1318] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.073186][ T1318] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.079276][T18479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3296'. [ 448.129823][T18252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.290861][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3298'. [ 448.336641][T18492] netlink: 'syz.2.3299': attribute type 1 has an invalid length. [ 448.348173][T18492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3299'. [ 448.480962][ T5147] Bluetooth: hci4: command tx timeout [ 448.491802][T18501] veth0: entered promiscuous mode [ 448.517714][T18503] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3301'. [ 448.617556][T18252] veth0_vlan: entered promiscuous mode [ 448.671839][T18507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3302'. [ 448.691335][T18252] veth1_vlan: entered promiscuous mode [ 448.920900][T18515] tipc: Failed to obtain node identity [ 448.923574][T18527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3305'. [ 448.932550][T18515] tipc: Enabling of bearer rejected, failed to enable media [ 448.992188][T18252] veth0_macvtap: entered promiscuous mode [ 449.009131][T18252] veth1_macvtap: entered promiscuous mode [ 449.032258][T18252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.055814][T18252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.089491][ T3520] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.101207][ T9838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.152505][ T9838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.175159][ T9838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.257837][T18534] bond5: option downdelay: invalid value (18446744073709551615) [ 449.266109][T18534] bond5: option downdelay: allowed values 0 - 2147483647 [ 449.275910][T18534] bond5 (unregistering): Released all slaves [ 449.371020][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.380129][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.435790][ T9838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.455180][ T9838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.463367][T18542] lo speed is unknown, defaulting to 1000 [ 449.673821][T18551] --map-set only usable from mangle table [ 449.912694][T18547] lo speed is unknown, defaulting to 1000 [ 450.566770][T18572] netlink: 'syz.2.3318': attribute type 1 has an invalid length. [ 450.579922][T18572] netlink: 'syz.2.3318': attribute type 1 has an invalid length. [ 450.697314][T18574] veth0_to_bridge: entered promiscuous mode [ 450.783779][T18574] netlink: 'syz.2.3321': attribute type 1 has an invalid length. [ 450.805401][T18573] veth0_to_bridge: left promiscuous mode [ 451.027589][T18588] netlink: 'syz.2.3324': attribute type 1 has an invalid length. [ 451.168269][T18588] 8021q: adding VLAN 0 to HW filter on device bond5 [ 451.424553][T18610] netlink: 'syz.2.3330': attribute type 21 has an invalid length. [ 456.283001][T18629] lo speed is unknown, defaulting to 1000 [ 467.411583][T18642] netlink: 'syz.2.3339': attribute type 1 has an invalid length. [ 473.322787][T18642] bond6: entered promiscuous mode [ 473.544191][T18642] 8021q: adding VLAN 0 to HW filter on device bond6 [ 492.633113][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 492.783266][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 493.162425][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 493.521988][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 493.709185][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 496.653680][ T5835] Bluetooth: hci3: command tx timeout [ 498.012956][T18663] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.027157][T18663] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.730938][ T5835] Bluetooth: hci3: command tx timeout [ 500.810608][ T5835] Bluetooth: hci3: command tx timeout [ 501.623093][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.669984][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 502.793530][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 502.881771][ T5147] Bluetooth: hci3: command tx timeout [ 502.941999][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 503.427942][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 503.901582][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 506.561403][ T5147] Bluetooth: hci2: command tx timeout [ 508.653471][ T5147] Bluetooth: hci2: command tx timeout [ 510.493955][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 510.603113][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 510.712964][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 510.761699][ T5835] Bluetooth: hci2: command tx timeout [ 511.168557][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 511.713298][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 512.812576][ T5147] Bluetooth: hci2: command tx timeout [ 514.322215][ T5147] Bluetooth: hci6: command tx timeout [ 516.461597][ T5147] Bluetooth: hci6: command tx timeout [ 518.572655][ T5147] Bluetooth: hci6: command tx timeout [ 520.641435][ T5147] Bluetooth: hci6: command tx timeout [ 524.202522][ T5147] Bluetooth: hci5: command 0x0406 tx timeout [ 525.963487][T18663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.533457][T18663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.444165][ T5147] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 535.634239][ T5147] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 535.741609][ T5147] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 536.312271][ T5147] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 536.812741][ T5147] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 537.912931][ T5835] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 538.031983][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 538.551717][ T5835] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 539.293283][ T5835] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 539.550894][ T5835] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 539.633256][ T5835] Bluetooth: hci7: command tx timeout [ 541.692755][ T52] Bluetooth: hci7: command tx timeout [ 542.564066][ T52] Bluetooth: hci8: command tx timeout [ 543.773957][ T52] Bluetooth: hci7: command tx timeout [ 544.651252][ T52] Bluetooth: hci8: command tx timeout [ 545.842338][ T52] Bluetooth: hci7: command tx timeout [ 546.743204][ T52] Bluetooth: hci8: command tx timeout [ 548.824020][ T52] Bluetooth: hci8: command tx timeout [ 550.152111][ T5147] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 550.463186][ T5147] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 550.841925][ T5147] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 551.204185][ T5147] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 551.754221][ T5835] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 554.803180][ T5835] Bluetooth: hci9: command tx timeout [ 554.911558][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 556.889330][ T52] Bluetooth: hci9: command tx timeout [ 558.973628][ T52] Bluetooth: hci9: command tx timeout [ 559.693882][ T5835] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 559.921920][ T5835] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 560.032022][ T5835] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 560.483757][ T5835] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 560.902451][ T5835] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 561.051358][ T5835] Bluetooth: hci9: command tx timeout [ 563.091975][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.842714][ T5835] Bluetooth: hci10: command tx timeout [ 564.573064][T16818] team0: Port device macvlan2 removed [ 565.132942][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 565.922662][ T52] Bluetooth: hci10: command tx timeout [ 568.013733][ T52] Bluetooth: hci10: command tx timeout [ 568.564200][ T5835] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 568.682853][ T5835] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 568.922726][ T5835] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 569.272510][ T5835] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 569.571065][ T5835] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 569.731844][ T9839] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.082382][ T52] Bluetooth: hci10: command tx timeout [ 570.192052][ T9836] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.419186][ T52] Bluetooth: hci11: command tx timeout [ 574.532777][ T52] Bluetooth: hci11: command tx timeout [ 576.573141][ T52] Bluetooth: hci11: command tx timeout [ 578.234136][ T9836] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.607240][ T9836] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.691273][ T52] Bluetooth: hci11: command tx timeout [ 592.372676][ T9838] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.944147][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 598.102860][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 598.193395][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 598.821520][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 599.092937][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 600.461512][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 600.640937][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 600.952254][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 601.603465][ T52] Bluetooth: hci1: command tx timeout [ 601.682197][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 602.011843][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 603.702612][ T5835] Bluetooth: hci1: command tx timeout [ 605.381945][ T5835] Bluetooth: hci2: command tx timeout [ 605.768014][ T5835] Bluetooth: hci1: command tx timeout [ 605.953583][T18703] lo speed is unknown, defaulting to 1000 [ 607.452838][ T5835] Bluetooth: hci2: command tx timeout [ 607.862366][ T5835] Bluetooth: hci1: command tx timeout [ 609.522603][ T5835] Bluetooth: hci2: command tx timeout [ 611.603471][ T5835] Bluetooth: hci2: command tx timeout [ 611.873035][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 611.952973][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 612.071597][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 612.392795][T18727] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 612.812531][T18727] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 615.450735][T18727] Bluetooth: hci3: command tx timeout [ 616.210390][ T9838] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.530697][T18727] Bluetooth: hci3: command tx timeout [ 619.603895][T18727] Bluetooth: hci3: command tx timeout [ 621.694055][T18727] Bluetooth: hci3: command tx timeout [ 624.502455][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.853125][ T9838] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.144134][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 626.233109][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 626.402111][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 626.923490][T18708] lo speed is unknown, defaulting to 1000 [ 627.371907][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 627.752623][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 627.961452][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 628.104054][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 628.273881][T18727] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 629.323743][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 629.983118][T18727] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 630.572843][T18727] Bluetooth: hci4: command tx timeout [ 630.882918][ T9838] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.644034][T18727] Bluetooth: hci5: command tx timeout [ 632.653736][ T52] Bluetooth: hci4: command tx timeout [ 634.753238][T18727] Bluetooth: hci5: command tx timeout [ 634.763628][ T52] Bluetooth: hci4: command tx timeout [ 636.812050][ T52] Bluetooth: hci5: command tx timeout [ 636.882805][ T52] Bluetooth: hci4: command tx timeout [ 638.912348][ T52] Bluetooth: hci5: command tx timeout [ 642.793859][T18705] lo speed is unknown, defaulting to 1000 [ 655.193269][ T9838] bridge_slave_1: left allmulticast mode [ 655.341768][ T9838] bridge_slave_1: left promiscuous mode [ 655.552190][ T9838] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.432268][ T9838] bridge_slave_0: left allmulticast mode [ 656.611362][ T9838] bridge_slave_0: left promiscuous mode [ 656.822663][ T9838] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.432653][ T9838] tipc: Resetting bearer [ 659.963684][T18727] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 660.173077][T18727] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 660.412648][T18727] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 661.142014][T18727] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 661.532794][T18727] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 662.511583][ T52] Bluetooth: hci7: command 0x0406 tx timeout [ 664.403171][ T5835] Bluetooth: hci6: command tx timeout [ 666.480439][ T52] Bluetooth: hci6: command tx timeout [ 667.503463][T18727] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 667.522975][T18727] Bluetooth: hci8: command 0x0406 tx timeout [ 667.602075][ T5147] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 667.761720][ T5147] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 668.333741][ T5835] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 668.562279][ T5835] Bluetooth: hci6: command tx timeout [ 668.722614][ T5835] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 670.652094][ T5835] Bluetooth: hci6: command tx timeout [ 671.521843][ T5835] Bluetooth: hci12: command tx timeout [ 673.611531][ T5835] Bluetooth: hci12: command tx timeout [ 675.733790][ T5147] Bluetooth: hci12: command tx timeout [ 676.103569][T18743] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 676.334016][T18743] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 676.494263][T18743] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 677.012487][T18743] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 677.471441][T18743] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 677.862284][ T5835] Bluetooth: hci12: command tx timeout [ 677.862775][T18743] Bluetooth: hci9: command 0x0406 tx timeout [ 681.542575][ T52] Bluetooth: hci13: command tx timeout [ 683.682510][ T52] Bluetooth: hci13: command tx timeout [ 685.761513][ T52] Bluetooth: hci13: command tx timeout [ 686.062599][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.062599][T18727] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 686.360745][T18727] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 686.463116][T18727] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 686.721606][T18727] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 686.903829][T18727] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 687.841377][T18727] Bluetooth: hci13: command tx timeout [ 688.004310][T18727] Bluetooth: hci10: command 0x0406 tx timeout [ 688.514348][ T9838] bond3 (unregistering): (slave vti0): Releasing backup interface [ 689.683979][T18743] Bluetooth: hci14: command tx timeout [ 691.771741][T18727] Bluetooth: hci14: command tx timeout [ 692.363410][ T5835] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 692.479321][ T9838] bond2 (unregistering): (slave gretap1): Releasing active interface [ 692.511551][ T5835] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 692.653862][ T5835] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 693.219328][ T5835] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 693.232853][ T52] Bluetooth: hci11: command 0x0406 tx timeout [ 693.552457][ T5835] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 693.842113][ T5835] Bluetooth: hci14: command tx timeout [ 695.552858][ T9838] dvmrp1 (unregistering): left allmulticast mode [ 695.933514][T18743] Bluetooth: hci14: command tx timeout [ 696.652776][T18743] Bluetooth: hci15: command tx timeout [ 698.722310][T18743] Bluetooth: hci15: command tx timeout [ 699.673546][ T9838] tipc: Disabling bearer [ 700.803906][T18743] Bluetooth: hci15: command tx timeout [ 702.903052][T18743] Bluetooth: hci15: command tx timeout [ 712.051608][ T9838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.043254][ T9838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.052782][ T9838] bond0 (unregistering): Released all slaves [ 721.543712][T18727] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 721.672366][T18727] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 722.042253][T18727] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 722.362648][T18727] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 722.503531][T18727] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 722.902106][T18727] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 723.302917][T18727] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 723.401542][T18727] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 723.842295][T18756] Bluetooth: hci1: command 0x0406 tx timeout [ 723.964032][T18727] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 724.241958][T18727] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 725.051532][T18743] Bluetooth: hci16: command tx timeout [ 726.353596][ T9838] bond1 (unregistering): Released all slaves [ 727.051957][ T5835] Bluetooth: hci17: command tx timeout [ 727.141089][ T5835] Bluetooth: hci16: command tx timeout [ 728.971287][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 729.161826][ T5835] Bluetooth: hci17: command tx timeout [ 729.203776][ T5835] Bluetooth: hci16: command tx timeout [ 731.211868][T18743] Bluetooth: hci17: command tx timeout [ 731.281387][T18743] Bluetooth: hci16: command tx timeout [ 733.303045][T18743] Bluetooth: hci17: command tx timeout [ 735.843704][ T9838] bond2 (unregistering): Released all slaves [ 736.844266][ T9838] bond3 (unregistering): Released all slaves [ 737.991889][T18727] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 738.290471][T18727] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 738.453200][T18727] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 738.952914][T18727] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 739.213633][T18727] Bluetooth: hci3: command 0x0406 tx timeout [ 739.943499][T18743] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 742.571927][T18743] Bluetooth: hci18: command tx timeout [ 744.644170][T18743] Bluetooth: hci18: command tx timeout [ 746.732588][T18743] Bluetooth: hci18: command tx timeout [ 747.402173][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.423881][ T5835] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 747.552489][ T5835] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 747.804160][ T5835] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 747.971901][ T9838] bond4 (unregistering): Released all slaves [ 748.213473][ T5835] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 748.563877][ T5835] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 748.832277][ T5835] Bluetooth: hci18: command tx timeout [ 749.061747][T18743] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 749.191734][T18743] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 749.272828][T18743] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 749.763646][T18743] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 749.932769][ T5835] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 751.771746][T18743] Bluetooth: hci19: command tx timeout [ 752.571333][T18727] Bluetooth: hci20: command tx timeout [ 753.852058][T18727] Bluetooth: hci19: command tx timeout [ 754.571470][T18727] Bluetooth: hci5: command 0x0406 tx timeout [ 754.651184][T18727] Bluetooth: hci4: command 0x0406 tx timeout [ 754.672229][T18756] Bluetooth: hci20: command tx timeout [ 755.922618][T18743] Bluetooth: hci19: command tx timeout [ 756.734196][T18743] Bluetooth: hci20: command tx timeout [ 757.472696][ T9838] bond5 (unregistering): Released all slaves [ 758.022315][T18743] Bluetooth: hci19: command tx timeout [ 758.812536][T18743] Bluetooth: hci20: command tx timeout [ 766.432117][ T9838] bond6 (unregistering): Released all slaves [ 768.322544][T18715] lo speed is unknown, defaulting to 1000 [ 769.732099][ T9838] tipc: Left network mode [ 771.734339][ T31] INFO: task syz.3.3336:18629 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 772.551360][ T31] Not tainted syzkaller #0 [ 772.701398][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 772.921436][ T31] task:syz.3.3336 state:D stack:24256 pid:18629 tgid:18627 ppid:17875 task_flags:0x400140 flags:0x00080003 [ 773.322859][ T31] Call Trace: [ 773.464060][ T31] [ 773.584113][ T31] __schedule+0x1798/0x4cc0 [ 773.882316][ T31] ? __lock_acquire+0xab9/0xd20 [ 774.082147][ T31] ? __lock_acquire+0xab9/0xd20 [ 774.181385][ T31] ? __pfx___schedule+0x10/0x10 [ 774.332681][ T31] ? schedule+0x91/0x360 [ 774.424072][ T31] schedule+0x165/0x360 [ 774.631039][ T31] schedule_preempt_disabled+0x13/0x30 [ 774.783328][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 775.021002][ T31] ? preempt_schedule+0xae/0xc0 [ 775.162585][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 775.361677][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 775.503393][ T31] ? __lock_acquire+0xab9/0xd20 [ 775.622312][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 775.872953][ T31] down_write+0x1ab/0x1f0 [ 776.050501][ T31] ? __pfx_down_write+0x10/0x10 [ 776.241878][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 776.383184][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 776.572955][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 776.932352][ T31] rdma_dev_exit_net+0x8c/0x340 [ 777.072876][ T31] ? __pfx___might_resched+0x10/0x10 [ 777.202992][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 777.331930][ T31] ? net_generic+0x1e/0x240 [ 777.442144][ T31] ? mutex_is_locked+0x17/0x50 [ 777.581414][ T31] ? rtnl_is_locked+0x15/0x20 [ 777.723573][ T31] ops_undo_list+0x49a/0x990 [ 777.902074][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 778.024059][ T31] ? ops_init+0x469/0x5c0 [ 778.222724][ T31] setup_net+0x2d6/0x320 [ 778.423786][ T31] ? __pfx_setup_net+0x10/0x10 [ 778.543921][ T31] ? copy_net_ns+0x337/0x4e0 [ 778.681754][ T31] ? down_read_killable+0x1d1/0x350 [ 778.861519][ T31] ? preinit_net+0x47d/0x740 [ 779.052376][ T31] copy_net_ns+0x34e/0x4e0 [ 779.344147][ T31] create_new_namespaces+0x3f3/0x720 [ 779.572604][ T31] ? security_capable+0x7e/0x2e0 [ 779.742382][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 779.892356][ T31] ksys_unshare+0x4c8/0x8c0 [ 780.154089][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 780.382725][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 780.551192][ T31] __x64_sys_unshare+0x38/0x50 [ 780.720923][ T31] do_syscall_64+0xfa/0xfa0 [ 780.851062][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 780.973727][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.152859][ T31] ? clear_bhb_loop+0x60/0xb0 [ 781.482053][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.693502][ T31] RIP: 0033:0x7f378458eec9 [ 781.824136][ T31] RSP: 002b:00007f378548b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 782.123017][ T31] RAX: ffffffffffffffda RBX: 00007f37847e6090 RCX: 00007f378458eec9 [ 782.272086][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200