last executing test programs: 2m25.727077609s ago: executing program 1 (id=1656): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000242b0000000000000000000000ffffac1414bbfe8000000000000000000000000000aa3a020201"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003f000701feffffff00000000017c0000040042800a00018006000600800a0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m25.412554304s ago: executing program 1 (id=1659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) (async, rerun: 64) r1 = socket$inet(0x2, 0x3, 0x8d) (rerun: 64) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) (async, rerun: 32) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) (async, rerun: 32) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x2b, r2}) r4 = socket(0xa, 0x1, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) (async, rerun: 32) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8, 0x3, r7}, @void}}}, 0x24}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x74, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x58, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x24, 0x9, 0xc, 0x5, 0x36, 0xb, 0xc, 0x18, 0x16, 0x12, 0x36, 0x2, 0x36, 0xb, 0x18, 0x5, 0x36, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x0, 0xe2db, 0x7, 0x7fff, 0x2f, 0x3]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x7}, {0x3, 0x3}, {0x7}, {0x5, 0x4}, {0x0, 0xa}, {0x1, 0x4}, {0x3, 0x5}, {0x2, 0xa}, {0x4, 0xa}, {0x3, 0x3}, {0x7, 0x5}]}]}, @NL80211_BAND_2GHZ={0x4}]}]}, 0x74}}, 0x24040000) r11 = socket(0x1d, 0x2, 0x6) setsockopt$llc_int(r11, 0x6a, 0x6, 0x0, 0x0) (async) r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async, rerun: 64) readv(r12, &(0x7f0000004680)=[{&(0x7f0000003380)=""/85, 0x55}], 0x1) (async, rerun: 64) connect$llc(r11, &(0x7f0000000000)={0x1a, 0x325, 0x5, 0x2, 0xa, 0xd, @multicast}, 0x10) 2m25.056027017s ago: executing program 1 (id=1663): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x3, 0x6, 0x1002) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20040000) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r6, 0x0, 0x0) setsockopt$inet_int(r6, 0x0, 0x3, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0x0, 0x80, &(0x7f0000000880)={0x2, 0x4e20}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x6}, {0xfff2, 0xffff}, {0x0, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x2c}}, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2000) syz_genetlink_get_family_id$mptcp(0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4004884) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000006a000769000200000000000000000005"], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) 2m24.724565772s ago: executing program 1 (id=1667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'ip6erspan0\x00', {0xffffffff}, 0x105}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x2b, 0x3b, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0x4}, 0x2b1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x15, 0x6, 0xfffffffd, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x7ff, 0xfffb, 0x8, 0x5, 0x3, [0xe, 0xff]}}) r4 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f0000000280)=[{{&(0x7f0000000380)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)="000d0000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1, 0x0, 0x19}}, {{&(0x7f0000000100)={0x2, 0x4e61, @loopback}, 0x10, 0x0}}], 0x2, 0x20004086) connect$x25(r3, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) 2m24.381919167s ago: executing program 1 (id=1673): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000005c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) close(r1) write$tcp_congestion(r0, 0x0, 0xeffd) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x118) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback={0xfec0ffff00000000}}, 0x1c) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) 2m24.105902981s ago: executing program 1 (id=1677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000190a01020000000000000000000000000900010073797a3000000000090002"], 0x2c}}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000380)={{0x3a, @loopback, 0x4e21, 0x4, 'nq\x00', 0x10, 0x100, 0x19}, {@empty, 0x4e22, 0x2002, 0xff, 0xffff}}, 0x44) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffc}) ioctl(r6, 0x8b22, &(0x7f0000000040)) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000000c0)={0x9, 0x400, 0x1, 0x0, 0x0, [{{r4}, 0x444}]}) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010002b042dbd70000000002000000000", @ANYRES32=r8, @ANYBLOB="04050500000000001c00128009000100626f6e64000000000c0002800500010005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="b5e9fdfffffffbdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r13, 0x89a2, &(0x7f0000000000)='bridge0\x00') r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2a9d7000ffdbdf250900020073797a310000000008004100727865001400330073797a5f74756e000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 2m22.990410809s ago: executing program 3 (id=1689): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2b, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0xa06}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x9, 0x91, &(0x7f0000000400)=""/145, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000500)=[{0x0, 0x5, 0xc, 0x7}, {0x2, 0x4, 0x3, 0xa}, {0x3, 0x2, 0x3, 0xd}, {0x4, 0x4, 0xe, 0x1}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x0, 0x5d, 0x15, &(0x7f0000000600)="8a2addf4bd5e38957bc089e7a9ad3dc1b41379a4d4ae232eb80ce9cc35c2897b13ecfed27457a0ca8a86dcccbacb6793e9c7cfff1c58607d1a0bb601693513c8d4247ebbf07d2f2c1b68c6c20c5f5c6c5ada1e7b3018f829b3dcc16fca", &(0x7f0000000680)=""/21, 0x9, 0x0, 0x50, 0x2d, &(0x7f00000006c0)="7ac01225461534a66b26b5a3aa27adb886fe4669697ca8a85256c2eca006d2cbaad3498640889920df0280a2e8544ba900cd0184eb07e3799eb3a11008b944ea11d5b26006b50e59b9a5399eb07e8def", &(0x7f0000000740)="de829dedd9359dca78370957af166e69d02a83cf88d548602425835a0069aa29d23531a170dbf374272f6d6a1a", 0x5, 0x0, 0x100}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (rerun: 32) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 2m22.912112001s ago: executing program 0 (id=1691): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000100000000000300000000000007000000", @ANYRES32], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r2 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000005c0)={@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x1, 0x1, {0xa, 0x4e24, 0x9f8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, {&(0x7f00000004c0)=""/254, 0xfe}, &(0x7f0000000100)}, 0xa0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="370000006a64561500000000", @ANYRES32=0x0, @ANYBLOB="b83c403d5e9993f708f1f38b90aedbbf5f86890677c28f4e08caaf8d9601fb0ac79b8d02fcb3d9151b98a1f747da3bdd9eebab3d7698acc2aa812c430095b011871fc4d7c30007ce1c4ada30d8f75fb783e8a4d3be2a9eb2855562ffa7def688e0bf93c277da7e3f5dc1aa346586eac47fd9794573ed65886d809a02bfdef0", @ANYRES64=0x0], 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f00000000c0)={'wlan1\x00', @random="0100"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x4, 0xfffff020}, {0x6}]}, 0x10) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 2m22.741774422s ago: executing program 3 (id=1692): r0 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYBLOB="38000000200001000000000000ee0000020000000000000000000000140003006c6f"], 0x38}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x40000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xd0c9}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000240)=r5, 0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000300), &(0x7f0000000440)=0x4) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) (async) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000480)={0x556, 0xcf, 0x8, 0x5, 0x62207eca}) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r7, 0x89ea, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="8402020100"], 0x18) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m22.729427675s ago: executing program 0 (id=1693): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0xc044) 2m22.567684467s ago: executing program 3 (id=1695): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@struct={0x6, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x3}, {0x0, 0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f00000000c0)=""/2, 0x44, 0x2, 0x1}, 0x28) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@empty, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4040, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, {0xbe00, 0x88be, 0x8}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r6}, 0x14) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x20}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x20, 0x1, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0}, 0x40) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x32, &(0x7f0000000600)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1704}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_query, @generic={0x1, 0x8, 0x2, 0x9, 0x4}, @snprintf, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f00000003c0)='GPL\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x0, r1, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000480)=[{0x3, 0x1, 0xd, 0x2}, {0x0, 0x1, 0xd, 0x7}, {0x0, 0x5, 0x1, 0x3}, {0x5, 0x1, 0xf, 0x2}, {0x1, 0x2, 0xf, 0x9}, {0x2, 0x2, 0x4}], 0x10, 0xfffffffa}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r9, r4, 0x10, 0x10, 0x0, @void, @value=r10, @void, @void, r8}, 0x20) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r11, 0x104, 0x2, &(0x7f0000000540)=0x1000000, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) getsockopt$ax25_int(r9, 0x101, 0x5, &(0x7f0000000880), &(0x7f00000008c0)=0x4) 2m22.499596082s ago: executing program 0 (id=1696): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) (async) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000025c0)='ns/cgroup\x00') r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x3}]}}]}, 0xac}}, 0x48004) preadv(r1, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000100)=0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r10, 0x28543634fae43ad}, 0x14}}, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x4040000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) (async) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) 2m22.16532188s ago: executing program 3 (id=1699): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000806000103000604"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0xc, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}, @IFLA_BRPORT_FAST_LEAVE={0x5, 0x7, 0x41}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x78, 0x4, 0x8, @mcast1, @empty, 0x8000, 0x80, 0x1, 0xffff}}) sendmsg$nl_route(r10, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=@dellinkprop={0x1e4, 0x6d, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r11, 0x4a140, 0x39039}, [@IFLA_LINKMODE={0x5, 0x11, 0x5}, @IFLA_VFINFO_LIST={0x78, 0x16, 0x0, 0x1, [{0x4}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x100}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0xfff, @broadcast}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3f952fd5, 0x80000000}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x8}}]}]}, @IFLA_CARRIER={0x5, 0x21, 0x3}, @IFLA_GROUP={0x8, 0x1b, 0x80}, @IFLA_AF_SPEC={0x124, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x15, 0x0, 0x0, 0x7}, {0x8, 0xc, 0x0, 0x0, 0x800000}, {0x8, 0x18, 0x0, 0x0, 0x81}, {0x8, 0xf, 0x0, 0x0, 0xc}, {0x8, 0x3, 0x0, 0x0, 0x4}, {0x8, 0x6, 0x0, 0x0, 0x5}, {0x8, 0x17, 0x0, 0x0, 0x1}]}}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xff}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0xa0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7f}]}]}, @IFLA_EVENT={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x645ad97b}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20000080}, 0x4001) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, r6, 0x852dd6c070cd7e4d, 0x0, 0xfffffffc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x4, 0x700000000000000}, 0x40) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x7fff, @loopback, 0xa}, @in6={0xa, 0x4e22, 0x7ff, @empty, 0x7}], 0x38) 2m22.099899153s ago: executing program 0 (id=1702): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x49, 0x800000, 0x8, 0x7, 0x8000}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50) 2m21.544030569s ago: executing program 0 (id=1705): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40082}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={0x5c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a865a0ee5eb19ae4"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x24}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9b1fb2e84e68e23314dc565edef12fbf"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3a9ad643ecd9ef65f3b7269710026ea1"}]}]}, 0x5c}}, 0x8050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r0, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c00180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4000014) r9 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r9, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) 2m21.339883045s ago: executing program 3 (id=1708): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000080)=""/92, 0x5c, 0x3, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x34}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 2m21.148005908s ago: executing program 0 (id=1711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000200), &(0x7f00000003c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) 2m20.985115049s ago: executing program 3 (id=1713): r0 = socket$rds(0x15, 0x5, 0x0) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@netrom, @bcast, @rose, @remote, @bcast, @netrom, @bcast, @default]}, &(0x7f0000000080)=0x48, 0x80800) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x4, 0x3, {0xa, 0x4e20, 0xba1, @mcast1, 0x8}}}, {&(0x7f00000000c0)}, &(0x7f0000000100), 0x71}, 0xa0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000200)) r2 = socket(0x27, 0x5, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000002c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r3}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000300)={{r0}, {@void, @max}}) bind$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x1, 0xa97ff65a05c675c, 0x10001, 0x6e, {{0xc, 0x4, 0x2, 0x5, 0x30, 0x66, 0x0, 0x10, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102, {[@timestamp_prespec={0x44, 0x1c, 0x34, 0x3, 0x0, [{@remote, 0x1}, {@multicast1, 0x4}, {@local, 0x8}]}]}}}}}) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000540)={@private1, 0x0}, &(0x7f0000000580)=0x14) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) getsockname$packet(r2, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], 0x0, 0x64, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000b40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, 0x0, 0x701, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000bc0), r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x80, r12, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x866a}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%-010d \x00'}, 0x20) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000dc0)=r11, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x6, 0x7, 0x6, 0x2a, r13, 0x6, '\x00', r7, r14, 0x3, 0x1, 0x1, 0xd}, 0x50) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(r15, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, r16, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r17, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r18}, @val={0xc, 0x99, {0x5, 0x59}}}}, [@NL80211_ATTR_KEY_SEQ={0xc, 0xa, "4e289d986a59853d"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) connect$ax25(r2, &(0x7f0000001140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) setsockopt(r0, 0x4, 0x3bd, &(0x7f00000011c0)="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", 0x1000) 2m9.080223646s ago: executing program 32 (id=1677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000190a01020000000000000000000000000900010073797a3000000000090002"], 0x2c}}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000380)={{0x3a, @loopback, 0x4e21, 0x4, 'nq\x00', 0x10, 0x100, 0x19}, {@empty, 0x4e22, 0x2002, 0xff, 0xffff}}, 0x44) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffc}) ioctl(r6, 0x8b22, &(0x7f0000000040)) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000000c0)={0x9, 0x400, 0x1, 0x0, 0x0, [{{r4}, 0x444}]}) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010002b042dbd70000000002000000000", @ANYRES32=r8, @ANYBLOB="04050500000000001c00128009000100626f6e64000000000c0002800500010005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="b5e9fdfffffffbdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r13, 0x89a2, &(0x7f0000000000)='bridge0\x00') r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2a9d7000ffdbdf250900020073797a310000000008004100727865001400330073797a5f74756e000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 2m6.064437576s ago: executing program 33 (id=1711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000200), &(0x7f00000003c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) 2m5.956675647s ago: executing program 34 (id=1713): r0 = socket$rds(0x15, 0x5, 0x0) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@netrom, @bcast, @rose, @remote, @bcast, @netrom, @bcast, @default]}, &(0x7f0000000080)=0x48, 0x80800) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x4, 0x3, {0xa, 0x4e20, 0xba1, @mcast1, 0x8}}}, {&(0x7f00000000c0)}, &(0x7f0000000100), 0x71}, 0xa0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000200)) r2 = socket(0x27, 0x5, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000002c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r3}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000300)={{r0}, {@void, @max}}) bind$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x1, 0xa97ff65a05c675c, 0x10001, 0x6e, {{0xc, 0x4, 0x2, 0x5, 0x30, 0x66, 0x0, 0x10, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102, {[@timestamp_prespec={0x44, 0x1c, 0x34, 0x3, 0x0, [{@remote, 0x1}, {@multicast1, 0x4}, {@local, 0x8}]}]}}}}}) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000540)={@private1, 0x0}, &(0x7f0000000580)=0x14) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) getsockname$packet(r2, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], 0x0, 0x64, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000b40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, 0x0, 0x701, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000bc0), r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x80, r12, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x866a}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%-010d \x00'}, 0x20) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000dc0)=r11, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x6, 0x7, 0x6, 0x2a, r13, 0x6, '\x00', r7, r14, 0x3, 0x1, 0x1, 0xd}, 0x50) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(r15, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, r16, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r17, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r18}, @val={0xc, 0x99, {0x5, 0x59}}}}, [@NL80211_ATTR_KEY_SEQ={0xc, 0xa, "4e289d986a59853d"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) connect$ax25(r2, &(0x7f0000001140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) setsockopt(r0, 0x4, 0x3bd, &(0x7f00000011c0)="6a49e6a1a55e3b555381e4687a25416e967272dbfdb8f1a6d96315364fb5d50936ba44f3968a9ef2bfffd8b830dd525bc55ca4862003af245f42cbfa60e9badad8bb9364df3ba90b52b030ad9f62b5bfe4703a91fbdd12d209cc6103941470affda56766a7f38e9e53296ff8ed4aced3b59869a75b091d099c7d9089c524c7ac8e2aa0ab7a4aefd61f72ee84cb1727bf786b26bc1291bac726e5e51d26264b4bef4743b8e160828ab8dc665fdaae669121117e7566d20abfadd6a55467eefee83a74bffc062daff95ebcb4fbcd9a16d359df80b4e332827188cf929b45a56e3ed427a191f327441b125426078c82cd5fb1771720d3c7f1a017bfd28d71631c1dc069e442b509d323fdef0971ec1940b288edb0c08595797c3abc0ca33679a8dfedca4cd8addd0827213ca67b0a9ca85eddac7a16fc4f7358b6527ccde25fd2a950cdf1ba589a6bdbf92b43cedc87d0795ec535ab89dc70e991ba62ee9263cbe9d9d6b37ac0cc33acd5d4c72dd768083806a5d8a23f043ea79501d116ad2f11b1ed519675ad4abce0fecf9b8b2fde480319ff97b37a40a12238191515f10d56a7e51528f840e37fc608fc57bbfeed5d27321d889b575dee07421cf346a480ab43f216e6b76254ccf515257410dcb0342a397191ac7454c34f8e81c5516c0bd12558033c84901eb38ce5be1b497fb5d08a8cfdc539fb4cad821e77440b4553827efef51c7cfd6b86cb2cfb396135bb282b94b2a6e1c4abb93a33488c7a63c5cbd496c67c41c6c081633dd4fac9605c80afc61c13098263c4e0211028210a45eee4f21a0972e35d9102da40c98ab74eb95fd153b8203c78c996e6882605a1d30a3bc34466db09c432c36a7622dd13d3d1625b4cb2b033b1720d0feb0a17e3ac723ff34b996f2ddef6fea66eb901f4008ad70e91d7b7795c6e1c22c9c9fc75eab920bead6376ee244bf3d368c6b478a6cd3a171fa624d653b6899269ffecd06f9c5bcc9983308ee6fc4131b215e091735460db5bbd41c0805d6873a5ae3935a35dc254d91c0cf6632be3c17c06916893cb49907fc04e164be5da72cadc426fcb01c0d1d0b6a69a7dd7655f85d61fb9ace4a4907c6a824f082a34a1d14fa15034a4629f54afad0e74a518f6e7435914799925b4167a607448320933cf6f3f6ecf9b55d768ae0630c77fd6354817b4a3d8a49f5c093adc3ad5fda9c1adce3bedd46c7ac8b5956d290f9bc685effa121ee18692287305ec7182416d7f771a5957bcb3bf2ca7255f8d3bd9944ab66615b38b0a4fec6d6195bfa036ad50233b9c60c7a9daa5ff4b3051e43868476598a683456417e6f458ed525e0dddad355758184390a610ca9967f00aff8b5e5a97d654d8a8a301a53cc334cc8d924202c9c20fa22541b272d16a8c7d605c380f31de187ea677c1eb8d974c978663fcd692f79ebe3bb05eb97801319612eed6c986db30cdf233dd5a6b0d0489851a8152cc7ba064efd7ba7633cdd71bfd3f5916e22c52845eddd431002301d2c3349abc39b065e59ef229f09b0b7e28d517c84f19eff53f5a28529da2a953de4a9e4d7a535d072557a39478853847c0a029a5fb0f04f61600002d6f965919e24acf0e116a5dd8eab61d59a4b5ccacf3e57e417a407bb6d86c7adc40b0a8c3511cfba472d7715aa170fc69f5e044f251a310ee1aaef3ea1a277a2d5d1f87a81a7b1ef06d6b3a7a8e80275c4ccf61b284217854d0136a2ce9a5ebf3c27bcc1963180f7769717a83c6189cee9a1569a12bca3400fc04bdc3997933d389294ac7fb998326020ba6c8d29f652425617bbb988a59ccc28b0a9e6bf853cf05de4f54e71fa458d6b6564acc28bfcc618afaf300cab6cd97335deff4c5cb3378b8f44d358471e5085018cfaf46b2b7f03ef7872db584b0a04da243302f2f72e93fb257640247e2a49288bbf6ff2cf809433d272a43a92324990d09eccae71ffffbd54172f442fbf59c5f389a79a055dc1ca5cebefa41b7526b7ed6720f6a34d3042a15defc194eb1baaf4a512d44e38a47e16f42285243bc267a49fe41cc06a4d11a1aeffa64bebc559bc75695f030c3ca489744e1000eeb808a1b0121a99a623941e3f3f1a1ef6e2a6a27dfa9d29319220908f3f862c5dd7e24068d1604094f30d409d7d81b573c9865856d741e321eb97a2f0063e0e9bfa88eec2de985597c13b3d9c875388e231ba34e2f12091e696dcf5954737efeefad0a2ff3702a640925bfc680920db9965a43001436773d04e24471ae91bc8016e669967626089d44878b8e0d90b15b4398eb607ee08ee9eaea70486953d911687fc255ad2add86641647c6ac45c5fcefa03a72f8c3845e53ccd3f03fb24e58dd21efe396784dd155001e7891f295fdf102d1647565395bd0df8352ebf6c56867a0afefa57980e185339ac0bae076cc971a2da0a0a1d5458cdd19dbba199f60cdc04bb2c857c25fc71de32be114ef1278485974d11e7a4d4f2ee534c972331c30e9e042935a851344c1e55a25ee9dd49d4ed8c6768a80faea942225ade8c636062f8380ace8a27c52a66295aa1e544e54f9221d6d5446d229ddc538fb41c909a28e478df41a05cc993686327263eae7706a30d1488f5ec47972c7eb91b49309be541ddd7a470901664faa3f0a31b8bf8bbdaf3b35db4b2effbf422319675d74e74e375759d1b093c7393f58680dabafc7bfca8f7e6df63f115e0a489063125c304d8f2e37c4f6fc1748190875b09757a8f5f09e2a492f3e104c874c2d16a3354a93460193a4d7229a8236e85432d86afaf05ba6efd1728925c25bc50363049b66a423196a88c1d441611e8cd0fc1594fd2cf8e62c68ac9f7c6deba22622cb427ef71ecb843c524e527944c431e2c0e4d6e034326fd73d105a2631288377325afb1897d707439024cc04ae122011a6838ba1f7da159c1865469a3da676aa2d3fcedf14243e16efa80b6ac1b92a9d3138330cb52737c6ae1feea23f792bd429c8659571bee74d99adf44e7c9fc4ad0ccfa224d98a51987a28bbe17eaaa3eb1a77671aaadd24bb35c741b3990b9952f6808f8b9d666963f01901969393cce60c9b5dd2eebeffa8d2ff65d1258bdb9d1da8b6734da465af01fbdf5bbac79a3230ae3e118c67c533e674c59bdb95dcdf72e7ce36f4c5e2228dc10d0bcb9f3b2d4440eabc4509d0cd57d6a06c88070bc860f33ba0161cddefe615a114525d3e1e55f2b6ec108f5f7939029f9be57d95bb1fbd444f5b9331bd97222dd6cc2fbbf74a288585cfd9abf0b8c344f5e6eb09f944c97428b93879dd891c02e6e0692cc0727443d754bf32d8fce0832ac61eba65bda6872753e642b8643fd7f19f8a2b5db96221144e4881bdd9f3e0d4fd6468c8a9c7173e5be84867478442177329878ae312fe25a48673f315ccce1d7628c9f7396f708a3717316b8d5fa506eb944d635b980ed71991816f2f895087c905f7b7ce7c058da4364e5d6d4c722cbcb7406ea7dbfdd450c7eb6eb0674a8a9bc5f952f1bc6bed4cc2431061e63408bff5fc39535936058d4e9793b655fb4d6433ade7dd0b00b54cc477c70c6934aab5196b1d259041cbcf4ee0d3ecfd5dba1dc70ed676fee8a78b3bd88fb8494e26e7139339f16a508b51ef3808e032a563be206293614518e12bbeab1e79dd859fbbea4f0d95ab6d974224c03ab2ca7d2172b06641556fa13cbd8027de77784e6eccec4186a83b9da6f3d8229506b6b91bb6d06ceb428f425646be20bfcd341a11fc81dc9a22a4dfaf15632bd98c1388f02a943b2e0e6eb4f500ba228c585b670cc4ecd3f737084e85ae762e211398ca66c016317e9b8ea4c3fe5057308e1d2c8f01f4d9207f3311764c8b84e80b629aeecb80644d3d49ffd65ea16066976c49c9353eb014c959d716cb717d79d8a299cd145847f2bae3e4d36cf6b187adb7ec8ee0301ab9823adeee734b6d49c7723a5a3690b788c6db048e6f34fee1cfcb591782b7f93f84b410750e506ebf037de52abbc4f20520bfa044503411c6caed3d7003fa4ea6d44b025eebfc8b03f41a4a0ea7c6b2af01d04c84b31f13a74f53dfcf7fb0cfbb340b5bb1cc1dfa61e1171433ec61a86143ec8bf9392496b9b8348d854b71c7b614c8151130f2aed882112900fc067a206496cd99e78e40b4f68ff969595654ada2524609b532931f6cdb862e2a7f52919dbe2fa26bf12e9260eb8a69f0eb74eae0bda3f30c800e31236ef229f36abc83e796726d5e94f3cb6c4d790e17530b48603c6fa45cd19575326589bff2ff36ea843ae30f2dfcdd0ad87da9856161bca38ac8bbfe64ee65e010fd3eb694d7e8e83587c88225c2a9db95399ef71176fe5e64c3af54565ba3af491a55f5dc7c0aeafcf0a15d375161cfa53786a41fb8fd465f56c52d92e7c7c81bc53aa2a4b0e12bb2d4014e2262c3986c29c5002712e4d740429c1bd393f300a5ad0efd978d8645ba1db2e6eda4acb2ab2f3efb47809a99cb9477dce9722c77eb5e984ba6ad0429fb2ca941d0db1028b607b1e4eb4b1410ccd22d0fbda7c9f27f74b06c19c097a91c448e048adc110a98bb4a521b6c06facc3b65237b8d8735491906403a5cd7b67a2314e9b12c3fdb653e80efaad005df27c74587d08a6e80dff53ea3a2528119b714326f5e7f5eeed19a714eacc6f66df2d2bf92855b1df0a3a2e3699b93e057322e8cba4ebb1ef4fe3c8d40ab6ef8681c47fe140ea9aab43d2f276a7876c33ca8649a0ef6b6c13a1b92e48b348d90d443d3066dcfb4ca39723e049afc67aab82a44293224446e757f08541bd2be69636690c2749a90ab8a0ba783fb90de9baab344d10b50d175c3cbfec590b490cc0bf9ca92c0375b64b0309059fabf3a86bb596cd9c811fa38f76529ce9b45f453d875fd8a953d5cde0442011658ab9dfb15e01856e12fd14f19465e442f1ce97bccb477f55b21843ef222acee37b4c3cd4ae757349e4712473f69d69f52b10213eb7e903544db6005c1ed8f3f7df525f06975f4602d16103f640fd95e97f9f6ff246bfd1ee7a1f29ecaca57c89ccdfe57942c22752b84b4ee7edc2e0cd3550f7ec015d521993b5ded4263f06680aa68f1dfff8eb45da902751602b73e3ebd84bf23781709f6e08c2cf3a0a452d68a6a77140e27e23469acbfa3b61cc366fcb80a3481e6428d208a257f72bebee8f3bba79feb2e13e836436b41c3aa9e94718f3d006e62992766f480bfdd21f4a20cbf7bc8fc9b28c912982b09e8b73479b2bd80e5111f996bafd9c353bca0cb734b272005ad764cadf700f54a2e08013e6b8f753b587d33297523d1f4c7545bdbbda32e36e9675ee2ffce37e92160a836b74f5d98de5f341d117489339d022245ffb62b0f1728d1051feb89bbc99e732ac90935bc3ba3041ed5e003bed9bf45775891a01b68fa01a8c4b2fd378514aae308d3f924cf9145f1b90bea3898e36e47302cc5f8e329bed3c57a385280e3df1151b04718a7451684e71782550b405ae0913f9d7638ab8768763e7afd8e12f3fe9c80d86ae7ceba6890879d63469a865ffadc103c630da091493f7e24bcfffe6956eb23c3e6e9432192e1f7a971ea14160b35cbe565087190dd272e9b52c1ac282f9d93be9c0308f77eddd29e48ed5231e05c75ab293b51beb01e4e425c10bb9e32b58a87966febe63da38b01f1b103911d07392980298884fbeae69df38ce4106c89af28017c28953e637e687a7b5a67703d0ab704b7274618496bee5c6c9d6839528fa10da1bd0f62fdf0ccbddff71fc8c41f16d5928433ef24f9491d", 0x1000) 2.94958498s ago: executing program 4 (id=3388): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) epoll_create1(0x80000) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 2.803645097s ago: executing program 4 (id=3391): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000003c0)={0x31, 0x2, 0xe, 0x80, 0x10, 0x7, 0x5}, 0xc) (async) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x5, 0x5}) (async) write$cgroup_int(r3, &(0x7f0000000080)=0x64361069, 0x12) (async, rerun: 64) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) (async) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r7 = socket(0x2, 0x80805, 0x0) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000080)={r8, 0x800, 0x6, "2184e34d4650"}, 0xe) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={r8, 0xfffffe5b}, 0x8) (async) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e60, @loopback}, 0x10) (async) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) pipe(&(0x7f0000000140)) (async) r9 = socket$kcm(0x29, 0x5, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) sendfile(r9, r10, 0x0, 0xffffffff000) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) (async, rerun: 64) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 2.37043273s ago: executing program 5 (id=3394): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r1, 0x0, &(0x7f0000000500)=""/184}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x2, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="a77e31390e292d75b2c51720ab6be056220ed32ba098dfd9c696d45e13dc0ca5a98f7dbc32e2e60640aa15abdfbadc54681a55acdba7b07db05160f8a1731380dc845e91921ee1d12e4725b2273391977181add62b06fb3efedac45f61cdd57ea78e54b0742f", 0x66}], 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) syz_emit_ethernet(0x46, &(0x7f0000000300)={@multicast, @random="863f187dc8f8", @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "7caa27", 0x10, 0x32, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x2f}, @fragment={0x2b, 0x0, 0x5, 0x1, 0x0, 0x14, 0x64}]}}}}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}, {&(0x7f0000000600)="e827749185fb5a1aaf6f700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306aeaa0123cc910470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58", 0xa6}], 0x3}], 0x1, 0x40800) pipe(&(0x7f0000000100)) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x9003}, 0x4) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ffffff000000007111bf00000000008510000002000000850006000000000095000810000000009541f0366e402759"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r2, 0x6}, 0x94) 2.369328761s ago: executing program 4 (id=3395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) close(r4) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) openat$cgroup_int(r9, &(0x7f0000000200)='cpu.idle\x00', 0x2, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4c010) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.36829795s ago: executing program 5 (id=3397): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000080)) (async, rerun: 64) r1 = socket(0x2a, 0x2, 0x0) (rerun: 64) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x270, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x70}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000010003904fcffffff0000000000000000", @ANYRES32=r6, @ANYBLOB="00000000422200001800128008000100677265000c000280080006007f"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x844) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) 2.36636084s ago: executing program 6 (id=3398): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001640)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000040)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001a40)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f0000001000000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r3, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001540)=r3, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xf}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001580)={0x0, 0xff, 0x401, 0x4, 0x3ca069a8, 0x7}, &(0x7f00000015c0)=0x14) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000001600)={r9, 0xdadb}, 0x8) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r10) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000001880)=ANY=[@ANYBLOB="84010000", @ANYRES16=r11, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x800}, 0xa040) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030425007000000000000000000021a7a4be658246fb64102c7b2568160a0f68f8e0ee641b", @ANYRES32=r12, @ANYBLOB="0025000008420000140012800900010076657468000000000400028008000a00", @ANYRES32=r15, @ANYBLOB="08001c00", @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0xc000) 2.36519805s ago: executing program 7 (id=3399): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x1, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x44, &(0x7f0000000140)=""/93, &(0x7f00000001c0)=0x5d) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd26, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2.234913446s ago: executing program 7 (id=3401): r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000280012800a000100767863617a000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0004000040410000"], 0x48}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x0, @private=0xa010101, 0x4e21, 0x1, 'fo\x00', 0x20, 0x8, 0x80}, 0x2c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="c81100001102010326bd7000fbdbdf25010000021100ca002d442b7d2f617d2126277b5c0000000008008e00", @ANYRES32=r0, @ANYBLOB="39d7cd365fcdb7b0e60a039410397facc35891efac3bcbcead47d6fc870ca5111b47d8de0872ecd9e4e2c9d3fdac4f0b81e60833930ee049a9b40bfc711ed63c47ffdb830153abb4008261319779aa9caf6ca0c493f2ba2f72ec6a13be7d49ccdd5b459611ecd102beb2010ea5cf9af259ebfa49c9c8376566d95be847cf624b332113de2db9cfb79d739860215a647938b22688cc290d3741570aae424e274a4275ed01174c70fbb77b731fd105d90cac8a6ece8e9d0e9971b3e94f2b1308b36982331e88a26693192d2a146057d1b48b153811392da6e9d8b832bf396142f45ff5defcb9da11a29b209a10812e5c8f18b7ed9c7d557195ce6a78c47ba156f1b0958ace4ccecfd6937e476c43d0c8bf1d3758d6408f2f3e295dd2603f09486868391acb7a9cc5b6bf0a120ec1a337480962d4d3c50c35e827596b538c0dd878c064814c4739b2d07f107deb335102e12811cadc75a8f66ff136f0a6befb4e43c2e19b5268ceb00b7fd54ff84ae4f359d169025027ba37884b3ceae04bdd22b91c526286da8cba4921567163a920cae1ce8e30450bb80e47107b7d60677570871d3a2750802a92a599737e66d57c8c03d9d232234c3dc252bea7548b5e306bd4d9e33202497a1cb3051eae2f720978e99cc12247a8ef9083c870cdd3201fe7e4737d23601cbc92887702535dc1c3293dbd127c707c101ae3b1cf585cc689b7e657a638b2de7742e156f3adea4e48a3de0dff30b2e5ccba00a33776d5380f75d5aaed76ae688f65f2016d6e81176c25651572b2b324dca5ed714157d0f4884a35a3db3b819f5931ef47bd22dd8137915f9e3226276132fc49c36b19ea0d7bfb3bb9f6472aa92d59dd7af4ca00e03da8129b53d0478e339d5e5255d1d705eff60fa1aa470ac314941c6a1510e88d9be9a4a02485f595bad664fe2d53e381805d11e0a9123299b76d0eca72ad14d9111120f4bdfebb423a5a059204873ce31e486a5f1f6843101d3f8005bfb6fa5bf822c4bfd32cfbcb80e0828c6107f6ffd455ab0baf9f4f0078a72df660d0ef2d84991f979906f08a29f3d3df82b196ace90d6cb3aa1493bced0bd25e25ef2961a0956371c575c74fed11b4954043d9fe56fc0d60401db9544c60d42ecd4bd62c09c301ebe3ffafdb0f783dab342da8e35a60855bf36e6b8d357e400e0c52d8ff501763ec9078b9d711eeff5ac0819d7fd72941f5290073f6300990c80bd75cbbd63b197312cc87b9d86c823a4d550a0a29a6114bb51e4ae353ea5d686563937b3d37ff72767d0d17f8fcbb75d6699cf56613a9082171cd2f488a55747b18863484628523ab8588db8f275e45bb186b102854d301900f678af346d9dae2fdd120d7781ad3617090fd48a68bbdefa001d87db23f17225a068886ca01d9fec4b117cab5233a3bf5ab070fc0b8a973c137659e0cb65abeea861a1ccf8d475de9861238ece73ee5ce61d07e3fca79b3b04d59cc756e46a3c7be416ca117d24470b5e2764098ce8288c6a8e4cf2845fca06bf614ed377e0e431b6c6e97f040fe91ee6b0d981d97d764eb7ba7182f1066681961b6376e092443573019f345f308aad0e522b6364125dbe63fb131acc73ee10f6c30abe506eac134171fca6defa9cf6d762f8ebb83fd68422689415cb34535581bc672dbdbadf71c6749e8447997b4ead487c6b2db2f49d2ff2c914ec08e66260130c01c7b6ad52fb6346ca15310bcf8a9b93af027d1d79e9b2752992eacba03c116e619c41b6c33a4926411a0cdd72e9dc12252649c18efc05eeac92e2ce1463174db96cd4d6e8e62741e8a2a56889a4977be0174597a2dc175226292ce9acca55ba24b06a728df7e10ff458a30ae0b457c913441729f923e22ee2d78d93b708a37224b486ed1883e5012c68915eccef08f3484d184fece4560427772f2953ed778794bc8ac6a20d8877a7754ff90cab9f61aa9337eeb934441cd888636e1a927e13016775edf3032a085607913150e18303196c805999d448f5c75a11c51b3c8d6b4e9aff268f677a5ca4f68f19834a832295e6c5367cf2e55494304fb3533c2fec8bbdbdba23f0308bc5a5a98eb21fc3d49342f47f28f0822b7a7eea91ac6214fca86a6451cbbf18684bbfe923f3540f916598f4228842ba04ddae7096acd94b16a2a74d66947374bb35e4547b316ca94fafe4253d5491e89d3634543c298c39e4bbf9184c10421074ffc448fa0baa41d7675ad76372627249bbc342b318689f8bca9579c7827190924c82c3c8b523a405a5c873e1ad997fe08bc3a4a4d516dfc468e43bb0b19eb15ed89d55b78a776c360b830970d3a9f1851f32a054cea972e64604cfb3d2dffe559a0cdf6ecc320687aff99ff24881502c9ca5d1a7f0b220668afa50c21050bdb809d74330bbcc060f44cc014dde49d90d4dab6d00afaebe0a13383afaa97e8219b3c4bafcc1a56793409e1b7c2e2f035b584983ba85751a822501ef07c09aed38fa650bd1690f6b00b4d830f88434432e2247b34ea5bfbb3d4f107875e8fcd13e5c7729cf43f555a634659bda96974c99a74ecab6eb5468bb0766918828b7d8b2b2773013b6b51fd8e729168225c2b74a07da9ff9361d18b363b901aa9dbb88b363c8a0c59cf48ab4a20456f8b398503d352f40d82bcc715d727a9f5cd7d4db6893212c3e597c92cfdbae7bde9cc8f0d7880586f281d03180f665f59768b4a9e5ddc23d81192662963a6d3eb8e7b4fee13d17a086676fb42b3c26d6a8763d8da67664e52f28f0971e2353aabbcf82b34b66b180729d9469bc3f10589d5b26f43efd9b6aa22722c58f3fc8690ac68c0e8f58275962e98ad49c188833feb55b88dc0990b4931c3a271de66ab9abb3fec0500e80e814a151469938e241240456e568ce51656e9c2a7d0b73d1e163f22fcfcad723023f40dd8cc6bf28fbfe0be5ca78aad34331ad08ec85dbb1b8335b8ae2413e3b02f9f10e934d35ae7e4c67db89ed57c06651d46f4daee80b3d6bef7afb7c3853962189aa7234d51c114197a7f3eeb072119ce75d45ba83514ec8e3fa8c10ad4de0abd10f829cd3b798ebcdd96809db0e65a9207555f9b8a22d2bb424c12a78573b63f0d055ba1b7569f3a0188441f61e0e4049d2d9a566ce1e4cef53fbdc57d53d7274e08b1e7a695f2db530665d3cfbd0b312e263032f25666d6d1ef9d42d5325777195ef0795c778629ab8d48fdf74b40f34917b96bc7f033e4f777be999c19a9bd64ce5e313f5bf85bcf1dd0a390bde9381b1f0e54742f5895f0ef063fae8052a2988ec226307127f8f7e4deede227b5bc2fb52f1e1314dfddd03b66565d3ddb84d8e61ebf0ec769074441f16945c5d4abd4fb4430862ed9eb4edc486be961cdd7ba3b332f49e3f9307ba0182b8c1fae4fc4095c69d802377e32fd0bbc7732488dd0b140ada6c4877df76105ed7e755cb3bca359fb5872b51ed786723829e623e49f6025a747d443172ace8598ab58c6aa4d90c222b68e7d4930ce0592d6ea13f6c783c46382699ccc8bde0c4cd3f5d42f977726b400b5fb5135ca91b0712d992f0a40b8975c56fc39c15f6bed31e904d1807fd5ebbb0f3af39433f02025c19e203c328754c152296788d2df24e7ef0c38c7d6b1936bea17f18604d43bbb97e6c27fb7e3005afd050a0533dfe0f658a3c5cff182bfadc01e90b8dfd9606378564e697876b8a2530035955efcff62a66e9f2649c5856ba882a8f34a41da77c710eac03d8fd254986f1e5aa4692d81404b907f8af3704d5f231b2c784d8b5cb013bb2790744ff997e2f6dad988b8f1aa4d191c990ffbc92af93f2c1c75e89eae146d9df077b4e33c3832d7755cef3f8e0469d97a4ea55b1d933ac7e2910ad20d71615270dd13e4cba8f8c86fb90cb3efb989cb232cfa786ff8db744ce9e02bddb2e428c144612e8f72d9e8b5674297ccbfa1856adb42ba2e113f85d407f061e72812d7db208c415a4a3b7bd853520109c53c4ed789f335a6201ea746985d78bf175b4078be57285dc66bf7ecd7a3f9c7c915e8b0e9d656c0d3d6f9a375b4124dd0bc23bf6ade3633eaca1e01dcd1aca36ba06523e43ea8d537f7ad53f898190b64d36d847a04e0640452c6c3edd29760002c09cf920302ad2e5f0e60e417aed4e2e31f41b123e275571aff0a6530b2126c427157af8864d975b2314030e5f5cc2f25003b591dc232323e801d85baad725ae868e120fde2bd28870e1fe045500d66bea50caa9789544d0fdadf0d1e29805c356bafdab5151c49daf6d32b313ffc7d8a3a0bd0d3beffecf03c7a3a685587916f8781bc9dd3e3ae49605aee9129bab15f01aa122217fe463c0e0b6db249289276a299fed71bbfa47b09816a293d14008dbf133a0c5dd272abfdb3936b524cefaed3672dbf0d24affb35899d49d092f7d455a147462c53f995356490a69d171f503cf9ab26ee70277efd0f2202924ac3a8d2ed77a590d23dc0ca8d77df8826432baa1e18e6eff8558b579affa8697e237fe3edcfed0107b73492ed40da705199b1d5a1005ee4000610f9d96bc8a80960d6bbe80f51dc640f0a112d40928c646b556ec5c1c5c645db2589c2f8fd82be5d1a26f8b4759652db822c774d62859b9de549987df8f7ac707a88286b6ace3d3c84c6dffed44df71223b47e8c1cdb8c159a244a0699fdb83e180cb162d8166af42e5ffe35a0da0c1686bfbc492d202d248ad950506d40ab380d1e9f163fc0ba89e5e780ade2a2c3b86ceac38d1e19f79dcbb0eb0db37b55ade7f8e693be490530176f17c85b4e80fd98b19dcb341690347d3e31e402743d937f6a3c55f28ec629f62c5d85ed8139aca3565161230b5786127f5ce0ad4cb0f1e40662eaf09f9f8184a468764043b5644c782e3ef87033940c2fcdc325add4ddb0d708a25328400dbd713f803692ceca2412d6aa176c14a9c6f99f26b827145bbd5e09c6599ef138d9dae9caa229cb98a2e97694905e83eb66e9b9fbb622c5b1eae3108ffb36687fbd26fabc5f6e4fc67084ed581d7c3a7faddb766863aec2aa4364e46482e90ab115d57d68c9cc30f7bf36926c104b71525d1080fc185d029324a69f019a3b86ecca9783e8d9c18ebb13ed2cbd40c01cf0f494c235c2feec9daf4015f4cd1a9781d8d680bfccb26846ea61334ee846da74b7992cb59c3ffcca5df39f2ff5efc7ef36285054fb00ba79a18bd7ef9e1a203dcb902a34a1ac25b4b624c17b9f380ce44625ba683d7fbe5cee979acd3d3c8e4d54ecd1278365f3b19ad615780f8b6707eaad7713ef78a76a131468af406a479049b61c656fa7ba4cc83334d83c6230bc7cb37045b78a64d4254ad6e94e7fe11de2f8f2cfb99a7e56ef3ce91ffe0f8102ce53b9a6fdbddafa43d723ebff4dd019545f2758a060745fbf49f0b60127dd103a95eac844c7bdcdbc71a477f1e6556020db96422f0ea75680822f8fefcea88b7955c4f6936a3885c09cf3018736d96c3562147bdf853108433c58978c7dfca0b6d4939683ba1010512dcc32d0593031a622dd1abd84f181539cc40b65533a09d4b6cfcc8fa85582891a3dcc4f221451c98678bd94a739c89841a117af59a406244b3d0cd76465929e79b2df9496d5d79532326de3932ca555d52b5817436ca6bd6cb42c7603638b6238a14a8ea0bfe4451b9179882c0b27d4506a5a3d07933dbca63c09e7a8545da31a9558e494e8423bd8941d91677c48db8835c689ed0166c14b6e32136fffcbce1e7be29031a38d329c16de54d29b8ad2133f5a8e8b94df5eeb6f2b987295f4072215d1a309dabca2ef58237b2bc637fd15e21f2e3a09a6386bfaa74a3ff716bfed72ba0f7532517a19581c2268d02cef38efb596932f1e74e92f4ba18d30947613c6fda97c2c3df6454565547436914e1cdb0b4606248aa7e7ed7bb1b8e509d457d6a5981954b210001b800c00250000080000000000000d01528008006b00e0000001b7243fe921506b72cdc07e0267973a568ff50c966f8d7a43a6adb2ac3f08755e445fcee6dbddb60c5c0a8265953591f0792f67f541d19d4fc46be075567202173b55529372f198062199a1e4968b6ef7388d3aaab00557fc3cae9f3afbbae15ad0a444a8fa4e06a5bcf4cca76e316952d24d577a1f732d532d49c501b0857df70001262cd960d3ea509686291715ce6f7588622ed94e38f35260fa8cbc2b3c08090af5ba88bfd55e8f0beb7de7959ef1d7373f66f481bd031221c518ad8335713b2b229d67b9b68f43fc33e774f8a3ff621feedd4b45526217fc161b2aa30ee1424541fcc84fd7b12ca5890e5b8b5fd36d08007100ff0f00000800ae00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x11c8}, 0x1, 0x0, 0x0, 0x810}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt-generic)\x00'}, 0x58) r5 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x891e, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000200)={0x88, @multicast2, 0x4e21, 0x2, 'dh\x00', 0x20, 0x2, 0x3c}, 0x2c) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000a623b59da5782c000000000000000000007110310000000039d5009591090266674f9d0000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x28, r9, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x110}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000001940)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0x400, 0x30, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x7, 0x8}}) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xc0000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r10, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r7], 0x68}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000580)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb81002e00080603532679d40b00080012000000003b393ddb8e8fbc364a2676aaaaaaaaaabb3e5b71d17fb5acf0e81992963cb29d3541ab1af241811e649ab574cccdfb3d0d3f1efa696ab431e6"], 0x0) shutdown(r0, 0x1) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}], 0x1, 0x20004086) 2.234006328s ago: executing program 5 (id=3402): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r1, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000160a05000000000000000000010000020900010073797a300000000009009f157f14247d669dd7f30efb7c1749e5010073797a3100000000140000001100010000000000000000000500000a602f7e022a5cdaee8e3c81fbfc05664936d6571ac5fd7e3ab4887356763c753d212a10a174c6269387361105a803b57f55"], 0x54}, 0x1, 0x0, 0x0, 0x20000005}, 0x8090) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="38010000100013"], 0x138}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r4], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a01020000000000000000020000030c00054000000000000000020900010073797a3000000000140000001100010000000000000000000300000a7da78f129261ca93b768a463c88ed8e194a624267d5031d62ecdd584ba18dcad3d805f6f1889d2e1e3ed1fafcde7180d199db92ed79d1b9415e26dd6c3ec385c529cb3fb77e1a7901d111388f920fcc81ee70942ba72d0eea3098fad259121bd4615cbe205d78aaef55660ff955b48a3ddd891ca57b59e16bf7171f48f9ca92030cf5c0c838499a532512af634eac66e6d5d3b7e578699695594cba80594cd7c2eec07ddae57aac9fb7a38aff3c048ea40f315ea154600583594581259f59aed3500deb3386368b97774aa593c676488d0b23f53eaf60da6a9302f3abc460f664c3730cf77c05be9261c634d9f5bb27eada47501ee4a0fff488bcd1a122bfb4d9bd769d2d0e8c3be75140fa3862771a7c87a121d4e242b4f2797e9f003a32959c7219bded558457ab743cf3f5224f24557388b8e06248f0752395605cbcea3542265c5ddb97b9b0b03eafb6d6c3f3a63"], 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) r5 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x722fc3e93555b0b, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x11, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x9, 0xe87, 0x9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000480)=[{0x1, 0x2, 0xf, 0xc}, {0x2, 0x1, 0x6, 0x9}, {0x0, 0x4, 0x0, 0x5}, {0x1, 0x5, 0x2, 0x8}, {0x5, 0x1, 0xc, 0x3}], 0x10, 0x4}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map, 0x1e, 0x0, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="20000000002000008d0794a6305ae1678dac3925140017ac2fb8a0cda266edb487712b32267a7170d06c4c522fbaa620058c89e74b9e12a62a36b651f3200f", @ANYRES32=r7, @ANYRES32=r1, @ANYBLOB, @ANYRES64=r8], 0x20) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) syz_emit_ethernet(0x2e, &(0x7f0000000800)={@multicast, @local, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x8066, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x140, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2.033403019s ago: executing program 5 (id=3404): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) close(r0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x6, 0xa, 0x9, 0x697, 0xcb, 0x101}, {0x7, 0x1f0, 0x6, 0x2, 0x54d5, 0x6}], ['\x00', '\x00']}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='bbr', 0x3) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) ioctl$SIOCSIFHWADDR(r0, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x28, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1aabb}]}, 0x28}, 0x1, 0x0, 0x0, 0x20042010}, 0x0) 1.859080073s ago: executing program 6 (id=3407): r0 = socket(0x2a, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000040)={@local, @empty, @void, {@generic={0x7, "c03ea896"}}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000000020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xfff4, 0xfff1}, {0xfff1, 0xffff}, {0xc, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r5, @ANYRESDEC=r14, @ANYRES32=r10, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0xfffffffffffffcb0, r8, 0x20, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10080}, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r17, {0xf000, 0xff48}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.855294335s ago: executing program 7 (id=3408): r0 = socket$packet(0x11, 0x3, 0x300) r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x800) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000240)=@req3={0x3, 0x80, 0x3, 0x4, 0x0, 0xc6fc, 0x5}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x11, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{&(0x7f0000000440)=@phonet={0x23, 0x2, 0x44, 0x7}, 0x80, 0x0}}], 0x1, 0x40001) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x7b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendto$packet(r0, &(0x7f0000000180)="f28944c4dfdfd0e1ae0bf856dc1fead3e4e6186e8cf47306c3aa1e1dca60eb873b1c9ff74650c3f4efc89b178a20327b516a79d8ff22d5382e1503a69415154ca178832021b31e7bcfce1a87f49291172763f27c24461ba5c00f9257688ae7aaef1452aaa56bc32c9babb8743845b3ec81b0df6aa5c0e49e572ac1a34d5a0567e407adec3a7a591c1e4c9f3c5458a8498e6ce1b32616f4508a838b5a779f087040ff38060dae", 0xa6, 0x4004, 0x0, 0x0) 1.724166385s ago: executing program 7 (id=3409): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="00d89480cdadb36e781500000001001a883942502abc00f0f7"], 0x18}}, 0x20048810) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r3 = socket(0x11, 0x80a, 0x0) getpeername$llc(r3, 0x0, 0x0) getsockname$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, 0x0, 0x7, 0x101, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 1.685542958s ago: executing program 4 (id=3410): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x5}, @TCA_PIE_BETA={0x8, 0x5, 0x5}]}}]}, 0x40}}, 0x24000040) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtclass={0x24, 0x28, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff3, 0xa}, {0x7, 0x5}}}, 0x23}, 0x1, 0x0, 0x0, 0x24048011}, 0x240400d4) bind$inet(r0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000300)}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)="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", 0x399}], 0x1}}], 0x2, 0x4) shutdown(r4, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x100) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) close(0x3) r8 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) sendto$inet6(r6, &(0x7f0000000140)="defa13513ddf9de59294f22a07e5e8135edf86f0412323ef1e1d2e7460b8a5f64743671afdfb3f99f24f234d75186ba563988c291ed2aa4d6e00aad2d55c8440648376dd36df16189f8ee96957ea66381e87f821638f1e859f41111050563259ce89ff6bde06b1f9d526e61937e6882aadf9f379885ceee6c11512149c481432de70b82e090e264efda79740addced7c161536485c1738af74a95c236b7e37f7ab5e281b3f7a3f6baf70359b3696186eb25e2b12f12d5602724e088490e316623d9b7ba3", 0xc4, 0x20000010, &(0x7f0000000080)={0xa, 0x4e21, 0x9, @remote, 0x3}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0), 0x4) 1.612263586s ago: executing program 2 (id=3411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140f6ffff0f0900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000"], 0xc8}}, 0x0) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012cdf250600000008000100", @ANYRES32=r2, @ANYBLOB="08000d001400000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000e0090000000"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4) 1.609355511s ago: executing program 6 (id=3412): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000700000032490000ff"], 0x50) socket$inet_icmp(0x2, 0x2, 0x1) (async) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x2}, 0x4) 1.587933405s ago: executing program 5 (id=3413): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r10, 0x34da2000) 1.505008313s ago: executing program 2 (id=3414): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000012c0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) 1.399914297s ago: executing program 7 (id=3415): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket(0x1a, 0x80000, 0x7) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e25, @loopback}, 0x0, 0x2, 0xb, 0x2}}, 0x26) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000030, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x3) sendto$packet(r0, &(0x7f0000000240)="f2435f0100088000001f00850800", 0xe, 0x0, &(0x7f0000000300)={0x11, 0x4, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 1.29936296s ago: executing program 2 (id=3416): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x98}}, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0x7fff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a01040000000000000000020000000c00064000000000000000020900020073797a32000000000900010073797a30"], 0x60}}, 0x0) bind$qrtr(r0, &(0x7f0000001000)={0x2a, 0x1, 0x7fff}, 0xc) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x48800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000003c0007010000000000000000027c00000400fc800c00018006000600800a0000013703829c1961abf6d1c9fdbd40d0606a74122afae1756c4b4cce61208f3d52b1d36f9ff02f3a50b58e9402da531d673a5418cabccd8e529d300fea65a3d28182766e00d787d63f81a1e3721edacbcfb2bd66279f1466a677d7d3dbe27e8ed28f85027e8b70985ec80fec1436123b0614163acdfcc58b8267c8ef479ed1f5a3f68243efcc56753b2476e3fc7bdced8d309a847b6c7015dd3153a8e3a2c30e8f2a2f83486145b1c881c8c652b79bd4b3c3838231b256c327a7fcfd"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 1.226817735s ago: executing program 6 (id=3417): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'filter\x00', 0x0, [0xb, 0x3, 0x7, 0x7fff, 0x1]}, &(0x7f0000000100)=0x54) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x78, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x3b, 0xa8, @random="aad1aaa4b8ec0b3f71f0da9b538e64c888166d14ddc0fec5d9216d898c11c9874dd45cff78c746f1862507535dbec82e5b2091fe5724d5"}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$sock(r5, &(0x7f0000005a80)=[{{&(0x7f0000000940)=@hci={0x1f, 0x4}, 0x80, &(0x7f0000001e00)=[{&(0x7f00000009c0)="08c70534087ab26885d776c313b95a4a78cc5fd69840e13c9889bb2cc9914e45f3e93647bfb1ae3ebcc99d147f1a0eb089ade5e510989e15b11746bd56612ef157c48a734d56f53ac322890ebfa412a8658495e5dc9fa572ea6b1fb818a6f75ea85ddd19b0c56c", 0x67}, {&(0x7f0000000ac0)="a9451a6110e6509d9bbc70ba4138157b437b538e8cdb87eb0a", 0x19}], 0x2}}], 0x1, 0x4818) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x8, 0x3, 0x1, @mcast2, @mcast1, 0x10, 0x8000, 0x8, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x7, 0x7, 0x1, 0xff, {{0x19, 0x4, 0x3, 0x7, 0x64, 0x64, 0x0, 0x1c, 0x2f, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0xc, 0x5d, 0x3, 0x0, [{@local, 0x283}]}, @timestamp_addr={0x44, 0x44, 0x31, 0x1, 0x0, [{@empty, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xbbe}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x7}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff9}, {@rand_addr=0x64010101, 0x1}, {@empty}, {@rand_addr=0x64010100, 0x80000001}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000640)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0x6, 0x4, {{0x10, 0x4, 0x3, 0x0, 0x40, 0x64, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0xda, 0x1, 0x6, [{@local, 0x45}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x8}, {@broadcast}, {@multicast2, 0x2}]}, @noop, @ssrr={0x89, 0x7, 0xf8, [@loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x2, 0xd, 0x5c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x8943c7d06215c635, 0x100, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000d40)={0x6, @loopback, 0x4e20, 0x4, 'lblc\x00', 0x20, 0x8, 0x36}, 0x2c) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0xa8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0x70, 0x2, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0x5c, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xab, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b00)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000d00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x170, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 532.697079ms ago: executing program 4 (id=3418): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x0, 0x100, 0x2, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x20000011) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}]}}}]}, 0x3c}}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'SEG6\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '$'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 531.358971ms ago: executing program 2 (id=3419): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000002a00000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x48880, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000580)={@local, 0x0}, &(0x7f0000000600)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000006c0)=r2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1a, 0x0, 0x0, &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r3) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002cbd2504000000140002000900000000000000000000000000004fc609880073797a32000000001400020073797a5f74756e0000000000000000000900010073797a3200000000140082006272696467655f736c6176655f3000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x1a8, &(0x7f0000000b40)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6292a1e9017206ffff020000000000000000000000000001200100000001000000000000000000028400040065000000870040f9b88ef417709d0cac28b380a0c1650000000120000000000000c204000000bfc910fc01569e00000000000000000400000000000001000728000000010800e90d0400000000000000ffffffffffffff7f09000000000000000000008057000000000100c910ff02000000000000000000000000000106a655046771879f065b7019502fd0baf056d7f4db40e75ce6f43f3317bc3d5af832b6ca5bb6da222cc2f764277d66c3c9028348917e2471892f1eb9db3663731ea9a0399ad4aa8a1eb3ce1a25e136868287cb9f0c52ea691404153f9b4a6a54e5589c501bb37ad52bb75ee373ac6a20faba8b48bfa6d9eda496edbc2cdba45f9a637a398723fdafb0d93a8608cf0c839689baeb7eb5a140153e5431417219363f0515516cc6e500000000000000080401a500000000fc020000000000000000000000000000fc0000000000000000000000000000010000000000000000000000000000000000004e2200004e20000000030000000400000000000000000000dabff074b03d4e7aecca2b89c3333e218a2771dd44f0093836e699bd7858941707438479a854bd"], 0x0) sendmsg$can_bcm(r6, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="010000000008000000002200000000006ba1721b08be15639479bffb54", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000006e03ff95"], 0x48}, 0x2}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES8=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0x3}, 0x18) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xc4, 0x19, 0x10, 0x0, 0x0, {0x12}, [@generic="aabfc24764a130681b3fc544df5837a1e3f7a2a19ac9a748d0d200f5d9275ac86d49688d5b316022a2d57eb7cea28c25dd4293fdb37f735a8e2b81ae4068865967eb58d7e109df04a81633e647db7869d1e40811b41ccb527a97e217653c2951587e67f3ef66b165b3e82c9470e8dd9eca2bca494e7f314c72918cafb95db6b28cecd03fc7b0fb500b8dfbff820fb288cb536d65d8018c794b5385ad417800"/174]}, 0xc4}}, 0x0) 400.781084ms ago: executing program 7 (id=3420): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000ee45b1e000000080045e0b0"], 0x0) sendmsg$nl_route(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x35288}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, &(0x7f0000000400)) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x138, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) 306.112904ms ago: executing program 6 (id=3421): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@empty, @broadcast, 0xffffffffffffffff, "a12a23e0fa934fd7f018d18e4d9df7e24122157fe3057521ce9c0481cb24ead0", 0x0, 0x8, 0x3d5d}, 0x3c) (async) getsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe) (async) r1 = socket$netlink(0x10, 0x3, 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x124, r2, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x19}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xb}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0xf0, 0xc5, "2442366564944c4a92d29c3d81cf0fed72c78e46a6ee9a0d7b9cfa41d1f5e0b73d4ee32a7adffa67ffffc5af4b91bc8322c2a709678e9a326d622aa2babcb155ea2f2a41f3294b38a35d19df90a16839f389c73f785f1b8aac176a4bbda7491be515cabed9b5fe4bb467a7777ce24d9b2881e5579034ca760c32573e39a543f316a706a0349c9936f366eab6ca41d2a039cf05bba1b23d912228ec73abac742761a4b4877c79a75143ca7fc2ef3fd069f179e8d06bab8bfb8ce70fdbda5458ec39c6554009788eecbfaf5026bbbb7a87f29c7a7becdf561f922c1da7718377679aed2abedf3b012300f62e5f"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x200}]}, 0x124}, 0x1, 0x0, 0x0, 0x40}, 0x20000844) (async) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x200, 0xfffffff8, 0x3ff]}, &(0x7f0000000380)=0x44) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = accept(r0, &(0x7f0000000600)=@sco={0x1f, @fixed}, &(0x7f0000000680)=0x80) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000006c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000700)=0x18) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000740)={r4, 0x1, 0x0, 0x8, 0x7fffffff, 0x2}, &(0x7f0000000780)=0x14) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000d80)=@broute={'broute\x00', 0x20, 0x3, 0x54a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000800], 0x0, &(0x7f00000007c0), &(0x7f0000000800)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x10, 0x6003, 'syz_tun\x00', 'syz_tun\x00', 'wlan1\x00', 'vlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, [0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x11e, 0x196, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x100, 0x5, 0x3, 0x0, 0x0, "dde2198ec6a75b44314567e29710510a14b85707263a407cfafb5e4e242a908b42771220fd04117c455cd64ffd04e0969b8c616d31385dfd1db26a4631baad4e"}}}, @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffe}}}], @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x4f2, 0xe, 0x0, 0x0, "f33602d2537f1f9c0768170c4bcac9d66d9813c2606082b0f34c198872036bb52e65013b444481c3da086fa3d6c1286a3478b5e805bb38cfb33e9be9353f7bdb"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x11, 0x18, 0x886c, 'nicvf0\x00', 'vxcan1\x00', 'veth0_macvtap\x00', 'veth1_virt_wifi\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x116, 0x116, 0x18e, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@mcast2, @loopback, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffff00], [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], 0x1, 0x16, 0x4a, 0x20, 0x4e22, 0x4e23, 0x4e21, 0x4e24}}}, @vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0xb, 0x2, 0x0, 0x4}}}], [], @common=@nflog={'nflog\x00', 0x50, {{0xfff, 0x6, 0x6, 0x0, 0x0, "58c64fb37ba7ed2a80a3e608d44f7799bcd2941d5539b75d8c963d79632d0173ac984d05791b16b4231cadd36275c4f665d8f19637e0eba3db13e33158f296fb"}}}}, {0x5, 0x9, 0x6a00, 'lo\x00', 'veth1_to_batadv\x00', 'syzkaller1\x00', 'gre0\x00', @remote, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x146, 0x196, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x4b4}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x47, 0x2, 0x2, 0x1, 0x0, "9c73c463b6b78420087c61abc4aff61af9d19ea0d23eedd7c347852200c8e84a78c6a1baaf65f5aedbf8c6273797008e22c551d9aba2e26442c54bdfe01f17ae"}}}, @common=@STANDARD={'\x00', 0x8}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz0\x00', {0x8}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x5c2) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000e00)={r4, 0x5}, 0x8) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000e40)={0x2, 0x204, 0x8, 0x4, r4}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00', 0x0, 0x10}, 0x18) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x220000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000f40)={'batadv_slave_1\x00', 0x8012}) (async) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000f80)={0x68, 0x6}, 0x2) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000fc0), &(0x7f0000001000)=0x4) (async) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000001040)=""/59, &(0x7f0000001080)=0x3b) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000010c0)={0x0, 'vcan0\x00', {0x1}, 0x9}) (async) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000001100)=0x61) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000011c0)={'wlan1\x00', 0x0}) r11 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000001380)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x74, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x53}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x6d}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20020000}, 0x40) 239.186698ms ago: executing program 5 (id=3422): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000140)=0x1, 0x4) (async) sendto$inet(r0, 0x0, 0x0, 0x563de1c6eba3ad61, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x18, &(0x7f0000000800)={r4, 0x1, 0x6, @local}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x80087601, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110780000000000630123000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 238.540556ms ago: executing program 2 (id=3423): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x2a, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @map_fd={0x18, 0x4}, @jmp={0x5, 0x0, 0x4, 0xa, 0x3, 0x30, 0xffffffffffffffff}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x23e}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x4, 0xbc, &(0x7f0000000200)=""/188, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xe, 0x7, 0x200}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x4, 0x1, 0x1, 0x6}], 0x10, 0x7fffffff}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@o_path={0xfffffffffffffffd, r1, 0x4000, r0}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044810}, 0x4040) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'dummy0\x00', @ifru_addrs=@nl=@unspec}) 219.149752ms ago: executing program 4 (id=3424): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) (async) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xe, &(0x7f0000000440)=0x100, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x1c, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@generic="750ec696b5"]}, 0x1c}}, 0x0) r2 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x70, 0x28, 0xd27, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x100, 0x401, 0xbf, {0x9, 0x0, 0x8e, 0xfffa, 0xd, 0x1}, {0x6, 0x2, 0x2, 0xfff, 0x100, 0x8}, 0x0, 0x8001, 0x3}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40c0}, 0x200008c0) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex, 0xffffffffffffffff, 0x13, 0x2030}, 0x20) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000480)={'gre0\x00', @broadcast}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast1}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) (async) getsockopt$bt_sco_SCO_OPTIONS(r8, 0x11, 0x1, &(0x7f0000000240)=""/65, &(0x7f00000001c0)=0x41) (async) getpeername$ax25(r2, &(0x7f0000000140)={{}, [@bcast, @rose, @default, @remote, @default, @default, @rose, @rose]}, &(0x7f00000000c0)=0x48) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x4, 0x500, 0x6, 0x180107}) (async) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1835eb265ba7f20e413597129961ed189d63c3391c4854d66a1452ed6b21900c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b710000004d0012803b6f2811032d68bea0612044f47c2842b277eb4bc53070416c6050e46d2e0d055c97c9e7f9bf0bafe4af56eba9024644942e3645a3e6db0d1191744909497df00d71a338c0c6a42d17"], 0xb4}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000002c0)={'sit0\x00', {0x2, 0x4e23, @rand_addr=0x64010100}}) 129.80653ms ago: executing program 6 (id=3425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xae}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES8]) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'veth0_to_bond\x00', 0x1000}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r4, &(0x7f0000000e80)=[{{&(0x7f0000000a00)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000e00)=[@ip_retopts={{0x34, 0x0, 0x7, {[@cipso={0x86, 0x18, 0xffffffffffffffff, [{0x2, 0x6, "08fd8185"}, {0x6, 0xc, "77dde5dcb8a687564183"}]}, @generic={0x7, 0x7, "9c198085b6"}, @ra={0x94, 0x4}]}}}], 0x38}}], 0x1, 0x8000) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'team_slave_1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r5) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r8, 0x0, 0xfb2}, 0x18) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYRES32=r6], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x1, 0x3, 0x40, @private2, @loopback, 0x8000, 0x8000, 0x970b, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000200), 0x10}, 0x94) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'netpci0\x00', 0x800}) 0s ago: executing program 2 (id=3426): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r4, 0x48505}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x11d, 0x70, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000009653226e00"/20, @ANYRES32=0x0, @ANYBLOB="09000100a008000014000300776c616e3100"/28], 0x34}}, 0x4084) getsockname$packet(r6, 0x0, &(0x7f00000002c0)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d30000000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0xc040) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) kernel console output (not intermixed with test programs): tover after parsing attributes in process `syz.4.1788'. [ 256.588922][T12571] syzkaller0: entered promiscuous mode [ 256.594598][T12571] syzkaller0: entered allmulticast mode [ 256.682711][T12573] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 256.702150][T12573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.879390][T12589] vxcan1 speed is unknown, defaulting to 1000 [ 256.917707][T12593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1806'. [ 256.995902][T12596] tap0: tun_chr_ioctl cmd 1074025672 [ 257.002385][T12596] tap0: ignored: set checksum disabled [ 257.120600][T12598] netlink: 'syz.4.1808': attribute type 6 has an invalid length. [ 257.273910][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1812'. [ 257.329258][T12609] x_tables: duplicate underflow at hook 2 [ 257.374204][T12611] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1814'. [ 257.420679][T12613] netlink: 'syz.4.1815': attribute type 1 has an invalid length. [ 257.428948][T12613] netlink: 'syz.4.1815': attribute type 2 has an invalid length. [ 257.487470][T12615] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 257.501490][T12615] bond5 (unregistering): Released all slaves [ 257.525319][T12617] netlink: 'syz.4.1816': attribute type 1 has an invalid length. [ 257.533272][T12617] netlink: 'syz.4.1816': attribute type 3 has an invalid length. [ 257.542219][T12617] netlink: 'syz.4.1816': attribute type 235 has an invalid length. [ 257.658360][ T8966] IPVS: starting estimator thread 0... [ 257.757101][T12622] IPVS: using max 28 ests per chain, 67200 per kthread [ 257.780017][T12629] ipt_REJECT: TCP_RESET invalid for non-tcp [ 257.793511][T12629] gtp0: entered promiscuous mode [ 257.799238][T12629] gtp0: entered allmulticast mode [ 257.821144][T12630] netlink: 'syz.4.1820': attribute type 32 has an invalid length. [ 257.834140][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1820'. [ 257.872656][T12630] bond5: Setting coupled_control to off (0) [ 257.888166][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 257.923542][T12633] openvswitch: netlink: Key 6 has unexpected len 20 expected 2 [ 258.644506][T12672] netlink: 'syz.2.1834': attribute type 83 has an invalid length. [ 258.720577][T12678] sit3: entered promiscuous mode [ 258.725700][T12678] sit3: entered allmulticast mode [ 258.812636][T12682] siw: device registration error -23 [ 258.821945][T12683] netlink: 'syz.4.1838': attribute type 1 has an invalid length. [ 259.131690][T12699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1841'. [ 259.174553][T12699] ip6gre1: entered allmulticast mode [ 259.425830][T12720] xt_cgroup: xt_cgroup: no path or classid specified [ 259.501291][T12724] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1847'. [ 259.519749][T12724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1847'. [ 259.556505][T12724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1847'. [ 259.573629][T12724] netlink: 'syz.2.1847': attribute type 2 has an invalid length. [ 259.742679][T12733] tipc: Enabled bearer , priority 0 [ 259.751901][T12733] syzkaller0: entered promiscuous mode [ 259.758030][T12733] syzkaller0: entered allmulticast mode [ 259.768233][T12733] sch_tbf: peakrate 9 is lower than or equals to rate 4194307 ! [ 259.780397][T12732] tipc: Resetting bearer [ 259.821795][T12732] tipc: Disabling bearer [ 259.920778][T12740] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20004 [ 260.038457][T12742] SET target dimension over the limit! [ 260.286352][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.300013][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 260.309288][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 260.318874][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 260.327190][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 260.372138][T12756] vxcan1 speed is unknown, defaulting to 1000 [ 260.546600][T12763] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 261.162698][T12804] __nla_validate_parse: 17 callbacks suppressed [ 261.162722][T12804] netlink: 83 bytes leftover after parsing attributes in process `syz.2.1872'. [ 261.321828][T12756] chnl_net:caif_netlink_parms(): no params data found [ 261.455638][T12818] IPv6: sit1: Disabled Multicast RS [ 261.462408][T12818] sit1: entered allmulticast mode [ 261.513306][T12756] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.520694][T12756] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.528470][T12756] bridge_slave_0: entered allmulticast mode [ 261.536237][T12756] bridge_slave_0: entered promiscuous mode [ 261.544611][T12756] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.552026][T12756] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.560175][T12756] bridge_slave_1: entered allmulticast mode [ 261.568811][T12756] bridge_slave_1: entered promiscuous mode [ 261.639549][T12756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.652055][T12756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.688112][T12756] team0: Port device team_slave_0 added [ 261.696603][T12756] team0: Port device team_slave_1 added [ 261.728848][T12756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.735945][T12756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.764113][T12756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.777765][T12756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.784748][T12756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.812353][T12756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.827530][ T56] block nbd0: Possible stuck request ffff888024d65080: control (read@0,1024B). Runtime 60 seconds [ 261.838635][ T56] block nbd0: Possible stuck request ffff888024d65240: control (read@1024,1024B). Runtime 60 seconds [ 261.851517][ T56] block nbd0: Possible stuck request ffff888024d65400: control (read@2048,1024B). Runtime 60 seconds [ 261.863995][ T56] block nbd0: Possible stuck request ffff888024d655c0: control (read@3072,1024B). Runtime 60 seconds [ 261.893006][T12756] hsr_slave_0: entered promiscuous mode [ 261.899942][T12756] hsr_slave_1: entered promiscuous mode [ 261.906525][T12756] debugfs: 'hsr0' already exists in 'hsr' [ 261.912927][T12756] Cannot create hsr debugfs directory [ 262.249550][T12756] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 262.261043][T12756] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 262.271929][T12756] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 262.282820][T12756] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 262.380913][T12843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1880'. [ 262.390281][ T5830] Bluetooth: hci5: command tx timeout [ 262.399771][T12843] validate_nla: 44 callbacks suppressed [ 262.399793][T12843] netlink: 'syz.4.1880': attribute type 7 has an invalid length. [ 262.401597][T12756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.406266][T12843] netlink: 'syz.4.1880': attribute type 8 has an invalid length. [ 262.430358][T12756] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.438077][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1880'. [ 262.450228][T12507] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.457807][T12507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.506357][T12507] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.513793][T12507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.741772][T12855] netlink: 'syz.4.1884': attribute type 1 has an invalid length. [ 262.749988][T12855] netlink: 'syz.4.1884': attribute type 1 has an invalid length. [ 262.816067][T12756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.485276][T12881] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 263.493645][T12881] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 263.496229][T12756] veth0_vlan: entered promiscuous mode [ 263.529143][T12756] veth1_vlan: entered promiscuous mode [ 263.616006][T12756] veth0_macvtap: entered promiscuous mode [ 263.647880][T12756] veth1_macvtap: entered promiscuous mode [ 263.698987][T12756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.733861][T12756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.778391][T12502] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.791195][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.802138][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 263.810951][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 263.822540][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 263.827508][ T5148] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 263.837879][T12502] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.848837][T12509] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.848966][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 263.866435][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 263.894491][T12509] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.894544][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 263.919363][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 263.930552][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 263.963666][T12897] dvmrp0: entered allmulticast mode [ 264.098866][T12508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.107555][T12508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.134623][T12889] vxcan1 speed is unknown, defaulting to 1000 [ 264.165782][T12509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.174919][T12509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.356192][T12906] bond5: entered promiscuous mode [ 264.362819][T12906] bond5: entered allmulticast mode [ 264.368986][T12906] 8021q: adding VLAN 0 to HW filter on device bond5 [ 264.369457][T12912] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 264.406273][T12911] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 264.477425][ T5832] Bluetooth: hci5: command tx timeout [ 264.656644][T12891] vxcan1 speed is unknown, defaulting to 1000 [ 264.979323][T12939] netlink: 'syz.5.1906': attribute type 8 has an invalid length. [ 265.054162][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1905'. [ 265.296772][T12944] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 265.348778][T12944] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 265.406869][T12950] macvlan0: entered promiscuous mode [ 265.414269][T12950] macvlan0: entered allmulticast mode [ 265.421406][T12950] bond6: (slave macvlan0): Error -98 calling set_mac_address [ 265.987807][ T5832] Bluetooth: hci7: command tx timeout [ 265.989605][ T5834] Bluetooth: hci6: command tx timeout [ 266.184129][T12992] netlink: 'syz.4.1917': attribute type 83 has an invalid length. [ 266.253483][T12992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1917'. [ 266.315718][T12889] chnl_net:caif_netlink_parms(): no params data found [ 266.526305][T12889] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.533971][T12889] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.541951][T12889] bridge_slave_0: entered allmulticast mode [ 266.550441][T12889] bridge_slave_0: entered promiscuous mode [ 266.558042][ T5834] Bluetooth: hci5: command tx timeout [ 266.566729][T12889] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.574994][T12889] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.582494][T12889] bridge_slave_1: entered allmulticast mode [ 266.590279][T12889] bridge_slave_1: entered promiscuous mode [ 266.660878][T12889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.702807][T12889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.750665][T13021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1924'. [ 266.781687][T13021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 266.799567][T12889] team0: Port device team_slave_0 added [ 266.813845][T13021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 266.825212][T12889] team0: Port device team_slave_1 added [ 266.832502][T12509] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.842611][T12509] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.895976][T12509] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.906938][T12509] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.918414][T12889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.926065][T12889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.954830][T12889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.973786][T12891] chnl_net:caif_netlink_parms(): no params data found [ 266.986011][T12889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.993615][T12889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.022027][T12889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.223449][T12889] hsr_slave_0: entered promiscuous mode [ 267.233672][T12889] hsr_slave_1: entered promiscuous mode [ 267.241243][T12889] debugfs: 'hsr0' already exists in 'hsr' [ 267.247321][T12889] Cannot create hsr debugfs directory [ 267.288491][T13033] syzkaller0: refused to change device tx_queue_len [ 267.331188][T13038] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 267.392049][T12891] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.400148][T12891] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.408347][T12891] bridge_slave_0: entered allmulticast mode [ 267.418683][T12891] bridge_slave_0: entered promiscuous mode [ 267.430252][T12891] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.438118][T12891] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.447468][T13043] openvswitch: netlink: IP tunnel dst address not specified [ 267.455700][T12891] bridge_slave_1: entered allmulticast mode [ 267.475640][T12891] bridge_slave_1: entered promiscuous mode [ 267.533380][T13039] bond7: (slave bridge6): making interface the new active one [ 267.543401][T13039] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 267.573049][T13038] bond7: (slave bridge7): Enslaving as an active interface with a down link [ 267.593080][T13040] gretap2: entered promiscuous mode [ 267.598984][T13040] gretap2: entered allmulticast mode [ 267.608766][T13040] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 267.637480][T13054] netlink: 'syz.4.1933': attribute type 1 has an invalid length. [ 267.678203][T13054] 8021q: adding VLAN 0 to HW filter on device bond6 [ 267.795665][T13063] netlink: 'syz.2.1934': attribute type 1 has an invalid length. [ 267.808746][T12891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.850080][T12891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.921670][ T5968] IPVS: starting estimator thread 0... [ 267.934046][T13066] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 268.017630][T13072] IPVS: using max 23 ests per chain, 55200 per kthread [ 268.071062][ T5834] Bluetooth: hci6: command tx timeout [ 268.071072][ T5832] Bluetooth: hci7: command tx timeout [ 268.126897][T12891] team0: Port device team_slave_0 added [ 268.161292][T12891] team0: Port device team_slave_1 added [ 268.212537][T13079] netlink: 'syz.2.1937': attribute type 15 has an invalid length. [ 268.221150][T13079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1937'. [ 268.269727][T12891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.277820][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.322736][T12891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.340923][T12891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.348856][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.376578][T12891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.609447][T12891] hsr_slave_0: entered promiscuous mode [ 268.627876][ T5834] Bluetooth: hci5: command tx timeout [ 268.638217][T12891] hsr_slave_1: entered promiscuous mode [ 268.651827][T12891] debugfs: 'hsr0' already exists in 'hsr' [ 268.663411][T12891] Cannot create hsr debugfs directory [ 268.857542][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'. [ 269.010838][T12889] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 269.086162][T12889] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 269.135056][T12889] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 269.159262][T12889] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 269.287558][T13125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1948'. [ 269.331155][T13129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1949'. [ 269.424861][T13137] netlink: 'syz.2.1950': attribute type 8 has an invalid length. [ 269.481350][T13135] netlink: 'syz.2.1950': attribute type 8 has an invalid length. [ 269.489869][T13135] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1950'. [ 269.503440][T13135] netlink: 'syz.2.1950': attribute type 8 has an invalid length. [ 269.514841][T13141] netlink: 'syz.5.1952': attribute type 1 has an invalid length. [ 269.650027][T13143] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1953'. [ 269.661713][T12891] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 269.696211][T12891] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 269.708192][T12891] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 269.723135][T12891] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 269.800638][T12889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.862116][T12889] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.944392][T12509] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.951838][T12509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.981446][T12509] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.988839][T12509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.039457][T13160] netlink: 'syz.5.1958': attribute type 4 has an invalid length. [ 270.089625][T13160] netlink: 'syz.5.1958': attribute type 4 has an invalid length. [ 270.149248][ T5834] Bluetooth: hci6: command tx timeout [ 270.149258][ T5832] Bluetooth: hci7: command tx timeout [ 270.267643][T12891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.358147][T12891] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.393342][T12509] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.400584][T12509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.489315][T12509] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.496570][T12509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.512528][T13179] netlink: 'syz.4.1962': attribute type 8 has an invalid length. [ 270.549583][T13183] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 270.822617][T12889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.100486][T13203] syzkaller0: entered promiscuous mode [ 271.106289][T13203] syzkaller0: entered allmulticast mode [ 271.575641][T12891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.741696][T12889] veth0_vlan: entered promiscuous mode [ 271.749006][T13231] __nla_validate_parse: 1 callbacks suppressed [ 271.749027][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1970'. [ 271.754601][T13230] No such timeout policy "syz1" [ 271.796241][T12889] veth1_vlan: entered promiscuous mode [ 271.807822][T13231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1970'. [ 271.808621][T13230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.926141][T12889] veth0_macvtap: entered promiscuous mode [ 272.000379][T12889] veth1_macvtap: entered promiscuous mode [ 272.118740][T12889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.150520][T12889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.227925][ T5834] Bluetooth: hci6: command tx timeout [ 272.233668][ T5834] Bluetooth: hci7: command tx timeout [ 272.239461][T12509] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.307596][T12509] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.341725][T12509] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.369391][T12509] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.416584][T13249] bond0: entered promiscuous mode [ 272.443413][T13249] bond_slave_0: entered promiscuous mode [ 272.457954][T13249] bond_slave_1: entered promiscuous mode [ 272.666416][T12891] veth0_vlan: entered promiscuous mode [ 272.715969][T12891] veth1_vlan: entered promiscuous mode [ 272.725266][T12509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.743413][T12509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.798094][T12509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.808942][T12509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.876246][T12891] veth0_macvtap: entered promiscuous mode [ 272.914378][T12891] veth1_macvtap: entered promiscuous mode [ 272.996093][T12891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.046741][T12891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.131666][T12507] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.187606][T12507] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.218572][T12507] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.295369][T12507] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.487184][T12497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.527381][T12497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.659374][T13304] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1990'. [ 273.677483][T12507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.685363][T12507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.697745][T13304] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1990'. [ 273.729106][T13304] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1990'. [ 273.773337][T13304] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1990'. [ 273.899326][T13314] syzkaller1: entered promiscuous mode [ 273.914248][T13314] syzkaller1: entered allmulticast mode [ 273.996188][T13324] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1995'. [ 274.077851][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1995'. [ 274.163557][T13321] team0 (unregistering): Port device team_slave_0 removed [ 274.176689][T13321] team0 (unregistering): Port device team_slave_1 removed [ 274.312387][ T5834] Bluetooth: hci7: command tx timeout [ 274.385691][T13341] Cannot find set identified by id 0 to match [ 274.661017][T13353] netem: change failed [ 274.853743][T13364] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 275.020651][T13376] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2013'. [ 275.044222][T13376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2013'. [ 275.132651][T13379] policy can only be matched on NF_INET_PRE_ROUTING [ 275.132675][T13379] unable to load match [ 275.831441][T13433] openvswitch: netlink: Flow actions attr not present in new flow. [ 275.852522][T13435] syzkaller1: entered promiscuous mode [ 275.868356][T13435] syzkaller1: entered allmulticast mode [ 276.063068][T13447] syzkaller0: entered promiscuous mode [ 276.072204][T13447] syzkaller0: entered allmulticast mode [ 276.171581][T13450] netlink: zone id is out of range [ 276.188177][T13450] netlink: zone id is out of range [ 276.194791][T13450] netlink: del zone limit has 8 unknown bytes [ 276.293219][T13458] validate_nla: 2 callbacks suppressed [ 276.293243][T13458] netlink: 'syz.2.2038': attribute type 4 has an invalid length. [ 276.415449][T13467] syzkaller1: entered promiscuous mode [ 276.421770][T13467] syzkaller1: entered allmulticast mode [ 276.744610][T13476] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.752918][T13476] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.766128][T13488] __nla_validate_parse: 6 callbacks suppressed [ 276.766149][T13488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2043'. [ 276.810418][T13488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2043'. [ 276.820539][T13488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2043'. [ 276.832944][T13488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2043'. [ 276.877982][T13476] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 277.410566][T13522] netlink: 'syz.5.2055': attribute type 1 has an invalid length. [ 277.424980][T13522] netlink: 'syz.5.2055': attribute type 1 has an invalid length. [ 277.454093][T13522] netlink: 'syz.5.2055': attribute type 1 has an invalid length. [ 277.471414][T13522] netlink: 'syz.5.2055': attribute type 1 has an invalid length. [ 277.624943][T13528] syzkaller0: entered promiscuous mode [ 277.637552][T13528] syzkaller0: entered allmulticast mode [ 278.382781][T13565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2065'. [ 279.884851][T13580] netlink: 288 bytes leftover after parsing attributes in process `syz.7.2067'. [ 279.895786][T13579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2070'. [ 279.942182][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2068'. [ 279.965172][T13586] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2069'. [ 279.991038][T13586] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2069'. [ 280.157873][T13594] syzkaller1: entered promiscuous mode [ 280.180746][T13594] syzkaller1: entered allmulticast mode [ 280.442899][T13612] netlink: 'syz.7.2079': attribute type 6 has an invalid length. [ 280.456766][T13610] tipc: Started in network mode [ 280.465152][T13610] tipc: Node identity 4, cluster identity 4711 [ 280.472488][T13612] netlink: 'syz.7.2079': attribute type 5 has an invalid length. [ 280.499610][T13610] tipc: Node number set to 4 [ 280.835543][T13640] sctp: [Deprecated]: syz.7.2086 (pid 13640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.835543][T13640] Use struct sctp_sack_info instead [ 281.147514][T13660] syz.6.2088: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 281.217614][T13660] CPU: 1 UID: 0 PID: 13660 Comm: syz.6.2088 Not tainted syzkaller #0 PREEMPT(full) [ 281.217646][T13660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 281.217660][T13660] Call Trace: [ 281.217668][T13660] [ 281.217676][T13660] dump_stack_lvl+0x189/0x250 [ 281.217713][T13660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.217736][T13660] ? __pfx__printk+0x10/0x10 [ 281.217759][T13660] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 281.217795][T13660] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 281.217822][T13660] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 281.217849][T13660] warn_alloc+0x214/0x310 [ 281.217875][T13660] ? stack_depot_save_flags+0x40/0x860 [ 281.217902][T13660] ? __pfx_warn_alloc+0x10/0x10 [ 281.217927][T13660] ? kasan_save_track+0x3e/0x80 [ 281.217948][T13660] ? __kasan_kmalloc+0x93/0xb0 [ 281.217973][T13660] ? xsk_setsockopt+0x4dc/0x8d0 [ 281.218000][T13660] ? do_sock_setsockopt+0x17c/0x1b0 [ 281.218029][T13660] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 281.218057][T13660] ? do_syscall_64+0xfa/0xfa0 [ 281.218076][T13660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.218109][T13660] __vmalloc_node_range_noprof+0x125/0x12d0 [ 281.218172][T13660] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 281.218201][T13660] ? __kasan_kmalloc+0x93/0xb0 [ 281.218231][T13660] vmalloc_user_noprof+0xad/0xf0 [ 281.218255][T13660] ? xskq_create+0xbf/0x170 [ 281.218287][T13660] xskq_create+0xbf/0x170 [ 281.218322][T13660] xsk_init_queue+0xb0/0x110 [ 281.218356][T13660] xsk_setsockopt+0x4dc/0x8d0 [ 281.218389][T13660] ? __pfx_xsk_setsockopt+0x10/0x10 [ 281.218423][T13660] ? __pfx_aa_sk_perm+0x10/0x10 [ 281.218448][T13660] ? aa_sock_opt_perm+0xff/0x1b0 [ 281.218476][T13660] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 281.218502][T13660] ? __pfx_xsk_setsockopt+0x10/0x10 [ 281.218533][T13660] do_sock_setsockopt+0x17c/0x1b0 [ 281.218569][T13660] __x64_sys_setsockopt+0x13f/0x1b0 [ 281.218604][T13660] do_syscall_64+0xfa/0xfa0 [ 281.218623][T13660] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.218644][T13660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.218664][T13660] ? clear_bhb_loop+0x60/0xb0 [ 281.218690][T13660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.218710][T13660] RIP: 0033:0x7f1eee78efc9 [ 281.218730][T13660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.218748][T13660] RSP: 002b:00007f1eef5ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 281.218772][T13660] RAX: ffffffffffffffda RBX: 00007f1eee9e6090 RCX: 00007f1eee78efc9 [ 281.218797][T13660] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 281.218810][T13660] RBP: 00007f1eee811f91 R08: 0000000000000004 R09: 0000000000000000 [ 281.218823][T13660] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.218836][T13660] R13: 00007f1eee9e6128 R14: 00007f1eee9e6090 R15: 00007ffdec3cc2c8 [ 281.218875][T13660] [ 281.224020][T13660] Mem-Info: [ 281.486084][T13680] netlink: 'syz.7.2096': attribute type 9 has an invalid length. [ 281.494686][T13660] active_anon:6596 inactive_anon:0 isolated_anon:0 [ 281.494686][T13660] active_file:3143 inactive_file:39961 isolated_file:0 [ 281.494686][T13660] unevictable:768 dirty:61 writeback:0 [ 281.494686][T13660] slab_reclaimable:12528 slab_unreclaimable:117186 [ 281.494686][T13660] mapped:31344 shmem:1363 pagetables:1600 [ 281.494686][T13660] sec_pagetables:0 bounce:0 [ 281.494686][T13660] kernel_misc_reclaimable:0 [ 281.494686][T13660] free:1273154 free_pcp:13693 free_cma:0 [ 281.608786][T13660] Node 0 active_anon:26384kB inactive_anon:0kB active_file:12572kB inactive_file:159640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133576kB dirty:244kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15224kB pagetables:6084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 281.653449][T13660] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 281.687489][T13660] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.727193][T13660] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 281.733297][T13660] Node 0 DMA32 free:1186688kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26584kB inactive_anon:0kB active_file:12572kB inactive_file:159640kB unevictable:1536kB writepending:244kB zspages:0kB present:3129332kB managed:2561620kB mlocked:0kB bounce:0kB free_pcp:39436kB local_pcp:19240kB free_cma:0kB [ 281.772616][T13660] lowmem_reserve[]: 0 0 1 1 1 [ 281.779809][T13660] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.811497][T13660] lowmem_reserve[]: 0 0 0 0 0 [ 281.816812][T13660] Node 1 Normal free:3890568kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15072kB local_pcp:6016kB free_cma:0kB [ 281.850892][T13660] lowmem_reserve[]: 0 0 0 0 0 [ 281.855633][T13660] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 281.868604][T13660] Node 0 DMA32: 219*4kB (UM) 29*8kB (UM) 265*16kB (UM) 145*32kB (UME) 97*64kB (UM) 59*128kB (UME) 205*256kB (UM) 241*512kB (UME) 154*1024kB (UM) 1*2048kB (M) 202*4096kB (M) = 1186756kB [ 281.888095][T13660] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 281.899792][T13660] Node 1 Normal: 202*4kB (UME) 50*8kB (UME) 47*16kB (UME) 151*32kB (UME) 34*64kB (UME) 13*128kB (UME) 4*256kB (UM) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3890568kB [ 281.922098][T13660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.932006][T13660] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 281.942021][T13660] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.952175][T13660] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 281.961904][T13660] 44463 total pagecache pages [ 281.966646][T13660] 0 pages in swap cache [ 281.970944][T13660] Free swap = 124996kB [ 281.975202][T13660] Total swap = 124996kB [ 281.979961][T13660] 2097051 pages RAM [ 281.983952][T13660] 0 pages HighMem/MovableOnly [ 281.989023][T13660] 424556 pages reserved [ 281.993377][T13660] 0 pages cma reserved [ 282.029742][T13686] tipc: Enabling of bearer rejected, failed to enable media [ 282.176442][T13698] __nla_validate_parse: 12 callbacks suppressed [ 282.176463][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2098'. [ 282.354264][T13706] veth13: entered promiscuous mode [ 282.432078][ T5845] IPVS: starting estimator thread 0... [ 282.494412][T13707] veth13: entered promiscuous mode [ 282.537965][T13717] IPVS: using max 26 ests per chain, 62400 per kthread [ 282.627808][T13720] tipc: Invalid UDP bearer configuration [ 282.627876][T13720] tipc: Enabling of bearer rejected, failed to enable media [ 282.655402][T13727] openvswitch: netlink: IP tunnel dst address not specified [ 283.075617][T13742] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2108'. [ 283.152730][T13751] bond1: Removing last arp target with arp_interval on [ 283.665550][T13773] netlink: 'syz.4.2119': attribute type 12 has an invalid length. [ 283.722976][T13786] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2123'. [ 283.763282][T13786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.853283][T13786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.880231][T13801] netlink: 'syz.4.2125': attribute type 33 has an invalid length. [ 283.939932][T13786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.086047][T13806] netlink: 'syz.7.2129': attribute type 1 has an invalid length. [ 284.094567][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2129'. [ 284.760383][T13838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2137'. [ 284.976696][T13851] netlink: 81 bytes leftover after parsing attributes in process `syz.5.2142'. [ 285.053922][T13857] IPVS: length: 8 != 1152 [ 285.085908][T13857] macvlan0: entered promiscuous mode [ 285.105755][T13857] batadv0: entered promiscuous mode [ 285.118098][T13857] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 285.153952][T13857] hsr1: entered allmulticast mode [ 285.163823][T13857] macvlan0: entered allmulticast mode [ 285.172878][T13857] veth1_vlan: entered allmulticast mode [ 285.179272][T13857] batadv0: entered allmulticast mode [ 285.201549][T13857] macvlan0: left promiscuous mode [ 285.216079][T13857] batadv0: left promiscuous mode [ 285.391666][T13871] netlink: 9896 bytes leftover after parsing attributes in process `syz.7.2148'. [ 285.433303][T13871] xt_cgroup: invalid path, errno=-2 [ 285.790322][T13899] netlink: 'syz.6.2154': attribute type 16 has an invalid length. [ 285.818251][T13899] netlink: 'syz.6.2154': attribute type 17 has an invalid length. [ 285.830087][T13894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'. [ 285.857377][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'. [ 285.921157][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2155'. [ 285.950716][T13901] netlink: 'syz.2.2155': attribute type 15 has an invalid length. [ 285.982292][T13894] netlink: 'syz.2.2155': attribute type 15 has an invalid length. [ 286.086991][T13899] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.094521][T13899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.113399][T13899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.133286][T13899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.378499][T13913] macvtap1: entered promiscuous mode [ 286.397898][T13913] macvtap1: entered allmulticast mode [ 286.407811][T13913] bond_slave_0: entered promiscuous mode [ 286.413617][T13913] bond_slave_1: entered promiscuous mode [ 286.439107][T13913] bond0: entered allmulticast mode [ 286.449252][T13913] bond_slave_0: entered allmulticast mode [ 286.473731][T13913] bond_slave_1: entered allmulticast mode [ 286.479975][T13913] bond0: entered promiscuous mode [ 286.508258][T13913] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 286.515623][T13913] team0: Device macvtap1 failed to register rx_handler [ 286.539158][T13913] bond0: left allmulticast mode [ 286.544768][T13913] bond_slave_0: left allmulticast mode [ 286.568328][T13913] bond_slave_1: left allmulticast mode [ 286.577974][T13913] bond0: left promiscuous mode [ 286.584458][T13913] bond_slave_0: left promiscuous mode [ 286.590188][T13913] bond_slave_1: left promiscuous mode [ 286.644165][T13923] netlink: 'syz.5.2165': attribute type 29 has an invalid length. [ 287.551967][T13970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.591368][T13980] batadv_slave_1: entered promiscuous mode [ 287.668939][T14000] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 287.835595][T14008] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.871886][T13975] batadv_slave_1: left promiscuous mode [ 287.915241][T14010] tipc: Started in network mode [ 287.920675][T14010] tipc: Node identity be3225b3f959, cluster identity 4711 [ 287.947263][T14010] tipc: Enabled bearer , priority 0 [ 287.964337][T14014] __nla_validate_parse: 6 callbacks suppressed [ 287.964358][T14014] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2181'. [ 287.982779][T14015] syzkaller0: entered promiscuous mode [ 288.003314][T14015] syzkaller0: entered allmulticast mode [ 288.017333][T14014] netlink: 'syz.6.2181': attribute type 7 has an invalid length. [ 288.042647][T14014] netlink: 'syz.6.2181': attribute type 8 has an invalid length. [ 288.061006][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2181'. [ 288.171129][T14009] tipc: Resetting bearer [ 288.224711][T14009] tipc: Disabling bearer [ 288.271746][T14020] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2184'. [ 288.730111][T14043] syzkaller0: entered promiscuous mode [ 288.739508][T14043] syzkaller0: entered allmulticast mode [ 289.085535][T14056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2193'. [ 289.244726][T14065] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2192'. [ 289.257316][T14065] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2192'. [ 289.266695][T14065] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2192'. [ 289.266693][T14069] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2198'. [ 289.276434][T14065] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2192'. [ 289.382219][T14075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.408342][T14075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2200'. [ 290.803782][T14143] delete_channel: no stack [ 291.911287][ T56] block nbd0: Possible stuck request ffff888024d65080: control (read@0,1024B). Runtime 90 seconds [ 291.930137][ T56] block nbd0: Possible stuck request ffff888024d65240: control (read@1024,1024B). Runtime 90 seconds [ 291.956519][ T56] block nbd0: Possible stuck request ffff888024d65400: control (read@2048,1024B). Runtime 90 seconds [ 291.973701][ T56] block nbd0: Possible stuck request ffff888024d655c0: control (read@3072,1024B). Runtime 90 seconds [ 292.486653][T14193] team0: Cannot enslave team device to itself [ 292.573383][T14200] netlink: 'syz.6.2238': attribute type 1 has an invalid length. [ 292.694329][T14200] netlink: 'syz.6.2238': attribute type 1 has an invalid length. [ 292.726300][T14204] openvswitch: netlink: Missing key (keys=40, expected=100) [ 292.995704][T14208] __nla_validate_parse: 22 callbacks suppressed [ 292.995728][T14208] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2242'. [ 293.568936][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2249'. [ 293.642988][T14240] netlink: 'syz.7.2251': attribute type 8 has an invalid length. [ 293.733368][T14243] IPVS: set_ctl: invalid protocol: 47 172.30.1.6:20001 [ 293.767641][T14243] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2252'. [ 294.019741][T14263] nbd1: detected capacity change from 0 to 127 [ 294.030185][ T5834] block nbd1: Receive control failed (result -32) [ 294.451710][T14286] ipt_REJECT: ECHOREPLY no longer supported. [ 294.831602][T14309] siw: device registration error -23 [ 294.891067][T14308] netlink: 'syz.7.2271': attribute type 1 has an invalid length. [ 294.942548][T14310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.967754][T14324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.110579][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2274'. [ 295.121034][T14329] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 295.159724][T14301] team_slave_0: left promiscuous mode [ 295.172444][T14301] team_slave_1: left promiscuous mode [ 295.201074][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2275'. [ 295.252411][T14332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2275'. [ 295.729968][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2276'. [ 296.118901][T14308] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 296.121098][ T8961] vxcan1 speed is unknown, defaulting to 1000 [ 296.138607][ T8961] sqz2: Port: 1 Link DOWN [ 296.170530][T14333] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 296.183362][T13997] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.232355][T13997] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.298250][T14347] vxcan1 speed is unknown, defaulting to 1000 [ 296.298641][T13997] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.370795][T13997] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.410609][T13997] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.437384][T13997] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.473228][T13997] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.503561][T13997] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.528917][T14370] tipc: Enabling of bearer rejected, failed to enable media [ 296.597567][T14375] netlink: 'syz.2.2286': attribute type 10 has an invalid length. [ 296.790403][T14385] netlink: 'syz.6.2289': attribute type 1 has an invalid length. [ 296.894230][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2290'. [ 296.933028][T14392] IPv6: sit1: Disabled Multicast RS [ 297.003502][T14392] sit1: entered allmulticast mode [ 297.401186][T14412] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.438634][T14415] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 297.608772][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2299'. [ 297.633320][T14422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.050656][T14443] lo: entered promiscuous mode [ 298.062913][T14443] tunl0: entered promiscuous mode [ 298.072038][T14443] gre0: entered promiscuous mode [ 298.116851][T14443] gretap0: entered promiscuous mode [ 298.166690][T14443] erspan0: entered promiscuous mode [ 298.250195][T14443] ip_vti0: entered promiscuous mode [ 298.339510][T14443] ip6_vti0: entered promiscuous mode [ 298.391867][T14443] sit0: entered promiscuous mode [ 298.513328][T14443] ip6tnl0: entered promiscuous mode [ 298.543873][T14443] ip6gre0: entered promiscuous mode [ 298.598810][T14443] syz_tun: entered promiscuous mode [ 298.610564][T14483] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2308'. [ 298.648358][T14443] ip6gretap0: entered promiscuous mode [ 298.676472][T14443] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.684496][T14443] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.701826][T14443] bridge0: entered promiscuous mode [ 298.716348][T14489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2308'. [ 298.739314][T14443] vcan0: entered promiscuous mode [ 298.751078][T14443] team0: entered promiscuous mode [ 298.756734][T14443] team_slave_0: entered promiscuous mode [ 298.764068][T14443] team_slave_1: entered promiscuous mode [ 298.776436][T14443] dummy0: entered promiscuous mode [ 298.792992][T14443] nlmon0: entered promiscuous mode [ 298.803560][T14443] caif0: entered promiscuous mode [ 298.811895][T14443] batadv0: entered promiscuous mode [ 298.823368][T14443] vxcan0: entered promiscuous mode [ 298.832946][T14443] vxcan1: entered promiscuous mode [ 298.841939][T14443] veth0: entered promiscuous mode [ 298.853482][T14443] veth1: entered promiscuous mode [ 298.863401][T14443] wg0: entered promiscuous mode [ 298.872762][T14443] wg1: entered promiscuous mode [ 298.883801][T14443] wg2: entered promiscuous mode [ 298.892096][T14443] veth0_to_bridge: entered promiscuous mode [ 298.904588][T14443] veth1_to_bridge: entered promiscuous mode [ 298.920290][T14443] veth0_to_bond: entered promiscuous mode [ 298.931641][T14443] veth1_to_bond: entered promiscuous mode [ 298.942143][T14443] veth0_to_team: entered promiscuous mode [ 298.955086][T14443] veth1_to_team: entered promiscuous mode [ 298.967548][T14443] veth0_to_batadv: entered promiscuous mode [ 298.976289][T14443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.984948][T14443] batadv_slave_0: entered promiscuous mode [ 298.995054][T14443] veth1_to_batadv: entered promiscuous mode [ 299.004632][T14443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.014383][T14443] batadv_slave_1: entered promiscuous mode [ 299.026156][T14443] xfrm0: entered promiscuous mode [ 299.034520][T14443] veth0_to_hsr: entered promiscuous mode [ 299.045699][T14443] veth1_to_hsr: entered promiscuous mode [ 299.058697][T14443] hsr0: entered promiscuous mode [ 299.067205][T14443] veth1_virt_wifi: entered promiscuous mode [ 299.076504][T14443] veth0_virt_wifi: entered promiscuous mode [ 299.086023][T14443] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 299.109734][T14443] vlan0: entered promiscuous mode [ 299.116898][T14443] vlan1: entered promiscuous mode [ 299.123097][T14443] macvlan0: entered promiscuous mode [ 299.133459][T14443] macvlan1: entered promiscuous mode [ 299.141945][T14443] ipvlan0: entered promiscuous mode [ 299.148845][T14443] ipvlan1: entered promiscuous mode [ 299.162546][T14443] macvtap0: entered promiscuous mode [ 299.172155][T14443] macsec0: entered promiscuous mode [ 299.181328][T14443] geneve0: entered promiscuous mode [ 299.190639][T14443] geneve1: entered promiscuous mode [ 299.202971][T14443] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 299.213718][T14443] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 299.229221][T14443] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 299.245623][T14443] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 299.259187][T14443] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 299.276508][T14443] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 299.285760][T14443] syztnl1: entered promiscuous mode [ 299.291292][T14443] bond1: entered promiscuous mode [ 299.297595][T14443] batadv0.5: entered promiscuous mode [ 299.303814][T14449] syzkaller0: entered promiscuous mode [ 299.310136][T14449] syzkaller0: entered allmulticast mode [ 299.480441][T14483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 299.501459][T14486] bond1: entered allmulticast mode [ 299.517955][T13997] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.528403][T13997] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.571943][T14502] gtp1: entered promiscuous mode [ 299.602539][T14502] gtp1: entered allmulticast mode [ 299.647308][T13997] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.680574][ T6465] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.733946][T14515] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 299.882814][T14509] vxcan1 speed is unknown, defaulting to 1000 [ 300.569786][T14550] netlink: 'syz.4.2322': attribute type 6 has an invalid length. [ 300.761823][T14555] netlink: 'syz.5.2324': attribute type 1 has an invalid length. [ 300.783949][T14555] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2324'. [ 300.797445][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2324'. [ 301.352252][T14584] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2334'. [ 301.659821][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'. [ 301.677776][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'. [ 301.717926][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'. [ 301.744342][T14608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.753888][T14607] netlink: 'syz.2.2342': attribute type 2 has an invalid length. [ 301.780709][T14607] netlink: 'syz.2.2342': attribute type 2 has an invalid length. [ 301.827564][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'. [ 301.859591][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'. [ 301.872936][T14608] netlink: 'syz.6.2340': attribute type 1 has an invalid length. [ 301.892322][T14608] netlink: 'syz.6.2340': attribute type 1 has an invalid length. [ 301.911376][T14607] netlink: 'syz.2.2342': attribute type 2 has an invalid length. [ 301.925920][T14607] netlink: 'syz.2.2342': attribute type 2 has an invalid length. [ 301.962783][T14607] netlink: 'syz.2.2342': attribute type 2 has an invalid length. [ 301.983941][T14607] netlink: 'syz.2.2342': attribute type 2 has an invalid length. [ 302.914832][T14647] ipt_ECN: cannot use operation on non-tcp rule [ 303.659016][T14682] __nla_validate_parse: 68 callbacks suppressed [ 303.659039][T14682] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2363'. [ 303.812392][T14685] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2362'. [ 303.926510][T14692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.975821][T14698] bond2: (slave gretap1): making interface the new active one [ 304.000687][T14698] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 304.198340][T14718] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2373'. [ 304.398790][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2373'. [ 304.423301][T14734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.451743][T14734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.517415][T14739] syzkaller0: entered promiscuous mode [ 304.527597][T14739] syzkaller0: entered allmulticast mode [ 304.592967][T14752] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2381'. [ 304.604713][T14752] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 304.614110][T14752] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 304.624498][T14752] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 304.775767][T14762] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2385'. [ 305.319718][T14772] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2386'. [ 305.345288][T14772] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2386'. [ 305.375328][T14772] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2386'. [ 305.506214][T14780] ipt_rpfilter: unknown options [ 305.607869][T14785] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2394'. [ 305.624496][T14787] validate_nla: 66 callbacks suppressed [ 305.624517][T14787] netlink: 'syz.6.2393': attribute type 3 has an invalid length. [ 305.672699][T14790] netlink: 'syz.7.2395': attribute type 1 has an invalid length. [ 305.702981][T14790] netlink: 'syz.7.2395': attribute type 2 has an invalid length. [ 306.063112][T14809] bond2: (slave bond_slave_1): Device is not our slave [ 306.088750][T14809] bond2: option active_slave: invalid value (bond_slave_1) [ 306.114664][T14809] bond2 (unregistering): Released all slaves [ 306.294954][T14824] xt_TCPMSS: Only works on TCP SYN packets [ 306.356349][T14824] tipc: Enabling of bearer rejected, failed to enable media [ 306.969626][T14862] syzkaller1: entered promiscuous mode [ 306.986246][T14862] syzkaller1: entered allmulticast mode [ 307.108079][T14869] syzkaller0: create flow: hash 1925535492 index 2 [ 307.133673][T13989] syzkaller0: tun_net_xmit 76 [ 307.142173][T13989] syzkaller0: tun_net_xmit 48 [ 307.157667][ T8966] syzkaller0: tun_net_xmit 76 [ 307.247678][ T8966] syzkaller0: tun_net_xmit 76 [ 307.258501][T14859] syzkaller0: delete flow: hash 1925535492 index 2 [ 307.442262][T14890] netlink: 'syz.5.2425': attribute type 1 has an invalid length. [ 307.452247][T14890] netlink: 'syz.5.2425': attribute type 4 has an invalid length. [ 309.152046][T14891] vxcan1 speed is unknown, defaulting to 1000 [ 309.398819][T14904] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 309.463424][T14905] __nla_validate_parse: 6 callbacks suppressed [ 309.463446][T14905] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2431'. [ 309.507117][T14905] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2431'. [ 309.546874][T14905] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2431'. [ 309.828129][T14923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2436'. [ 310.059588][T14937] syzkaller0: entered promiscuous mode [ 310.059863][T14938] netlink: 'syz.4.2438': attribute type 32 has an invalid length. [ 310.065619][T14937] syzkaller0: entered allmulticast mode [ 310.084363][T14936] tipc: Enabled bearer , priority 0 [ 310.107337][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2438'. [ 310.138389][T14939] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2439'. [ 310.196480][T14938] bond7: option coupled_control: invalid value (52) [ 310.206628][T14938] bond7 (unregistering): Released all slaves [ 310.244950][T14936] tipc: Resetting bearer [ 310.292950][T14935] tipc: Resetting bearer [ 310.315988][T14935] tipc: Disabling bearer [ 310.353827][T14947] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2443'. [ 310.354122][T14942] 0: reclassify loop, rule prio 0, protocol 800 [ 310.656160][T14955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.688627][T14963] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2447'. [ 310.710117][T14951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2445'. [ 311.024415][T14974] No such timeout policy "syz1" [ 311.221979][T14980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2452'. [ 311.354926][T14985] syzkaller0: entered promiscuous mode [ 311.360936][T14985] syzkaller0: entered allmulticast mode [ 312.175666][T15019] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 312.228405][T15019] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 312.372348][T15031] Bluetooth: hci0: unsupported parameter 512 [ 312.379139][T15031] Bluetooth: hci0: unsupported parameter 6278 [ 312.385606][T15031] Bluetooth: hci0: unsupported parameter 512 [ 312.401996][T15031] Bluetooth: hci0: unsupported parameter 6278 [ 312.589046][T15049] netlink: 'syz.4.2475': attribute type 2 has an invalid length. [ 312.609842][T15049] nbd: must specify a device to reconfigure [ 313.785022][T15122] Bluetooth: MGMT ver 1.23 [ 314.004711][T15139] syzkaller0: entered promiscuous mode [ 314.011354][T15139] syzkaller0: entered allmulticast mode [ 314.205438][T15154] netem: invalid attributes len -24 [ 314.228219][T15154] netem: change failed [ 314.688259][T15180] __nla_validate_parse: 11 callbacks suppressed [ 314.688282][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2512'. [ 315.642884][T15226] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2525'. [ 315.664863][T15228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2526'. [ 316.071852][T15249] netlink: 'syz.6.2528': attribute type 9 has an invalid length. [ 316.088169][T15256] netlink: 14436 bytes leftover after parsing attributes in process `syz.5.2531'. [ 316.089564][T15255] xt_SECMARK: invalid mode: 9 [ 316.140324][T15256] openvswitch: netlink: Missing key (keys=40, expected=100) [ 316.356292][T15259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2532'. [ 316.499083][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2533'. [ 316.546555][T15271] netlink: 'syz.7.2533': attribute type 1 has an invalid length. [ 316.570352][T15271] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2533'. [ 316.608855][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2533'. [ 316.694357][T15276] syzkaller1: entered promiscuous mode [ 316.709675][T15276] syzkaller1: entered allmulticast mode [ 316.860290][T15282] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2539'. [ 317.021059][T15287] netlink: 'syz.4.2541': attribute type 11 has an invalid length. [ 317.048064][T15287] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2541'. [ 317.278872][T15302] lo: entered promiscuous mode [ 317.288358][T15302] tunl0: entered promiscuous mode [ 317.295023][T15302] gre0: entered promiscuous mode [ 317.329140][T15302] gretap0: entered promiscuous mode [ 317.336530][T15302] erspan0: entered promiscuous mode [ 317.351982][T15302] ip_vti0: entered promiscuous mode [ 317.364038][T15302] ip6_vti0: entered promiscuous mode [ 317.382475][T15302] sit0: entered promiscuous mode [ 317.388127][T15312] netlink: 'syz.4.2549': attribute type 1 has an invalid length. [ 317.398001][T15302] ip6tnl0: entered promiscuous mode [ 317.405174][T15302] ip6gre0: entered promiscuous mode [ 317.412024][T15302] syz_tun: entered promiscuous mode [ 317.420254][T15302] ip6gretap0: entered promiscuous mode [ 317.429572][T15302] bridge0: entered promiscuous mode [ 317.440177][T15302] vcan0: entered promiscuous mode [ 317.448254][T15302] bond0: entered promiscuous mode [ 317.453812][T15302] bond_slave_0: entered promiscuous mode [ 317.463516][T15302] bond_slave_1: entered promiscuous mode [ 317.471465][T15302] dummy0: entered promiscuous mode [ 317.478916][T15302] nlmon0: entered promiscuous mode [ 317.485402][T15302] caif0: entered promiscuous mode [ 317.492736][T15302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.792247][T15326] hsr_slave_0 (unregistering): left promiscuous mode [ 317.842087][T15337] geneve1: left promiscuous mode [ 318.099173][T13995] smc: removing ib device sqz2 [ 318.141366][T15350] tipc: Enabled bearer , priority 0 [ 318.160190][T15350] syzkaller0: entered promiscuous mode [ 318.172685][T15350] syzkaller0: entered allmulticast mode [ 318.270007][T15350] tipc: Resetting bearer [ 318.317830][T15349] tipc: Resetting bearer [ 318.374109][T15349] tipc: Disabling bearer [ 318.484804][T15370] netlink: 'syz.7.2564': attribute type 1 has an invalid length. [ 318.789629][T15374] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 318.854903][T15374] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 319.014972][T15376] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 319.050620][T15370] gretap1: entered promiscuous mode [ 319.057841][T15370] gretap1: entered allmulticast mode [ 319.072821][T15370] bond2: (slave gretap1): making interface the new active one [ 319.081597][T15370] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 319.580093][T15388] pim6reg1: entered promiscuous mode [ 319.606300][T15388] pim6reg1: entered allmulticast mode [ 319.963727][T15431] tipc: Enabling of bearer rejected, failed to enable media [ 319.984642][T15431] SET target dimension over the limit! [ 320.039597][T15432] tipc: Started in network mode [ 320.051914][T15432] tipc: Node identity 2e13ef3ab008, cluster identity 4711 [ 320.077305][T15432] tipc: Enabled bearer , priority 0 [ 320.096048][T15435] syzkaller0: entered promiscuous mode [ 320.114478][T15435] syzkaller0: entered allmulticast mode [ 320.129767][T15437] netlink: 'syz.4.2581': attribute type 4 has an invalid length. [ 320.145216][T15432] __nla_validate_parse: 20 callbacks suppressed [ 320.145237][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2578'. [ 320.186537][T15432] tipc: Resetting bearer [ 320.195799][T15429] tipc: Resetting bearer [ 320.236032][T15440] netlink: 'syz.4.2581': attribute type 4 has an invalid length. [ 320.279826][T15429] tipc: Disabling bearer [ 320.397423][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2583'. [ 320.640154][T15457] netlink: 'syz.6.2586': attribute type 21 has an invalid length. [ 320.669896][T15457] IPv6: NLM_F_CREATE should be specified when creating new route [ 320.710263][T15460] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2589'. [ 320.734381][T15462] netlink: 'syz.7.2588': attribute type 33 has an invalid length. [ 320.919232][T15462] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 320.965088][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2591'. [ 320.980152][T15462] bond3 (unregistering): Released all slaves [ 321.469483][T15495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.480513][T15493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.587604][ T5832] Bluetooth: hci7: command 0x0405 tx timeout [ 321.701764][T15509] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2602'. [ 321.716900][T15510] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2602'. [ 321.741303][T15510] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2602'. [ 321.754863][T15510] netlink: 'syz.7.2602': attribute type 6 has an invalid length. [ 321.763869][T15510] netlink: 'syz.7.2602': attribute type 5 has an invalid length. [ 321.773359][T15510] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2602'. [ 321.888665][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2607'. [ 321.910195][T15521] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2607'. [ 321.987553][ T56] block nbd0: Possible stuck request ffff888024d65080: control (read@0,1024B). Runtime 120 seconds [ 321.998829][ T56] block nbd0: Possible stuck request ffff888024d65240: control (read@1024,1024B). Runtime 120 seconds [ 322.010644][ T56] block nbd0: Possible stuck request ffff888024d65400: control (read@2048,1024B). Runtime 120 seconds [ 322.026163][ T56] block nbd0: Possible stuck request ffff888024d655c0: control (read@3072,1024B). Runtime 120 seconds [ 322.079133][T15536] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 322.100045][T15536] xt_l2tp: v2 doesn't support IP mode [ 322.486229][T15560] xt_hashlimit: max too large, truncated to 1048576 [ 323.660711][T15641] openvswitch: netlink: Flow actions attr not present in new flow. [ 323.872685][T15651] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 323.903509][T15651] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 323.957109][T15651] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 324.520321][T15689] netlink: 'syz.2.2654': attribute type 10 has an invalid length. [ 324.564713][T15689] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 324.601001][T13986] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.635220][T13986] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.682651][T13986] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.721698][T15699] sit0: left promiscuous mode [ 324.760060][T15699] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 324.800984][T13986] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.122506][T15721] netlink: 'syz.4.2662': attribute type 1 has an invalid length. [ 325.322063][T15734] netlink: 'syz.2.2669': attribute type 1 has an invalid length. [ 325.352039][T15734] netlink: 'syz.2.2669': attribute type 4 has an invalid length. [ 325.363303][T15734] __nla_validate_parse: 16 callbacks suppressed [ 325.363327][T15734] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2669'. [ 325.600937][T15752] netlink: 'syz.6.2673': attribute type 4 has an invalid length. [ 325.618795][T15753] netlink: 'syz.2.2670': attribute type 12 has an invalid length. [ 325.627116][T15753] netlink: 'syz.2.2670': attribute type 29 has an invalid length. [ 325.635747][T15753] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2670'. [ 325.650570][T15750] netlink: 'syz.6.2673': attribute type 4 has an invalid length. [ 325.683975][T15753] netlink: 'syz.2.2670': attribute type 1 has an invalid length. [ 325.708005][T15753] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2670'. [ 325.828933][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2675'. [ 325.897929][T15763] netlink: 'syz.7.2675': attribute type 12 has an invalid length. [ 325.935027][T15763] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2675'. [ 325.954132][T15769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2678'. [ 326.240635][T15785] xt_hashlimit: size too large, truncated to 1048576 [ 326.281355][T15785] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2681'. [ 326.522981][T15795] sctp: [Deprecated]: syz.5.2685 (pid 15795) Use of int in max_burst socket option deprecated. [ 326.522981][T15795] Use struct sctp_assoc_value instead [ 326.790633][ T5840] syz_tun (unregistering): left allmulticast mode [ 326.805219][ T5840] syz_tun (unregistering): left promiscuous mode [ 326.829240][ T5840] bridge0: port 3(syz_tun) entered disabled state [ 326.971349][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 326.975254][T13986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.993145][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.002869][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.029990][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.038828][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.164433][T15820] netlink: 14436 bytes leftover after parsing attributes in process `syz.6.2692'. [ 327.165427][T13986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.207812][T15820] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 327.292329][T15821] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2692'. [ 327.305702][T15821] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2692'. [ 327.320663][T13986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.476642][T13986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.515392][T15834] netem: change failed [ 327.896713][T13986] bridge_slave_0: left allmulticast mode [ 327.903512][T13986] bridge_slave_0: left promiscuous mode [ 327.911785][T13986] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.543593][T13986] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 329.074317][T13986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.084995][T13986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.096611][T13986] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 329.107536][ T5834] Bluetooth: hci3: command tx timeout [ 329.108854][T13986] bond0 (unregistering): Released all slaves [ 329.130057][T13986] bond1 (unregistering): Released all slaves [ 329.145139][T13986] bond2 (unregistering): Released all slaves [ 329.160658][T13986] bond3 (unregistering): Released all slaves [ 329.176067][T13986] bond4 (unregistering): Released all slaves [ 329.199015][T13986] bond5 (unregistering): Released all slaves [ 329.319391][T13986] bond6 (unregistering): Released all slaves [ 329.547326][T13986] tipc: Left network mode [ 329.601287][T15808] chnl_net:caif_netlink_parms(): no params data found [ 329.633950][T13986] IPVS: stopping master sync thread 7358 ... [ 329.773096][T15883] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 329.833313][T15884] tipc: Enabled bearer , priority 0 [ 329.926761][T15872] syzkaller0: entered promiscuous mode [ 329.932819][T15872] syzkaller0: entered allmulticast mode [ 329.943296][T15872] tipc: Resetting bearer [ 330.037758][T15871] tipc: Resetting bearer [ 330.890238][T14347] tipc: Node number set to 2652630842 [ 331.198213][ T5834] Bluetooth: hci3: command tx timeout [ 332.008610][T15871] tipc: Disabling bearer [ 332.026349][T15885] syzkaller0: entered promiscuous mode [ 332.032593][T15885] syzkaller0: entered allmulticast mode [ 332.081369][T15808] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.090177][T15808] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.098549][T15808] bridge_slave_0: entered allmulticast mode [ 332.106340][T15808] bridge_slave_0: entered promiscuous mode [ 332.164077][T15913] tipc: Enabled bearer , priority 0 [ 332.172767][T15914] syzkaller0: entered promiscuous mode [ 332.181307][T15914] syzkaller0: entered allmulticast mode [ 332.289802][T15808] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.310278][T15808] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.330299][T15808] bridge_slave_1: entered allmulticast mode [ 332.340720][T15808] bridge_slave_1: entered promiscuous mode [ 332.348978][T15916] tipc: Resetting bearer [ 332.357999][T15929] __nla_validate_parse: 11 callbacks suppressed [ 332.358021][T15929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2718'. [ 332.383885][T15916] tipc: Disabling bearer [ 332.409060][T15927] : entered promiscuous mode [ 332.432917][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2718'. [ 332.443830][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2718'. [ 332.495691][T15927] 8021q: VLANs not supported on ip6_vti0 [ 332.511800][T15808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.582271][T15808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.626312][T15933] SET target dimension over the limit! [ 332.631416][T15938] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 332.655954][T15938] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 332.666005][ T30] audit: type=1800 audit(1760790105.651:6): pid=15942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2720" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=712 res=0 errno=0 [ 332.818845][T15808] team0: Port device team_slave_0 added [ 332.912377][T15808] team0: Port device team_slave_1 added [ 333.269198][ T5834] Bluetooth: hci3: command tx timeout [ 333.540781][T15981] IPVS: stopping backup sync thread 9575 ... [ 333.617918][T15808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.630562][T15808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.687286][T15808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.713406][T15808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.747576][T15808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.798656][T15808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.860750][T15996] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2736'. [ 333.980840][T15996] 8021q: VLANs not supported on ip_vti0 [ 334.018233][T15808] hsr_slave_0: entered promiscuous mode [ 334.045270][T15808] hsr_slave_1: entered promiscuous mode [ 334.097769][T15808] debugfs: 'hsr0' already exists in 'hsr' [ 334.103563][T15808] Cannot create hsr debugfs directory [ 334.159119][T15998] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2738'. [ 334.300404][T16012] syzkaller0: entered promiscuous mode [ 334.316782][T16012] syzkaller0: entered allmulticast mode [ 334.348577][T13986] hsr_slave_0: left promiscuous mode [ 334.357309][T13986] hsr_slave_1: left promiscuous mode [ 334.363880][T13986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.394490][T13986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.755261][T13986] team0 (unregistering): Port device team_slave_1 removed [ 334.852303][T13986] team0 (unregistering): Port device team_slave_0 removed [ 335.349991][ T5834] Bluetooth: hci3: command tx timeout [ 335.532557][T16036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.782676][T16036] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2748'. [ 335.821310][T16044] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2750'. [ 336.464229][T15808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 336.513984][T15808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 336.540337][T15808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 336.572882][T15808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 336.666832][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2763'. [ 336.859955][T15808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.951447][T15808] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.986647][T13995] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.994124][T13995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.009781][T16103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2767'. [ 337.033679][T13995] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.041025][T13995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.285113][T16116] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2771'. [ 337.652342][T16135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2776'. [ 337.711377][T16138] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2776'. [ 337.778569][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2776'. [ 338.028427][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059ef9800: rx timeout, send abort [ 338.538176][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059ef9800: abort rx timeout. Force session deactivation [ 340.389579][T16139] syzkaller0: entered promiscuous mode [ 340.395120][T16139] syzkaller0: entered allmulticast mode [ 340.634836][T16157] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2781'. [ 341.076660][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2786'. [ 342.620095][T16178] hsr_slave_1 (unregistering): left promiscuous mode [ 342.692634][T15808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.360973][T16228] SET target dimension over the limit! [ 343.382740][T16229] SET target dimension over the limit! [ 343.636366][T15808] veth0_vlan: entered promiscuous mode [ 343.664194][T15808] veth1_vlan: entered promiscuous mode [ 343.823099][T15808] veth0_macvtap: entered promiscuous mode [ 343.843655][T16243] validate_nla: 3 callbacks suppressed [ 343.843677][T16243] netlink: 'syz.7.2801': attribute type 1 has an invalid length. [ 343.932664][T15808] veth1_macvtap: entered promiscuous mode [ 344.020222][T15808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.090338][T15808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.190048][T13995] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.206119][T13995] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.254475][T13995] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.279989][T13995] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.396570][T13997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.415932][T13997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.500085][T13985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.518805][T13985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.743529][T16278] ip6t_srh: unknown srh match flags 4000 [ 344.934507][T16283] netlink: 'syz.6.2812': attribute type 21 has an invalid length. [ 344.979055][T16283] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2812'. [ 345.045334][T16283] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2812'. [ 345.244642][T16290] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2816'. [ 345.284240][T16294] netlink: 'syz.6.2817': attribute type 8 has an invalid length. [ 345.653304][T16305] netlink: 'syz.7.2822': attribute type 7 has an invalid length. [ 345.769761][ T5832] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 345.789998][ T5832] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 345.817943][ T5832] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 345.830747][ T5832] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 345.853961][ T5832] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 346.265209][T16331] netlink: 'syz.4.2832': attribute type 2 has an invalid length. [ 346.582658][T16349] Bluetooth: hci0: unsupported parameter 33553 [ 346.607146][T16349] Bluetooth: hci0: invalid length 5, exp 2 for type 8 [ 346.786086][T16363] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2841'. [ 346.829221][T16365] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2841'. [ 347.280562][T16309] chnl_net:caif_netlink_parms(): no params data found [ 347.468867][T16410] netlink: 'syz.6.2849': attribute type 4 has an invalid length. [ 347.491461][T16412] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2854'. [ 347.528840][T16414] netlink: 'syz.6.2849': attribute type 4 has an invalid length. [ 347.568136][T16309] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.575904][T16309] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.585103][T16309] bridge_slave_0: entered allmulticast mode [ 347.593886][T16309] bridge_slave_0: entered promiscuous mode [ 347.637930][T16309] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.650441][T16309] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.677238][T16309] bridge_slave_1: entered allmulticast mode [ 347.690198][T16309] bridge_slave_1: entered promiscuous mode [ 347.735385][T16423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.778030][T16424] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2856'. [ 347.790421][T16424] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2856'. [ 347.808232][T16309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.830556][T16309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.907430][ T5832] Bluetooth: hci8: command tx timeout [ 347.938261][T16309] team0: Port device team_slave_0 added [ 347.962941][T16433] netlink: 'syz.5.2861': attribute type 1 has an invalid length. [ 347.990589][T16309] team0: Port device team_slave_1 added [ 348.006082][T16433] netlink: 'syz.5.2861': attribute type 3 has an invalid length. [ 348.014743][T16433] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2861'. [ 348.038700][T16435] batman_adv: batadv0: Adding interface: vlan2 [ 348.045074][T16435] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.074421][T16435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.085406][T16435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.095481][T16435] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 348.151574][T16309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.178109][T16309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.242096][T16309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.256391][T16309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.265570][T16309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.277140][T16447] netlink: 'syz.7.2865': attribute type 6 has an invalid length. [ 348.296848][T16309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.397875][T16451] openvswitch: netlink: IP tunnel dst address not specified [ 348.474909][T16459] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 348.614871][T16309] hsr_slave_0: entered promiscuous mode [ 348.634967][T16309] hsr_slave_1: entered promiscuous mode [ 348.655626][T16309] debugfs: 'hsr0' already exists in 'hsr' [ 348.663313][T16309] Cannot create hsr debugfs directory [ 348.672971][T16470] netlink: 'syz.6.2870': attribute type 11 has an invalid length. [ 348.699878][T16470] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2870'. [ 348.729994][T16473] netlink: 'syz.6.2870': attribute type 11 has an invalid length. [ 349.230461][T16309] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.481424][T16309] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.622632][T16309] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.805299][T16533] syz.7.2888 uses old SIOCAX25GETINFO [ 349.876353][T16309] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.988498][ T5832] Bluetooth: hci8: command tx timeout [ 350.222658][T16309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 350.261559][T16309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 350.300890][T16309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 350.349784][T16309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 350.509266][T16577] __nla_validate_parse: 3 callbacks suppressed [ 350.509288][T16577] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2901'. [ 350.815056][T16588] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2902'. [ 350.843733][T16309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.900473][T16309] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.933903][T16588] bridge_slave_0: default FDB implementation only supports local addresses [ 350.953484][ T6465] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.961259][ T6465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.004443][T13989] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.012099][T13989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.209700][T16601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2907'. [ 351.596182][T16309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.702619][T16309] veth0_vlan: entered promiscuous mode [ 351.727635][T16309] veth1_vlan: entered promiscuous mode [ 351.801406][T16309] veth0_macvtap: entered promiscuous mode [ 351.825826][T16309] veth1_macvtap: entered promiscuous mode [ 351.870595][T16309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.889370][T16309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.939535][T13997] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.961146][T13997] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.972748][T13997] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.067934][ T56] block nbd0: Possible stuck request ffff888024d65080: control (read@0,1024B). Runtime 150 seconds [ 352.079097][ T56] block nbd0: Possible stuck request ffff888024d65240: control (read@1024,1024B). Runtime 150 seconds [ 352.083320][ T5832] Bluetooth: hci8: command tx timeout [ 352.090480][ T56] block nbd0: Possible stuck request ffff888024d65400: control (read@2048,1024B). Runtime 150 seconds [ 352.107817][ T56] block nbd0: Possible stuck request ffff888024d655c0: control (read@3072,1024B). Runtime 150 seconds [ 352.146327][T13997] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.281643][T16627] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2915'. [ 352.301192][T16627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2915'. [ 352.455872][T13994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.474977][T13994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.480018][T16620] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 352.564349][T13997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.582291][T13997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.786367][T16642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2921'. [ 352.810454][T16642] bridge0: port 3(syz_tun) entered blocking state [ 352.817865][T16642] bridge0: port 3(syz_tun) entered disabled state [ 352.824905][T16642] syz_tun: entered allmulticast mode [ 352.834096][T16642] syz_tun: entered promiscuous mode [ 352.840200][T16642] bridge0: port 3(syz_tun) entered blocking state [ 352.846814][T16642] bridge0: port 3(syz_tun) entered forwarding state [ 352.882432][T16642] netlink: 'syz.4.2921': attribute type 10 has an invalid length. [ 352.912324][T16642] bridge0: port 3(syz_tun) entered disabled state [ 352.919171][T16642] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.927183][T16642] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.970164][T16656] rdma_rxe: rxe_newlink: failed to add syz_tun [ 352.997650][T16642] bridge0: port 3(syz_tun) entered blocking state [ 353.004374][T16642] bridge0: port 3(syz_tun) entered forwarding state [ 353.011511][T16642] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.018872][T16642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.026561][T16642] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.033932][T16642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.062678][T16642] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 353.235552][T16669] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2927'. [ 353.301102][T16673] tipc: Enabling of bearer rejected, media not registered [ 353.546505][T16689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2933'. [ 353.667895][ T5832] Bluetooth: hci0: command 0x0c20 tx timeout [ 353.824028][T16709] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2939'. [ 353.853752][T16713] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 354.148360][ T5832] Bluetooth: hci8: command tx timeout [ 354.243392][T16740] x_tables: duplicate underflow at hook 2 [ 354.293612][T16744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2952'. [ 354.779600][T16773] vlan1: entered allmulticast mode [ 354.791252][T16773] veth0_vlan: entered allmulticast mode [ 355.049442][T16780] syzkaller0: entered promiscuous mode [ 355.056129][T16780] syzkaller0: entered allmulticast mode [ 355.226067][T16795] IPVS: Scheduler module ip_vs_sip not found [ 355.236297][T16798] tipc: Enabled bearer , priority 0 [ 355.245438][T16798] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 355.253598][T16798] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 355.262484][T16798] tipc: Resetting bearer [ 355.307793][T16798] tipc: Resetting bearer [ 355.561115][T16814] netlink: 'syz.7.2975': attribute type 1 has an invalid length. [ 355.684929][T16814] bond3 (unregistering): Released all slaves [ 355.795970][T16819] ip6tnl1: entered promiscuous mode [ 355.813416][T16819] ip6tnl1: entered allmulticast mode [ 356.094142][T16847] Cannot find add_set index 1 as target [ 356.197090][T16850] tipc: Enabled bearer , priority 10 [ 356.237822][T13994] tipc: Resetting bearer [ 356.300380][T16858] tipc: Enabled bearer , priority 0 [ 356.326369][T16857] syzkaller0: entered promiscuous mode [ 356.354410][T16857] syzkaller0: entered allmulticast mode [ 356.365412][T16864] __nla_validate_parse: 6 callbacks suppressed [ 356.365434][T16864] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2991'. [ 356.405790][T16871] netlink: 'syz.2.2992': attribute type 21 has an invalid length. [ 356.438213][T16857] tipc: Resetting bearer [ 356.484426][T16857] tipc: Disabling bearer [ 357.020251][T16901] tipc: Resetting bearer [ 357.204012][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3003'. [ 357.216275][T16908] netlink: 146 bytes leftover after parsing attributes in process `syz.5.3003'. [ 357.239134][T16908] netlink: 215 bytes leftover after parsing attributes in process `syz.5.3003'. [ 357.259686][T16908] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3003'. [ 357.273664][T16908] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3003'. [ 357.395159][T16916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.600078][T16930] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3009'. [ 357.742856][T16937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3011'. [ 357.832557][T16942] netlink: 'syz.6.3013': attribute type 12 has an invalid length. [ 357.841195][T16944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3011'. [ 357.903366][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3011'. [ 357.916433][T16949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.205741][T16960] netlink: 'syz.5.3017': attribute type 2 has an invalid length. [ 358.462933][T16976] netlink: 'syz.4.3022': attribute type 5 has an invalid length. [ 358.844974][T16998] netlink: 'syz.2.3031': attribute type 1 has an invalid length. [ 358.862798][T16997] tipc: Enabled bearer , priority 0 [ 358.878199][T16997] syzkaller0: entered promiscuous mode [ 358.897711][T16997] syzkaller0: entered allmulticast mode [ 358.999321][T16995] tipc: Resetting bearer [ 359.039954][T16995] tipc: Disabling bearer [ 359.086613][T17014] geneve2: entered promiscuous mode [ 359.092165][T17014] geneve2: entered allmulticast mode [ 359.163072][T17015] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.190267][ T6465] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 359.201964][ T6465] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 359.215008][T17017] tipc: Enabling of bearer rejected, already enabled [ 359.239014][ T6465] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 359.270345][T17012] sch_tbf: peakrate 16 is lower than or equals to rate 10992380122133320051 ! [ 359.282847][T17012] tipc: Resetting bearer [ 359.336398][T17026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.354162][T17026] netlink: 'syz.2.3039': attribute type 1 has an invalid length. [ 359.407944][T17026] bond1: (slave geneve2): making interface the new active one [ 359.416842][T17026] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 359.925197][T17058] netlink: 'syz.5.3050': attribute type 1 has an invalid length. [ 360.101220][T17069] netlink: 'syz.7.3053': attribute type 33 has an invalid length. [ 360.163354][T17073] netlink: 'syz.7.3053': attribute type 12 has an invalid length. [ 360.173199][T17073] netlink: 'syz.7.3053': attribute type 29 has an invalid length. [ 360.181335][T17073] netlink: 'syz.7.3053': attribute type 1 has an invalid length. [ 360.192353][T17073] netlink: 'syz.7.3053': attribute type 2 has an invalid length. [ 360.461639][T17092] syz_tun: entered allmulticast mode [ 360.881434][T17015] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.894141][T17015] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 360.964066][T17103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 361.018025][T17105] bond2: (slave veth5): Enslaving as an active interface with a down link [ 361.073120][T17015] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.087630][T17015] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 361.151520][T17105] veth7: entered promiscuous mode [ 361.161886][T17105] bond2: (slave veth7): Enslaving as an active interface with a down link [ 361.212747][T17015] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.223917][T17015] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 361.262493][T17103] vlan2: entered allmulticast mode [ 361.269150][T17103] bond2: entered allmulticast mode [ 361.279230][T17103] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 361.338189][T17091] syz_tun: left allmulticast mode [ 361.506710][T13994] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 361.522843][T13994] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 361.566252][T13994] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 361.598947][T13994] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 361.665194][T17128] __nla_validate_parse: 27 callbacks suppressed [ 361.665214][T17128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3069'. [ 361.685083][T17128] bridge_slave_1: left allmulticast mode [ 361.696616][T17128] bridge_slave_1: left promiscuous mode [ 361.702901][T17128] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.715766][T17128] bridge_slave_0: left allmulticast mode [ 361.725363][T17128] bridge_slave_0: left promiscuous mode [ 361.731594][T17128] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.851779][T13997] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 361.871408][T13997] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 361.905748][T13997] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 361.933713][T13997] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 362.047693][T17141] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3074'. [ 362.136299][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3077'. [ 362.171694][T17151] C: renamed from lo (while UP) [ 362.260959][T17156] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3078'. [ 362.281690][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3079'. [ 362.291380][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3079'. [ 362.315913][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3079'. [ 362.317326][T13997] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.332639][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3079'. [ 362.351375][T13997] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.375431][T13997] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.401604][T13997] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.468274][ T5834] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 362.471319][ T5832] Bluetooth: hci0: command 0x0c20 tx timeout [ 362.539651][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3083'. [ 362.626432][T17177] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3084'. [ 363.129558][T17201] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 363.355892][T17215] tipc: Enabling of bearer rejected, already enabled [ 363.394494][T17213] tipc: Started in network mode [ 363.401284][T17213] tipc: Node identity 12119e3c4607, cluster identity 4711 [ 363.410345][T17213] tipc: Enabled bearer , priority 0 [ 363.419853][T17213] syzkaller0: entered promiscuous mode [ 363.427496][T17213] syzkaller0: entered allmulticast mode [ 363.550008][T17212] tipc: Resetting bearer [ 363.623227][T17212] tipc: Disabling bearer [ 363.776814][T17185] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 363.797594][T17173] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 363.814188][T17173] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 363.855830][T17173] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 363.864081][T17173] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 363.890514][T17173] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 363.914193][T17173] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 363.952103][T17237] validate_nla: 4 callbacks suppressed [ 363.952124][T17237] netlink: 'syz.2.3099': attribute type 7 has an invalid length. [ 364.023396][T17240] netlink: 'syz.5.3100': attribute type 1 has an invalid length. [ 364.112006][T17242] openvswitch: netlink: Flow key attr not present in new flow. [ 364.320996][T17173] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 364.349631][T17173] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 364.385171][T17173] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 364.419718][T17173] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 364.454954][T17260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.462284][T17260] IPv6: NLM_F_CREATE should be set when creating new route [ 364.470100][T17260] IPv6: NLM_F_CREATE should be set when creating new route [ 364.477485][T17260] IPv6: NLM_F_CREATE should be set when creating new route [ 364.503356][T17173] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 364.541068][T17173] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 364.607824][T17173] tipc: Resetting bearer [ 364.786308][T17267] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 364.833033][T17267] bond3 (unregistering): Released all slaves [ 364.990162][T17173] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.014028][T17173] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 365.115841][T17285] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 365.165739][T17173] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 365.192213][T17173] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 365.201556][T17285] xt_hashlimit: size too large, truncated to 1048576 [ 365.885324][T17316] block nbd4: not configured, cannot reconfigure [ 365.985611][T17314] netlink: 'syz.5.3119': attribute type 10 has an invalid length. [ 366.111588][T17325] netlink: 'syz.2.3121': attribute type 11 has an invalid length. [ 366.133865][T17328] netlink: 'syz.4.3120': attribute type 1 has an invalid length. [ 366.153437][T17328] netlink: 'syz.4.3120': attribute type 1 has an invalid length. [ 366.217349][T17328] netlink: 'syz.4.3120': attribute type 2 has an invalid length. [ 366.388346][T17347] netlink: 'syz.2.3126': attribute type 1 has an invalid length. [ 366.764777][T17362] bond3: (slave gretap1): making interface the new active one [ 366.774442][T17362] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 366.804326][T17369] netlink: 'syz.7.3128': attribute type 8 has an invalid length. [ 366.817855][T17366] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.830037][T17369] __nla_validate_parse: 19 callbacks suppressed [ 366.830062][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3128'. [ 367.604110][T17419] batadv_slave_1: entered promiscuous mode [ 367.632215][T17423] netlink: 348 bytes leftover after parsing attributes in process `syz.6.3137'. [ 367.688548][T17428] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3137'. [ 367.696767][T17425] vlan3: entered promiscuous mode [ 367.711948][T17425] bond0: entered promiscuous mode [ 367.727852][T17425] bond_slave_0: entered promiscuous mode [ 367.760142][T17425] bond_slave_1: entered promiscuous mode [ 367.806421][T17431] sctp: [Deprecated]: syz.5.3139 (pid 17431) Use of int in max_burst socket option. [ 367.806421][T17431] Use struct sctp_assoc_value instead [ 367.916237][T17419] batadv_slave_1: left promiscuous mode [ 368.172022][T17445] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3141'. [ 368.204306][T17445] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3141'. [ 368.251385][T17452] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3143'. [ 368.728555][T17471] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3145'. [ 368.801453][T17471] veth0_macvtap: left promiscuous mode [ 368.998286][T17486] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3149'. [ 369.007627][T17488] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3150'. [ 369.014376][T17488] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3150'. [ 369.249976][T17498] tipc: Enabled bearer , priority 0 [ 369.304340][T17498] syzkaller0: entered promiscuous mode [ 369.331135][T17498] syzkaller0: entered allmulticast mode [ 369.437462][T17502] nbd2: detected capacity change from 0 to 127 [ 369.445529][ T5832] block nbd2: Receive control failed (result -32) [ 369.472309][T17498] tipc: Resetting bearer [ 369.523505][T17495] tipc: Resetting bearer [ 369.615296][T17495] tipc: Disabling bearer [ 370.509398][T17545] veth3: entered allmulticast mode [ 370.674705][T17559] syzkaller0: entered promiscuous mode [ 370.693614][T17559] syzkaller0: entered allmulticast mode [ 371.088807][T17582] bridge_slave_1: left allmulticast mode [ 371.156021][T17582] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.213208][T17582] bridge_slave_0: left allmulticast mode [ 371.223050][T17582] bridge_slave_0: left promiscuous mode [ 371.233507][T17582] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.901646][T17633] __nla_validate_parse: 2 callbacks suppressed [ 371.901668][T17633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3187'. [ 371.970831][T17635] netlink: 'syz.2.3189': attribute type 1 has an invalid length. [ 372.003386][T17635] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3189'. [ 372.106241][T17638] xt_hashlimit: max too large, truncated to 1048576 [ 373.104296][T17692] netlink: 'syz.5.3199': attribute type 10 has an invalid length. [ 373.173234][T17692] veth0_virt_wifi: left promiscuous mode [ 373.210515][T17692] veth0_virt_wifi: entered allmulticast mode [ 373.230059][T17692] veth0_virt_wifi: entered promiscuous mode [ 373.264650][T17692] team0: Port device veth0_virt_wifi added [ 373.493973][T17716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3203'. [ 373.571323][T17718] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3204'. [ 373.601928][T17718] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3204'. [ 373.627128][T17718] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3204'. [ 373.759812][T17735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3203'. [ 374.399644][T17734] netlink: 'syz.6.3205': attribute type 6 has an invalid length. [ 374.596356][T17751] netlink: 'syz.6.3210': attribute type 6 has an invalid length. [ 374.635327][T17755] netlink: 'syz.4.3212': attribute type 1 has an invalid length. [ 374.807178][T17767] batadv_slave_1: entered promiscuous mode [ 374.814434][T17767] batadv_slave_1: left promiscuous mode [ 375.217173][T17786] netlink: 'syz.5.3221': attribute type 10 has an invalid length. [ 375.342070][T17794] sctp: [Deprecated]: syz.2.3222 (pid 17794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.342070][T17794] Use struct sctp_sack_info instead [ 375.358446][T17797] netlink: 696 bytes leftover after parsing attributes in process `syz.5.3225'. [ 375.370973][T17794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3222'. [ 375.575274][T17810] netlink: 'syz.6.3227': attribute type 39 has an invalid length. [ 375.762349][ T30] audit: type=1804 audit(1760790148.751:7): pid=17819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3230" name="/newroot/76/cgroup.controllers" dev="tmpfs" ino=405 res=1 errno=0 [ 375.794590][T17810] netlink: 'syz.6.3227': attribute type 2 has an invalid length. [ 375.807396][T17810] netlink: 'syz.6.3227': attribute type 8 has an invalid length. [ 375.827789][T17810] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3227'. [ 375.843769][ T30] audit: type=1800 audit(1760790148.751:8): pid=17819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3230" name="cgroup.controllers" dev="tmpfs" ino=405 res=0 errno=0 [ 376.055741][T17837] syzkaller0: entered promiscuous mode [ 376.071523][T17837] syzkaller0: entered allmulticast mode [ 376.121959][T17845] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 376.344722][T17860] netlink: 'syz.2.3243': attribute type 18 has an invalid length. [ 376.415084][T17863] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 376.434058][T13985] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.445301][T17861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.461177][T13985] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.519281][T13985] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.572785][T13985] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.754835][T17877] IPVS: Unknown mcast interface: netpci0 [ 376.945841][T17893] __nla_validate_parse: 5 callbacks suppressed [ 376.945862][T17893] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3252'. [ 376.969441][T17893] xt_SECMARK: invalid mode: 9 [ 377.280384][T17902] netlink: 'syz.6.3254': attribute type 1 has an invalid length. [ 377.334797][T17902] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.353580][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 377.373624][T17910] bond3: (slave ip6erspan0): making interface the new active one [ 377.389685][T17910] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 377.631782][T17920] netlink: 'syz.6.3259': attribute type 1 has an invalid length. [ 377.913917][T17940] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 377.945431][T17936] !: renamed from dummy0 (while UP) [ 377.964593][T17938] tipc: Enabled bearer , priority 0 [ 377.986384][T17939] tipc: Enabling of bearer rejected, already enabled [ 378.022407][T17938] syzkaller0: entered promiscuous mode [ 378.041622][T17938] syzkaller0: entered allmulticast mode [ 378.066860][T17948] netlink: 'syz.2.3267': attribute type 1 has an invalid length. [ 378.077584][T17939] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 378.123611][T17938] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 378.215678][T17939] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3264'. [ 378.239144][T17958] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3264'. [ 378.242673][T17951] bond5: (slave geneve3): making interface the new active one [ 378.262808][T17951] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 378.274119][T17938] tipc: Resetting bearer [ 378.281059][T13997] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 378.298658][T13997] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 378.309277][T13985] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 378.329911][T13985] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 378.359285][T17937] tipc: Resetting bearer [ 378.391765][T17937] tipc: Disabling bearer [ 378.414326][T17961] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3270'. [ 378.458859][T17963] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3271'. [ 378.521137][T17971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3273'. [ 378.692354][T17976] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 378.736002][T17976] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3275'. [ 378.747478][T17980] tipc: Started in network mode [ 378.757440][T17980] tipc: Node identity e0000002, cluster identity 4711 [ 378.764525][T17980] tipc: Enabling of bearer rejected, failed to enable media [ 378.783140][T17976] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3275'. [ 378.791557][T17983] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 378.820539][T17980] netlink: 'syz.2.3277': attribute type 1 has an invalid length. [ 378.827245][T17984] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3275'. [ 378.838449][T17976] netlink: 'syz.5.3275': attribute type 3 has an invalid length. [ 378.856119][T17976] netlink: 'syz.5.3275': attribute type 2 has an invalid length. [ 378.869555][T17984] netlink: 'syz.5.3275': attribute type 3 has an invalid length. [ 378.879345][T17984] netlink: 'syz.5.3275': attribute type 2 has an invalid length. [ 378.979816][T17985] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 379.010488][T17985] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 379.021523][T17985] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 379.075311][T17994] netlink: 'syz.4.3281': attribute type 11 has an invalid length. [ 379.083962][T17994] netlink: 'syz.4.3281': attribute type 11 has an invalid length. [ 379.160931][T17980] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 379.177979][T17980] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 379.412426][T18011] veth11: entered promiscuous mode [ 379.471973][T18016] ip6t_srh: unknown srh match flags 4000 [ 379.684451][T18029] netlink: 'syz.2.3289': attribute type 1 has an invalid length. [ 380.105615][T18049] atomic_op ffff88807eefc198 conn xmit_atomic 0000000000000000 [ 380.272146][T13993] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.293843][T13993] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.313999][T13993] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.342478][T13993] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.385201][T18065] pim6reg527: entered allmulticast mode [ 380.600044][T18082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.712323][ T5832] Bluetooth: hci0: command tx timeout [ 381.708632][T18125] bond3: entered promiscuous mode [ 381.831425][T18135] netlink: 'syz.4.3323': attribute type 33 has an invalid length. [ 382.023917][T18139] Cannot find set identified by id 3 to match [ 382.110588][T18147] __nla_validate_parse: 20 callbacks suppressed [ 382.110610][T18147] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3325'. [ 382.131204][T18147] 8021q: VLANs not supported on ip_vti0 [ 382.139207][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3325'. [ 382.150352][ T56] block nbd0: Possible stuck request ffff888024d65080: control (read@0,1024B). Runtime 180 seconds [ 382.162030][ T56] block nbd0: Possible stuck request ffff888024d65240: control (read@1024,1024B). Runtime 180 seconds [ 382.173860][ T56] block nbd0: Possible stuck request ffff888024d65400: control (read@2048,1024B). Runtime 180 seconds [ 382.185488][ T56] block nbd0: Possible stuck request ffff888024d655c0: control (read@3072,1024B). Runtime 180 seconds [ 382.201724][T18139] IPVS: persistence engine module ip_vs_pe_ not found [ 382.375305][T18159] sctp: [Deprecated]: syz.7.3330 (pid 18159) Use of int in maxseg socket option. [ 382.375305][T18159] Use struct sctp_assoc_value instead [ 382.514366][T18170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3333'. [ 382.612103][T18177] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3333'. [ 383.194496][T18201] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3341'. [ 383.252359][T18201] gretap0: entered promiscuous mode [ 383.265484][T18201] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3341'. [ 383.289892][T18201] 0{X: renamed from gretap0 [ 383.328838][T18201] 0{X: left promiscuous mode [ 383.334135][T18201] 0{X: entered allmulticast mode [ 383.380284][T18201] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 383.437588][T18211] netlink: 'syz.7.3341': attribute type 1 has an invalid length. [ 383.449023][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3345'. [ 383.572424][T18227] netlink: 'syz.6.3348': attribute type 1 has an invalid length. [ 383.588597][T18227] netlink: 'syz.6.3348': attribute type 3 has an invalid length. [ 383.596445][T18227] netlink: 'syz.6.3348': attribute type 235 has an invalid length. [ 383.783100][T18241] 8021q: VLANs not supported on ip6gre0 [ 383.889118][T18251] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3356'. [ 384.059398][T18243] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3354'. [ 384.206190][T18270] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3359'. [ 384.295751][T18277] netlink: 'syz.4.3362': attribute type 1 has an invalid length. [ 384.381408][T18277] bond2: entered promiscuous mode [ 384.387967][T18277] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.411727][T18272] xt_CT: No such helper "pptp" [ 384.460839][T18280] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.475408][T18280] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 384.508057][T18280] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 384.543613][T18280] bond2: (slave wireguard0): making interface the new active one [ 384.554738][T18280] wireguard0: entered promiscuous mode [ 384.565903][T18280] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 384.589763][T18291] netlink: 'syz.2.3364': attribute type 4 has an invalid length. [ 384.590062][T18282] netlink: 'syz.2.3364': attribute type 4 has an invalid length. [ 384.635984][T18297] netlink: 'syz.7.3366': attribute type 2 has an invalid length. [ 384.829377][T18305] dvmrp0: entered allmulticast mode [ 385.221672][T18320] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 385.230369][T12880] IPVS: starting estimator thread 0... [ 385.319797][T18335] IPVS: using max 25 ests per chain, 60000 per kthread [ 385.340853][T18339] xfrm1: entered promiscuous mode [ 385.375335][T18339] xfrm1: entered allmulticast mode [ 385.678931][T18361] IPVS: set_ctl: invalid protocol: 22 172.20.20.10:20002 [ 386.401035][T18400] tipc: Enabled bearer , priority 0 [ 386.419902][T18400] syzkaller0: entered promiscuous mode [ 386.425536][T18400] syzkaller0: entered allmulticast mode [ 386.603531][T18400] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 386.634310][T18414] bond0: left promiscuous mode [ 386.643121][T18414] bond_slave_0: left promiscuous mode [ 386.653545][T18414] bond_slave_1: left promiscuous mode [ 386.816127][T18431] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 386.851357][T18431] block nbd7: not configured, cannot reconfigure [ 386.967941][T18399] tipc: Resetting bearer [ 387.079260][T18399] tipc: Disabling bearer [ 387.137667][T18440] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 387.139659][T18444] __nla_validate_parse: 13 callbacks suppressed [ 387.139676][T18444] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3407'. [ 387.187920][T18447] sctp: [Deprecated]: syz.2.3406 (pid 18447) Use of int in max_burst socket option deprecated. [ 387.187920][T18447] Use struct sctp_assoc_value instead [ 387.382446][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3409'. [ 387.397059][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3409'. [ 387.454406][T18459] netlink: 'syz.5.3413': attribute type 1 has an invalid length. [ 387.531461][T18459] 8021q: adding VLAN 0 to HW filter on device bond4 [ 387.681739][T18464] 8021q: adding VLAN 0 to HW filter on device bond4 [ 387.697685][T18464] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 387.729502][T18464] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 387.770570][ T30] audit: type=1804 audit(1760790160.761:9): pid=18478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3413" name="/newroot/358/cgroup.controllers" dev="tmpfs" ino=1850 res=1 errno=0 [ 387.844425][ T30] audit: type=1800 audit(1760790160.761:10): pid=18478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3413" name="cgroup.controllers" dev="tmpfs" ino=1850 res=0 errno=0 [ 388.094463][T18459] veth5: entered promiscuous mode [ 388.122588][T18459] bond4: (slave veth5): Enslaving as an active interface with a down link [ 388.234707][T18483] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3416'. [ 388.299014][T18486] batadv1: entered allmulticast mode [ 388.406720][T18473] vlan0: entered allmulticast mode [ 388.423955][T18473] bond4: entered allmulticast mode [ 388.488873][T18493] netlink: 'syz.4.3418': attribute type 17 has an invalid length. [ 388.500485][T18493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3418'. [ 388.511614][T18493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3418'. [ 388.552081][T18494] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3419'. [ 388.834074][T18511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3424'. [ 388.906159][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3424'. [ 389.116849][T18528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3429'. [ 389.127306][T18524] wireguard0: entered promiscuous mode [ 389.143395][T18524] netlink: 'syz.2.3426': attribute type 10 has an invalid length. [ 389.184700][T18524] team0: Port device geneve0 added [ 389.199972][T18531] netlink: 'syz.5.3430': attribute type 7 has an invalid length. [ 407.748359][ T31] INFO: task syz-executor:5831 blocked for more than 143 seconds. [ 407.756697][ T31] Not tainted syzkaller #0 [ 407.762224][ T31] Blocked by coredump. [ 407.768697][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 407.777740][ T31] task:syz-executor state:D stack:20536 pid:5831 tgid:5831 ppid:1 task_flags:0x40054c flags:0x00080002 [ 407.790757][ T31] Call Trace: [ 407.794249][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 407.797491][ T31] __schedule+0x1798/0x4cc0 [ 407.802937][ T31] ? __lock_acquire+0xab9/0xd20 [ 407.808021][ T31] ? __lock_acquire+0xab9/0xd20 [ 407.812932][ T31] ? __pfx___schedule+0x10/0x10 [ 407.818812][ T31] ? schedule+0x91/0x360 [ 407.868512][ T31] schedule+0x165/0x360 [ 407.887918][ T31] schedule_preempt_disabled+0x13/0x30 [ 407.893647][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 407.947520][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 407.953614][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 407.980257][ T31] ? __lock_acquire+0xab9/0xd20 [ 407.985233][ T31] ? exit_mmap+0x286/0xb40 [ 407.990052][ T31] down_write+0x1ab/0x1f0 [ 407.994519][ T31] ? __pfx_down_write+0x10/0x10 [ 408.000360][ T31] exit_mmap+0x286/0xb40 [ 408.004742][ T31] ? uprobe_clear_state+0x20f/0x290 [ 408.010283][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 408.015397][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 408.021366][ T31] ? __pfx_exit_aio+0x10/0x10 [ 408.026080][ T31] ? uprobe_clear_state+0x27c/0x290 [ 408.031363][ T31] __mmput+0x118/0x430 [ 408.035469][ T31] exit_mm+0x1da/0x2c0 [ 408.041370][ T31] ? __pfx_exit_mm+0x10/0x10 [ 408.046499][ T31] ? rcu_is_watching+0x15/0xb0 [ 408.051456][ T31] do_exit+0x648/0x2300 [ 408.055689][ T31] ? do_raw_spin_lock+0x121/0x290 [ 408.061250][ T31] ? __pfx_do_exit+0x10/0x10 [ 408.066140][ T31] ? add_device_randomness+0xbf/0x100 [ 408.072400][ T31] do_group_exit+0x21c/0x2d0 [ 408.077756][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.083105][ T31] get_signal+0x1285/0x1340 [ 408.088066][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 408.093755][ T31] ? __pfx___x64_sys_clone+0x10/0x10 [ 408.099411][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 408.105609][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 408.111373][ T31] exit_to_user_mode_loop+0x72/0x130 [ 408.116855][ T31] do_syscall_64+0x2bd/0xfa0 [ 408.121835][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.127409][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.133683][ T31] ? clear_bhb_loop+0x60/0xb0 [ 408.138847][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.145557][ T31] RIP: 0033:0x7fa12f985713 [ 408.150994][ T31] RSP: 002b:00007ffd9a4ed168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 408.159911][ T31] RAX: fffffffffffffff4 RBX: 0000000000000000 RCX: 00007fa12f985713 [ 408.168114][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 408.176254][ T31] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 408.184822][ T31] R10: 00005555746bb7d0 R11: 0000000000000246 R12: 0000000000000000 [ 408.192896][ T31] R13: 00000000000927c0 R14: 000000000003c802 R15: 00007ffd9a4ed300 [ 408.200968][ T31] [ 408.204048][ T31] INFO: task syz.1.1677:12117 blocked for more than 143 seconds. [ 408.212451][ T31] Not tainted syzkaller #0 [ 408.217600][ T31] Blocked by coredump. [ 408.222312][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.231657][ T31] task:syz.1.1677 state:D stack:20312 pid:12117 tgid:12113 ppid:5826 task_flags:0x40054c flags:0x00080001 [ 408.244437][ T31] Call Trace: [ 408.247976][ T31] [ 408.250955][ T31] __schedule+0x1798/0x4cc0 [ 408.255863][ T31] ? __lock_acquire+0xab9/0xd20 [ 408.261121][ T31] ? __lock_acquire+0xab9/0xd20 [ 408.266016][ T31] ? __pfx___schedule+0x10/0x10 [ 408.271797][ T31] ? schedule+0x91/0x360 [ 408.276093][ T31] schedule+0x165/0x360 [ 408.280387][ T31] schedule_preempt_disabled+0x13/0x30 [ 408.286248][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 408.292375][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 408.298984][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 408.305183][ T31] ? __lock_acquire+0xab9/0xd20 [ 408.310929][ T31] ? exit_mmap+0x286/0xb40 [ 408.315550][ T31] down_write+0x1ab/0x1f0 [ 408.320082][ T31] ? __pfx_down_write+0x10/0x10 [ 408.325174][ T31] exit_mmap+0x286/0xb40 [ 408.330084][ T31] ? uprobe_clear_state+0x20f/0x290 [ 408.335330][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 408.340361][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 408.346167][ T31] ? __pfx_exit_aio+0x10/0x10 [ 408.351041][ T31] ? uprobe_clear_state+0x27c/0x290 [ 408.356294][ T31] __mmput+0x118/0x430 [ 408.361324][ T31] exit_mm+0x1da/0x2c0 [ 408.365562][ T31] ? __pfx_exit_mm+0x10/0x10 [ 408.370604][ T31] ? rcu_is_watching+0x15/0xb0 [ 408.375596][ T31] do_exit+0x648/0x2300 [ 408.379975][ T31] ? do_raw_spin_lock+0x121/0x290 [ 408.385224][ T31] ? __pfx_do_exit+0x10/0x10 [ 408.391343][ T31] do_group_exit+0x21c/0x2d0 [ 408.396102][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.403437][ T31] get_signal+0x1285/0x1340 [ 408.408155][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 408.413874][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 408.420862][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 408.426502][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 408.432245][ T31] exit_to_user_mode_loop+0x72/0x130 [ 408.437834][ T31] do_syscall_64+0x2bd/0xfa0 [ 408.442633][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.449293][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.455775][ T31] ? clear_bhb_loop+0x60/0xb0 [ 408.460583][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.466507][ T31] RIP: 0033:0x7f0d9098efc9 [ 408.471323][ T31] RSP: 002b:00007f0d8ebd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.480808][ T31] RAX: 0000000000000038 RBX: 00007f0d90be6090 RCX: 00007f0d9098efc9 [ 408.488958][ T31] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 000000000000000c [ 408.497246][ T31] RBP: 00007f0d90a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 408.505668][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.514056][ T31] R13: 00007f0d90be6128 R14: 00007f0d90be6090 R15: 00007ffdb8bbfe78 [ 408.522220][ T31] [ 408.525373][ T31] INFO: task syz.0.1711:12250 blocked for more than 144 seconds. [ 408.577162][ T31] Not tainted syzkaller #0 [ 408.582346][ T31] Blocked by coredump. [ 408.607044][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.615788][ T31] task:syz.0.1711 state:D stack:26744 pid:12250 tgid:12250 ppid:5835 task_flags:0x40004c flags:0x00080000 [ 408.667018][ T31] Call Trace: [ 408.670396][ T31] [ 408.673576][ T31] __schedule+0x1798/0x4cc0 [ 408.707149][ T31] ? __lock_acquire+0xab9/0xd20 [ 408.712131][ T31] ? __lock_acquire+0xab9/0xd20 [ 408.747509][ T31] ? __pfx___schedule+0x10/0x10 [ 408.752641][ T31] ? schedule+0x91/0x360 [ 408.766989][ T31] schedule+0x165/0x360 [ 408.771236][ T31] schedule_preempt_disabled+0x13/0x30 [ 408.776835][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 408.817079][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 408.822987][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 408.867571][ T31] ? __lock_acquire+0xab9/0xd20 [ 408.872541][ T31] ? exit_mmap+0x286/0xb40 [ 408.887006][ T31] down_write+0x1ab/0x1f0 [ 408.891411][ T31] ? __pfx_down_write+0x10/0x10 [ 408.896344][ T31] exit_mmap+0x286/0xb40 [ 408.927525][ T31] ? uprobe_clear_state+0x20f/0x290 [ 408.957587][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 408.962525][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 408.987519][ T31] ? __pfx_exit_aio+0x10/0x10 [ 408.992350][ T31] ? uprobe_clear_state+0x27c/0x290 [ 409.006991][ T31] __mmput+0x118/0x430 [ 409.011158][ T31] exit_mm+0x1da/0x2c0 [ 409.015267][ T31] ? __pfx_exit_mm+0x10/0x10 [ 409.047584][ T31] ? rcu_is_watching+0x15/0xb0 [ 409.052519][ T31] do_exit+0x648/0x2300 [ 409.077501][ T31] ? preempt_schedule+0xae/0xc0 [ 409.082449][ T31] ? preempt_schedule_common+0x83/0xd0 [ 409.101613][ T31] ? preempt_schedule+0xae/0xc0 [ 409.106569][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 409.113058][ T31] ? __pfx_do_exit+0x10/0x10 [ 409.120936][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 409.126496][ T31] do_group_exit+0x21c/0x2d0 [ 409.131928][ T31] __x64_sys_exit_group+0x3f/0x40 [ 409.138718][ T31] x64_sys_call+0x21f7/0x2200 [ 409.143618][ T31] do_syscall_64+0xfa/0xfa0 [ 409.150271][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.155514][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.162635][ T31] ? clear_bhb_loop+0x60/0xb0 [ 409.168241][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.174173][ T31] RIP: 0033:0x7f108cb8efc9 [ 409.180069][ T31] RSP: 002b:00007ffd61d9fc08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 409.189437][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f108cb8efc9 [ 409.197889][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 409.205884][ T31] RBP: 00007ffd61d9fc6c R08: 0000000961d9fcff R09: 00000000000927c0 [ 409.213941][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000153 [ 409.222537][ T31] R13: 00000000000927c0 R14: 000000000003c78f R15: 00007ffd61d9fcc0 [ 409.230840][ T31] [ 409.234041][ T31] [ 409.234041][ T31] Showing all locks held in the system: [ 409.248248][ T31] 1 lock held by khungtaskd/31: [ 409.261987][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 409.273487][ T31] 2 locks held by getty/5589: [ 409.278391][ T31] #0: ffff888032dd50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 409.289349][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 409.300108][ T31] 1 lock held by syz-executor/5831: [ 409.305369][ T31] #0: ffff888024116d60 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 409.314776][ T31] 1 lock held by udevd/8618: [ 409.319974][ T31] #0: ffff888024bfa358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 409.329730][ T31] 3 locks held by kworker/0:11/8961: [ 409.335007][ T31] #0: ffff88813ff19948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.346518][ T31] #1: ffffc90002f87ba0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.360291][ T31] #2: ffff88805a91c240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1f7/0x3b0 [ 409.370960][ T31] 1 lock held by syz.1.1677/12117: [ 409.376289][ T31] #0: ffff888030eba220 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 409.385696][ T31] 1 lock held by syz.0.1711/12250: [ 409.390972][ T31] #0: ffff88807e7c9760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 409.400676][ T31] 1 lock held by syz-executor/12756: [ 409.411770][ T31] #0: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 409.421704][ T31] 3 locks held by kworker/0:13/12880: [ 409.427616][ T31] #0: ffff88813ff19948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.439292][ T31] #1: ffffc9001a877ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.449662][ T31] #2: ffffffff8e142d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 409.460998][ T31] 1 lock held by syz-executor/12889: [ 409.466493][ T31] #0: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 409.476164][ T31] 1 lock held by syz-executor/12891: [ 409.481538][ T31] #0: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 409.490651][ T31] 4 locks held by kworker/u8:50/13986: [ 409.496327][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.509163][ T31] #1: ffffc9000ad5fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.520202][ T31] #2: ffffffff8f4d2eb0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 409.529781][ T31] #3: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x79b/0xea0 [ 409.539626][ T31] 3 locks held by kworker/u8:57/13994: [ 409.545187][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.557492][ T31] #1: ffffc9000afcfba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.569188][ T31] #2: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 409.578408][ T31] 1 lock held by syz-executor/15808: [ 409.583797][ T31] #0: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 409.593088][ T31] 1 lock held by syz-executor/16309: [ 409.599080][ T31] #0: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 409.608645][ T31] [ 409.611007][ T31] ============================================= [ 409.611007][ T31] [ 409.621654][ T31] NMI backtrace for cpu 1 [ 409.621677][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 409.621698][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 409.621708][ T31] Call Trace: [ 409.621715][ T31] [ 409.621723][ T31] dump_stack_lvl+0x189/0x250 [ 409.621751][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.621769][ T31] ? __pfx__printk+0x10/0x10 [ 409.621799][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 409.621835][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 409.621861][ T31] ? __pfx__printk+0x10/0x10 [ 409.621883][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 409.621908][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 409.621934][ T31] watchdog+0xf60/0xfa0 [ 409.621962][ T31] ? watchdog+0x1e2/0xfa0 [ 409.621991][ T31] kthread+0x711/0x8a0 [ 409.622012][ T31] ? __pfx_watchdog+0x10/0x10 [ 409.622033][ T31] ? __pfx_kthread+0x10/0x10 [ 409.622052][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.622077][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.622092][ T31] ? __pfx_kthread+0x10/0x10 [ 409.622110][ T31] ret_from_fork+0x4bc/0x870 [ 409.622136][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 409.622165][ T31] ? __switch_to_asm+0x39/0x70 [ 409.622184][ T31] ? __switch_to_asm+0x33/0x70 [ 409.622202][ T31] ? __pfx_kthread+0x10/0x10 [ 409.622220][ T31] ret_from_fork_asm+0x1a/0x30 [ 409.622258][ T31] [ 409.622265][ T31] Sending NMI from CPU 1 to CPUs 0: [ 409.777028][ C0] NMI backtrace for cpu 0 [ 409.777047][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 409.777065][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 409.777074][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 409.777100][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d 24 72 e0 0b 48 89 de 5b e9 63 81 5a 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 40 91 92 65 8b 15 28 fc [ 409.777114][ C0] RSP: 0018:ffffc90000007a88 EFLAGS: 00000286 [ 409.777130][ C0] RAX: 0000000000000000 RBX: ffff88807c249300 RCX: ffffffff8de95200 [ 409.777142][ C0] RDX: 0000000000000000 RSI: ffff88806b440af0 RDI: ffff88807c249300 [ 409.777153][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 409.777163][ C0] R10: dffffc0000000000 R11: fffff52000000f54 R12: 1ffff1100f849265 [ 409.777175][ C0] R13: ffff88806b440af0 R14: dffffc0000000000 R15: ffff88806b440af0 [ 409.777187][ C0] FS: 0000000000000000(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 409.777200][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.777211][ C0] CR2: 000055bbc4e37000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 409.777227][ C0] Call Trace: [ 409.777235][ C0] [ 409.777242][ C0] pie_calculate_probability+0x29/0x7e0 [ 409.777270][ C0] fq_pie_timer+0x288/0x5b0 [ 409.777289][ C0] ? fq_pie_timer+0x4d/0x5b0 [ 409.777310][ C0] call_timer_fn+0x17e/0x5f0 [ 409.777329][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 409.777346][ C0] ? call_timer_fn+0xbe/0x5f0 [ 409.777363][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 409.777387][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.777409][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.777423][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 409.777441][ C0] __run_timer_base+0x61a/0x860 [ 409.777467][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 409.777482][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 409.777506][ C0] run_timer_softirq+0xb7/0x180 [ 409.777524][ C0] handle_softirqs+0x286/0x870 [ 409.777548][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 409.777579][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 409.777601][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 409.777620][ C0] __irq_exit_rcu+0xca/0x1f0 [ 409.777639][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 409.777664][ C0] irq_exit_rcu+0x9/0x30 [ 409.777682][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 409.777705][ C0] [ 409.777711][ C0] [ 409.777717][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 409.777735][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 409.777750][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 11 1c 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 409.777763][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 409.777776][ C0] RAX: 77b8911725c47900 RBX: ffffffff8196bc07 RCX: 77b8911725c47900 [ 409.777788][ C0] RDX: 0000000000000001 RSI: ffffffff8d7e847d RDI: ffffffff8bc077e0 [ 409.777799][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632fdb R09: 1ffff110170c65fb [ 409.777810][ C0] R10: dffffc0000000000 R11: ffffed10170c65fc R12: ffffffff8f9e1470 [ 409.777821][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a40 [ 409.777834][ C0] ? do_idle+0x1e7/0x510 [ 409.777860][ C0] default_idle+0x13/0x20 [ 409.777876][ C0] default_idle_call+0x73/0xb0 [ 409.777893][ C0] do_idle+0x1e7/0x510 [ 409.777916][ C0] ? __pfx_do_idle+0x10/0x10 [ 409.777943][ C0] cpu_startup_entry+0x44/0x60 [ 409.777964][ C0] rest_init+0x2de/0x300 [ 409.777983][ C0] start_kernel+0x3ae/0x410 [ 409.778004][ C0] x86_64_start_reservations+0x24/0x30 [ 409.778027][ C0] x86_64_start_kernel+0x143/0x1c0 [ 409.778049][ C0] common_startup_64+0x13e/0x147 [ 409.778073][ C0] [ 409.779427][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 410.165867][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 410.174987][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 410.185138][ T31] Call Trace: [ 410.188698][ T31] [ 410.191985][ T31] dump_stack_lvl+0x99/0x250 [ 410.197376][ T31] ? __asan_memcpy+0x40/0x70 [ 410.201990][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.207214][ T31] ? __pfx__printk+0x10/0x10 [ 410.212149][ T31] vpanic+0x237/0x6d0 [ 410.216258][ T31] ? __pfx_vpanic+0x10/0x10 [ 410.221004][ T31] ? preempt_schedule_common+0x83/0xd0 [ 410.226764][ T31] panic+0xb9/0xc0 [ 410.230515][ T31] ? __pfx_panic+0x10/0x10 [ 410.235051][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 410.240626][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 410.248106][ T31] watchdog+0xf9f/0xfa0 [ 410.252547][ T31] ? watchdog+0x1e2/0xfa0 [ 410.256977][ T31] kthread+0x711/0x8a0 [ 410.261147][ T31] ? __pfx_watchdog+0x10/0x10 [ 410.266010][ T31] ? __pfx_kthread+0x10/0x10 [ 410.270604][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.275986][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.281188][ T31] ? __pfx_kthread+0x10/0x10 [ 410.285870][ T31] ret_from_fork+0x4bc/0x870 [ 410.290474][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 410.295787][ T31] ? __switch_to_asm+0x39/0x70 [ 410.300853][ T31] ? __switch_to_asm+0x33/0x70 [ 410.305748][ T31] ? __pfx_kthread+0x10/0x10 [ 410.310627][ T31] ret_from_fork_asm+0x1a/0x30 [ 410.315430][ T31] [ 410.318611][ T31] Kernel Offset: disabled [ 410.322931][ T31] Rebooting in 86400 seconds..